07:45
TEDSummit

Christopher Soghoian: Your smartphone is a civil rights issue

Filmed:

The smartphone you use reflects more than just personal taste ... it could determine how closely you can be tracked, too. Privacy expert and TED Fellow Christopher Soghoian details a glaring difference between the encryption used on Apple and Android devices and urges us to pay attention to a growing digital security divide. "If the only people who can protect themselves from the gaze of the government are the rich and powerful, that's a problem," he says. "It's not just a cybersecurity problem -- it's a civil rights problem."

- Privacy researcher and activist
Christopher Soghoian researches and exposes the high-tech surveillance tools that governments use to spy on their own citizens, and he is a champion of digital privacy rights. Full bio

In the spring of 2016,
00:12
a legal battle between Apple
and the Federal Bureau of Investigation
00:15
captured the world's attention.
00:19
Apple has built security features
into its mobile products
00:21
which protect data on its devices
from everyone but the owner.
00:24
That means that criminals, hackers
and yes, even governments
00:28
are all locked out.
00:33
For Apple's customers,
this is a great thing.
00:35
But governments are not so happy.
00:38
You see, Apple has made
a conscious decision
00:41
to get out of the surveillance business.
00:43
Apple has tried to make surveillance
as difficult as possible
00:46
for governments and any other actors.
00:49
There are really two
smartphone operating systems
00:53
in the global smartphone market:
00:56
iOS and Android.
00:57
iOS is made by Apple.
Android is made by Google.
00:59
Apple has spent a lot of time and money
01:03
to make sure that its products
are as secure as possible.
01:06
Apple encrypts all data
stored on iPhones by default,
01:10
and text messages sent from one
Apple customer to another Apple customer
01:13
are encrypted by default
01:17
without the user having
to take any actions.
01:19
What this means is that,
01:22
if the police seize an iPhone
and it has a password,
01:24
they'll have a difficult time
getting any data off of it,
01:28
if they can do it at all.
01:32
In contrast, the security of Android
just really isn't as good.
01:34
Android phones, or at least
most of the Android phones
01:38
that have been sold to consumers,
01:41
do not encrypt data stored
on the device by default,
01:43
and the built-in text messaging app
in Android does not use encryption.
01:46
So if the police seize an Android phone,
01:51
chances are, they'll be able to get
all the data they want
01:54
off of that device.
01:57
Two smartphones
01:59
from two of the biggest
companies in the world;
02:01
one that protects data by default,
02:04
and one that doesn't.
02:06
Apple is a seller of luxury goods.
02:08
It dominates the high end of the market.
02:12
And we would expect a manufacturer
of luxury goods to have products
02:14
that include more features.
02:19
But not everyone can afford an iPhone.
02:21
That's where Android
really, really dominates:
02:23
at the middle and low end of the market,
02:26
smartphones for the billion
and a half people
02:29
who cannot or will not spend
02:32
600 dollars on a phone.
02:34
But the dominance of Android
has led to what I call
02:41
the "digital security divide."
02:47
That is, there is now increasingly a gap
02:49
between the privacy
and security of the rich,
02:52
who can afford devices
that secure their data by default,
02:56
and of the poor,
03:00
whose devices do very little
to protect them by default.
03:01
So, think of the average Apple customer:
03:07
a banker, a lawyer,
a doctor, a politician.
03:12
These individuals now increasingly have
smartphones in their pockets
03:17
that encrypt their calls,
their text messages,
03:22
all the data on the device,
03:26
without them doing really anything
to secure their information.
03:27
In contrast, the poor
and the most vulnerable in our societies
03:32
are using devices that leave them
completely vulnerable to surveillance.
03:36
In the United States, where I live,
03:43
African-Americans are more likely
to be seen as suspicious
03:45
or more likely to be profiled,
03:49
and are more likely to be targeted
by the state with surveillance.
03:51
But African-Americans
are also disproportionately likely
03:56
to use Android devices
that do nothing at all
03:58
to protect them from that surveillance.
04:01
This is a problem.
04:04
We must remember
that surveillance is a tool.
04:07
It's a tool used by those in power
04:10
against those who have no power.
04:13
And while I think it's absolutely great
04:17
that companies like Apple
are making it easy for people to encrypt,
04:21
if the only people
who can protect themselves
04:26
from the gaze of the government
04:30
are the rich and powerful,
04:31
that's a problem.
04:33
And it's not just a privacy
or a cybersecurity problem.
04:35
It's a civil rights problem.
04:39
So the lack of default security in Android
04:42
is not just a problem
for the poor and vulnerable users
04:45
who are depending on these devices.
04:51
This is actually a problem
for our democracy.
04:53
I'll explain what I mean.
04:56
Modern social movements
rely on technology --
04:58
from Black Lives Matter to the Arab Spring
to Occupy Wall Street.
05:01
The organizers of these movements
and the members of these movements
05:07
increasingly communicate
and coordinate with smartphones.
05:11
And so, naturally governments
that feel threatened by these movements
05:16
will also target the organizers
and their smartphones.
05:20
Now, it's quite possible
05:25
that a future Martin Luther King
or a Mandela or a Gandhi
05:27
will have an iPhone and be protected
from government surveillance.
05:31
But chances are,
05:36
they'll probably have a cheap,
$20 Android phone in their pocket.
05:37
And so if we do nothing
to address the digital security divide,
05:42
if we do nothing to ensure
that everyone in our society
05:46
gets the same benefits of encryption
05:51
and is equally able to protect themselves
from surveillance by the state,
05:53
not only will the poor and vulnerable
be exposed to surveillance,
05:57
but future civil rights
movements may be crushed
06:02
before they ever reach
their full potential.
06:05
Thank you.
06:07
(Applause)
06:09
Helen Walters: Chris, thank you so much.
06:15
I have a question for you.
06:17
We saw recently in the press
06:19
that Mark Zuckerberg from Facebook
covers over his camera
06:21
and does something
with his headphone mic jack.
06:27
So I wanted to ask you
a personal question, which is:
06:30
Do you do that?
06:32
And, on behalf of everyone
here, particularly myself,
06:33
Should we be doing that?
06:36
Should we be covering these things?
06:37
Christopher Soghoian: Putting a sticker --
actually, I like Band-Aids,
06:39
because you can remove them
and put them back on
06:43
whenever you want to make
a call or a Skype call.
06:46
Putting a sticker over your web cam
06:48
is probably the best thing
you can do for your privacy
06:50
in terms of bang for buck.
06:52
There really is malware,
malicious software out there
06:54
that can take over your web cam,
06:58
even without the light turning on.
07:00
This is used by criminals.
This is used by stalkers.
07:02
You can buy $19.99 "spy
on your ex-girlfriend" software online.
07:05
It's really terrifying.
07:10
And then, of course,
it's used by governments.
07:11
And there's obviously
a sexual violence component to this,
07:14
which is that this kind of surveillance
can be used most effectively
07:17
against women and other people
who can be shamed in our society.
07:20
Even if you think
you have nothing to hide,
07:28
at the very least, if you have
children, teenagers in your lives,
07:30
make sure you put a sticker
on their camera and protect them.
07:35
HW: Wow. Thank you so much.
CS: Thank you.
07:38
HW: Thanks, Chris.
07:40
(Applause)
07:41

▲Back to top

About the Speaker:

Christopher Soghoian - Privacy researcher and activist
Christopher Soghoian researches and exposes the high-tech surveillance tools that governments use to spy on their own citizens, and he is a champion of digital privacy rights.

Why you should listen

Christopher Soghoian is a champion of digital privacy rights, with a focus on the role that third-party service providers play in enabling governments to monitor citizens. As the principal technologist at the American Civil Liberties Union, he explores the intersection of federal surveillance and citizen's rights.

Before joining the ACLU, he was the first-ever technologist for the Federal Trade Commision's Division of Privacy and Identity Protection, where he worked on investigations of Facebook, Twitter, MySpace and Netflix. Soghoian is also the creator of Do Not Track, an anti-tracking device that all major web browsers now use, and his work has been cited in court.

More profile about the speaker
Christopher Soghoian | Speaker | TED.com