Federal authorities have built a nationwide license-plate surveillance network by using the High Intensity Drug Trafficking Area (HIDTA) grant program to aggregate automated license plate reader (ALPR) data from cities and private vendors onto federal-accessible servers. Through memoranda of understanding, state policies, and regional HIDTA hubs, local ALPR feeds from companies like Flock, Axon, ELSAG, and Vigilant are copied into centralized databases that the Drug Enforcement Administration’s National License Plate Reader Program and other federal agencies can query. Documents and contracts show regional HIDTAs (for example, Houston’s) paying vendors to create unified LPR databases and state rules (notably in Georgia) conditioning use of right-of-way ALPRs on agreements to send data to HIDTA, effectively bypassing local limits on vendor access and community control.
The setup raises concrete transparency and privacy problems: HIDTA systems can enable ongoing tracking of lawful drivers, aggregate data across vendors, and are shielded from public records laws because of HIDTA’s hybrid governance and the DEA’s assertions that it does not control HIDTA records. Investigations and public-records requests reveal the scale of data-sharing and technical integration, echoing past centralized programs like Hemisphere. The result is an expanding federal surveillance infrastructure that funnels municipal ALPR data into national searches with little obvious oversight, retention limits, or public auditability.
Summary generated by AI from the linked article. hn.today is not affiliated with Hacker News or Y Combinator.
A U.S. immigration advocate sued the government after a border agent searched his phone without a warrant and copied data. He believes the government targeted him due to his activism and political work on immigration rights. (arstechnica.com)
Over 44,000 legal objections have been filed against Palantir's NHS data platform, demanding it be blocked from handling medical data. The campaign follows backlash over the company's involvement with the Israeli military and US immigration enforcement. (theguardian.com)
OpenAI claims that a Chinese AI model stole its intellectual property. The company alleges that it had previously appropriated IP from other sources. (theregister.com)
Android developers face new requirements to publish apps, including a $25 verification fee and identity verification, even for small-scale projects. These policies have caused frustration among developers who want to share their apps freely without extensive registration processes. (twitter.com)
Christa Pike, the only woman on Tennessee's death row, was reportedly still alive after receiving two lethal injections. Her lawyers are seeking to halt her execution, citing that she remained conscious and had a heartbeat despite the injections. (nbcnews.com)
Sandboxing alone may not be enough to contain rogue agents, as advanced attackers can find ways to bypass these security measures. Additional cryptographic and security strategies are necessary to effectively limit malicious activities. (blog.cryptographyengineering.com)
Today's best Hacker News stories, summarized and screenshotted, one email a day.