alfreda89: 3 foot concrete Medieval style gargoyle with author's hand resting on its head. (Default)
alfreda89 ([personal profile] alfreda89) wrote2005-05-28 10:55 pm

I am SO not thrilled

I don't know if anyone mentioned this, so...


Library officials in this suburb west of Chicago have come up with a high-tech solution for keeping unauthorized visitors from using their computers: fingerprint scans.

The scanners to be installed on 130 library computers this summer will verify the identity of computer users.

Library officials said they wanted to tighten computer access because many people borrow library cards and pass codes from friends or family to log on. The technology also will help the library implement a new policy that allows parents to put filters on their children's' accounts, officials said.

But privacy advocates have criticized the plan, which would make Naperville only the second library system in the nation to use fingerprint-scanning technology, according to the American Library Association.

"We take people's fingerprints because we think they might be guilty of something, not because they want to use the library," said Ed Yohnka, spokesman for the American Civil Liberties Union in Illinois.

While the library insists the fingerprint data will be kept confidential, Yohnka warns the technology will create a database of personal information that could be used in unintended ways.

Library records have been the focus of a privacy debate ever since Congress passed the Patriot Act shortly after the Sept. 11, 2001 terrorist attacks. A provision of the law authorizes federal officials to obtain "tangible items" like credit card receipts and library records as part of foreign intelligence or international terrorism investigations.

The Justice Department has repeatedly said the government has never asked for anyone's library records.

Naperville library officials said the technology cannot be used to reconstruct a person's actual fingerprint. The scanners, made by Naperville-based U.S. Biometrics Corp., use an algorithm to convert 15 or more specific points into a unique numeric sequence.

"Right now we give you a library card with a bar code attached to it. This is just a bar code, but it's built in," said Mark West, the library's deputy director.

West said the numeric data cannot be cross-referenced with fingerprint databases kept by the FBI or state police.

[identity profile] rolanni.livejournal.com 2005-05-29 12:57 pm (UTC)(link)
West said the numeric data cannot be cross-referenced with fingerprint databases kept by the FBI or state police.

Insert between "police" and ".": ", yet".


[identity profile] alfreda89.livejournal.com 2005-05-29 02:46 pm (UTC)(link)
Exactly.

[identity profile] oliana0.livejournal.com 2005-05-31 09:19 pm (UTC)(link)
Technically, police and FBI would have to have probable cause to acquire the finger prints from this type of source, which they have to have for normal finger printing, which would be more accurate. If they try to use a library card in a court, the defense could proclaim unreasonable search and seizure and protection from self-incrimnation to get the records tossed out.

From a security standpoint, the system should:
Not have the bar codes or library card numbers relate in any way to the finger print, a random number or an iterative number would be safer, then link the random number to the print and name.
Not allow ANY users to view the actual number that is generated as a representation of the finger print. There is no reason for a human to see that number, and it just leaves it open to theft and other bad stuff.
Have severe encryption to the database to prevent idle access to personal identity information.
Be on a system whose access is restricted to a handlful of people and not to the internet as a whole.

[identity profile] alfreda89.livejournal.com 2005-06-01 11:36 pm (UTC)(link)
My understanding of the Patriot Act is that they can see anything they want anytime by saying the magic words "Homeland Security." But, if they are abiding by the system you've described, I'd agree that having NO human see what number goes to what fingerprints be a safer way of keeping track.

[identity profile] silona.livejournal.com 2005-06-01 06:33 am (UTC)(link)
hmm uh yeah you know I lost the battle on your texas drivers license...

that will also have fingerprint, facial scans etc all available to scan while looking for "bad guys"...

ohhh did I mention the .1% false positive rate...
cop raids and explaining your innocence issue to arrive soon

[identity profile] alfreda89.livejournal.com 2005-06-01 11:42 pm (UTC)(link)
ohhh did I mention the .1% false positive rate...
cop raids and explaining your innocence issue to arrive soon


Not funny. You see, we also lost the RMT bills that would have increased hours. The one that passed was the one the Dallas police swore they needed to fight vice in Dallas. So--I will soon be an LMT (probably for more money for the license, plus new biz cards), there will be no period to practice under a temporary license unless they change it back, and they can bust into your office at any time and demand to search the place.

I am so thrilled. I must find another career....