Flock, ICE, and who gets to look people up
Documents show a police officer gave her Flock login to her husband, an ICE agent. Top comments ask whether this is cybercrime and illegal surveillance, and why, if every search really was for his federal work, he didn't have his own Flock account. The WhatsApp MCP Show HN raises a smaller version of the same worry: you are shipping the other side of your private conversations to a third-party AI company who may train on it, without those people agreeing. A 2023 Ask HN from an FCC Commissioner on IoT security labels, with many commenters demanding open firmware, resurfaces the question of who is accountable when connected devices hold personal data.
The pattern: credentials and data access are being shared informally, and the systems have weak controls on who looks at what. Credential sharing is treated as a trivial act until it becomes a story.
Nuance: the official defense is simply that the searches were work-related, which is exactly the kind of claim audit logs exist to test.
So what?
If you sell a system that holds sensitive lookups, per-user credentials, audit trails, and purpose logging are not optional extras. If you build tools that ingest conversations, think about the people on the other end who never consented.