WEBVTT - TechStuff Classic: The National Facial Recognition Database

0:00:04.440 --> 0:00:10.400
<v Speaker 1>Welcome to tech Stuff, a production from iHeartRadio.

0:00:12.400 --> 0:00:14.680
<v Speaker 2>Hey there, and welcome to tech Stuff. I'm your host,

0:00:14.760 --> 0:00:15.520
<v Speaker 2>John that Strickland.

0:00:15.520 --> 0:00:18.720
<v Speaker 1>I'm an executive producer with iHeart Podcasts and how the

0:00:18.800 --> 0:00:22.400
<v Speaker 1>tech are you? It's time for another classics episode. This

0:00:22.440 --> 0:00:27.080
<v Speaker 1>episode originally published on May nineteenth, twenty seventeen. It is

0:00:27.160 --> 0:00:34.600
<v Speaker 1>called the National Facial Recognition Database. Pretty, I would say,

0:00:34.680 --> 0:00:40.280
<v Speaker 1>controversial topic. Well, let's listen in now. Before I dive

0:00:40.320 --> 0:00:41.919
<v Speaker 1>into the topic, I want to make a couple of

0:00:41.920 --> 0:00:46.760
<v Speaker 1>things very clear at the very beginning. First is I'm biased.

0:00:47.880 --> 0:00:50.720
<v Speaker 1>I think the use of facial recognition software is problematic

0:00:50.880 --> 0:00:55.800
<v Speaker 1>even if you have regulations in place. But I'm mostly

0:00:55.840 --> 0:01:00.480
<v Speaker 1>talking about unregulated use because really we haven't a establish

0:01:00.600 --> 0:01:03.760
<v Speaker 1>the rules and policies to guide the use of facial

0:01:03.800 --> 0:01:08.199
<v Speaker 1>recognition software in a law enforcement context. So that's problem

0:01:08.280 --> 0:01:10.680
<v Speaker 1>Number one is I have a very strong opinion about

0:01:10.680 --> 0:01:13.120
<v Speaker 1>this and I'm not going to shy away from that.

0:01:15.560 --> 0:01:20.600
<v Speaker 1>It's really unjustifiable to have unregulated use of facial recognition

0:01:20.920 --> 0:01:24.679
<v Speaker 1>software in law enforcement contexts. So I want to make

0:01:24.720 --> 0:01:26.720
<v Speaker 1>that clear out of the gate that I have this bias,

0:01:27.360 --> 0:01:30.360
<v Speaker 1>and if that's an issue, that's fair, But at least

0:01:30.400 --> 0:01:32.880
<v Speaker 1>I'm being honest, right, I'm not presenting this as if

0:01:32.920 --> 0:01:39.319
<v Speaker 1>it's completely objective, unbiased information. I own this. You don't

0:01:39.360 --> 0:01:43.280
<v Speaker 1>have to tell me. I know it already. Next, this

0:01:43.400 --> 0:01:47.680
<v Speaker 1>is largely going to be a US centric discussion so

0:01:47.760 --> 0:01:51.280
<v Speaker 1>that I can talk about details. But please know that

0:01:51.320 --> 0:01:53.600
<v Speaker 1>there are a lot of these types of systems all

0:01:53.640 --> 0:01:56.600
<v Speaker 1>over the world, not just in the United States, and

0:01:56.680 --> 0:01:59.040
<v Speaker 1>a lot of these places have similar issues to the

0:01:59.080 --> 0:02:01.280
<v Speaker 1>ones I'm going to be talking about here in the US.

0:02:01.960 --> 0:02:06.320
<v Speaker 1>I'll just be focusing more on US stories to make

0:02:06.360 --> 0:02:09.720
<v Speaker 1>specific points because this is where I live, and now

0:02:09.760 --> 0:02:12.560
<v Speaker 1>to explain what I'm actually talking about here. So, back

0:02:12.600 --> 0:02:16.440
<v Speaker 1>in twenty ten, the FBI undertook a project that cost

0:02:16.639 --> 0:02:20.399
<v Speaker 1>more than an estimated one point two billion dollars that's

0:02:20.440 --> 0:02:24.160
<v Speaker 1>billion with a B to replace what was called the

0:02:24.280 --> 0:02:29.560
<v Speaker 1>Integrated Automated Fingerprint System or IAFS. Now, if I had

0:02:29.560 --> 0:02:32.720
<v Speaker 1>been in place since nineteen ninety nine, and I've talked

0:02:32.760 --> 0:02:40.200
<v Speaker 1>about fingerprints in a previous episode, IAFS was an attempt

0:02:40.400 --> 0:02:47.240
<v Speaker 1>to create a usye database of fingerprint records so that

0:02:47.600 --> 0:02:50.000
<v Speaker 1>if you were investigating a crime and you had lifted

0:02:50.040 --> 0:02:55.480
<v Speaker 1>some prints from the crime, you could end up consulting

0:02:56.120 --> 0:02:58.600
<v Speaker 1>this database and see if there are any matches in

0:02:58.639 --> 0:03:02.960
<v Speaker 1>place to give you any leads on your investigation. The

0:03:03.160 --> 0:03:06.519
<v Speaker 1>twenty ten project the FBI undertook was meant to vastly

0:03:06.680 --> 0:03:11.000
<v Speaker 1>expand that capability by adding a lot more data to

0:03:11.240 --> 0:03:14.799
<v Speaker 1>the database, not just fingerprints, but other stuff as well,

0:03:15.520 --> 0:03:19.360
<v Speaker 1>and the new system is called the Next Generation Identification

0:03:19.639 --> 0:03:24.880
<v Speaker 1>or NGI. It includes not just fingerprints, but other biographical

0:03:25.080 --> 0:03:30.200
<v Speaker 1>data and biometrics information, including face recognition technology. So a

0:03:30.200 --> 0:03:34.680
<v Speaker 1>lot of images are included in this particular database. So

0:03:34.720 --> 0:03:37.880
<v Speaker 1>as part of this project, the FBI incorporated the Interstate

0:03:38.120 --> 0:03:42.960
<v Speaker 1>Photo System or IPS, so you have NGI IPS it

0:03:43.080 --> 0:03:47.040
<v Speaker 1>typically is how it's referred to now. That system includes

0:03:47.080 --> 0:03:51.080
<v Speaker 1>images from police cases as well as photos from civil

0:03:51.240 --> 0:03:56.440
<v Speaker 1>civic sources that are not necessarily related to crimes. That's

0:03:56.480 --> 0:03:59.480
<v Speaker 1>not the only way the FBI can scan for a

0:03:59.560 --> 0:04:03.800
<v Speaker 1>match of a photograph they've taken that relates to a

0:04:03.800 --> 0:04:07.119
<v Speaker 1>case in some way to this massive database, but more

0:04:07.120 --> 0:04:10.880
<v Speaker 1>on that in a little bit now. The general process

0:04:10.920 --> 0:04:14.800
<v Speaker 1>of searching for a match follows a pretty simple pattern,

0:04:14.840 --> 0:04:18.479
<v Speaker 1>although the details can be vastly different depending upon what

0:04:18.680 --> 0:04:23.200
<v Speaker 1>facial recognition software you are using at the time. So

0:04:23.480 --> 0:04:26.680
<v Speaker 1>you first start with an image related to a case,

0:04:27.160 --> 0:04:30.520
<v Speaker 1>and this is called the probe photo. It is the

0:04:30.560 --> 0:04:34.280
<v Speaker 1>one you are probing for lack of a better term,

0:04:35.920 --> 0:04:39.919
<v Speaker 1>you don't know the identity of the person in the photograph, typically,

0:04:40.120 --> 0:04:42.400
<v Speaker 1>or at least you might have suspicions, but you don't

0:04:42.440 --> 0:04:44.839
<v Speaker 1>necessarily know for sure. So you've got a picture of

0:04:44.880 --> 0:04:50.000
<v Speaker 1>an unknown person in this photograph. You then scan that

0:04:50.040 --> 0:04:53.800
<v Speaker 1>photo and you use facial recognition software to analyze the

0:04:53.839 --> 0:04:56.800
<v Speaker 1>picture and to try and find a match in this

0:04:57.000 --> 0:04:59.880
<v Speaker 1>larger database. It starts searching all of the images in

0:04:59.880 --> 0:05:02.920
<v Speaker 1>the database looking for any that might be a potential match.

0:05:03.560 --> 0:05:06.440
<v Speaker 1>Depending upon the system and the policies that are in use,

0:05:06.880 --> 0:05:10.080
<v Speaker 1>you could end up with a single photo return to you.

0:05:10.080 --> 0:05:13.080
<v Speaker 1>You could end up with dozens of photos, so these

0:05:13.120 --> 0:05:16.520
<v Speaker 1>would all be potential matches with different degrees of certainty

0:05:16.640 --> 0:05:19.680
<v Speaker 1>for a match. You might remember in episodes I've talked

0:05:19.680 --> 0:05:22.640
<v Speaker 1>about things like IBM's Watson that would come up with

0:05:22.800 --> 0:05:26.360
<v Speaker 1>answers to a question and assign a value to each

0:05:26.400 --> 0:05:29.719
<v Speaker 1>potential answer, and the one that had the highest value,

0:05:30.680 --> 0:05:34.640
<v Speaker 1>assuming it's above a certain threshold, would be submitted as

0:05:34.720 --> 0:05:37.000
<v Speaker 1>the answer. So it's not so much that the computer

0:05:37.080 --> 0:05:40.600
<v Speaker 1>quote unquote knows it has a match. It suspects a

0:05:40.640 --> 0:05:43.960
<v Speaker 1>match based upon a certain percentage as long as it's

0:05:44.040 --> 0:05:48.320
<v Speaker 1>over a threshold of certainty, or you might end up

0:05:48.360 --> 0:05:50.960
<v Speaker 1>with no photos at all. If no match was found

0:05:51.080 --> 0:05:55.640
<v Speaker 1>or nothing ended up being above that threshold, the system

0:05:55.720 --> 0:05:58.440
<v Speaker 1>might say, I couldn't match this photo with anyone who's

0:05:58.480 --> 0:06:04.080
<v Speaker 1>in the database. A study performed by researchers at Georgetown

0:06:04.160 --> 0:06:09.840
<v Speaker 1>University found that one in every two American adults has

0:06:09.880 --> 0:06:14.560
<v Speaker 1>their face captured in an image database that is accessible

0:06:14.600 --> 0:06:19.200
<v Speaker 1>by various law enforcement agencies, including but not limited to

0:06:19.360 --> 0:06:23.080
<v Speaker 1>the IPS. In fact, the IPS has a small number

0:06:23.200 --> 0:06:27.800
<v Speaker 1>of photos compared to the overall number represented by databases

0:06:27.839 --> 0:06:33.520
<v Speaker 1>across the US. Now, this involves agencies at all different levels, federal, state,

0:06:33.640 --> 0:06:40.800
<v Speaker 1>even tribal law for Native American tribes. That ends up

0:06:40.800 --> 0:06:45.520
<v Speaker 1>being about one hundred and seventeen million people in these databases,

0:06:46.240 --> 0:06:50.160
<v Speaker 1>many of whom, in fact large percentage of whom have

0:06:50.279 --> 0:06:54.200
<v Speaker 1>no criminal background whatsoever. Their images are also in these databases,

0:06:54.600 --> 0:06:58.679
<v Speaker 1>and this raises some big concerns about privacy and also accountability.

0:06:59.000 --> 0:07:01.880
<v Speaker 1>So in today's episode, we're going to explore how facial

0:07:02.040 --> 0:07:07.480
<v Speaker 1>recognition software works, as well as talk about the implementation

0:07:08.120 --> 0:07:12.000
<v Speaker 1>for law enforcement and the reaction to this technology, and

0:07:12.040 --> 0:07:14.840
<v Speaker 1>will probably listen to me get upset and a little

0:07:14.840 --> 0:07:18.400
<v Speaker 1>head up about the whole thing in general. All right,

0:07:18.760 --> 0:07:22.200
<v Speaker 1>So first, before we leap into the mess of law enforcement,

0:07:22.400 --> 0:07:26.640
<v Speaker 1>because it is a mess, that's just a fact, let's

0:07:26.680 --> 0:07:30.880
<v Speaker 1>talk first about the technology itself. When did facial recognition

0:07:31.000 --> 0:07:34.720
<v Speaker 1>software get started and how does it work? Well, it's

0:07:34.760 --> 0:07:38.600
<v Speaker 1>related to computer vision, which is a subset of artificial

0:07:38.640 --> 0:07:42.280
<v Speaker 1>intelligence research. If you look at artificial intelligence, a lot

0:07:42.320 --> 0:07:45.240
<v Speaker 1>of people simplify that by meaning, oh, this is so

0:07:45.320 --> 0:07:47.840
<v Speaker 1>that you can teach computers how to think like people.

0:07:48.320 --> 0:07:51.520
<v Speaker 1>But that's actually a very specific definition of a very

0:07:51.560 --> 0:07:54.840
<v Speaker 1>specific type of artificial intelligence. When you really look at

0:07:54.840 --> 0:07:57.960
<v Speaker 1>AI and you break it out, it involves a lot

0:07:57.960 --> 0:08:01.440
<v Speaker 1>of subsets of abilities. One of those is the ability

0:08:01.440 --> 0:08:07.240
<v Speaker 1>for machines to analyze imagery and be able to determine

0:08:07.280 --> 0:08:10.600
<v Speaker 1>what that imagery represents. In a way, you could argue

0:08:10.640 --> 0:08:16.680
<v Speaker 1>it's teaching computers how to understand pictures. It's also really challenging,

0:08:17.280 --> 0:08:20.360
<v Speaker 1>and this is one of the object lessons that I

0:08:20.520 --> 0:08:25.320
<v Speaker 1>use to teach people how Artificial intelligence is really tricky.

0:08:25.360 --> 0:08:28.920
<v Speaker 1>It requires more than just pure processing power. I mean,

0:08:28.960 --> 0:08:32.720
<v Speaker 1>processing power is important, but you can't solve all of

0:08:32.800 --> 0:08:36.600
<v Speaker 1>AI's problems just by throwing more processors at it. You

0:08:36.679 --> 0:08:39.720
<v Speaker 1>have to figure out from a software level how to

0:08:39.880 --> 0:08:43.599
<v Speaker 1>leverage that processing power in a way that gives computers

0:08:43.640 --> 0:08:48.800
<v Speaker 1>this ability to identify stuff based upon imagery. So a

0:08:48.840 --> 0:08:52.199
<v Speaker 1>computer might be able to perform far more mathematical operations

0:08:52.240 --> 0:08:55.640
<v Speaker 1>per second than even the cleverest of humans, but without

0:08:55.679 --> 0:08:58.040
<v Speaker 1>the right software, they can't identify the picture of a

0:08:58.080 --> 0:09:01.960
<v Speaker 1>seagull compared to say, a semi truck. You have to

0:09:02.040 --> 0:09:05.600
<v Speaker 1>teach the computer how to do this. So let's say

0:09:05.640 --> 0:09:08.360
<v Speaker 1>you develop a program that can analyze an image and

0:09:08.440 --> 0:09:13.720
<v Speaker 1>break it down into simple data to describe that image,

0:09:13.960 --> 0:09:17.520
<v Speaker 1>and then you essentially teach a computer what a coffee

0:09:17.559 --> 0:09:19.959
<v Speaker 1>mug looks like. You take a picture of a coffee mug,

0:09:20.600 --> 0:09:23.960
<v Speaker 1>you feed it to a computer, and you essentially say

0:09:24.280 --> 0:09:30.960
<v Speaker 1>this data represents a coffee mug. You then would have

0:09:31.120 --> 0:09:36.200
<v Speaker 1>to try and train the computer on what that actually means.

0:09:36.440 --> 0:09:39.640
<v Speaker 1>The computer does not now know what a coffee mug is.

0:09:40.600 --> 0:09:44.560
<v Speaker 1>It will recognize that specific mug in that specific orientation

0:09:44.840 --> 0:09:48.640
<v Speaker 1>under those specific lighting conditions, assuming that you've designed the

0:09:48.640 --> 0:09:54.000
<v Speaker 1>algorithm properly. But it's way more tricky than that. What

0:09:54.080 --> 0:09:56.680
<v Speaker 1>if in the image that you fed the computer, the

0:09:56.720 --> 0:10:00.840
<v Speaker 1>coffee mugs handle was facing to the left with respect

0:10:00.840 --> 0:10:04.040
<v Speaker 1>of the viewer, but in a future picture the handle

0:10:04.160 --> 0:10:06.120
<v Speaker 1>is off to the right instead of to the left,

0:10:06.200 --> 0:10:08.880
<v Speaker 1>or it's turned around so you can't see the handle

0:10:08.920 --> 0:10:11.480
<v Speaker 1>at all. It's behind the coffee mug. Well, if the

0:10:11.559 --> 0:10:14.600
<v Speaker 1>mug is bigger or smaller, or a different shape, well

0:10:14.600 --> 0:10:18.200
<v Speaker 1>if it's a different color. Image recognition is tough because

0:10:18.240 --> 0:10:23.280
<v Speaker 1>computers don't immediately associate different objects within the same category

0:10:23.960 --> 0:10:28.400
<v Speaker 1>as being the same thing. So if you teach me, Jonathan,

0:10:28.920 --> 0:10:31.240
<v Speaker 1>what a coffee mug is, and you show me a

0:10:31.280 --> 0:10:34.840
<v Speaker 1>couple of different examples saying, this is a coffee mug,

0:10:34.880 --> 0:10:37.080
<v Speaker 1>but this is also a coffee mug, even though it's

0:10:37.080 --> 0:10:39.640
<v Speaker 1>a different size and different shape and a different color,

0:10:40.320 --> 0:10:42.600
<v Speaker 1>I'll catch on pretty quickly and it won't take very

0:10:42.600 --> 0:10:46.000
<v Speaker 1>many coffee mugs for me to figure out. All Right,

0:10:46.040 --> 0:10:48.920
<v Speaker 1>I got the basic idea of what a coffee mug is.

0:10:49.040 --> 0:10:52.280
<v Speaker 1>I know what the concept of coffee mug is now,

0:10:53.000 --> 0:10:56.800
<v Speaker 1>But computers aren't like that. You have to feed them

0:10:57.000 --> 0:11:00.600
<v Speaker 1>thousands of images, both of coffee mugs and of not

0:11:01.000 --> 0:11:04.199
<v Speaker 1>coffee mugs, so that the computer starts to be able

0:11:04.240 --> 0:11:08.920
<v Speaker 1>to pick out the various features that are the essence

0:11:09.120 --> 0:11:12.520
<v Speaker 1>of a coffee mug versus things that are not related

0:11:12.600 --> 0:11:16.400
<v Speaker 1>to being a coffee mug. It takes hours and hours

0:11:16.400 --> 0:11:18.960
<v Speaker 1>and hours of work of training these computers to do it,

0:11:19.000 --> 0:11:22.520
<v Speaker 1>so it's a non trivial task, and this is true

0:11:22.559 --> 0:11:28.600
<v Speaker 1>of all types of image recognition, including facial recognition. Now,

0:11:28.600 --> 0:11:34.480
<v Speaker 1>to get around that problem, you end up sending thousands,

0:11:34.559 --> 0:11:38.080
<v Speaker 1>countless thousands, millions maybe of images of what you're interested

0:11:38.120 --> 0:11:40.480
<v Speaker 1>in while you're training the computer. And the nice thing

0:11:40.559 --> 0:11:43.920
<v Speaker 1>is computers can process this information very very quickly, so

0:11:44.040 --> 0:11:49.520
<v Speaker 1>while it takes a lot, it doesn't take relatively that long,

0:11:50.040 --> 0:11:52.959
<v Speaker 1>it's not as laborious a process as it could be

0:11:53.120 --> 0:11:58.319
<v Speaker 1>if computers were slower at analyzing information. So you might

0:11:58.360 --> 0:12:01.560
<v Speaker 1>remember a story that kind of illustrates the point. Back

0:12:01.600 --> 0:12:05.520
<v Speaker 1>in twenty twelve, there was a network of sixteen thousand

0:12:05.520 --> 0:12:11.080
<v Speaker 1>computers that analyzed ten million images, and as a result,

0:12:11.080 --> 0:12:13.880
<v Speaker 1>it could do the most important task any computer connected

0:12:13.880 --> 0:12:16.840
<v Speaker 1>to the Internet should be expected to do. It could

0:12:16.840 --> 0:12:20.440
<v Speaker 1>then identify cat videos because it now knew what a

0:12:20.440 --> 0:12:24.200
<v Speaker 1>cat was, or at least the features that define catness.

0:12:25.080 --> 0:12:27.600
<v Speaker 1>Catness as in the essence of being a cat, not

0:12:27.720 --> 0:12:31.520
<v Speaker 1>a character from Hunger Games. Even then, there were times

0:12:31.520 --> 0:12:33.600
<v Speaker 1>when a computer would get it wrong. Either it would

0:12:33.640 --> 0:12:35.880
<v Speaker 1>not identify a cat as being a cat, or it

0:12:35.920 --> 0:12:38.880
<v Speaker 1>would misidentify something else as being a cat because its

0:12:38.920 --> 0:12:41.360
<v Speaker 1>features were close enough to cat like for it to

0:12:41.520 --> 0:12:46.360
<v Speaker 1>fool the computer algorithm. A major breakthrough in facial recognition

0:12:46.400 --> 0:12:48.800
<v Speaker 1>algorithms happened way back in two thousand and one. That's

0:12:48.840 --> 0:12:52.360
<v Speaker 1>when Paul Viola and Michael Jones unveiled an algorithm for

0:12:52.440 --> 0:12:56.080
<v Speaker 1>face detection, and it worked in real time, which meant

0:12:56.160 --> 0:12:59.600
<v Speaker 1>that it could recognize a face that it would appear

0:12:59.679 --> 0:13:02.839
<v Speaker 1>on a webcam. And by recognized, I mean it recognized

0:13:02.880 --> 0:13:06.840
<v Speaker 1>that it was a face. It didn't assign an identity

0:13:07.360 --> 0:13:11.480
<v Speaker 1>to the face. It didn't say, Oh, that's Bob, It said, oh,

0:13:11.679 --> 0:13:13.600
<v Speaker 1>that is a face that is in front of the

0:13:13.600 --> 0:13:19.000
<v Speaker 1>webcam right now. The algorithm soon found its way into

0:13:19.120 --> 0:13:24.040
<v Speaker 1>open CV, which is an open source computer vision framework,

0:13:24.559 --> 0:13:28.079
<v Speaker 1>and the open source approach allowed other programmers to dive

0:13:28.120 --> 0:13:31.000
<v Speaker 1>into that code and to make changes and improvements, and

0:13:31.040 --> 0:13:36.360
<v Speaker 1>it helped a rapid prototyping of facial recognition software to

0:13:36.520 --> 0:13:40.000
<v Speaker 1>Other computer scientists who helped advance computer vision further were

0:13:40.080 --> 0:13:44.160
<v Speaker 1>Bill Triggs and Navnit de Lal, who published a paper

0:13:44.160 --> 0:13:48.439
<v Speaker 1>in two thousand and five about the histograbs of oriented gradients. Now,

0:13:48.480 --> 0:13:51.360
<v Speaker 1>that was an approach that looked at gradient orientation in

0:13:51.400 --> 0:13:53.800
<v Speaker 1>parts of an image, and essentially it describes the process

0:13:53.840 --> 0:13:56.960
<v Speaker 1>of viewing an image with attention to edge directions and

0:13:57.000 --> 0:14:01.200
<v Speaker 1>intensity gradients. That's a complicated way of saying the technique

0:14:01.240 --> 0:14:04.320
<v Speaker 1>looks at the totality of a person, and then a

0:14:04.400 --> 0:14:07.640
<v Speaker 1>machine learning algorithm determines whether or not that is actually

0:14:07.679 --> 0:14:11.600
<v Speaker 1>a person or not a person. A bit later, computer

0:14:11.640 --> 0:14:15.520
<v Speaker 1>scientists began pairing computer vision algorithms with deep learning and

0:14:15.679 --> 0:14:21.800
<v Speaker 1>convolutional neural networks or CNNs. To go into this would

0:14:21.840 --> 0:14:25.040
<v Speaker 1>require an episode all by itself. Neural networks are fascinating,

0:14:25.080 --> 0:14:28.160
<v Speaker 1>but they're also pretty complicated, and I've got a whole

0:14:28.240 --> 0:14:31.400
<v Speaker 1>lot of topics to cover today, so we can't really

0:14:31.440 --> 0:14:34.160
<v Speaker 1>dive into it. You can think of an artificial neural

0:14:34.200 --> 0:14:38.600
<v Speaker 1>network as designing a computer system that processes information in

0:14:38.640 --> 0:14:41.240
<v Speaker 1>a way that's similar to the way our brains do.

0:14:41.720 --> 0:14:44.440
<v Speaker 1>The computers are not thinking, but they are able to

0:14:44.480 --> 0:14:50.040
<v Speaker 1>process information in a way that mimics how we process information,

0:14:50.520 --> 0:14:55.040
<v Speaker 1>or a semi close approximation thereof that's a really kind

0:14:55.080 --> 0:14:57.000
<v Speaker 1>of weak way of describing it. But again, to really

0:14:57.000 --> 0:15:03.360
<v Speaker 1>go into detail will require a full episode all by itself. Typically,

0:15:03.640 --> 0:15:08.200
<v Speaker 1>facial recognition software uses feature extraction to look for patterns

0:15:08.200 --> 0:15:11.680
<v Speaker 1>in an image relating to facial features. In other words,

0:15:11.680 --> 0:15:15.440
<v Speaker 1>it searches for features that resemble a face, the elements

0:15:15.440 --> 0:15:19.280
<v Speaker 1>you would expect to be present in a typical face,

0:15:19.680 --> 0:15:24.280
<v Speaker 1>So eyes, nose, a mouth, that would be major ones. Right.

0:15:24.560 --> 0:15:27.800
<v Speaker 1>Then the software starts to estimate the relationships between those

0:15:27.840 --> 0:15:32.120
<v Speaker 1>different elements. How wide are the eyes, how far apart

0:15:32.160 --> 0:15:34.040
<v Speaker 1>are they from each other, How wide is the nose,

0:15:34.680 --> 0:15:37.640
<v Speaker 1>how long is the jawline, what shape are the cheekbones?

0:15:39.000 --> 0:15:43.000
<v Speaker 1>These sort of elements all play a part as points

0:15:43.000 --> 0:15:48.240
<v Speaker 1>of data, and different facial recognition software packages weight these

0:15:48.280 --> 0:15:52.600
<v Speaker 1>features in a different way. So it's not like I

0:15:52.640 --> 0:15:56.040
<v Speaker 1>could say all facial recognition software looks at these four

0:15:56.080 --> 0:15:59.880
<v Speaker 1>points of data as its primary source. It varies depending

0:15:59.920 --> 0:16:02.680
<v Speaker 1>on upon the algorithm that's been designed by various companies,

0:16:03.480 --> 0:16:04.880
<v Speaker 1>and part of the problem that we're going to talk

0:16:04.880 --> 0:16:09.200
<v Speaker 1>about is that law enforcement across the United States they

0:16:09.200 --> 0:16:13.360
<v Speaker 1>are not relying on a single facial recognition software approach.

0:16:13.640 --> 0:16:17.400
<v Speaker 1>Different agencies have different vendors that they work with, So

0:16:18.640 --> 0:16:22.080
<v Speaker 1>just because one might work very well doesn't necessarily mean

0:16:22.120 --> 0:16:25.400
<v Speaker 1>it's competitors work just as well. And that's part of

0:16:25.400 --> 0:16:28.400
<v Speaker 1>the problem. Now, all of these little points of data

0:16:28.400 --> 0:16:32.120
<v Speaker 1>I'm talking about, these notle points and how they relate

0:16:32.160 --> 0:16:35.640
<v Speaker 1>to one another, all of that gets boiled down into

0:16:35.720 --> 0:16:39.160
<v Speaker 1>a numeric code that you could think of as a

0:16:39.200 --> 0:16:42.280
<v Speaker 1>face print. This is supposed to be a representation of

0:16:42.320 --> 0:16:47.800
<v Speaker 1>the unique set of data that is a compilation of

0:16:47.880 --> 0:16:53.480
<v Speaker 1>all of these different points boiled down into numeric information itself.

0:16:56.080 --> 0:16:57.400
<v Speaker 1>Then what you would do is you would have a

0:16:57.480 --> 0:17:02.520
<v Speaker 1>database of face So if you wanted to find a match,

0:17:02.920 --> 0:17:05.920
<v Speaker 1>you would feed the image you have, the probe image

0:17:06.080 --> 0:17:09.919
<v Speaker 1>into this database, and the facial recognition software would analyze

0:17:09.960 --> 0:17:13.240
<v Speaker 1>the probe photo. It would end up assigning this numeric

0:17:13.400 --> 0:17:16.480
<v Speaker 1>value and would start looking through the database for other

0:17:16.560 --> 0:17:20.040
<v Speaker 1>numeric values that were as similar to that probe one

0:17:20.160 --> 0:17:25.800
<v Speaker 1>as possible and start returning those images as potential matches

0:17:26.119 --> 0:17:29.560
<v Speaker 1>or candidates. They tend to use the word candidate photos.

0:17:30.640 --> 0:17:33.199
<v Speaker 1>Otherwise you'll either get no match at all or you

0:17:33.240 --> 0:17:35.800
<v Speaker 1>get a false positive. You will end up getting an

0:17:35.800 --> 0:17:39.919
<v Speaker 1>image of someone who looks like the person whose image

0:17:39.920 --> 0:17:44.480
<v Speaker 1>you submitted, but is not the same person. That does happen,

0:17:45.240 --> 0:17:48.200
<v Speaker 1>And that's the basic way that facial recognition software works.

0:17:49.119 --> 0:17:51.439
<v Speaker 1>But keep in mind, different vendors use all their own

0:17:51.480 --> 0:17:54.560
<v Speaker 1>specific approaches, like I said, and some could be less

0:17:54.600 --> 0:17:58.840
<v Speaker 1>accurate than others. Some might be accurate for specific ethnicities

0:17:58.880 --> 0:18:01.600
<v Speaker 1>and not as accurate as other ones. That's a huge problem,

0:18:03.240 --> 0:18:08.000
<v Speaker 1>so it gets complicated. Even when I'm talking in more

0:18:08.040 --> 0:18:10.960
<v Speaker 1>general terms, you have to remember that there are a

0:18:10.960 --> 0:18:18.359
<v Speaker 1>lot of specific incidents and specific implementations of facial recognition

0:18:18.480 --> 0:18:23.080
<v Speaker 1>software that have their own issues. So I'm gonna be

0:18:23.160 --> 0:18:24.920
<v Speaker 1>as general as I can. I'm not going to call

0:18:24.960 --> 0:18:29.280
<v Speaker 1>out any particular facial recognition software vendors out there. I'm

0:18:29.280 --> 0:18:32.879
<v Speaker 1>more going to talk about the overall issues that various

0:18:32.960 --> 0:18:38.040
<v Speaker 1>organizations have had as they've looked into this topic. Now,

0:18:38.080 --> 0:18:40.879
<v Speaker 1>there are plenty of applications for facial recognition that have

0:18:40.920 --> 0:18:43.119
<v Speaker 1>nothing to do with identifying a person. I mentioned that

0:18:43.200 --> 0:18:45.840
<v Speaker 1>earlier that there was the one for a webcam that

0:18:45.880 --> 0:18:48.320
<v Speaker 1>could identify when a face was in front of the webcam.

0:18:48.440 --> 0:18:51.720
<v Speaker 1>This wasn't to identify anybody. It was again just to say, yes,

0:18:51.760 --> 0:18:55.080
<v Speaker 1>there's somebody looking into the webcam at this moment, which

0:18:55.119 --> 0:18:57.560
<v Speaker 1>by itself can be useful and have nothing to do

0:18:57.600 --> 0:19:01.400
<v Speaker 1>with identification. There are plenty of digital cameras out there

0:19:01.480 --> 0:19:06.199
<v Speaker 1>and camera phone apps that can identify when there's a

0:19:06.280 --> 0:19:10.000
<v Speaker 1>face looking at the camera, and again it's not necessarily

0:19:10.000 --> 0:19:12.440
<v Speaker 1>to identify that person, but rather to say, oh, well,

0:19:12.720 --> 0:19:15.880
<v Speaker 1>this is a face. The camera is most likely trying

0:19:15.880 --> 0:19:18.520
<v Speaker 1>to focus on this person, so let's make this person

0:19:18.560 --> 0:19:21.560
<v Speaker 1>the point of focus and not focus on something in

0:19:21.600 --> 0:19:25.119
<v Speaker 1>the background like a tree that's fifty yards back. Instead,

0:19:25.160 --> 0:19:28.240
<v Speaker 1>let's focus on the person who's in the foreground. So

0:19:28.280 --> 0:19:33.560
<v Speaker 1>that's pretty handy, and again there's nothing particularly problematic from

0:19:33.600 --> 0:19:36.320
<v Speaker 1>an identification standpoint, because that's not the purpose of it.

0:19:38.119 --> 0:19:41.919
<v Speaker 1>But then you also have other implementations, like on social media,

0:19:42.200 --> 0:19:45.240
<v Speaker 1>which allow you to do things like tag people based

0:19:45.320 --> 0:19:50.080
<v Speaker 1>upon an algorithm recognizing a person. So Facebook is a

0:19:50.080 --> 0:19:52.560
<v Speaker 1>great example of this. Right, if you upload a picture

0:19:52.560 --> 0:19:55.960
<v Speaker 1>of one of your Facebook friends onto Facebook chances are

0:19:56.000 --> 0:19:59.080
<v Speaker 1>it's giving you a suggestion to tag that photo with

0:19:59.280 --> 0:20:04.600
<v Speaker 1>the specific in mind. That may not be that problematic either,

0:20:05.200 --> 0:20:08.640
<v Speaker 1>depending upon how your friend feels about pictures being uploaded

0:20:08.640 --> 0:20:13.959
<v Speaker 1>to Facebook. Some people are very cautious about that, and

0:20:14.240 --> 0:20:16.399
<v Speaker 1>of course you know, I always recommend you talk to

0:20:16.440 --> 0:20:20.200
<v Speaker 1>anybody before you start tagging folks on Facebook photos, just

0:20:20.240 --> 0:20:22.679
<v Speaker 1>to make sure they're fine with it. I say that

0:20:22.720 --> 0:20:25.320
<v Speaker 1>as a person who has done it, and then notice

0:20:25.359 --> 0:20:27.440
<v Speaker 1>that some of my tags got removed by the people

0:20:27.480 --> 0:20:30.920
<v Speaker 1>I tagged later on, which taught me I should probably

0:20:31.000 --> 0:20:35.760
<v Speaker 1>ask first, rather than give them the feeling that they

0:20:35.760 --> 0:20:39.080
<v Speaker 1>need to go and remove a tag or two. We've

0:20:39.080 --> 0:20:43.120
<v Speaker 1>also seen examples of this simple implementation of facial recognition

0:20:43.200 --> 0:20:49.080
<v Speaker 1>going awry. Google's street View will blur out faces, for example,

0:20:49.560 --> 0:20:53.520
<v Speaker 1>in an effort to protect people's identity while street view

0:20:53.520 --> 0:20:56.399
<v Speaker 1>cars are out and about taking images. This makes sense.

0:20:56.680 --> 0:20:58.920
<v Speaker 1>Let's say that you are in a part of town

0:20:59.280 --> 0:21:01.840
<v Speaker 1>that you normally would not be in. For whatever reason,

0:21:02.040 --> 0:21:05.080
<v Speaker 1>you might not want your picture to be included on

0:21:05.119 --> 0:21:07.800
<v Speaker 1>Google street View, so that whenever anyone looks at that

0:21:07.880 --> 0:21:11.200
<v Speaker 1>street for that point forward, they see your face on there,

0:21:11.800 --> 0:21:15.639
<v Speaker 1>you know, coming out of I don't know a Wendy's.

0:21:15.880 --> 0:21:19.320
<v Speaker 1>Maybe you are a manager for burger King that would

0:21:19.320 --> 0:21:23.359
<v Speaker 1>look bad, or you know, lots of other reasons that

0:21:23.520 --> 0:21:26.600
<v Speaker 1>obviously can spring to mind as well. You don't want

0:21:26.640 --> 0:21:32.200
<v Speaker 1>to violate someone's privacy. But Google StreetView would also blur

0:21:32.320 --> 0:21:35.400
<v Speaker 1>out images that were not real people faces, like images

0:21:35.440 --> 0:21:38.440
<v Speaker 1>on billboards or murals. Sometimes if it had a person's

0:21:38.480 --> 0:21:40.920
<v Speaker 1>face on a mural, the face would be blurred out,

0:21:40.920 --> 0:21:42.960
<v Speaker 1>even though it's not a real person, it's just a

0:21:43.000 --> 0:21:47.320
<v Speaker 1>painting or In September twenty sixteen, c Neet reported on

0:21:47.359 --> 0:21:49.760
<v Speaker 1>an incident in which Google street View blurred out the

0:21:49.760 --> 0:21:53.840
<v Speaker 1>face of a cow. So Google was being very thoughtful

0:21:53.960 --> 0:22:00.439
<v Speaker 1>to protect that cow's privacy. But what about matching faces

0:22:00.440 --> 0:22:04.679
<v Speaker 1>to identities? So in some cases, again seemingly harmless if

0:22:04.720 --> 0:22:07.280
<v Speaker 1>you want to tag your friends, but when it comes

0:22:07.320 --> 0:22:10.600
<v Speaker 1>to law enforcement, things get a bit sticky, particularly as

0:22:10.640 --> 0:22:13.160
<v Speaker 1>you learn more about the specifics. And we'll talk about

0:22:13.160 --> 0:22:16.240
<v Speaker 1>that in just a second, but first let's take a

0:22:16.320 --> 0:22:28.119
<v Speaker 1>quick break to thank our sponsor. All right, let's first

0:22:28.160 --> 0:22:33.720
<v Speaker 1>start with the FBI's Interstate Photos System, or IPS, because

0:22:33.800 --> 0:22:37.399
<v Speaker 1>this one has perhaps the least controversial elements to it

0:22:37.440 --> 0:22:40.679
<v Speaker 1>when you really look at it, it's still problematic, but

0:22:40.880 --> 0:22:45.560
<v Speaker 1>not nearly as much as the larger picture. The system

0:22:45.600 --> 0:22:51.880
<v Speaker 1>contains both images from criminal cases like mugshots and things

0:22:51.960 --> 0:22:54.920
<v Speaker 1>of that nature, but it also includes some photos from

0:22:55.080 --> 0:23:00.880
<v Speaker 1>civil sources like ID applications, that kind of thing. When

0:23:00.920 --> 0:23:04.760
<v Speaker 1>the Government Accountability Office or GAO, they're gonna be a

0:23:04.760 --> 0:23:08.720
<v Speaker 1>lot of acronyms and initializations or initialisms, I should say

0:23:08.800 --> 0:23:11.520
<v Speaker 1>in this episode, so I apologize for that. But Government

0:23:11.600 --> 0:23:16.480
<v Speaker 1>Accountability Office they did a study on this matter just

0:23:16.920 --> 0:23:20.680
<v Speaker 1>in twenty sixteen, so not that long ago. They published

0:23:20.680 --> 0:23:24.480
<v Speaker 1>its report on facial recognition software use among law enforcements,

0:23:24.520 --> 0:23:28.919
<v Speaker 1>specifically the FBI because they're a federal agency, so they

0:23:28.960 --> 0:23:33.719
<v Speaker 1>were concerned with the federal use of this. The database

0:23:34.040 --> 0:23:37.240
<v Speaker 1>contained about thirty million photos at the time of the

0:23:37.359 --> 0:23:41.680
<v Speaker 1>GAO study, so thirty million pictures are in this database.

0:23:42.119 --> 0:23:46.440
<v Speaker 1>Most of those images came from eighteen thousand different law

0:23:46.520 --> 0:23:50.720
<v Speaker 1>enforcement agencies at all levels of government, that includes the

0:23:50.720 --> 0:23:55.840
<v Speaker 1>tribal law enforcement offices. About seventy percent of all the

0:23:55.840 --> 0:24:01.119
<v Speaker 1>photos in the database were mugshots. More than of the

0:24:01.119 --> 0:24:06.080
<v Speaker 1>photos in that database are from criminal cases, so that

0:24:06.119 --> 0:24:10.040
<v Speaker 1>means that less than twenty percent were from civil sources.

0:24:10.920 --> 0:24:15.120
<v Speaker 1>In addition to that, there were some cases, plenty of them,

0:24:15.480 --> 0:24:19.760
<v Speaker 1>where the database had images of people both from a

0:24:19.760 --> 0:24:23.520
<v Speaker 1>civil source and from a criminal source. So I'll give

0:24:23.560 --> 0:24:27.320
<v Speaker 1>you a theoretical example. Let's say that sometime in the

0:24:27.320 --> 0:24:33.840
<v Speaker 1>past I got nabbed by the cops for grand theft

0:24:33.840 --> 0:24:37.840
<v Speaker 1>auto because I play that game. But let's say that

0:24:37.880 --> 0:24:40.080
<v Speaker 1>I stole a car, which we already know is a

0:24:40.160 --> 0:24:43.920
<v Speaker 1>complete fabrication because I don't even drive. But let's say

0:24:43.920 --> 0:24:47.199
<v Speaker 1>I stole a car, and that I had moved the

0:24:47.200 --> 0:24:51.440
<v Speaker 1>car across state lines. It became a federal case. Therefore,

0:24:51.960 --> 0:24:55.920
<v Speaker 1>my criminal information is included. My mugshot would be included

0:24:56.160 --> 0:25:03.879
<v Speaker 1>in this particular database. On related note, my ID also

0:25:04.720 --> 0:25:08.639
<v Speaker 1>is in that database as a civil image, not as

0:25:08.640 --> 0:25:11.800
<v Speaker 1>a criminal image. Well, in my case, they would tie

0:25:11.840 --> 0:25:15.920
<v Speaker 1>those two images together because they refer to the same

0:25:16.000 --> 0:25:19.200
<v Speaker 1>person and I had been involved in a criminal act.

0:25:20.119 --> 0:25:23.080
<v Speaker 1>So while I would have an image in there from

0:25:23.119 --> 0:25:26.440
<v Speaker 1>a civil source, it would be filed under the criminal

0:25:26.480 --> 0:25:28.720
<v Speaker 1>side of things. This is important when we get to

0:25:28.960 --> 0:25:32.920
<v Speaker 1>how the probes work. Now, let's say you have been

0:25:33.400 --> 0:25:37.840
<v Speaker 1>perfectly law abiding this whole time, and that your ID

0:25:39.000 --> 0:25:41.840
<v Speaker 1>is also in this database, but it's just under the

0:25:41.840 --> 0:25:45.200
<v Speaker 1>civil side of things. Since you don't have any criminal background,

0:25:45.840 --> 0:25:49.600
<v Speaker 1>it's not connected to anything on the criminal side, So

0:25:49.760 --> 0:25:54.160
<v Speaker 1>when it comes to probes using the IPS, your information

0:25:54.680 --> 0:25:59.520
<v Speaker 1>will not be referenced because the FBI policy is when

0:25:59.520 --> 0:26:03.720
<v Speaker 1>it's running these potential matches with a photo that's been

0:26:03.800 --> 0:26:06.800
<v Speaker 1>gathered as part of the evidence for an ongoing investigation,

0:26:07.520 --> 0:26:11.639
<v Speaker 1>they can only consult the criminal side, not the civil side,

0:26:12.280 --> 0:26:15.960
<v Speaker 1>with the exception of any civil photos that are connected

0:26:16.000 --> 0:26:20.280
<v Speaker 1>to a criminal case, as in my example, those are

0:26:20.359 --> 0:26:23.399
<v Speaker 1>fair game. So it might run a match and it

0:26:23.480 --> 0:26:27.520
<v Speaker 1>turns out that my photo for my state given identification

0:26:27.680 --> 0:26:31.840
<v Speaker 1>card is a better match than the mugshot is. That's

0:26:31.880 --> 0:26:34.520
<v Speaker 1>going to be fine because those two things were both

0:26:34.560 --> 0:26:37.119
<v Speaker 1>attached to a criminal file in the first place. But

0:26:37.560 --> 0:26:39.800
<v Speaker 1>let's say that it would have matched up against you

0:26:40.600 --> 0:26:43.159
<v Speaker 1>since you didn't have a criminal background, and since the

0:26:43.200 --> 0:26:46.760
<v Speaker 1>only record in there was a civil source, the match

0:26:46.760 --> 0:26:50.080
<v Speaker 1>would completely skip over you. It wouldn't return your picture

0:26:50.680 --> 0:26:54.600
<v Speaker 1>because your image is off limits in that particular use

0:26:56.359 --> 0:27:00.520
<v Speaker 1>very important because it's an effort to try and make

0:27:00.600 --> 0:27:07.600
<v Speaker 1>sure this facial recognition technology is focusing just on the

0:27:07.640 --> 0:27:13.560
<v Speaker 1>criminal side, not putting law abiding citizens in danger of

0:27:13.600 --> 0:27:19.320
<v Speaker 1>being pulled up in a virtual lineup, at least not

0:27:19.440 --> 0:27:23.479
<v Speaker 1>using that approach. That's the problem is that that's not the

0:27:23.480 --> 0:27:25.920
<v Speaker 1>only way the FBI runs searches. In fact, that might

0:27:25.920 --> 0:27:29.119
<v Speaker 1>not be the primary way the FBI runs searches when

0:27:29.119 --> 0:27:32.600
<v Speaker 1>they're looking for a match to a photo that was

0:27:32.600 --> 0:27:36.840
<v Speaker 1>taken as part of evidence gathering in pursuing a case.

0:27:40.320 --> 0:27:42.959
<v Speaker 1>But let's say that you are an FBI agent and

0:27:43.000 --> 0:27:45.720
<v Speaker 1>you've got a photo, a probe photo, and you want

0:27:45.760 --> 0:27:49.240
<v Speaker 1>to run it for a match. What's the procedure. You

0:27:49.240 --> 0:27:53.879
<v Speaker 1>would send off your request to the NGI dash Ips Department,

0:27:54.440 --> 0:27:57.840
<v Speaker 1>and you would have to indicate how many potential photographs

0:27:57.880 --> 0:28:02.600
<v Speaker 1>you want back, how many candidates do you want. You

0:28:02.600 --> 0:28:08.080
<v Speaker 1>can choose between two candidate photos and fifty candidate photos.

0:28:08.359 --> 0:28:10.879
<v Speaker 1>These are photos of different individuals, by the way, not

0:28:11.040 --> 0:28:14.040
<v Speaker 1>just here's a picture of Jonathan on the beach. Here's

0:28:14.040 --> 0:28:17.520
<v Speaker 1>a picture of Jonathan in the woods. No, it's more like,

0:28:17.600 --> 0:28:19.639
<v Speaker 1>here's a picture of Jonathan. Here's a picture of a

0:28:19.640 --> 0:28:22.200
<v Speaker 1>person who's not Jonathan, but also kind of matches this

0:28:22.400 --> 0:28:28.119
<v Speaker 1>particular probe photo you submitted. And here are forty eight others.

0:28:28.400 --> 0:28:31.359
<v Speaker 1>The default is twenty, so if you don't change the

0:28:31.400 --> 0:28:35.320
<v Speaker 1>default at all, you will get back twenty images that

0:28:35.440 --> 0:28:39.800
<v Speaker 1>are potential candidates matching your probe photo, assuming that any

0:28:40.280 --> 0:28:43.440
<v Speaker 1>are found at all. It is possible that you submit

0:28:43.560 --> 0:28:46.160
<v Speaker 1>a probe photo and the system doesn't find any matches

0:28:46.160 --> 0:28:48.080
<v Speaker 1>at all, and which case you'll just get a null.

0:28:49.400 --> 0:28:52.960
<v Speaker 1>You might get less than what you asked for if

0:28:54.000 --> 0:28:58.520
<v Speaker 1>only a few had met the threshold for reliability. Now

0:28:58.640 --> 0:29:04.440
<v Speaker 1>we call them candidate photos because you're supposed to acknowledge

0:29:04.440 --> 0:29:07.960
<v Speaker 1>the fact that these are meant to help you pursue

0:29:07.960 --> 0:29:11.080
<v Speaker 1>a lead of inquiry. In a case, it is not

0:29:11.280 --> 0:29:17.960
<v Speaker 1>meant to be a source of positive identification of a suspect.

0:29:18.400 --> 0:29:21.200
<v Speaker 1>So in other words, you shouldn't run a facial recognition

0:29:21.680 --> 0:29:25.600
<v Speaker 1>software probe, get a result back and say that's our guy,

0:29:25.960 --> 0:29:29.320
<v Speaker 1>let's go pick him up. That's not enough. It's meant

0:29:29.320 --> 0:29:33.760
<v Speaker 1>to be the start of a line of inquiry, and

0:29:35.000 --> 0:29:36.640
<v Speaker 1>whether or not it gets used that way all the

0:29:36.680 --> 0:29:39.600
<v Speaker 1>time is another matter. But the purpose of calling it

0:29:39.720 --> 0:29:43.840
<v Speaker 1>candidate photo is to remind everyone this is not meant

0:29:43.840 --> 0:29:50.000
<v Speaker 1>to be proof of someone's guilt or innocence. The FBI

0:29:50.120 --> 0:29:54.040
<v Speaker 1>also allows certain state authorities to use this same database,

0:29:54.400 --> 0:29:59.840
<v Speaker 1>and different agencies have different preferences. So in the GAO

0:30:00.080 --> 0:30:02.720
<v Speaker 1>report that I talked about earlier, the authors noted that

0:30:02.800 --> 0:30:07.040
<v Speaker 1>law enforcement officials from Michigan, for example, would always ask

0:30:07.080 --> 0:30:10.960
<v Speaker 1>for the maximum number of candidate photos, particularly when they'd

0:30:11.000 --> 0:30:14.960
<v Speaker 1>use probe images that were of low quality. So let's

0:30:14.960 --> 0:30:18.600
<v Speaker 1>say you've got a picture captured from a security camera

0:30:18.840 --> 0:30:21.640
<v Speaker 1>and the lighting is pretty bad and perhaps the person

0:30:21.760 --> 0:30:24.720
<v Speaker 1>wasn't facing dead on into the camera. You might ask

0:30:24.760 --> 0:30:27.560
<v Speaker 1>for the maximum number of candidate photos to re return

0:30:27.640 --> 0:30:32.000
<v Speaker 1>to you, knowing that the image you submitted was low quality,

0:30:32.000 --> 0:30:37.960
<v Speaker 1>and therefore any match is only potentially going to be

0:30:38.040 --> 0:30:42.720
<v Speaker 1>the person you're actually looking for. And again, this is

0:30:42.760 --> 0:30:46.200
<v Speaker 1>all just to help you with the beginning of your investigation.

0:30:46.480 --> 0:30:50.000
<v Speaker 1>It's not meant to be the that's our guy moment

0:30:50.360 --> 0:30:55.720
<v Speaker 1>that you would see and say police procedural that would

0:30:55.720 --> 0:31:00.400
<v Speaker 1>appear on network television in primetime. The FBI I also

0:31:00.400 --> 0:31:04.360
<v Speaker 1>has a policy in that all returned candidate photos must

0:31:04.400 --> 0:31:08.440
<v Speaker 1>first be analyzed by human specialists before being passed on

0:31:08.600 --> 0:31:12.920
<v Speaker 1>to other law enforcement agencies. Up to that point, the

0:31:13.080 --> 0:31:16.800
<v Speaker 1>entire process is automatic, so you don't have people overseeing

0:31:16.960 --> 0:31:20.960
<v Speaker 1>the process once it's probing all of the database, but

0:31:21.000 --> 0:31:24.240
<v Speaker 1>once the results come in, human analysts, who are supposed

0:31:24.240 --> 0:31:26.479
<v Speaker 1>to be trained in this sort of thing, are supposed

0:31:26.520 --> 0:31:30.520
<v Speaker 1>to look at each of those returned candidates and determine

0:31:30.520 --> 0:31:34.800
<v Speaker 1>if whether or not they really do resemble the person

0:31:34.920 --> 0:31:37.440
<v Speaker 1>in the probe photo that was submitted in the first place,

0:31:37.480 --> 0:31:39.440
<v Speaker 1>and if they're not, they are not supposed to be

0:31:39.480 --> 0:31:43.240
<v Speaker 1>passed on any further down the chain. Now, so far,

0:31:43.320 --> 0:31:47.320
<v Speaker 1>this probably doesn't sound too problematic. The FBI has a

0:31:47.360 --> 0:31:50.480
<v Speaker 1>database containing both criminal and civil photographs, but when it

0:31:50.560 --> 0:31:53.120
<v Speaker 1>runs a probe, it can only use the criminal photos

0:31:53.280 --> 0:31:55.720
<v Speaker 1>or the civil ones that are attached to criminal files.

0:31:56.200 --> 0:31:58.720
<v Speaker 1>Candidate photos are supposed to only be used to help

0:31:58.720 --> 0:32:02.440
<v Speaker 1>start a line of inquiry, not to positively identify suspects,

0:32:02.680 --> 0:32:05.400
<v Speaker 1>and everything has to be reviewed by human being. That

0:32:05.520 --> 0:32:09.080
<v Speaker 1>sounds fairly reasonable. But even if you're mostly okay with

0:32:09.120 --> 0:32:12.600
<v Speaker 1>this approach, which still has some problems we'll talk about

0:32:12.600 --> 0:32:16.040
<v Speaker 1>in a bit, things get significantly more dicey as you

0:32:16.160 --> 0:32:20.640
<v Speaker 1>learn more about the FBI's policies. For example, they have

0:32:20.680 --> 0:32:25.680
<v Speaker 1>a unit called the Facial Analysis Comparison and Evaluation Services

0:32:25.840 --> 0:32:32.520
<v Speaker 1>or face FACE. This is a part of the Criminal

0:32:32.600 --> 0:32:37.400
<v Speaker 1>Justice Information Services Department CG. Rather I yeah, I can

0:32:37.440 --> 0:32:41.320
<v Speaker 1>spell justice with a G. It doesn't make sense. No,

0:32:41.520 --> 0:32:45.959
<v Speaker 1>the cjis. This is a department within the FBI, and

0:32:46.040 --> 0:32:48.960
<v Speaker 1>FACE can carry out a search far more wide reaching

0:32:49.320 --> 0:32:55.160
<v Speaker 1>than one that just uses the ngi IPS database. FACE

0:32:55.320 --> 0:33:00.320
<v Speaker 1>uses not only that database but also external databases when

0:33:00.360 --> 0:33:03.480
<v Speaker 1>conducting a search with a probe photo. So let's say again,

0:33:03.800 --> 0:33:06.640
<v Speaker 1>you're an FBI agent and you have an image that

0:33:06.680 --> 0:33:08.600
<v Speaker 1>you want to match. You want to find out who

0:33:08.640 --> 0:33:11.240
<v Speaker 1>this person is. Maybe it's just a person of interest,

0:33:11.600 --> 0:33:15.040
<v Speaker 1>doesn't even necessarily have to be a suspect. Could be that, hey,

0:33:15.080 --> 0:33:17.560
<v Speaker 1>maybe this person can tell us more about this thing

0:33:17.640 --> 0:33:22.800
<v Speaker 1>that happened later on. Well, you could follow the NGIIPS procedure,

0:33:22.840 --> 0:33:26.360
<v Speaker 1>which would focus on those criminal photographs, or you could

0:33:26.400 --> 0:33:31.760
<v Speaker 1>submit your image to face. Face then would search dozens

0:33:31.880 --> 0:33:37.840
<v Speaker 1>of databases holding more than four hundred eleven million photographs,

0:33:38.800 --> 0:33:43.880
<v Speaker 1>many of which are from civil sources. So NGIIPS has

0:33:44.080 --> 0:33:48.120
<v Speaker 1>thirty million, all of them together have four hundred eleven

0:33:48.160 --> 0:33:52.680
<v Speaker 1>million pictures. And again a lot of those pictures just

0:33:52.720 --> 0:34:02.080
<v Speaker 1>come from things like passport ID, driver's licenses, sometimes security clearances,

0:34:02.200 --> 0:34:05.239
<v Speaker 1>that sort of stuff. That's this database has a lot

0:34:05.280 --> 0:34:08.879
<v Speaker 1>of law abiding citizens who have no criminal record, and

0:34:09.040 --> 0:34:11.120
<v Speaker 1>the images have nothing to do with any sort of

0:34:11.120 --> 0:34:17.120
<v Speaker 1>criminal act, but they're in these databases. These external databases

0:34:17.400 --> 0:34:20.920
<v Speaker 1>belong to lots of different agencies, and both at the

0:34:20.920 --> 0:34:25.319
<v Speaker 1>federal level and state level. So you've got state police agencies,

0:34:25.760 --> 0:34:28.080
<v Speaker 1>You've got the Department of Defense, You've got the Department

0:34:28.080 --> 0:34:31.520
<v Speaker 1>of Justice, you have the Department of State, and again

0:34:31.560 --> 0:34:35.520
<v Speaker 1>it contains photos from licenses, passports, security ID cards, and more.

0:34:36.040 --> 0:34:38.800
<v Speaker 1>So your submission would then go to one of twenty

0:34:38.880 --> 0:34:43.240
<v Speaker 1>nine different biometric image specialists. They would take that probe

0:34:43.239 --> 0:34:46.080
<v Speaker 1>photo and run a scan through these various databases and

0:34:46.080 --> 0:34:49.360
<v Speaker 1>they would look for matches. Here's another problem. Each of

0:34:49.400 --> 0:34:53.280
<v Speaker 1>these systems has a different methodology for performing and returning

0:34:53.320 --> 0:34:58.560
<v Speaker 1>search results, which makes this even more complicated. For example,

0:34:59.200 --> 0:35:02.400
<v Speaker 1>I talked about how the ngi IPS system gives you

0:35:02.480 --> 0:35:06.799
<v Speaker 1>a return between two and fifty candidate photos. Right, Well,

0:35:06.840 --> 0:35:09.600
<v Speaker 1>the Department of State will return as many as eighty

0:35:09.640 --> 0:35:14.160
<v Speaker 1>eight candidate photos if they are all from visa applications

0:35:14.200 --> 0:35:17.880
<v Speaker 1>from people who are not US citizens. So you can

0:35:17.920 --> 0:35:21.960
<v Speaker 1>get up to eighty eight pictures from visa applicants, or

0:35:22.000 --> 0:35:26.960
<v Speaker 1>you could just get three images from US citizen passport applicants,

0:35:27.760 --> 0:35:30.800
<v Speaker 1>because that's a hard limit. They can only return three

0:35:30.840 --> 0:35:35.000
<v Speaker 1>candidate photos from US citizens who applied for passports, but

0:35:35.040 --> 0:35:38.640
<v Speaker 1>they can return up to eighty eight visa application photos.

0:35:40.080 --> 0:35:42.359
<v Speaker 1>The Department of Defense will will down all of their

0:35:42.440 --> 0:35:47.560
<v Speaker 1>candidates into a single entry. So, in other words, Diberna Defense,

0:35:47.640 --> 0:35:51.520
<v Speaker 1>if you query that database with your probe photo, you

0:35:51.560 --> 0:35:55.400
<v Speaker 1>will only get one image back, so they will call

0:35:55.600 --> 0:35:57.640
<v Speaker 1>all the other ones and give you the most likely

0:35:58.040 --> 0:36:00.400
<v Speaker 1>match out of all the ones that they find in

0:36:00.440 --> 0:36:07.200
<v Speaker 1>their search. Some states will do similar things where they

0:36:07.280 --> 0:36:11.160
<v Speaker 1>will narrow down which images they will return to you.

0:36:11.280 --> 0:36:13.040
<v Speaker 1>Some of them will just give you everything they've got.

0:36:13.440 --> 0:36:16.200
<v Speaker 1>Every match that comes up, they'll just return it back

0:36:16.360 --> 0:36:20.839
<v Speaker 1>to the FBI. So it's very complicated. You can't really

0:36:20.880 --> 0:36:25.560
<v Speaker 1>be sure what methods people are using to be certain

0:36:25.680 --> 0:36:29.360
<v Speaker 1>that the potential matches they have represent a good match,

0:36:29.440 --> 0:36:33.359
<v Speaker 1>a good chance that the person that they've returned is

0:36:33.440 --> 0:36:37.240
<v Speaker 1>actually the same one who is in the probe photo.

0:36:38.280 --> 0:36:41.920
<v Speaker 1>At any rate, you as an FBI agent, wouldn't get

0:36:42.080 --> 0:36:45.200
<v Speaker 1>all of these at all, all of these photos that

0:36:45.239 --> 0:36:47.480
<v Speaker 1>would come back, They would come back to that biometric

0:36:47.560 --> 0:36:51.000
<v Speaker 1>analyst over at face, So you send your request to

0:36:51.040 --> 0:36:54.600
<v Speaker 1>face face takes care of the rest. They get back

0:36:54.640 --> 0:36:57.680
<v Speaker 1>all these results. Then they go through the results they

0:36:57.719 --> 0:37:00.279
<v Speaker 1>get back and they whittle that down to one or

0:37:00.280 --> 0:37:03.080
<v Speaker 1>two candidate photos and they send those on to you,

0:37:03.360 --> 0:37:05.600
<v Speaker 1>the FBI agent. So by the time you get it,

0:37:05.760 --> 0:37:08.759
<v Speaker 1>you only see one or two out of the potentially

0:37:08.800 --> 0:37:13.480
<v Speaker 1>more than one hundred images that were returned on this search.

0:37:16.560 --> 0:37:20.480
<v Speaker 1>But you might ask, well, how frequently does this happen?

0:37:20.560 --> 0:37:23.840
<v Speaker 1>I mean, how often is the FBI looking at images,

0:37:23.920 --> 0:37:28.760
<v Speaker 1>including pictures of law abiding citizens in these virtual lineups.

0:37:28.760 --> 0:37:32.040
<v Speaker 1>It can't be that frequent, right, Well, again, according to

0:37:32.080 --> 0:37:37.360
<v Speaker 1>that GAO report, the FBI submitted two hundred fifteen thousand

0:37:37.560 --> 0:37:41.560
<v Speaker 1>searches between August twenty eleven, which is pretty much when

0:37:41.560 --> 0:37:45.080
<v Speaker 1>the program went into pilot mode and started to be

0:37:45.280 --> 0:37:50.600
<v Speaker 1>rolled out more widely, through December twenty fifteen two hundred

0:37:50.600 --> 0:37:54.960
<v Speaker 1>and fifteen thousand. From August twenty eleven to December twenty fifteen,

0:37:56.120 --> 0:38:00.960
<v Speaker 1>thirty six thousand of those searches were on state driver's

0:38:01.000 --> 0:38:05.480
<v Speaker 1>licensed databases. So it happens a lot thirty six thousand times.

0:38:05.560 --> 0:38:09.319
<v Speaker 1>Chances are if you are an adult in America, you

0:38:09.440 --> 0:38:12.120
<v Speaker 1>got like a coin flip situation that your image was

0:38:12.160 --> 0:38:14.759
<v Speaker 1>looked at at some time or another by an algorithm

0:38:15.000 --> 0:38:18.759
<v Speaker 1>comparing it to a probe photo in the pursuit of

0:38:18.880 --> 0:38:23.960
<v Speaker 1>information regarding a federal case or in some cases, state cases,

0:38:24.000 --> 0:38:28.920
<v Speaker 1>because the FBI has also allowed certain states law agencies

0:38:29.480 --> 0:38:34.560
<v Speaker 1>access to this approach. Now, according to the rules, the

0:38:34.640 --> 0:38:39.040
<v Speaker 1>FBI should have submitted some important documents to inform the

0:38:39.040 --> 0:38:43.680
<v Speaker 1>public of their policies and to lay down the regulations,

0:38:43.719 --> 0:38:46.760
<v Speaker 1>the rules, the processes that they would have to follow

0:38:47.120 --> 0:38:49.839
<v Speaker 1>in order for this to be fair, for it to

0:38:49.880 --> 0:38:53.360
<v Speaker 1>not encroach on your privacy or to violate civil liberties

0:38:53.440 --> 0:38:57.560
<v Speaker 1>or civil rights. Without those rules, the use of the

0:38:57.600 --> 0:39:03.439
<v Speaker 1>system is largely unread, which can lead to misuse, whether

0:39:03.480 --> 0:39:07.760
<v Speaker 1>it's intentional or otherwise. The Government Accountability Office specifically pointed

0:39:07.760 --> 0:39:11.520
<v Speaker 1>out two different types of notifications that the FBI either

0:39:11.800 --> 0:39:14.600
<v Speaker 1>failed to submit or was just very late in submitting.

0:39:15.040 --> 0:39:20.239
<v Speaker 1>The first is called a Privacy Impact assessment or PIA. Now,

0:39:20.280 --> 0:39:23.240
<v Speaker 1>as that name suggests, a PIA is meant to inform

0:39:23.280 --> 0:39:27.400
<v Speaker 1>the public about any potential conflicts with privacy with regards

0:39:27.440 --> 0:39:32.720
<v Speaker 1>to methods for collecting personal information. The FBI did submit

0:39:33.160 --> 0:39:37.120
<v Speaker 1>a PIA for its next generation system, but they did

0:39:37.120 --> 0:39:39.560
<v Speaker 1>it back in two thousand and eight when they first

0:39:39.680 --> 0:39:46.080
<v Speaker 1>launched the NGIIPS. According to the Government Accountability Office, the

0:39:46.120 --> 0:39:50.040
<v Speaker 1>FBI made enough significant changes to the system to warrant

0:39:50.120 --> 0:39:55.279
<v Speaker 1>another PIA that anytime you make a significant revision to

0:39:55.440 --> 0:39:59.880
<v Speaker 1>your personal information systems, you have to submit a new

0:40:00.719 --> 0:40:05.520
<v Speaker 1>because things have changed, and according to the GAO, the

0:40:05.640 --> 0:40:10.120
<v Speaker 1>FBI failed to do that for way too long. Now

0:40:10.239 --> 0:40:14.480
<v Speaker 1>ultimately the FBI would publish a new PIA, but by

0:40:14.480 --> 0:40:18.160
<v Speaker 1>that point, the Government Accountability Office said they had delayed

0:40:18.200 --> 0:40:23.040
<v Speaker 1>so long that it made it more problematic as a result,

0:40:23.120 --> 0:40:26.759
<v Speaker 1>because during the whole time that they were supposed to

0:40:27.000 --> 0:40:30.880
<v Speaker 1>have submitted this, they were actively using this system. It

0:40:30.920 --> 0:40:33.920
<v Speaker 1>wasn't like this was a system being tested. It was

0:40:34.040 --> 0:40:38.120
<v Speaker 1>actually being put to use in real cases. And that

0:40:38.280 --> 0:40:40.480
<v Speaker 1>kind of violates it, well, it doesn't. Kind of. It

0:40:40.560 --> 0:40:43.600
<v Speaker 1>violates a Privacy Act of nineteen seventy four, which states

0:40:44.040 --> 0:40:47.200
<v Speaker 1>that when you make these revisions, you're supposed to file

0:40:47.239 --> 0:40:52.600
<v Speaker 1>a PIA before you put it into use. According to

0:40:52.600 --> 0:40:56.200
<v Speaker 1>the GAO, the FBI failed to do so, and also

0:40:56.200 --> 0:40:59.960
<v Speaker 1>the longer you wait to file this the more entrenched though,

0:41:00.000 --> 0:41:04.040
<v Speaker 1>those uses come. So if you put a system in place,

0:41:05.160 --> 0:41:07.840
<v Speaker 1>you build everything out, you've actually taken the time to

0:41:07.880 --> 0:41:12.520
<v Speaker 1>do it, and then you publish a PIA any objections

0:41:12.520 --> 0:41:14.640
<v Speaker 1>that are raised, you could say, well, we've got a

0:41:14.680 --> 0:41:17.240
<v Speaker 1>system now, and it costs one point two billion dollars

0:41:17.280 --> 0:41:19.320
<v Speaker 1>to put it in place. It's going to cost more money,

0:41:19.560 --> 0:41:23.040
<v Speaker 1>taxpayer money for us to alter it, to remove it,

0:41:23.160 --> 0:41:27.920
<v Speaker 1>to change it. You could argue against any move to

0:41:28.280 --> 0:41:33.160
<v Speaker 1>amend the situation. And the GAO says, that's not playing

0:41:33.200 --> 0:41:40.759
<v Speaker 1>cricket or playing fair for my fellow Americans. So that's

0:41:40.800 --> 0:41:43.240
<v Speaker 1>a problem. But then there's another one. There's a second

0:41:43.239 --> 0:41:46.399
<v Speaker 1>type of report called a Systems of Records Notice or

0:41:46.640 --> 0:41:50.520
<v Speaker 1>sor in SORN. The Department of Justice was required to

0:41:50.560 --> 0:41:54.400
<v Speaker 1>submit a SORN upon the launch of NGIIPS, but didn't

0:41:54.400 --> 0:41:59.480
<v Speaker 1>do so until May fifth, twenty sixteen. The GAO criticized

0:41:59.520 --> 0:42:02.320
<v Speaker 1>both the FBI and the Department of Justice for failing

0:42:02.360 --> 0:42:04.680
<v Speaker 1>to inform the public of the nature of this technology

0:42:04.680 --> 0:42:09.520
<v Speaker 1>and how it might impact personal privacy. But wait, there's more.

0:42:10.239 --> 0:42:13.719
<v Speaker 1>The GAO report also accused the FBI of failing to

0:42:13.760 --> 0:42:16.680
<v Speaker 1>perform any audits to make certain the use of facial

0:42:16.719 --> 0:42:20.600
<v Speaker 1>recognition software isn't in violation of other policies, or even

0:42:20.680 --> 0:42:24.360
<v Speaker 1>to make sure it doesn't violate the Fourth Amendment rights

0:42:24.360 --> 0:42:26.759
<v Speaker 1>of US citizens. Now, for those of you who are

0:42:26.800 --> 0:42:29.920
<v Speaker 1>not US citizens, you might wonder what does this actually mean. Well,

0:42:29.920 --> 0:42:33.239
<v Speaker 1>the Fourth Amendment is supposed to protect us against unreasonable

0:42:33.239 --> 0:42:36.320
<v Speaker 1>search and seizure, and part of that means law enforcement

0:42:36.400 --> 0:42:39.719
<v Speaker 1>can't just demand to search you for no reason. And

0:42:39.880 --> 0:42:42.840
<v Speaker 1>some have argued that using facial recognition software without a

0:42:42.880 --> 0:42:49.160
<v Speaker 1>person's consent, using it invisibly and widespread essentially amounts to

0:42:50.160 --> 0:42:54.200
<v Speaker 1>crossing that line. Now, in the United States, we've got

0:42:54.239 --> 0:42:57.160
<v Speaker 1>plenty of examples of troublesome policies that seem to overstep

0:42:57.200 --> 0:43:00.520
<v Speaker 1>the bounds that are established by the Fourth Amendment. But

0:43:00.800 --> 0:43:04.920
<v Speaker 1>that's a tirade for an entirely different show, probably not

0:43:05.040 --> 0:43:06.759
<v Speaker 1>a tech stuff, maybe a stuff they don't want you

0:43:06.800 --> 0:43:09.520
<v Speaker 1>to know. There are a couple of laws in the

0:43:09.600 --> 0:43:11.800
<v Speaker 1>United States that are important to take note of here

0:43:12.239 --> 0:43:14.520
<v Speaker 1>besides that Fourth Amendment. One of them I just mentioned

0:43:14.520 --> 0:43:16.759
<v Speaker 1>the Privacy Act of nineteen seventy four, and the other

0:43:16.800 --> 0:43:19.399
<v Speaker 1>one is the e Government Act of two thousand and two.

0:43:20.080 --> 0:43:23.480
<v Speaker 1>The Privacy Act sets limitations on the collection, disclosure, and

0:43:23.640 --> 0:43:28.040
<v Speaker 1>use of personal information maintained in systems of records, including

0:43:28.040 --> 0:43:32.200
<v Speaker 1>the ones that law agencies use. The e Government Act

0:43:32.360 --> 0:43:35.279
<v Speaker 1>is the one that requires government agencies to conduct pias

0:43:35.840 --> 0:43:38.239
<v Speaker 1>to make certain that personal information is handled properly in

0:43:38.280 --> 0:43:41.680
<v Speaker 1>federal systems, and the GAO report alleges that the FBI

0:43:41.719 --> 0:43:46.360
<v Speaker 1>policy wasn't aligned with either of those. Now, part of

0:43:46.360 --> 0:43:48.680
<v Speaker 1>this accusation depends upon the fact that the FBI was

0:43:48.800 --> 0:43:53.120
<v Speaker 1>using face in investigations for years before they updated their SORN.

0:43:53.680 --> 0:43:57.520
<v Speaker 1>They're sworn. According to the Privacy Act, agencies must publish

0:43:57.560 --> 0:43:59.800
<v Speaker 1>a new SORN upon the establishment or revision of the

0:43:59.840 --> 0:44:02.200
<v Speaker 1>system of records. This is what I was talking about earlier,

0:44:02.200 --> 0:44:05.040
<v Speaker 1>except I think I said PIA earlier when actually I

0:44:05.080 --> 0:44:09.600
<v Speaker 1>met sor In. That's entirely my fault because I didn't

0:44:09.600 --> 0:44:11.759
<v Speaker 1>write in my notes and I was talking next to boraneously.

0:44:12.160 --> 0:44:15.880
<v Speaker 1>But SORN is what I should have said. The FBI

0:44:16.120 --> 0:44:19.400
<v Speaker 1>argued that it was continuously updating the database to refine

0:44:19.440 --> 0:44:23.720
<v Speaker 1>the system, but the GAO's argument was that you could

0:44:23.719 --> 0:44:27.839
<v Speaker 1>be continuously updating the system and argue, well, we don't

0:44:27.840 --> 0:44:31.400
<v Speaker 1>want to publish an sor in after every tiny revision

0:44:31.880 --> 0:44:36.920
<v Speaker 1>because it's wasteful and time consuming. The GAOS counter to

0:44:36.960 --> 0:44:39.480
<v Speaker 1>that is, yeah, but you were using this tool in

0:44:39.600 --> 0:44:43.960
<v Speaker 1>actual cases. If you were developing this, let's say, in

0:44:44.360 --> 0:44:46.960
<v Speaker 1>a department where you're not using real cases, you're just

0:44:48.560 --> 0:44:51.040
<v Speaker 1>gradually tweaking the system so that it's more and more

0:44:51.080 --> 0:44:55.480
<v Speaker 1>accurate in a controlled environment. That's one thing. But if

0:44:55.480 --> 0:44:59.720
<v Speaker 1>you're actively making use of the system in real world investigations,

0:45:00.360 --> 0:45:04.279
<v Speaker 1>you absolutely must adhere to these laws, because to do

0:45:04.440 --> 0:45:07.759
<v Speaker 1>otherwise is in violation to laws that are passing the

0:45:07.880 --> 0:45:12.040
<v Speaker 1>United States. So you can't have it both ways. You

0:45:12.080 --> 0:45:16.600
<v Speaker 1>can't continuously tweak a system and put it to official

0:45:16.719 --> 0:45:21.879
<v Speaker 1>use and not also file these reports. You could argue

0:45:21.880 --> 0:45:23.520
<v Speaker 1>the FBI was trying to have its cake and eat

0:45:23.560 --> 0:45:27.200
<v Speaker 1>it too, So the expression that I think I actually

0:45:27.280 --> 0:45:30.080
<v Speaker 1>use properly. All Right, we've got more to talk about,

0:45:30.560 --> 0:45:32.480
<v Speaker 1>but it's time for us to take another quick break

0:45:32.840 --> 0:45:44.399
<v Speaker 1>to thank our sponsor. All right, So, the Government Accountability

0:45:44.400 --> 0:45:48.920
<v Speaker 1>Office criticizes the FBI and various other agencies for failing

0:45:48.960 --> 0:45:52.759
<v Speaker 1>to establish the scope and use of its facial recognition technology.

0:45:52.760 --> 0:45:56.160
<v Speaker 1>But that's just the tip of the iceberg. Because the

0:45:56.239 --> 0:45:59.320
<v Speaker 1>GAO report goes on to make an equally troubling point

0:46:00.520 --> 0:46:03.640
<v Speaker 1>that the FBI had performed only a few studies on

0:46:03.640 --> 0:46:07.920
<v Speaker 1>how accurate these facial recognition systems were in the first place. So,

0:46:08.000 --> 0:46:10.680
<v Speaker 1>in other words, not only was this a poorly defined

0:46:10.719 --> 0:46:15.080
<v Speaker 1>and unregulated tool, but it's a tool of unknown accuracy

0:46:15.120 --> 0:46:19.879
<v Speaker 1>and precision, which is terrifying when you think about it now.

0:46:19.880 --> 0:46:23.520
<v Speaker 1>According to the report, the FBI did perform some initial

0:46:23.600 --> 0:46:28.560
<v Speaker 1>tests before they deployed the ngiibs, and then occasionally did

0:46:28.600 --> 0:46:31.600
<v Speaker 1>a couple of tests when they made some changes. But

0:46:32.400 --> 0:46:35.839
<v Speaker 1>there were problems with these tests. For one thing, they

0:46:35.840 --> 0:46:38.640
<v Speaker 1>were limited in scope and they didn't represent how the

0:46:38.680 --> 0:46:42.080
<v Speaker 1>system might be used out in the real world. When

0:46:42.120 --> 0:46:45.440
<v Speaker 1>they were actually running these tests, they ran on about

0:46:45.600 --> 0:46:49.319
<v Speaker 1>nine hundred thousand photographs in the database, so they took

0:46:49.320 --> 0:46:52.279
<v Speaker 1>a subset of the photos that they had. They took

0:46:52.360 --> 0:46:55.720
<v Speaker 1>nine hundred thousand of them, and they ran probe tests

0:46:56.360 --> 0:47:00.600
<v Speaker 1>using photos that they knew either were or were not

0:47:01.320 --> 0:47:05.359
<v Speaker 1>represented in that group of nine hundred thousand. However, you've

0:47:05.360 --> 0:47:08.760
<v Speaker 1>got to remember the full database is more than thirty

0:47:09.000 --> 0:47:13.680
<v Speaker 1>million images, so something that works on a smaller scale

0:47:13.760 --> 0:47:17.200
<v Speaker 1>may not work once you scale it up for another

0:47:17.640 --> 0:47:21.560
<v Speaker 1>The tests did not specify how often incorrect matches would

0:47:21.600 --> 0:47:25.799
<v Speaker 1>come back, so you didn't know how many false positives

0:47:26.200 --> 0:47:29.520
<v Speaker 1>were there because the FBI wasn't tracking false positives. They

0:47:29.560 --> 0:47:32.319
<v Speaker 1>were only concerned with how frequently they were getting a

0:47:32.440 --> 0:47:37.720
<v Speaker 1>match to an actual image. So the way they test

0:47:37.800 --> 0:47:41.319
<v Speaker 1>this is, you've got nine hundred thousand images, they've got

0:47:41.320 --> 0:47:44.360
<v Speaker 1>a probe image, They know for a fact that the

0:47:44.400 --> 0:47:47.719
<v Speaker 1>probe image is inside that database, and then they run

0:47:47.760 --> 0:47:51.160
<v Speaker 1>the search to see if the system sends that image back.

0:47:51.480 --> 0:47:55.279
<v Speaker 1>And their threshold was an eighty five percent detection rate

0:47:56.080 --> 0:47:59.160
<v Speaker 1>for a positive match. So, in other words, it went

0:47:59.239 --> 0:48:01.800
<v Speaker 1>like this, Let's say you need to conduct a test

0:48:01.880 --> 0:48:04.520
<v Speaker 1>of this system. This is one way you would determine

0:48:04.520 --> 0:48:07.439
<v Speaker 1>whether or not you had that eighty five percent detection rate.

0:48:08.719 --> 0:48:12.279
<v Speaker 1>Let's say you have one hundred probe photos that you've

0:48:12.320 --> 0:48:16.680
<v Speaker 1>taken of one person, and you know this person's face

0:48:16.960 --> 0:48:19.360
<v Speaker 1>is in that database. You know it's going to be

0:48:19.400 --> 0:48:24.160
<v Speaker 1>in among those nine hundred thousand or so images, So

0:48:24.239 --> 0:48:26.919
<v Speaker 1>then you submit your query. If you have an eighty

0:48:26.920 --> 0:48:29.960
<v Speaker 1>five percent detection rate, then eighty five of those probe

0:48:30.000 --> 0:48:33.160
<v Speaker 1>photos should come back with a match, and that match

0:48:33.239 --> 0:48:38.160
<v Speaker 1>should be the actual person you're looking for. That's what

0:48:38.200 --> 0:48:40.719
<v Speaker 1>they meant by an eighty five percent detection rate, that

0:48:40.800 --> 0:48:43.920
<v Speaker 1>eighty five percent of the time an image that is

0:48:43.960 --> 0:48:47.760
<v Speaker 1>in their database would be pulled due to a facial

0:48:47.800 --> 0:48:53.000
<v Speaker 1>recognition software search. Now, during this testing phase, the FBI

0:48:53.320 --> 0:48:57.720
<v Speaker 1>reported that they met this threshold. They used that subset

0:48:57.760 --> 0:49:00.640
<v Speaker 1>of actually was nine hundred and twenty six thousand photos

0:49:00.840 --> 0:49:03.480
<v Speaker 1>as their subset when they were testing it, and they

0:49:03.560 --> 0:49:06.440
<v Speaker 1>said that they had an eighty six percent detection rate,

0:49:06.520 --> 0:49:09.279
<v Speaker 1>So they actually were exceeding what they had set as

0:49:09.320 --> 0:49:12.720
<v Speaker 1>their threshold. But that just meant that eighty six percent

0:49:12.760 --> 0:49:15.200
<v Speaker 1>of the time, the actual match for a probe photos

0:49:15.239 --> 0:49:19.560
<v Speaker 1>showed up in a group of fifty candidate images, so

0:49:21.280 --> 0:49:23.680
<v Speaker 1>you would get forty nine other images that were not

0:49:23.920 --> 0:49:28.120
<v Speaker 1>your match. The match would be there eighty six percent

0:49:28.120 --> 0:49:32.600
<v Speaker 1>of the time along with forty nine other images. So

0:49:32.640 --> 0:49:34.840
<v Speaker 1>we know that the system works if you were asking

0:49:34.880 --> 0:49:38.520
<v Speaker 1>for the maximum number of candidates. Remember in the FBI system,

0:49:38.520 --> 0:49:40.840
<v Speaker 1>you can ask for between two and fifty, but fifty

0:49:40.960 --> 0:49:44.200
<v Speaker 1>is the max. But what happens if you ask for

0:49:44.280 --> 0:49:49.400
<v Speaker 1>fewer images? What if you said, no, I want twenty returns.

0:49:49.640 --> 0:49:54.280
<v Speaker 1>What's the accuracy, then the FBI can't tell you because

0:49:54.320 --> 0:49:57.200
<v Speaker 1>they do not know. According to the FBI, they did

0:49:57.239 --> 0:50:00.400
<v Speaker 1>not run tests to see what would happen if you

0:50:00.560 --> 0:50:03.799
<v Speaker 1>decrease the number of candidate photos you asked for. They

0:50:03.920 --> 0:50:07.640
<v Speaker 1>only ran tests on the maximum number of candidate photos.

0:50:08.760 --> 0:50:11.719
<v Speaker 1>And keep in mind, the default for any search is

0:50:11.840 --> 0:50:15.480
<v Speaker 1>twenty photos, so the default is less than what they tested,

0:50:15.520 --> 0:50:18.439
<v Speaker 1>and they never tried to see if the eighty six

0:50:18.480 --> 0:50:22.560
<v Speaker 1>percent detection rate held true at these lower numbers. That's

0:50:22.600 --> 0:50:27.800
<v Speaker 1>a huge issue. On top of that, the FBI didn't

0:50:27.800 --> 0:50:30.439
<v Speaker 1>go so far to determine how frequently its system would

0:50:30.480 --> 0:50:35.080
<v Speaker 1>return false positives to probes, so they never paid attention

0:50:35.200 --> 0:50:39.000
<v Speaker 1>to how many times they got responses that didn't reflect

0:50:39.120 --> 0:50:44.239
<v Speaker 1>and the actual identity. They didn't keep track of it. So,

0:50:44.280 --> 0:50:46.200
<v Speaker 1>according to the FBI, the purpose of the system is

0:50:46.239 --> 0:50:49.640
<v Speaker 1>to generate leads, not to positively identify persons of interest.

0:50:49.680 --> 0:50:51.840
<v Speaker 1>So it shouldn't come as a big surprise, or you

0:50:51.880 --> 0:50:55.800
<v Speaker 1>shouldn't even care if it returns a lot of false positives,

0:50:56.200 --> 0:51:00.360
<v Speaker 1>because hey, this technology isn't meant to be the smoking

0:51:00.440 --> 0:51:03.279
<v Speaker 1>gun that says, here's the evidence that will put this

0:51:03.320 --> 0:51:05.920
<v Speaker 1>person away. It's meant to just create a lead, So

0:51:06.200 --> 0:51:09.080
<v Speaker 1>why do you care how many false positives it returns?

0:51:10.000 --> 0:51:16.000
<v Speaker 1>As if being looped in on an official inquiry when

0:51:16.000 --> 0:51:18.600
<v Speaker 1>you had nothing to do with it isn't disruptive or

0:51:18.600 --> 0:51:22.440
<v Speaker 1>stressful or provoke anxiety. I don't know about you, guys,

0:51:23.000 --> 0:51:25.080
<v Speaker 1>but if I had a federal agent show up at

0:51:25.080 --> 0:51:29.080
<v Speaker 1>my door asking me weird questions about a case that

0:51:29.160 --> 0:51:32.880
<v Speaker 1>I had no connection to because my image had popped

0:51:32.960 --> 0:51:36.600
<v Speaker 1>up in one of these searches and I have nothing

0:51:36.640 --> 0:51:38.880
<v Speaker 1>to do with it, it just so happens that I

0:51:38.880 --> 0:51:41.840
<v Speaker 1>look enough like a photo that's being used in the

0:51:41.880 --> 0:51:45.640
<v Speaker 1>case to warrant this. I would probably find that pretty

0:51:45.640 --> 0:51:51.440
<v Speaker 1>disruptive in my life, so I would care about false positives. FBI,

0:51:51.719 --> 0:51:54.719
<v Speaker 1>at least according to this GAO report, apparently didn't think

0:51:54.760 --> 0:52:00.840
<v Speaker 1>it was that big a deal. Now, the GAO points

0:52:00.840 --> 0:52:02.879
<v Speaker 1>out that it is a big deal, and that they're

0:52:02.880 --> 0:52:06.120
<v Speaker 1>not the only ones to think so. The National Science

0:52:06.160 --> 0:52:09.840
<v Speaker 1>and Technology Council and the National Institute of Standards and

0:52:09.840 --> 0:52:13.800
<v Speaker 1>Technology both state then, in order to know how accurate

0:52:13.840 --> 0:52:17.160
<v Speaker 1>a system is, you need to know two pieces of information,

0:52:17.800 --> 0:52:20.799
<v Speaker 1>not just the detection rate, which the FBI claims is

0:52:20.840 --> 0:52:23.840
<v Speaker 1>eighty six percent at least when you're asking for fifty candidates,

0:52:24.840 --> 0:52:27.520
<v Speaker 1>but also the false positive rate. You have to know

0:52:27.640 --> 0:52:30.759
<v Speaker 1>both of them in order to understand how accurate a

0:52:30.840 --> 0:52:33.680
<v Speaker 1>system is, So only knowing one of those pieces of

0:52:33.680 --> 0:52:37.680
<v Speaker 1>information isn't enough to state this system is accurate or not.

0:52:38.200 --> 0:52:41.200
<v Speaker 1>You have to know both. So, not only does the

0:52:41.280 --> 0:52:44.840
<v Speaker 1>FBI not have a grasp on how accurate their system

0:52:44.920 --> 0:52:47.759
<v Speaker 1>is if you're asking for fewer than the maximum number

0:52:47.800 --> 0:52:51.280
<v Speaker 1>of candidates, they also don't know how often it returns

0:52:51.320 --> 0:52:54.600
<v Speaker 1>false positives. So the FBI has no way of knowing

0:52:54.640 --> 0:53:01.040
<v Speaker 1>how accurate this facial recognition software is that's being used

0:53:01.160 --> 0:53:06.880
<v Speaker 1>to actually further investigations for official investigations of the FBI

0:53:07.040 --> 0:53:11.080
<v Speaker 1>and also other state agencies that have access to the system,

0:53:11.920 --> 0:53:16.200
<v Speaker 1>That is beyond problematic. If you cannot say that the

0:53:16.239 --> 0:53:21.680
<v Speaker 1>system with any degree of certainty is above a certain

0:53:21.680 --> 0:53:25.399
<v Speaker 1>threshold of accuracy, why are you using it? Because? I mean,

0:53:25.440 --> 0:53:29.920
<v Speaker 1>it has the potential to dramatically impact people's lives and

0:53:30.280 --> 0:53:34.960
<v Speaker 1>potentially lead people down a pathway that could result in

0:53:35.520 --> 0:53:40.160
<v Speaker 1>false accusations and imprisonment. The person who is actually responsible

0:53:40.280 --> 0:53:42.799
<v Speaker 1>might totally get away with something because of this. This

0:53:42.840 --> 0:53:46.839
<v Speaker 1>is a real problem. And the thing is it might

0:53:46.880 --> 0:53:49.880
<v Speaker 1>be a perfectly accurate system, but we don't know that

0:53:50.239 --> 0:53:53.279
<v Speaker 1>because we haven't tested it. So until we test it,

0:53:53.320 --> 0:53:58.560
<v Speaker 1>we cannot just assume that it's accurate enough. That's not

0:53:58.600 --> 0:54:00.960
<v Speaker 1>when people's lives are at staate. This is where that

0:54:01.000 --> 0:54:04.960
<v Speaker 1>my bias doesn't so much creep in as it kicks

0:54:04.960 --> 0:54:07.680
<v Speaker 1>open the door and makes itself at home on your couch.

0:54:08.840 --> 0:54:15.719
<v Speaker 1>But I digress. The GAO report also goes into great

0:54:15.760 --> 0:54:20.719
<v Speaker 1>detail about how this accuracy really can have a clear

0:54:20.760 --> 0:54:24.000
<v Speaker 1>impact on people's privacy, their civil liberties, their civil rights.

0:54:24.600 --> 0:54:28.960
<v Speaker 1>They also cite the Electronic Frontier Foundation the EFF which

0:54:29.239 --> 0:54:31.279
<v Speaker 1>says that if a person is brought up as a

0:54:31.320 --> 0:54:34.680
<v Speaker 1>defendant in a case and it is revealed that they

0:54:34.680 --> 0:54:38.680
<v Speaker 1>were matched by a facial recognition system, it puts a

0:54:38.719 --> 0:54:41.600
<v Speaker 1>burden on the defendant to argue that they are not

0:54:41.800 --> 0:54:46.960
<v Speaker 1>the same person as was seen in a probe photo,

0:54:47.120 --> 0:54:49.040
<v Speaker 1>that they are not the same one that the system

0:54:49.080 --> 0:54:54.160
<v Speaker 1>has identified. And if you cannot reliably state how accurate

0:54:54.200 --> 0:54:57.080
<v Speaker 1>your system is because you don't know how frequently it

0:54:57.120 --> 0:55:01.160
<v Speaker 1>returns false positives, you have unfairly burned And the defendant,

0:55:01.880 --> 0:55:03.439
<v Speaker 1>Like if you were to say, if you're the FBI,

0:55:03.480 --> 0:55:05.879
<v Speaker 1>and you say, we have an eighty six percent detection rate,

0:55:06.400 --> 0:55:09.080
<v Speaker 1>but you don't admit, oh, by the way, we don't

0:55:09.080 --> 0:55:12.080
<v Speaker 1>know how many false positives we get on any given search.

0:55:12.840 --> 0:55:15.640
<v Speaker 1>The implication you have given is that we're pretty sure

0:55:15.680 --> 0:55:19.760
<v Speaker 1>that this is the right guy. And again they argue

0:55:19.760 --> 0:55:23.080
<v Speaker 1>that this is meant to be a point of inquiry,

0:55:23.600 --> 0:55:25.799
<v Speaker 1>but you could easily see how it could also be

0:55:25.880 --> 0:55:29.719
<v Speaker 1>used by a lawyer to argue that a defendant is

0:55:29.760 --> 0:55:32.960
<v Speaker 1>in fact the person responsible for a crime, and they

0:55:33.000 --> 0:55:37.640
<v Speaker 1>may not be. And because you don't know the accuracy

0:55:37.680 --> 0:55:42.240
<v Speaker 1>of the system, you can't using the system to argue

0:55:42.280 --> 0:55:48.480
<v Speaker 1>for it is irresponsible. There's no accountability there. Now. Not

0:55:48.520 --> 0:55:50.960
<v Speaker 1>only has the FBI failed to establish the accuracy of

0:55:51.000 --> 0:55:55.239
<v Speaker 1>its own NGIIPS system, it has also not assessed the

0:55:55.280 --> 0:55:58.880
<v Speaker 1>accuracy of all those external databases that are used whenever

0:55:58.880 --> 0:56:03.600
<v Speaker 1>they use the face approach. There are no accuracy requirements

0:56:03.640 --> 0:56:07.000
<v Speaker 1>for these agencies, so there's not like a threshold they

0:56:07.040 --> 0:56:09.560
<v Speaker 1>have to prove that they meet in order to be

0:56:09.640 --> 0:56:13.360
<v Speaker 1>part of this. That's a huge problem. While each agency

0:56:13.480 --> 0:56:17.000
<v Speaker 1>might be accurate with no testing procedure, in place, it's

0:56:17.040 --> 0:56:20.400
<v Speaker 1>impossible to be certain of that. And since these databases

0:56:20.440 --> 0:56:24.000
<v Speaker 1>include millions of people with no criminal background and they

0:56:24.040 --> 0:56:28.719
<v Speaker 1>all use different facial recognition software products, this is a

0:56:28.800 --> 0:56:31.440
<v Speaker 1>huge issue. You could be put in a virtual lineup

0:56:31.480 --> 0:56:34.560
<v Speaker 1>simply because you look enough like someone else that a

0:56:34.560 --> 0:56:38.120
<v Speaker 1>computer thinks you are in fact the same person. The

0:56:38.200 --> 0:56:42.040
<v Speaker 1>GAO report concludes with a host of recommendations for future actions,

0:56:42.760 --> 0:56:45.240
<v Speaker 1>including addressing the problem of the FBI being so slow

0:56:45.280 --> 0:56:48.960
<v Speaker 1>to publish those updated pias in a timely manner, and

0:56:49.160 --> 0:56:53.040
<v Speaker 1>create a means to assess each system's accuracy. The Department

0:56:53.080 --> 0:56:57.359
<v Speaker 1>of Justice read the report and then responded disagreeing with

0:56:57.400 --> 0:57:03.000
<v Speaker 1>several points that the GOAO report made, including arguing that

0:57:03.040 --> 0:57:06.200
<v Speaker 1>the FBI and the Department of Justice published information when

0:57:06.200 --> 0:57:08.759
<v Speaker 1>it made the most sense, when the system had been

0:57:08.800 --> 0:57:13.440
<v Speaker 1>tweaked and finalized. More or less. However, by that time, again,

0:57:14.080 --> 0:57:16.520
<v Speaker 1>they had been using that system for real world cases

0:57:16.880 --> 0:57:19.720
<v Speaker 1>throughout the entire process, So it seems to me to

0:57:19.760 --> 0:57:23.600
<v Speaker 1>be kind of a weak argument. You can't really say, like, hey,

0:57:23.640 --> 0:57:26.200
<v Speaker 1>it wasn't finished until then, that's when we published it.

0:57:26.840 --> 0:57:29.520
<v Speaker 1>If you also are saying, hey, we use that for

0:57:29.640 --> 0:57:34.520
<v Speaker 1>real zees to go after actual people. You can't have

0:57:34.640 --> 0:57:39.240
<v Speaker 1>it both ways and not maintain accountability at any rate.

0:57:42.320 --> 0:57:45.720
<v Speaker 1>So that kind of gets to the end of the

0:57:45.760 --> 0:57:48.520
<v Speaker 1>Government Accountability Office report, but that's not the end of

0:57:48.560 --> 0:57:52.040
<v Speaker 1>the story. In March twenty seventeen, Congress held some hearings

0:57:52.080 --> 0:57:55.880
<v Speaker 1>about this, and boy howdy, were some congress people very

0:57:55.920 --> 0:57:58.400
<v Speaker 1>upset with the FBI. On both sides of the aisle.

0:57:58.440 --> 0:58:02.600
<v Speaker 1>You had Democrats and Republicans really chastising the FBI for

0:58:02.720 --> 0:58:06.640
<v Speaker 1>their use of facial recognition software and arguing that it

0:58:06.680 --> 0:58:10.520
<v Speaker 1>could amount to an enormous invasion of privacy as well

0:58:10.560 --> 0:58:15.120
<v Speaker 1>as endangering the civil liberties of US citizens. So people

0:58:15.200 --> 0:58:20.960
<v Speaker 1>who have dramatically different political philosophies were agreeing on this point.

0:58:21.040 --> 0:58:24.000
<v Speaker 1>So it wasn't really a partisan issue in this case,

0:58:24.480 --> 0:58:26.960
<v Speaker 1>and it got pretty ugly, but probably not as ugly

0:58:27.000 --> 0:58:29.880
<v Speaker 1>as the Georgetown University report that was published in late

0:58:29.880 --> 0:58:34.320
<v Speaker 1>twenty sixteen. This is an amazing report. Both the Government

0:58:34.320 --> 0:58:38.160
<v Speaker 1>Accountability Office report and the Georgetown University report are available

0:58:38.280 --> 0:58:42.360
<v Speaker 1>for free online. I will warn you collectively, they're about

0:58:42.360 --> 0:58:46.760
<v Speaker 1>two hundred pages, so if you want some light reading

0:58:47.600 --> 0:58:50.280
<v Speaker 1>you can check it out. They are quite good, both

0:58:50.280 --> 0:58:52.520
<v Speaker 1>of them. And they're very accessible. Neither of them are

0:58:52.520 --> 0:58:57.000
<v Speaker 1>written in crazy legallees which will make it impossible to understand.

0:58:57.000 --> 0:59:00.840
<v Speaker 1>They're written in very plain English, as in the Georgetown

0:59:00.920 --> 0:59:03.640
<v Speaker 1>University report that was revealed that one in every two

0:59:03.680 --> 0:59:07.280
<v Speaker 1>American adults has their picture contained in a database connected

0:59:07.320 --> 0:59:11.560
<v Speaker 1>to law enforcement facial recognition systems. And this report goes

0:59:11.600 --> 0:59:15.040
<v Speaker 1>far beyond just that FBI to state all the way

0:59:15.040 --> 0:59:17.320
<v Speaker 1>down to state and local systems that are implementing their

0:59:17.320 --> 0:59:20.400
<v Speaker 1>own facial recognition databases, and many of them have no

0:59:20.560 --> 0:59:23.440
<v Speaker 1>understanding of how it might impact the civil liberties or

0:59:23.480 --> 0:59:27.200
<v Speaker 1>privacy of citizens. The report is the summary of a

0:59:27.240 --> 0:59:30.400
<v Speaker 1>study that lasted a full year with more than one

0:59:30.480 --> 0:59:34.000
<v Speaker 1>hundred records requests to various police departments. They looked at

0:59:34.040 --> 0:59:37.560
<v Speaker 1>fifty two different law enforcement agencies across the United States,

0:59:38.040 --> 0:59:40.960
<v Speaker 1>and the report assessed the risks to civil liberties and

0:59:41.000 --> 0:59:45.440
<v Speaker 1>civil rights because up until this report was filed, no

0:59:45.560 --> 0:59:48.560
<v Speaker 1>such study had been made, which is a huge problem.

0:59:48.880 --> 0:59:51.000
<v Speaker 1>You don't know the impact of the tool that you've

0:59:51.040 --> 0:59:54.360
<v Speaker 1>created until after it's been put in use for a while.

0:59:54.480 --> 0:59:58.440
<v Speaker 1>That's an issue. Ideally, you think all this out before

0:59:58.480 --> 1:00:02.320
<v Speaker 1>you implement the procedure and their findings were pretty upsetting.

1:00:03.000 --> 1:00:05.640
<v Speaker 1>For example, the report found that some agencies limit themselves

1:00:05.680 --> 1:00:08.960
<v Speaker 1>to using facial recognition within the framework of a targeted

1:00:09.080 --> 1:00:11.960
<v Speaker 1>and public use, such as using it on someone who

1:00:12.040 --> 1:00:16.760
<v Speaker 1>has been legally arrested or detained for a crime. And

1:00:16.840 --> 1:00:22.040
<v Speaker 1>in this case, you're talking about totally above board approach.

1:00:22.720 --> 1:00:27.600
<v Speaker 1>You're assuming that everyone is following the law as regards

1:00:27.600 --> 1:00:31.800
<v Speaker 1>to apprehending and charging a suspect with a crime, and

1:00:31.840 --> 1:00:36.080
<v Speaker 1>maybe that person is unwilling or unable to tell you

1:00:36.160 --> 1:00:39.160
<v Speaker 1>what their identity is, and in that case, you would

1:00:39.240 --> 1:00:42.720
<v Speaker 1>use this facial recognition software stuff in order to figure

1:00:42.760 --> 1:00:47.920
<v Speaker 1>out who you are dealing with. That's largely a legitimate

1:00:47.960 --> 1:00:53.080
<v Speaker 1>case the government. The Georgetown University study didn't say that's bad.

1:00:53.240 --> 1:00:56.600
<v Speaker 1>They actually said, no, that makes sense. It's targeted, it's public.

1:00:57.560 --> 1:01:02.600
<v Speaker 1>But you could have a more invisible approach, for example,

1:01:03.080 --> 1:01:06.400
<v Speaker 1>using facial recognition software in real time on a closed

1:01:06.520 --> 1:01:11.120
<v Speaker 1>circuit camera pointed at a city street, where you're literally

1:01:11.160 --> 1:01:14.680
<v Speaker 1>picking up people as they pass by. They're not people

1:01:14.720 --> 1:01:17.800
<v Speaker 1>of interest, they're just people going about their day. And

1:01:17.880 --> 1:01:21.120
<v Speaker 1>if you're running facial recognition software on such a feed,

1:01:21.800 --> 1:01:27.320
<v Speaker 1>you are potentially invading privacy and stepping on civil rights

1:01:27.360 --> 1:01:28.160
<v Speaker 1>and civil liberties.

1:01:28.840 --> 1:01:31.400
<v Speaker 2>Hey, it's modern day, Jonathan here just cutting end to

1:01:31.480 --> 1:01:34.160
<v Speaker 2>say we will have more about the National Facial Recognition

1:01:34.280 --> 1:01:36.240
<v Speaker 2>Database after this break.

1:01:45.440 --> 1:01:49.439
<v Speaker 1>So even if you were to argue that this real

1:01:49.440 --> 1:01:51.400
<v Speaker 1>time use where you're just looking at people as they

1:01:51.440 --> 1:01:53.280
<v Speaker 1>pass by, and maybe a little name pops up every

1:01:53.320 --> 1:01:55.760
<v Speaker 1>now and then as it as the system recognizes a

1:01:55.760 --> 1:01:59.680
<v Speaker 1>person that matches a file in the database, it's easy

1:01:59.680 --> 1:02:03.360
<v Speaker 1>to a scenario in which such a technology could be abused.

1:02:04.400 --> 1:02:09.120
<v Speaker 1>Either it picks up somebody mistakenly, it thinks it identifies someone,

1:02:09.400 --> 1:02:11.880
<v Speaker 1>but in fact it's a totally different person, and then

1:02:12.040 --> 1:02:17.440
<v Speaker 1>you end up establishing a person's location by mistake, like

1:02:17.480 --> 1:02:20.440
<v Speaker 1>it's not really where they were, but because the system

1:02:20.480 --> 1:02:24.000
<v Speaker 1>has identified a person as being at X place at

1:02:24.040 --> 1:02:29.240
<v Speaker 1>why time, you then have established supposedly that person's location,

1:02:30.000 --> 1:02:31.760
<v Speaker 1>when in fact that person might be across town or

1:02:31.840 --> 1:02:34.240
<v Speaker 1>not even in the same state. But it's because of

1:02:34.880 --> 1:02:38.120
<v Speaker 1>a misidentification in the system. That's one problem. But think

1:02:38.120 --> 1:02:42.320
<v Speaker 1>about this. Think of this is a scary scenario. Imagine

1:02:42.320 --> 1:02:45.360
<v Speaker 1>a situation in which a group of people are discriminated

1:02:45.400 --> 1:02:49.120
<v Speaker 1>against by a government agency. Let's say they have a

1:02:49.200 --> 1:02:54.840
<v Speaker 1>legitimate gripe. It's completely legitimate. They're victims of unfair treatment.

1:02:55.160 --> 1:02:57.520
<v Speaker 1>So a group of them at some of their allies

1:02:57.920 --> 1:03:01.280
<v Speaker 1>get together in a public place for peaceful protest, to

1:03:01.680 --> 1:03:06.440
<v Speaker 1>raise awareness of this issue and to confront the government

1:03:06.440 --> 1:03:10.960
<v Speaker 1>agencies that have discriminated against them. This is all perfectly

1:03:11.040 --> 1:03:14.160
<v Speaker 1>legal according to the US Constitution. They're not doing anything legal.

1:03:14.160 --> 1:03:19.000
<v Speaker 1>They're assembling on public grounds in order to practice free speech.

1:03:20.760 --> 1:03:24.400
<v Speaker 1>But it's not hard to imagine a government agency using

1:03:24.440 --> 1:03:27.040
<v Speaker 1>a camera with this sort of facial recognition software to

1:03:27.120 --> 1:03:29.760
<v Speaker 1>identify people who are in the crowd in order to

1:03:29.880 --> 1:03:33.520
<v Speaker 1>use that as leverage in the future for some purpose

1:03:33.640 --> 1:03:36.800
<v Speaker 1>or another, even if it's just to say we know

1:03:36.960 --> 1:03:40.640
<v Speaker 1>you were there, and to put that kind of pressure

1:03:40.720 --> 1:03:46.920
<v Speaker 1>on a person in order to essentially squelch people's freedom

1:03:46.920 --> 1:03:49.960
<v Speaker 1>of speech. So this is a First Amendment issue, not

1:03:50.000 --> 1:03:53.040
<v Speaker 1>just a Fourth Amendment issue. Now that might sound like

1:03:53.040 --> 1:03:56.960
<v Speaker 1>a dramatic scenario like something like Big brother Ish. It's orwellian,

1:03:57.920 --> 1:04:01.080
<v Speaker 1>but it's also entirely within the realm of possibility. From

1:04:01.120 --> 1:04:05.680
<v Speaker 1>a technological standpoint, there's nothing technologically oriented that would prevent

1:04:05.760 --> 1:04:08.240
<v Speaker 1>us from doing this or prevent an agency from doing this,

1:04:08.840 --> 1:04:12.280
<v Speaker 1>and even without the evil empire scenario in place, you

1:04:12.360 --> 1:04:15.280
<v Speaker 1>still have the problematic issue of treading on civil liberties

1:04:15.360 --> 1:04:19.800
<v Speaker 1>just by having such technology available and unregulated. You don't

1:04:19.840 --> 1:04:25.240
<v Speaker 1>have rules to guide this sort of stuff. The Georgetown

1:04:25.320 --> 1:04:29.040
<v Speaker 1>report found that only one agency out of the fifty

1:04:29.120 --> 1:04:35.000
<v Speaker 1>two that they looked at have a specific rule against

1:04:35.120 --> 1:04:39.760
<v Speaker 1>using facial recognition software to identify people participating in public

1:04:39.800 --> 1:04:44.400
<v Speaker 1>demonstrations or free speech in general. So only one agency

1:04:44.440 --> 1:04:47.560
<v Speaker 1>actually has rules against that. Now, that doesn't mean the

1:04:47.560 --> 1:04:51.760
<v Speaker 1>other fifty one agencies are regularly using this technology to

1:04:52.400 --> 1:04:56.720
<v Speaker 1>monitor acts of free speech, but it also doesn't mean

1:04:56.720 --> 1:04:59.560
<v Speaker 1>that they can't. They don't have rules against it. Only

1:04:59.600 --> 1:05:04.120
<v Speaker 1>one a agency out of the fifty two, people are

1:05:04.120 --> 1:05:06.920
<v Speaker 1>being watched and identified without any connection to a crime.

1:05:06.960 --> 1:05:11.560
<v Speaker 1>In these cases, it's pretty terrifying. The Georgetown report also

1:05:11.600 --> 1:05:13.800
<v Speaker 1>found that no state had yet passed a law to

1:05:13.920 --> 1:05:18.880
<v Speaker 1>regulate police use of facial recognition software. No state in

1:05:18.920 --> 1:05:21.800
<v Speaker 1>the US. They're fifty of them, and none of them

1:05:21.840 --> 1:05:25.520
<v Speaker 1>have passed any regulations, any laws to regulate the use

1:05:25.520 --> 1:05:29.200
<v Speaker 1>of facial recognition software. So without rules, how do you

1:05:29.320 --> 1:05:32.360
<v Speaker 1>argue whether someone's misused or abused a system, you have

1:05:32.400 --> 1:05:35.280
<v Speaker 1>to have rules so that you know what is allowed

1:05:35.320 --> 1:05:38.440
<v Speaker 1>and what is not allowed. With no rules, the implication

1:05:38.560 --> 1:05:43.280
<v Speaker 1>is that everything's allowed until it isn't. That's a huge

1:05:43.440 --> 1:05:50.160
<v Speaker 1>dangerous problem. The report also pointed out that most of

1:05:50.200 --> 1:05:53.920
<v Speaker 1>these agencies lacked any sort of methodology to ensure that

1:05:54.120 --> 1:05:59.440
<v Speaker 1>the accuracy of their respective systems was decent. The report

1:05:59.480 --> 1:06:03.000
<v Speaker 1>stated that of all the agencies they investigated, only two,

1:06:03.880 --> 1:06:07.000
<v Speaker 1>the San Francisco Police Department and the South Sound nine

1:06:07.040 --> 1:06:11.240
<v Speaker 1>to one one from Seattle, had made decisions about what

1:06:11.440 --> 1:06:14.720
<v Speaker 1>facial recognition software they were going to incorporate in their

1:06:15.320 --> 1:06:20.800
<v Speaker 1>office based off of accuracy rates. That was not a

1:06:20.840 --> 1:06:24.040
<v Speaker 1>consideration for all of the other agencies, at least not

1:06:24.120 --> 1:06:28.160
<v Speaker 1>the ones that they asked. Moreover, they report points out

1:06:28.200 --> 1:06:30.840
<v Speaker 1>that facial recognition companies are also trying to have it

1:06:30.920 --> 1:06:34.959
<v Speaker 1>both ways. So, for example, they cite a company called

1:06:35.120 --> 1:06:39.600
<v Speaker 1>fat Face First. Now face First advertises that has a

1:06:39.680 --> 1:06:45.360
<v Speaker 1>ninety five percent accuracy rate, but it simultaneously disclaims any

1:06:45.440 --> 1:06:49.600
<v Speaker 1>liability for failing to meet that ninety five percent accuracy rate.

1:06:51.120 --> 1:06:53.840
<v Speaker 1>So it's kind of like saying we guarantee these tires.

1:06:53.880 --> 1:06:58.120
<v Speaker 1>Tires are not guaranteed not quite like that, but similar.

1:06:59.040 --> 1:07:02.920
<v Speaker 1>So again, this is according to the Georgetown University report,

1:07:03.720 --> 1:07:07.560
<v Speaker 1>that's a problem for a company to sell itself on

1:07:08.360 --> 1:07:13.600
<v Speaker 1>a performance threshold, but then say, hey, you can't hold

1:07:13.680 --> 1:07:15.920
<v Speaker 1>us to that performance threshold that we sold you on.

1:07:16.840 --> 1:07:21.760
<v Speaker 1>That's a little dangerous there too. Then the report goes

1:07:21.800 --> 1:07:24.040
<v Speaker 1>on to state that the human analysts, you know, the

1:07:24.080 --> 1:07:27.040
<v Speaker 1>ones I was talking about earlier, that supposed to be

1:07:27.160 --> 1:07:32.560
<v Speaker 1>a safeguard. Human analysts are supposed to take the images

1:07:32.600 --> 1:07:37.080
<v Speaker 1>that are returned by these automated systems and manually review

1:07:37.160 --> 1:07:39.360
<v Speaker 1>them to make sure that they do or do not

1:07:39.640 --> 1:07:42.960
<v Speaker 1>match that probe photo. That was the whole thing to

1:07:43.000 --> 1:07:47.480
<v Speaker 1>begin with. But it turns out, according to this report,

1:07:47.560 --> 1:07:52.080
<v Speaker 1>those human analysts are not that accurate. In fact, they're

1:07:52.160 --> 1:07:56.400
<v Speaker 1>no better than a coin flip. Literally. The report sites

1:07:56.440 --> 1:07:59.640
<v Speaker 1>of study that showed that if analysts did not have

1:08:00.120 --> 1:08:05.200
<v Speaker 1>highly specialized training, they would make the wrong decision for

1:08:05.280 --> 1:08:09.000
<v Speaker 1>a potential match fifty percent of the time. Literally a

1:08:09.000 --> 1:08:13.800
<v Speaker 1>coin flip. That's ridiculous. Now, the report found only eight

1:08:13.880 --> 1:08:18.120
<v Speaker 1>agencies out of the fifty two used specialized personnel to

1:08:18.200 --> 1:08:22.479
<v Speaker 1>review images. In other words, people who presumably have actually

1:08:22.520 --> 1:08:26.320
<v Speaker 1>received that highly specialized training necessary to make more accurate

1:08:26.360 --> 1:08:30.280
<v Speaker 1>decisions regarding these photos, and the report states that there's

1:08:30.400 --> 1:08:34.800
<v Speaker 1>no formal training regime in place for examiners, which is

1:08:34.800 --> 1:08:37.400
<v Speaker 1>a major problem for a system that's already in widespread use.

1:08:37.680 --> 1:08:40.559
<v Speaker 1>So not only do you need highly specialized training, there's

1:08:40.680 --> 1:08:47.240
<v Speaker 1>no formalized approach to give or receive that highly specialized training.

1:08:48.240 --> 1:08:50.879
<v Speaker 1>So we know you need it, but we haven't developed

1:08:50.920 --> 1:08:54.919
<v Speaker 1>the best practices to actually deliver upon that. So meanwhile,

1:08:54.920 --> 1:08:58.400
<v Speaker 1>you've got human analysts who are making mistakes half the

1:08:58.479 --> 1:09:02.200
<v Speaker 1>time while reviewing these photo And if you wonder if

1:09:02.240 --> 1:09:06.559
<v Speaker 1>facial recognition systems would disproportionately affect some ethnicities over others,

1:09:06.600 --> 1:09:10.880
<v Speaker 1>the answer to that is resounding and dismaying yes. The

1:09:11.000 --> 1:09:15.200
<v Speaker 1>report found that African Americans would be affected more than

1:09:15.479 --> 1:09:19.640
<v Speaker 1>other ethnicities. According to an FBI co authored study that

1:09:19.720 --> 1:09:24.160
<v Speaker 1>was cited by this Georgetown University report, several facial recognition

1:09:24.200 --> 1:09:28.600
<v Speaker 1>algorithms are less accurate for Black people than for other ethnicities,

1:09:28.880 --> 1:09:32.439
<v Speaker 1>and there's no independent testing process to determine if there's

1:09:32.520 --> 1:09:36.280
<v Speaker 1>a racial bias in any of these facial recognition systems,

1:09:36.520 --> 1:09:39.839
<v Speaker 1>so no one has developed a test to make certain

1:09:40.400 --> 1:09:45.320
<v Speaker 1>that it is in fact accurate despite a person's age, gender,

1:09:45.479 --> 1:09:49.600
<v Speaker 1>or race, without being able to verify that it is

1:09:49.720 --> 1:09:54.599
<v Speaker 1>accurate across all parameters, you have opened up an enormous

1:09:54.640 --> 1:09:59.439
<v Speaker 1>can of worms, and you are disproportionately affecting people just

1:09:59.479 --> 1:10:02.879
<v Speaker 1>because of the race, because your system does not address

1:10:03.000 --> 1:10:07.719
<v Speaker 1>that properly. The report also points out that the information

1:10:07.760 --> 1:10:10.519
<v Speaker 1>about the systems in use had not been generally available

1:10:10.560 --> 1:10:13.000
<v Speaker 1>to the public. In fact, all of the fifty two

1:10:13.080 --> 1:10:20.160
<v Speaker 1>agencies they contacted, only four had publicly available use policies. So,

1:10:20.200 --> 1:10:23.040
<v Speaker 1>in other words, only four of the fifty two could

1:10:23.080 --> 1:10:27.519
<v Speaker 1>tell you what their general policy was as far as

1:10:27.520 --> 1:10:30.960
<v Speaker 1>facial recognition software goes. That's less than ten percent of

1:10:31.120 --> 1:10:34.599
<v Speaker 1>all of the agencies they looked at, and only one

1:10:34.640 --> 1:10:38.720
<v Speaker 1>of those agencies, which was San Diego's Association of Governments,

1:10:38.960 --> 1:10:42.800
<v Speaker 1>had legislative approval for its policy. All the others were

1:10:42.840 --> 1:10:46.000
<v Speaker 1>just self appointed policies that had not passed through any

1:10:46.080 --> 1:10:50.360
<v Speaker 1>kind of official legislative support. Finally, the report asserted that

1:10:50.720 --> 1:10:54.400
<v Speaker 1>most of these systems did not have an official audit

1:10:54.479 --> 1:10:58.440
<v Speaker 1>process to determine if or when someone misuses the systems.

1:10:59.080 --> 1:11:02.400
<v Speaker 1>Nine agencies were or that they did have a process,

1:11:03.000 --> 1:11:06.840
<v Speaker 1>but only one provided Georgetown with any evidence that they

1:11:06.840 --> 1:11:09.360
<v Speaker 1>had a working audit system, and that was the Michigan

1:11:09.400 --> 1:11:12.080
<v Speaker 1>State Police, by the way, who said, we have an

1:11:12.080 --> 1:11:15.240
<v Speaker 1>audit system, and here's proof that it actually works the

1:11:15.240 --> 1:11:17.639
<v Speaker 1>way we said it did. So good on you, Michigan

1:11:17.680 --> 1:11:20.320
<v Speaker 1>State for our having that system in place and being

1:11:20.360 --> 1:11:24.960
<v Speaker 1>able to back it up now. The Georgetown University report

1:11:25.040 --> 1:11:27.519
<v Speaker 1>also urged some major changes in the way law enforcement

1:11:27.600 --> 1:11:30.840
<v Speaker 1>uses facial recognition, including an appeal to Congress to create

1:11:31.000 --> 1:11:34.160
<v Speaker 1>clear regulations to define the parameters of when such a

1:11:34.160 --> 1:11:37.479
<v Speaker 1>system could be used. They also called for companies to

1:11:37.520 --> 1:11:42.200
<v Speaker 1>publish processes that test their products accuracy regardless of race, gender,

1:11:42.240 --> 1:11:47.680
<v Speaker 1>and age, to remove that possibility of bias. And if

1:11:47.720 --> 1:11:52.200
<v Speaker 1>we're being really super kind and generous toward law enforcement,

1:11:52.640 --> 1:11:55.440
<v Speaker 1>we could say this is just another case where technology

1:11:55.560 --> 1:11:58.920
<v Speaker 1>has clearly outpaced the law. We see that all the time,

1:11:59.360 --> 1:12:05.160
<v Speaker 1>driverless artificial intelligence, lots of different technologies are advancing far

1:12:05.240 --> 1:12:10.599
<v Speaker 1>faster than legislation can keep up with. All right, that's fair,

1:12:10.960 --> 1:12:15.320
<v Speaker 1>we see it happen. However, it's particularly troublesome that this

1:12:15.360 --> 1:12:18.960
<v Speaker 1>is happening within law enforcement that is already employing this

1:12:19.040 --> 1:12:23.120
<v Speaker 1>technology before we've developed the policies to guide it. It's

1:12:23.200 --> 1:12:26.439
<v Speaker 1>one thing to say someone's out here working on a

1:12:26.520 --> 1:12:29.360
<v Speaker 1>driverless car, and we need to start thinking about how

1:12:29.400 --> 1:12:32.519
<v Speaker 1>are we going to regulate that in the future. Maybe

1:12:32.600 --> 1:12:35.280
<v Speaker 1>right now we say you aren't allowed to operate your

1:12:35.320 --> 1:12:38.720
<v Speaker 1>driverless car until we figured this out. That's fair. It's

1:12:38.720 --> 1:12:42.440
<v Speaker 1>another thing to say, there's this technology that could potentially

1:12:42.640 --> 1:12:45.639
<v Speaker 1>impact people's lives and we're allowing law enforcement to use

1:12:45.680 --> 1:12:48.400
<v Speaker 1>it while we try and figure out the rules. That's

1:12:48.960 --> 1:12:53.720
<v Speaker 1>at best a problem. And as I said at the

1:12:53.760 --> 1:12:56.040
<v Speaker 1>top of the show, I'm really just talking about the

1:12:56.120 --> 1:12:59.439
<v Speaker 1>United States with particulars here, but this is happening all

1:12:59.479 --> 1:13:02.519
<v Speaker 1>around the world. There are lots of governments around the

1:13:02.520 --> 1:13:07.520
<v Speaker 1>world that are incorporating facial recognition software along with law enforcement.

1:13:08.040 --> 1:13:12.760
<v Speaker 1>So while I'm using specific US examples in this podcast,

1:13:13.360 --> 1:13:16.120
<v Speaker 1>the same is true for lots of other places. Of course,

1:13:16.439 --> 1:13:19.360
<v Speaker 1>the laws that protect the citizens can be different from

1:13:19.360 --> 1:13:22.680
<v Speaker 1>country to country, and in some cases there might not

1:13:22.720 --> 1:13:26.839
<v Speaker 1>be very many outlets for citizens to voice their concern

1:13:27.160 --> 1:13:30.200
<v Speaker 1>or it might even be dangerous to do so. But

1:13:30.680 --> 1:13:32.559
<v Speaker 1>this is something I think we need to be aware of.

1:13:32.800 --> 1:13:36.360
<v Speaker 1>I'm not generally the kind of person who tells you

1:13:36.400 --> 1:13:38.960
<v Speaker 1>that you're being watched or you know, you should be paranoid.

1:13:39.439 --> 1:13:42.360
<v Speaker 1>But I'm also not the person to just sit back

1:13:42.400 --> 1:13:46.920
<v Speaker 1>and let something go on when I feel like it's

1:13:47.000 --> 1:13:50.639
<v Speaker 1>potentially more of a problem than a solution.

1:13:51.920 --> 1:13:54.040
<v Speaker 2>Well that was it for the episode I did on

1:13:54.080 --> 1:13:57.160
<v Speaker 2>the National Facial Recognition Database back in twenty seventeen. It's

1:13:57.200 --> 1:14:01.559
<v Speaker 2>a topic I should definitely revisit. Obviously, there's so much

1:14:01.600 --> 1:14:05.639
<v Speaker 2>going on here. There are so many concerning things about it,

1:14:05.680 --> 1:14:10.040
<v Speaker 2>from surveillance states, to privacy and security concerns, to the

1:14:10.120 --> 1:14:13.200
<v Speaker 2>fact that we've been seeing lots of companies try and

1:14:13.280 --> 1:14:18.040
<v Speaker 2>use facial recognition to match people against databases to varying

1:14:18.080 --> 1:14:22.240
<v Speaker 2>degrees of success, and that for people of color in particular,

1:14:22.520 --> 1:14:26.960
<v Speaker 2>those degrees of success are not good. And I think

1:14:27.000 --> 1:14:29.240
<v Speaker 2>there's a lot that we need to talk about as

1:14:29.320 --> 1:14:31.320
<v Speaker 2>far as this goes, when it comes to things like,

1:14:31.439 --> 1:14:37.000
<v Speaker 2>you know, individual rights and authoritarian abuse of these kind

1:14:37.040 --> 1:14:40.599
<v Speaker 2>of technologies, and I think we do need to have

1:14:40.640 --> 1:14:43.040
<v Speaker 2>another update on this, so I will put that on

1:14:43.080 --> 1:14:46.320
<v Speaker 2>my list. I hope that you are all well, and

1:14:46.360 --> 1:14:55.600
<v Speaker 2>I'll talk to you again really soon. Tech stuff is

1:14:55.600 --> 1:15:01.280
<v Speaker 2>an iHeartRadio production for more podcasts from iheartradiosit the iHeartRadio app,

1:15:01.439 --> 1:15:04.599
<v Speaker 2>Apple Podcasts, or wherever you listen to your favorite shows.