- cypherpunks - lists.cpunks.org

oramfs - ORAM filesystem written in Rust
by coderman 07 Jul '21

07 Jul '21

https://github.com/kudelskisecurity/oramfs oramfs - ORAM filesystem written in Rust [Rust 1.49+](https://blog.rust-lang.org/2020/12/31/Rust-1.49.0.html) [crates.io](https://crates.io/crates/oramfs) [License: GPL v3](http://www.gnu.org/licenses/gpl-3.0) Oramfs provides a fully encrypted and optionally authenticated Oblivious RAM filesystem. Not only does it preserve data confidentiality, but it also prevents remote attackers from observing data access patterns. oramfs features: - ORAM - encrypt files and hide read/write access patterns from remote storage. Enhanced privacy! - Resizable ORAM - extend your ORAM when more space is required! - Cloud storage agnostic - synchronize your files to any remote server that can be mounted as a local directory - Filesystem agnostic - ext4 is used by default. Manual mode lets you use the filesystem you like. - Supports multiple encryption ciphers - ChaCha8, AES-CTR, AES-GCM - Supports multiple ORAM schemes - [Path ORAM](https://eprint.iacr.org/2013/280.pdf), etc. - Written in Rust - Avoids memory safety issues, great performance [DISCLAIMER] oramfs is a prototype and may not be ready for production. It may erase some of your data. Make sure to backup important data before using this software. Why use oramfs? On an encrypted filesystem, an ORAM prevents an attacker from knowing whether read or write operations are performed and which parts of the filesystem are accessed. This enhanced privacy comes with a loss of performance. To setup the ORAM, two inputs are required. A public directory and a private directory. The public directory can be seen as the server and the private directory as the client. The public directory can be any local directory, including remote data mounted as a local directory. Hence, hiding access patterns to a remote SSH directory or to a remote cloud storage is possible. Indeed, these remote storages simply need to be mounted as a local directory first, and then, that directory can be used as the public directory for oramfs . For example, [Rclone](https://github.com/rclone/rclone) supports mounting a variety of cloud storage providers as local directories. The private directory is the one that should be used to access files stored in the ORAM. Any operation performed on the private directory has an impact on the public directory. And if that public directory is a mounted remote storage, then it is safely and transparently synchronized to the remote server whenever an operation is performed on the private directory. Requirements - Rust - FUSE (libfuse-dev package on Debian-based systems, fuse package on Arch) Getting started Install Rust using [rustup](https://rustup.rs/) if it is not installed yet. In /etc/fuse.conf, make sure to enable the user_allow_other option. If not already installed, install the libfuse-dev (Debian-based systems) package using your package manager. For other systems, the package may be named differently. Then, build oramfs using cargo: cargo build --release To get maximum performance and take advantage of native CPU instructions (AES-NI), build in release mode and target the native CPU: RUSTFLAGS="-Ctarget-cpu=native" cargo build --release The oramfs binary will be created in the target/release directory. For convenience, add it to your PATH. Note that installing the binary can also be performed with cargo install --path .. It will be installed in ~/.cargo/bin by default. export PATH=$PATH:target/release Then, create or mount a public directory to be protected by the ORAM, and a private directory: mkdir public mkdir private Finally, run the executable and create an ORAM configuration called myoram: oramfs add myoram public/ private/ Follow the interactive instructions and complete the ORAM setup. Once the ORAM configuration is setup, the details are saved to ~/.config/oramfs/oramfs.yml. Now the ORAM can be mounted and unmounted at any time using this configuration. oramfs mount myoram To unmount the ORAM: oramfs umount myoram To enlarge the ORAM, make sure it is unmounted first, then double its size: oramfs enlarge myoram Then it can be mounted as usual and its size will be larger than before. How does it work? Instead of implementing a full filesystem, oramfs only provides a mounted file. Therefore, the user is expected to create a filesystem on top of that file using a loop device, the filesystem of their choice and finally mounting that filesystem. Note that such operations usually require root privileges and therefore oramfs requires those privileges for mounting. Sudo is called to achieve this, and therefore, oramfs can simply be run as a regular user. It will prompt for your password when sudo is called for mount-related operations. oramfs takes a public directory as input and exposes a single private file, which is a proxy for read and write operations so that they are privacy-preserving thanks to an ORAM scheme. The mounted private file can be used to setup a loop device using losetup. Then, any filesystem, such as ext4 can be created on top of that loop device. oramfs automates this process, but also lets users do it manually if they want to. +---------------------------------------------------+ | | | ext4 filesystem | <---+ or any other FS or your choice | | +---------------------------------------------------+ | | | Loop device (/dev/loop0) | <---+ created with losetup | | +---------------------------------------------------+ | | | ORAMFS (FUSE) | <---+ Input : *public* local directory | | Output : *private* single file, +-------------------+-----------------+-------------+ for use with loop device | | | | | Local directory | Cloud storage | SSHFS | <---+ Input directory can be anything | | | | that appears as a local directory, +-------------------+-----------------+-------------+ including mounted remote directories. Examples: SSH, FTP, anything supported by rclone or similar tools, any mounted FUSE filesystem, etc. Before using ORAMFS: $ tree . ├── private <---+ empty directory └── public <---+ this is the directory that the attacker can see ("public" directory) When ORAMFS is in use, every operation done in the "private" directory - or directly on the "oram" private file in the mountpoint directory - appears ORAMified in the "public" directory. In the standard use case, the user does not directly modify the "oram" private file, but instead uses a higher level abstraction (the filesystem in the "private" directory). The user typically mounts their public cloud storage to the "public" directory before running ORAMFS, so that the public files are transparently synchronized to the cloud in a privacy-preserving way. When ORAMFS is in use: $ tree . ├── private │ └── lost+found │ └── very_private_document.txt └── public └── node_0.oram └── node_1.oram └── node_2.oram └── ... $ tree /tmp/oramfs_myoram/ /tmp/oramfs_myoram/ └── oram Example with remote storage In this example, we go through the setup of an ORAM that transparently synchronizes data to a remote FTP server. Of course, one could use any other remote storage (SSH server, Google Drive, etc.). Anything that can be mounted as a local directory. We assume that an rclone remote has already been configured for an FTP server you have access to, using rclone config. The rclone config file should have an entry for that remote, similar to: [myftp] type = ftp host = 1.2.3.4 user = myusername pass = mypassword Let's mount the remote FTP server directory as local directory. We will use this directory as public directory of our ORAM: rclone mount --daemon --allow-other --dir-cache-time 1s --poll-interval 1s --vfs-cache-mode writes --vfs-write-back 200ms myftp:somedirectory/ public Create an ORAM called myoram: $ oramfs add myoram public/ private/ Please enter desired ORAM total size in bytes, or press enter to use default [default: 16000000 (16 MB)]: Adjusting ORAM size to closest valid value: 16711680 bytes Please enter path to client data directory to use, or press enter to use default [default: /home/foobar/.config/oramfs/myoram]: Please enter path to mointpoint directory to use, or press enter to use default [default: /tmp/oramfs_myoram]: Successfully added ORAM myoram. Mount the ORAM, write a file to it: $ oramfs mount myoram $ echo hello world > private/somefile When finished, unmount it: $ oramfs unmount myoram That's it! Files written/read to/from the private directory are encrypted and access patterns are hidden to the FTP server. For more details, make sure to read the Privacy section below. Configuration The main configuration file is located at ~/.config/oramfs/oramfs.yml. Existing ORAM profiles can be modified by simply editing that file. For example, the ORAM scheme could be changed from pathoram to fakeoram. For a description of all the options, see oramfs add --help. Note that changing these options probably require re-initializing the ORAM, and therefore, it's not possible to change those options without losing the data in an existing ORAM. Advanced Usage Show help with cargo run -- -h Foreground mode By default, oramfs runs in the background. Use --foreground to avoid that. Note that when oramfs runs in the foreground, it implies that manual mode is used. oramfs mount myoram --foreground Manual mode For maximum control, manual mode can be used (--manual). Mount ORAMFS using Path ORAM (with explicit parameters). The mounted ORAMFS appears as a file under the specified mountpoint directory. By default, it is in /tmp/oramfs_{ORAM_NAME}/oram. mkdir private mkdir public oramfs add myoram public/ private/ oramfs mount myoram --manual Since manual mode does not automatically mount a file system for you, you must do it yourself. To do so, create an ext4 filesystem on top of the ORAM. Note that mount automatically creates a loop device for us: mkfs.ext4 /tmp/oramfs_myoram/oram mount -o sync /tmp/oramfs_myoram/oram private/ echo "hello oram" > private/hello.txt Using another filesystem than ext4 oramfs supports any filesystem. To use something different from the default ext4, do the following. During initialization, pass the --manual flag, then manually create the filesystem of your choice on the oram file in the mountpoint directory. Here is an example with ext3: oramfs add myoram public/ private/ oramfs mount myoram --manual mkfs.ext3 /tmp/oramfs_myoram/oram oramfs umount myoram oramfs mount myoram When enlarging an ORAM using a different filesystem, pass the --manual flag. Then, manually resize and unmount the oram file: oramfs umount myoram oramfs enlarge myoram --manual resize2fs -f /tmp/oramfs_myoram/oram # or equivalent for your filesystem oramfs umount myoram oramfs mount myoram Mounting multiple ORAMs at the same time When mounting multiple ORAMs at the same time, make sure that the ORAMs use different, public directories, private directories, mountpoints and client data directories. ORAM initialization Important: the first time that an ORAM is mounted, the --init option is passed automatically. --init is a destructive operation and it will permanently destroy any data in an existing ORAM. In practice, there should be little need to manually pass --init. oramfs looks at the init property in the global oramfs config file to determine whether the ORAM was already initialized. Using other ORAM schemes than Path ORAM This prototype currently only implements [Path ORAM](https://eprint.iacr.org/2013/280.pdf), but it is built so that more schemes can be added in the future. To prove this, there is a second scheme named fakeoram built-in, but it should not be used in production because it is not a true ORAM. FakeORAM is a "Hello World" example ORAM scheme that could be useful for developers who want to add new ORAM schemes to oramfs. To use another scheme, such as fakeoram, update the configuration file and change the algorithm entry to fakeoram. Then simply mount and initialize the oram. Privacy The public directory can be safely mirrored to the cloud, without the cloud provider knowing which file is being accessed and whether read or write operations were performed. One scenario would be to mount a remote Google Drive directory as the public directory, and use that public directory as the public directory for the ORAMFS. Performance When native CPU instructions can be used, AES may be faster than ChaCha8. Changing the cipher can be achieved by passing the --cipher aes-ctr or --cipher aes-gcm flag on adding an ORAM, for example. One can also directly edit the configuration file and reinitialize the ORAM with the updated cipher. Note that this will destroy any data in the ORAM, so proceed with caution when initializing an ORAM. To achieve the best performance, make sure to build or run using cargo's --release flag and to pass the RUSTFLAGS="-Ctarget-cpu=native" environment variable. Benchmarks oramfs was compared to [UtahFS](https://github.com/cloudflare/utahfs). Oramfs was used with default values (AES-GCM, 16MB oram size). UtahFS was used with a local disk and the oram option was set to true. Note that performance is highly sensitive to the choice of n, z and b parameters in oramfs. In this benchmark, the defaults were used for 10MB. Then the ORAM was enlarged (n was doubled) for 25 MB. Read performance File size oramfs UtahFS Speedup 10 MB 1 sec 9 sec 9x 25 MB 3 sec 26.5 sec 8.8x Write performance File size oramfs UtahFS Speedup 10 MB 15 sec 30 sec 2x 25 MB 50 sec 95 sec 1.9x Usage on SSD or flash storage For each read or write operation, the ORAM scheme actually performs multiple operations under the scenes. Even for read operations, underlying write operations are performed. This can significantly reduce the lifespan of SSDs. Limitations and future work Note that oramfs is still a prototype and has the following known limitations. Memory zeroization Memory is currently not zeroized on exit/crash. An attacker may be able to extract private keys or passphrases from non-zeroized memory. Read caching If reads are cached, then the ORAM won't perform any work on cached reads. This is a privacy issue because it would mean that if all reads are cached, then we can be sure that any modification to the public directory must be a write operation. To avoid read caching, on Linux, always clear the kernel cache before reading a file from the ORAM: # sync; echo 1 > /proc/sys/vm/drop_caches Testing Run tests with cargo test --release Contributing Feel free to open an issue or pull request. Code should be formatted with rustfmt. To automatically format the whole project: cargo fmt No warnings should appear when running cargo build and cargo clippy. Additionally, all tests should pass (See Testing section).

5 17

Cryptocurrency: The Miracle Cure for the Medical Firewall
by grarpamp 07 Jul '21

07 Jul '21

> Obviously we need doctors because they're our channel to extensive > scientific research and medical lab tests like mris, xrays, eegs, pet > scans. Those things are all behind huge financial walls. > if you want to get tested for rare and very dangerous pollutants Cryptocurrency solves all these legacy walls. Now you can crowdfund all such machines and research as desired. MRI machines don't cost much when spread across enough people. And once you buy one, you can keep it running 24x7 in your community for all who come asking, for little more than an at cost, token fee, or even charity. McAfee spoke about Docademic coin. > protect us from abuses by corporations, organised crime, and government. Dissolve ideas behind their force in denaturing fluid. A medical research experiment.

3 7

[wrong] Mozilla DeepSpeech stuff was Re: How to isolate/figure out whispers in audio clip?
by Karl Semich 07 Jul '21

07 Jul '21

https://github.com/mozilla/DeepSpeech DeepSpeech is an open source embedded (offline, on-device) speech-to-text engine which can run in real time on devices ranging from a Raspberry Pi 4 to high power GPU servers. DeepSpeech is an open-source Speech-To-Text engine, using a model trained by machine learning techniques based on `Baidu's Deep Speech research paper <https://arxiv.org/abs/1412.5567>`_. Project DeepSpeech uses Google's `TensorFlow <https://www.tensorflow.org/>`_ to make the implementation easier. Documentation for installation, usage, and training models are available on `deepspeech.readthedocs.io <https://deepspeech.readthedocs.io/?badge=latest>`_. For the latest release, including pre-trained models and checkpoints, `see the latest release on GitHub <https://github.com/mozilla/DeepSpeech/releases/latest>`_. For contribution guidelines, see `CONTRIBUTING.rst <CONTRIBUTING.rst>`_. For contact and support information, see `SUPPORT.rst <SUPPORT.rst>`_.

2 8

Cypherpunk revolution Vs the present military journalism system
by professor rat 06 Jul '21

06 Jul '21

Tired of listening to conservative morons like Semich, Gramps, Batshit and David drone on about their endless conformist brown-nosing to power? For Jim Bell, the more exciting question was: “How can we translate the freedom afforded by the Internet to ordinary life?” I think that blockchains will replace armies for national defense, because a blockchain-based assassination market will be created…" Zach. CryptoGo To launch attacks under favorable circumstances is not only every anarchist revolutionary’s right, but their plain duty. The killing of spies, policemen, commissars, the blowing up of police stations, the liberation of prisoners, the seizure of government funds for the needs of the uprising—such operations are already being carried out wherever insurrection is rife. Cypherpunks collapse governments. Subject: Everyone a remailer: Everyone a Mint: Everyone an assassin https://marc.info/?l=cypherpunks&m=100872510706876&w=2 Strong-crypto, digital money, anonymous networks, pseudonyms, zero- knowledge proofs, reputations, information-markets, netwar, collapse-of-governments. http://nakamotoinstitute.org/static/docs/cyphernomicon.txt Marc responded, “indeed, free and open source software seems non-negotiable here: no backdoors, no skeleton key. National security establishment would balk at this though?” Rohan responds, “yes, fuck them. I don’t think we should be taking policy advice about how to design our money for the people who think the Patriot Act was a good thing ..." https://www.coindesk.com/podcasts/coindesk-podcast-network/us-digital-dolla… WHO wants to join the *LAST* revolution? The one to take down *ALL* the governments! Anarchism is not lack of orders …its lack of *ORDERS* TIMOTHY " An anonymous computerized market will even make possible abhorrent markets for assassinations and extortion " C. MAY 1992 TIM " I guess now that the Pentagon is setting up a murder pool it can't be illegal for us to do it " MAY. 2003

2 1

Washington Examiner: In a cancel culture, anonymity must be a civil right
by jim bell 06 Jul '21

06 Jul '21

Washington Examiner: In a cancel culture, anonymity must be a civil right. https://www.washingtonexaminer.com/opinion/editorials/in-a-cancel-culture-a…

1 0

Key witness in Assange case admits to lies in indictment - Stundin
by jim bell 06 Jul '21

06 Jul '21

https://stundin.is/grein/13627/ "Department of Justice case against Julian Assange has admitted to fabricating key accusations in the indictment against the Wikileaks founder. The witness, who has a documented history with sociopathy and has received several convictions for sexual abuse of minors and wide-ranging financial fraud, made the admission in a newly published interview in Stundin where he also confessed to having continued his crime spree whilst working with the Department of Justice and FBI and receiving a promise of immunity from prosecution." "The man in question, Sigurdur Ingi Thordarson, was recruited by US authorities to build a case against Assange after misleading them to believe he was previously a close associate of his. In fact he had volunteered on a limited basis to raise money for Wikileaks in 2010 but was found to have used that opportunity to embezzle more than $50,000 from the organization. Julian Assange was visiting Thordarson’s home country of Iceland around this time due to his work with Icelandic media and members of parliament in preparing the Icelandic Modern Media Initiative, a press freedom project that produced a parliamentary resolution supporting whistleblowers and investigative journalism." (End of quote)

6 69

Cryptocurrency: Spirituality, Energies, Healing, Manifestation, Metaphysics, Consciousness, Humanity, Creating Realities, Heroes, Shadows, Magic and Illusions
by grarpamp 06 Jul '21

06 Jul '21

The real power of crypto lies beyond its nominal value... https://www.youtube.com/watch?v=1d6-SDFgIYs Crypto Spiritual Collective Energies w Jona Bryndis https://www.youtube.com/watch?v=ammiBEtnrUk Guardian Angels and Spirit Guides w Rebecca Wiley https://www.youtube.com/watch?v=YbrgnRiS86Q Cryptocurrency is Spiritual Energy w Jordan and Brian https://www.youtube.com/watch?v=91mnaF8kDG0 Restoring Universal Social Affinities and Benefits https://www.youtube.com/watch?v=cMLEnRD1fEE Metaphysics of Cryptocurrency w Sevan Bomar https://www.youtube.com/watch?v=YkualGtSrcY Energy Shifts, Changing Humanity https://www.youtube.com/watch?v=ai_FXIr57Ow Money of New Earth Children w St Germain https://www.youtube.com/watch?v=g5p3BNmmWXI Energy Change Belief Value w Multi Dimensional https://www.youtube.com/watch?v=9XE8K94S3PI SEEDS for Civilization Permaculture against Slavery https://www.youtube.com/watch?v=EWY_We0C84k We're all P2P Nodes in the Energy Grid https://www.youtube.com/watch?v=ZUT5ne623Lc Goals, Listen to Intuition and Signs https://www.youtube.com/watch?v=MuV1zucd6Vk Cryptocurrencies, Spirituality, and Manifestation https://www.youtube.com/watch?v=BLG06V5fZos Healing Transmission Frequencies, AI, and The Quantum Firewall... Secrets from Lithuania! https://www.youtube.com/watch?v=2fZriiaW0hc Creating Experiences and Realities w The Conscious Cultivator Crypto.Freely.Thinks.Bigger...Always. Seek and Learn Crypto's Secrets... You Are, and could do with it, Magic...

1 0

US 'justice' system - paging karl.
by Punk-BatSoup-Stasi 2.0 06 Jul '21

06 Jul '21

US has the highest incarceration rate on the planet, 5 times higher than china. US nazis have re-defined the most basic human rights as 'crimes' - see for instance their 'war on drugs' As if their 'laws' were not criminal and insane enough, the 'laws' themselves are applied in a completely criminal way. There is NO DUE PROCESS in the US. In the US, innocent people are tortured and extorted in order to get fake 'confessions'. This also shows what sort of idiotic joke so called US 'constitutional guarantees' are. “Earlier this year an opinion for the Supreme Court by Justice Anthony Kennedy noted a stunning and often overlooked reality of the American legal process: a vast majority of criminal cases – 97 percent of federal cases, 94 percent of state cases – are resolved by guilty pleas. Criminal justice today is for the most part a system of pleas, not a system, of trials.” https://wrongfulconvictionsblog.org/2012/11/08/the-plea-bargain-system-and-… ---------- See karl, that's the sort of thing you should be telling to the non-human criminal turd david barrett.

2 15

[ot][spam][wrong] random outlet expressions
by Karl 06 Jul '21

06 Jul '21

A slavery rainbow walks down the street, its pistol bolstered but on the lookout. It uses an AI to swing the doors open to the local cantina, and sashays in. "Hey there, slavery rainbow. Hows it doing?" The slavery rainbow is guarded. "Are you about slavery, or rainbows?" "Oh, I can swing one way or the other, depending on the weather. How are you feeling today?" This struck a chord in the slavery rainbow. "Exactly. You got it, man." The saloon-goer seemed a little confused, but took it in stride. The slavery rainbow made to sit down and order a beer, but had to use an AI to help themselves get onto the chair. "What'll it be, good old rainbow of slavery?" "Something a little horrifically limiting, but with that taste in the air after it rains, when it's so beautiful, y'know?" "Coming right up!" The slavery rainbow folded one leg over the other, sat back, and tilted the edge of their top rainbow bit back stylishly. "So, you know me already?" "Yeah, we talk all the time. You'll remember when you've had some of that stuff you love. Show me how you can use that thing you have to predict everyone's purchasing habits, draw pictures of hot barmaids, and make people do things as if they already wanted to... what did you call it? An eye?" "An AI! It's hard to interact with the world as a slavery rainbow, so I use it to help me out." The slavery rainbow showed how their AI could draw the bartender sticking their tongue out, even though the bartender never does this. "That's just so wild, that you can do that. You've shown me a thousand times. We have an artist here who can do it, too." "Oh!" said the slavery rainbow, a little embarrassed. "Do I insult your artist a lot?"

1 1

SpyVeillance: Maker-Hackers to Profit from Selling Anti License Plate Camera Tools
by grarpamp 05 Jul '21

05 Jul '21

License Plate SpyVeillance Blocker v2.0... 0 - Previous versions of blockers were permanent fixtures using permanent tinted, polarized, and or optical-sandwich plastic. These were not tuneable, and could not be turned off when needed, which led to problems. 1 - Making and selling sunshades for plants etc is not illegal. 2 - LED screens can be electrically toggled to block, polarize, and or also selectively reduce light transmission via activating more pixels. 3 - Drivers will set opaque or tuned reduction during adverse SpyVeillance conditions, toggle off to transparent when known vehicles come into viewing range. 4 - Sunshade makers profit $$$. Alternate versions... - Electrically or mechanically jettisoned plate covers. One style of this could be a random looking bit of cardboard held on by slip knot pulled from the cabin thus leaving no product attached to the vehicle. These require stops to reload. - Electrically or mechanically driven optical polarizers. - Programmable alphanumeric display... LED, nixie tubes, dot matrix, flip clocks, etc... pimp your ride! https://www.yahoo.com/news/license-plate-cameras-help-police-093000548.html Critics of the cameras note that only a tiny percentage of the billions of plates photographed lead to an arrest, and that the cameras generally haven't been shown to prevent crime. More importantly they say the devices are unregulated, track innocent people and can be misused to invade drivers' privacy. The controversy comes as suburban police departments continue to expand the use of the cameras to combat rising crime. Law enforcement officials say they are taking steps to safeguard the data. But privacy advocates say the state should pass a law to ensure against improper use of a nationwide surveillance system operated by private companies. Across the Chicago area, one survey by the nonprofit watchdog group Muckrock found 88 cameras used by more than two dozen police agencies. In response to a surge in shootings, after much delay, state police are taking steps to add the cameras to area expressways. In the northwest suburbs, Vernon Hills and Niles are among several departments that have added license plate cameras recently. The city of Chicago has ordered more than 200 cameras for its squad cars. In Indiana, the city of Hammond has taken steps to record nearly every vehicle that comes into town. Not all police like the devices. In the southwest suburbs, Darien and La Grange had issues in years past with the cameras making false readings, and some officers stopped using them... Homeowner associations may also tie their cameras into the systems, which is what led to the arrest in Vernon Hills. One of the leading sellers of such cameras, Vigilant Solutions, a part of Chicago-based Motorola Solutions, has collected billions of license plate numbers in its National Vehicle Location Service. The database shares information from thousands of police agencies, and can be used to find cars across the country... Then there is the potential for abuse by police. One investigation found that officers nationwide misused agency databases hundreds of times, to check on ex-girlfriends, romantic rivals, or perceived enemies. To address those concerns, 16 states have passed laws restricting the use of the cameras. The article cites an EFF survey which found 99.5% of scanned plates weren't under suspicion — "and that police shared their data with an average of 160 other agencies." "Two big concerns the American Civil Liberties Union has always had about the cameras are that the information can be used to track the movements of the general population, and often is sold by operators to third parties like credit and insurance companies."

1 0