Language Selection

English French German Italian Portuguese Spanish

Police Still Using Matrix-Type Database

Filed under
Misc

When the federal government in April stopped funding a database that lets police quickly see public records and commercially collected information on Americans, privacy advocates celebrated what they saw as a victory against overzealousness in the fight against terrorism.

But a few states are pressing forward with a similar system, continuing to look for ways to quickly search through a trove of data - from driver's license photos to phone numbers to information about people's cars. Their argument in seeking to keep the Matrix database alive in some form: it's too important for solving crimes to give up on.

Florida, Ohio, Connecticut and Pennsylvania still use software that lets investigators quickly cull through much of the data about people that reside in cyberspace. However, without the federal grant for the Matrix data-sharing system, they won't be routinely searching through digital files from other states - at least for now.

Privacy advocates still don't like the idea, saying government shouldn't have easy access to so much information about people who haven't done anything wrong.

But law officers bent on keeping the Matrix alive say the information is already out there anyway for companies to use for less noble purposes. Law enforcement has always used such information; it just never had a big computer search tool to quickly find links between people and places.

"The media uses that data, attorneys use it, banks use it," said Mark Zadra, the Florida Department of Law Enforcement agent in charge of the system. "We've been using online data like that for 10 to 15 years. What this does is link those. ... What took law enforcement so long to use technology and get into the 21st century?"

Matrix - the ominous name is shorthand for Multistate Anti-Terrorism Information Exchange - was born as an anti-terrorism tool in the wake of the Sept. 11 terrorist attacks.

Created by Florida law enforcement officials working with a one-time drug-running pilot-turned-millionaire computer whiz named Hank Asher, it was conceived as a way for states to combine data they have on people - driving records and criminal histories, for example - with similar records from other states.

The company that Asher founded but no longer works for, Seisint Inc., also added to Matrix information gathered in the private sector, including some of what credit card companies collect, such as names, addresses and Social Security numbers - though actual credit histories were not included.

Together, the program would give states a powerful tool that could link someone to several addresses or vehicles, and possibly to other people who lived at those same houses or drove the same car.

Those links could help thwart terrorism or solve crimes in which witnesses could provide only partial information, like half of a license plate and the make of a car. The technology is credited in part with helping police crack the Washington, D.C., sniper case in 2002.

"It very quickly allows you to identify identities, associates, things like that," said Lt. Col. Ralph Periandi, deputy commissioner of the Pennsylvania State Police. "Two or three other people who might be connected."

Matrix impressed federal officials enough that the program was seeded with $12 million from the Departments of Justice and Homeland Security. Thirteen states eventually signed on or expressed interest in feeding their data into the system, representing half the U.S. population.

But over time, several states pulled out, partly because of concerns about the cost or laws governing the transfer of data out of state. California's attorney general decided Matrix "offends fundamental rights of privacy."

Those objections were nothing compared to the criticism Matrix encountered from the right and the left, including from the American Civil Liberties Union.

"It is essentially an electronic file on everyone whether they are suspected of criminal activity or not," said Howard Simon, executive director of the ACLU in Florida. "I can't think of anything more un-American."

When the federal grant for Matrix ended in April - there is dispute over whether the privacy issues may have killed the government's interest - the database itself officially ended as well. But Florida and the three other states are still using its database-searching software. Florida is continuing to seek out companies that can help them build another, larger cache of information. And officials envision one day sharing that data with other states again.

In addition to contracting for searching software from Seisint - now part of information giant LexisNexis - Florida has requested information from companies on what data they could provide that the police could add to their database. The proposal says Florida police are interested in such privately available data as insurance, financial, property and business records.

Although Matrix was designed as a terrorism tool, Zadra said its main value has been for solving more ordinary crimes. He cites success stories ranging from kidnapping to frauds and theft. In fact, in Florida the system is most often queried in fraud investigations, followed closely by robbery, state records show.

To support those efforts, the Florida police envision getting what's known as "credit header information" - basic identifiers for people - from private credit rating agencies. That's led to fears that police would looking into people's credit.

"Absolutely not true," Zadra said. What the agency wants from credit agencies is the up-to-date addresses that creditors are famously aggressive about getting.

"We don't get their account numbers, we don't get their expenditures, we don't track and monitor anybody," Zadra said. "We don't know what library books you're checking out, what X-rated videos people are renting."

The agency also wants to limit the searches to information generally available either to the public or to law enforcement without a search warrant, Zadra said. For example, one of the databases the system searches is the FDLE's own registry of sex offenders - which has become a popular Web site for members of the general public to search for people in their neighborhood.

For many privacy advocates Matrix raises the larger question of why so much of this information is already out there in databases for law enforcement to covet.

"Technology operates at the speed of light and privacy protection is at a snail's pace," the ACLU's Simon said. "Governments like the state of Florida have not enacted privacy legislation and aren't limiting the circulation of information about you without your knowledge and consent."

Zadra said the FDLE is keenly aware of concerns about how the data are used - but noted that ultimately the files are mostly public data that people have freely given out. He points to the long lines of people at sporting events who will give away information on themselves by filling out a credit application just for a free T-shirt.

"They've given their private and personal information to somebody they have no idea about, but when they hear law enforcement wants to use it to solve a crime ... they can't believe it," Zadra said.

"We're doing exactly what the public asked us to do after Sept. 11. They said, `My goodness, how did the law enforcement community allow this to happen?'"

By DAVID ROYSE
Associated Press

More in Tux Machines

CentOS vs Ubuntu: Which one is better for a server

Finally decided to get a VPS but can’t decide which Linux distro to use? We’ve all been there. The choice may even be overwhelming, even for Linux distros, considering all the different flavors and distros that are out there. Though, the two most widely used and most popular server distros are CentOS and Ubuntu. This is the main dilemma among admins, both beginners and professionals. Having experience with both (and more) distros, we decided to do a comparison of CentOS and Ubuntu when used for a server. Read more

This Script Updates Hosts Files Using a Multi-Source Unified Block List With Whitelisting

If you ever tinker with your hosts file, you should try running this script to automatically keep the file updated with the latest known ad servers, phishing sites and other web scum.

Read more

via DMT/Linux Blog

today's leftovers

  • FLOSS Weekly 417: OpenHMD
    Fredrik Hultin is the Co-founder of the OpenHMD project (together with Jakob Bornecrantz). OpenHMD aims to provide a Free and Open Source API and drivers for immersive technology, such as head-mounted displays with built-in head tracking. The project's aim is to implement support for as many devices as possible in a portable, cross-platform package.
  • My next EP will be released as a corrupted GPT image
    Endless OS is distributed as a compressed disk image, so you just write it to disk to install it. On first boot, it resizes itself to fill the whole disk. So, to “install” it to a file we decompress the image file, then extend it to the desired length. When booting, in principle we want to loopback-mount the image file and treat that as the root device. But there’s a problem: NTFS-3G, the most mature NTFS implementation for Linux, runs in userspace using FUSE. There are some practical problems arranging for the userspace processes to survive the transition out of the initramfs, but the bigger problem is that accessing a loopback-mounted image on an NTFS partition is slow, presumably because every disk access has an extra round-trip to userspace and back. Is there some way we can avoid this performance penalty?
  • This week in GTK+ – 31
    In this last week, the master branch of GTK+ has seen 52 commits, with 10254 lines added and 9466 lines removed.
  • Digest of Fedora 25 Reviews
    Fedora 25 has been out for 2 months and it seems like a very solid release, maybe the best in the history of the distro. And feedback from the press and users has also been very positive.
  • Monday's security updates
  • What does security and USB-C have in common?
    I've decided to create yet another security analogy! You can’t tell, but I’m very excited to do this. One of my long standing complaints about security is there are basically no good analogies that make sense. We always try to talk about auto safety, or food safety, or maybe building security, how about pollution. There’s always some sort of existing real world scenario we try warp and twist in a way so we can tell a security story that makes sense. So far they’ve all failed. The analogy always starts out strong, then something happens that makes everything fall apart. I imagine a big part of this is because security is really new, but it’s also really hard to understand. It’s just not something humans are good at understanding. [...] The TL;DR is essentially the world of USB-C cables is sort of a modern day wild west. There’s no way to really tell which ones are good and which ones are bad, so there are some people who test the cables. It’s nothing official, they’re basically volunteers doing this in their free time. Their feedback is literally the only real way to decide which cables are good and which are bad. That’s sort of crazy if you think about it.
  • NuTyX 8.2.93 released
  • Linux Top 3: Parted Magic, Quirky and Ultimate Edition
    Parted Magic is a very niche Linux distribution that many users first discover when they're trying to either re-partition a drive or recover data from an older system. The new Parted Magic 2017_01_08 release is an incremental update that follows the very large 2016_10_18 update that provided 800 updates.
  • How To Use Google Translate From Commandline In Linux
  • How to debug C programs in Linux using gdb
  • Use Docker remotely on Atomic Host
  • Ubuntu isn’t the only version of Linux that can run on Windows 10
  • OpenSUSE Linux lands on Windows 10
  • How to run openSUSE Leap 42.2 or SUSE Linux Enterprise Server 12 on Windows 10

Leftovers: Software and Games