Notes on Internet Privacy

Posts and research from the URnetwork team and community.

RSS

The Dragnet You Didn't Vote For

The Fourth Amendment makes the government get a warrant before it tracks where you go. So the tracking was privatized. A company called Flock Safety has bolted roughly a hundred thousand automated license-plate cameras onto America's poles and intersections — capturing, by its own count, more than twenty billion vehicle scans a month — and rents the searchable history of where the nation's cars have been to some five thousand police agencies, no warrant required, because the government did not collect the data. It bought the query. On the Fourth of July, a country founded in revolt against general warrants and writs of assistance drives under a permanent, private tail — one that has already been used to run a one-click hotlist for immigration enforcement and, in one Texas county, to search eighty-three thousand cameras for a woman because she "had an abortion." And the courts, for now, are mostly fine with it: judge after judge has ruled that photographing your plate in public is not a search. But here is the twist that makes this a July 4 story and not just another dirge. This is the rare mass-surveillance system Americans are actually tearing out — not through the Constitution, which is losing, but through the one mechanism that is winning: local democracy. Denver unbolted all one hundred and ten of its cameras this spring. More than eighty contracts have been canceled across twenty-eight states. The Institute for Justice and the Cato Institute are filing briefs beside the ACLU and the EFF. This edition argues both halves at once: the death of anonymous movement is real, nearly total, and constitutionally unprotected — and the off-switch turns out to be a city-council vote, which is being flipped.

The freedom to move unwatched

The American Revolution had a surveillance grievance at its core, and it was specifically about being tracked without cause. The colonists' fury at the "writs of assistance" — open-ended warrants that let British officers search anywhere, anytime, for anything — is written directly into the Fourth Amendment's demand that warrants name a particular place and a particular thing, on probable cause. The founding objection was not only to being searched. It was to being subject to a general power of search: a standing capacity to follow anyone, held by the state, aimed at no one in particular and therefore at everyone.

Two and a half centuries later, that standing capacity exists, and it follows your car. It was not voted into being by Congress or authorized by any court. It was sold, one municipal contract and one homeowners'-association camera at a time, by a private company — and on the day the country celebrates its freedoms, freedom of movement is the one quietly slipping away, logged by default, everywhere, all the time.

The dragnet

Flock Safety is an eight-year-old company valued, as of April, at $8.4 billion. Its product is an automated license-plate reader — a camera that photographs every passing plate, reads it, timestamps it, geolocates it, and uploads it to a searchable cloud. But the plate is only the beginning. Flock's cameras also capture what the company calls a "Vehicle Fingerprint" — make, model, color, dents, mismatched paint, roof racks, bumper stickers — so it can identify a car that has no plate at all, or find "a blue pickup with a ladder rack and a dented left fender" across a whole state. By its own reporting the network has crossed roughly a hundred thousand cameras across forty-nine states, feeding a system used by some five thousand law-enforcement agencies and a thousand businesses, and logging on the order of twenty billion scans a month. (Those are largely the company's own numbers; independent counts run somewhat lower, but no one disputes the order of magnitude.)

Here is the part that matters, and it is not the cameras. It is the network. Any agency on Flock's system can search the whole thing — not just its own town's cameras but, by default, the nation's — and set "hotlists" that fire an alert the instant a wanted plate is seen anywhere. Flock has extended the same architecture past the plate: a gunshot-detection product, a drone line, facial-zoom cameras, and a data platform, Nova, that the company has pitched as a way to "track specific individuals" by fusing its scans with breach data, commercial broker records, and public files. The plate reader was the wedge. The product is a private, persistent, searchable record of American movement, and it is sold as a subscription.

The Fourth Amendment, outsourced

You would think a permanent record of everyone's movements would be exactly what the Constitution forbids, and eight years ago the Supreme Court came close to saying so. In Carpenter v. United States (2018), the Court held that the government needs a warrant to obtain the historical cell-site location data that tracks a phone — because, Chief Justice Roberts wrote, the aggregate of a person's movements over time reveals "the privacies of life," even though each individual location is exposed to a phone company. This is the "mosaic" idea: a thousand public dots, assembled, become a private picture.

The trouble is that Carpenter was about the government compelling a company to hand over its customer's data. Flock is something slyer. The data is not about Flock's customers; it is about everyone who drives past a Flock camera, whether they bought anything or not. And the government does not compel it — it subscribes to it. When a police department runs a Flock search, it is not seizing records; it is querying a private database it pays to access. That distinction is doing enormous constitutional work, and so far it is working for Flock. In January, a federal judge in Norfolk, Virginia — hearing a challenge by two residents whose cars had been photographed 475 and 325 times in four months — ruled that the city's 176-camera network is not a Fourth Amendment search, though he warned it could "become one" as the technology grows. A Washington appeals court upheld ALPRs the same week. By the Congressional Research Service's count, more than thirty courts have found no reasonable-expectation-of-privacy violation in plate reading. No appellate court in the country has yet held one of these networks unconstitutional.

The challenge is on appeal now, at the Fourth Circuit, and the coalition behind it is the tell of the whole story: the libertarian Institute for Justice arguing the case, with amicus briefs from the ACLU, the EFF, the Cato Institute, the conservative New Civil Liberties Alliance, and EPIC — left and right, standing together. But that is a bet on the future. Today, the private-vendor loophole holds: the state has bought the general warrant the Constitution denied it, and the Constitution, so far, has let it.

The one-click hotlist

What the state bought, it uses — and not only for stolen cars. Because any agency can search the national network, "local traffic-safety cameras" have quietly become national infrastructure for the most contested enforcement in the country.

In San Francisco, an audit found that out-of-state agencies had the ability to query the city police department's Flock network roughly 1.6 million times over seven months. A separate audit found hundreds of improper searches by federal bodies — the DEA, the IRS, the Marshals, even the Forest Service — reaching into a "California only" system. The city of Oxnard suspended its cameras entirely after discovering that a vendor toggle called "National Lookup" had silently overridden its local-only setting, exposing its data to the country. The EFF documented a one-click hotlist that lets an officer flag the federal immigration "violator file" and be alerted whenever a targeted car appears. And in the starkest case, a Texas sheriff's office ran a search across some eighty-three thousand cameras nationwide with the reason logged as "had an abortion, search for female" — later described as a search for a missing woman in a medical scare, which is either the truth or the exact cover such a system makes available. The point is not that every search is sinister. The point is that a private company built a machine that makes all of these searches one click away, retained by default, reachable by anyone on the network, and the woman whose plate is scanned has no idea, no notice, and no recourse.

Your face is the next plate

If the license plate is the beginning, the face is the destination, and it is arriving on a faster clock abroad. In January, the United Kingdom's Home Secretary announced the "largest ever" facial-recognition rollout in the democratic world: forty new live-facial-recognition vans on top of the existing fleet, to bring real-time face-scanning to town centers in every police force area, funded as part of a £115-million push and billed as the most significant modernization of policing "in nearly 200 years." The Metropolitan Police is mounting permanent face-scanning cameras across London's West End; roughly a dozen of the forty-three forces already run live facial recognition; a pilot in Croydon scanned some 470,000 faces. There is no statute in the UK that so much as mentions facial recognition — a coalition of two dozen groups warned the plan would make Britain "an outlier in the democratic world" — and testing has found the systems misidentify Black women at rates as high as one in ten at the settings where bias emerges.

In the United States the same logic is federalizing through a vendor: Clearview AI, whose database of some sixty billion scraped images now backs contracts with ICE and Customs and Border Protection. At least thirteen or fourteen Americans have been wrongfully arrested on a bad face match, nearly all of them Black. A license plate reader logs where your car goes; facial recognition logs where your body goes — and, as one civil-liberties technologist put it, you cannot leave your face at home. It is the identical architecture as the Flock dragnet — persistent, warrantless, ambient identification of people suspected of nothing — advanced one layer deeper, from the vehicle to the person driving it.

The mosaic, and the chill

No single scan is the harm. The harm is the record — the searchable, cross-referenced, permanent mosaic. A plate history alone can reveal where you sleep, where you pray, which clinic you visit, which lawyer, which lover, which union hall, which protest. Fuse it with face scans, phone-location feeds, toll data, and the broker records Flock's Nova platform is built to ingest, and you have a pattern-of-life dossier on a person accused of nothing, assembled by a company and rented to the state. This is precisely the aggregation the Carpenter mosaic theory was meant to guard against, arriving through a door the theory did not quite close.

And a record like that changes behavior before it is ever misused. When people know their movements are logged, they think twice about the rally, the mosque, the clinic, the meeting — the chilling effect that the Supreme Court has recognized since the civil-rights era, when it protected the NAACP's membership lists from a state that wanted to know who was associating with whom. The dragnet does not have to be pointed at you to change how freely you move. It only has to exist.

The steelman, honestly

The case for the cameras is real, and it must be met at full strength rather than waved off. Flock's systems have brought children home: AMBER Alerts resolved in real time, a missing teenager located, a homicide suspect caught within hours of a witness's description. The company's 2025 census of its own customers claims Flock data touched one in five resolved cases and helped locate some ten thousand missing people in a year. Stolen-vehicle recovery — where the national police clearance rate is a dismal nine percent — is the one place the independent research agrees the tools genuinely help.

Concede all of it, and the argument still fails, for three reasons. First, the sweeping claims are the company's own, self-reported and unaudited; the independent, peer-reviewed evidence that ALPRs reduce crime is thin and mixed — the gold-standard federal study found they boost stolen-car recoveries but show "little clear evidence" of crime prevention in general patrol. Second, and decisively, every genuine win began with a specific plate, vehicle, or suspect — and none of them required a permanent, suspicionless record of everyone else. You can keep the AMBER-Alert hotlist and the stolen-car hit while requiring a warrant for historical searches and capping retention at days instead of years. The thirty-day default is a policy choice, not a technical necessity; the dragnet is severable from the safety. And third, "it solved a crime" has never, in American law, been enough to license suspicionless mass surveillance — the general warrants the founders hated solved crimes too. The tell is already here: a system sold on safety has produced its own victims, like the Tennessee grandmother jailed five months on a facial-recognition misidentification before the charges were dropped on Christmas Eve. The revolt against Flock is not a rejection of public safety. It is a refusal of the trade — permanent, universal tracking in exchange for a benefit that warrants and short retention would preserve.

The counter that isn't

Here is the hard truth this series usually gets to answer with a tool, and this time cannot. Against a physical-space dragnet, there is essentially no client-side defense. There is no VPN for your car and no Tor for your face. Plate covers and reflective sprays are illegal in most states and, testing shows, useless against modern cameras that adjust for glare in real time. You cannot decline to drive. The anti-facial-recognition fashion that makes headlines — dazzle makeup, patterned glasses — is largely an academic art project that fails against current systems and makes you conspicuous to every human who sees you; its own inventor has abandoned it. The reflex to reach for a personal privacy technology, the reflex this publication is built on, runs straight into a wall: you cannot minimize a hoard you were never asked to build, and encryption stops at the edge of the physical world.

Which is exactly why the only counter that works is the civic one — and why it matters that it is winning.

The dragnet is losing

The same year that produced a hundred thousand cameras produced the thing those cameras have not survived intact: an organized, bipartisan, and unusually effective public revolt.

Denver is the marquee case. After a local news investigation exposed that the city's Flock data sat on a national network reachable by Border Patrol, the mayor declined to renew, and this spring the city physically unbolted all one hundred and ten of its cameras — replacing them with a smaller system that has no nationwide-search feature at all. And auto theft did not spike; it fell. By the best available tally, more than eighty Flock contracts have now been terminated across twenty-eight states, thirty-nine of them in the first five months of 2026 — Austin, Santa Cruz, Evanston, San Marcos, and dozens more, each a city council that looked at the surveillance and voted it off the poles. An open-source project called DeFlock has crowd-mapped roughly half of Flock's entire camera network onto a public map, refusing the company's cease-and-desist; the EFF's Atlas of Surveillance has made the invisible net visible in more than five thousand jurisdictions. States are legislating the thing code cannot: Washington now bars plate capture near clinics, schools, courts, and houses of worship; Virginia capped retention and blocked warrantless out-of-state sharing; Kentucky imposed a ninety-day limit.

Be honest about the limits, because they are real. The cancellations are a fraction of the network; private homeowners'-association and business cameras keep running even where a city pulls its own; the marquee court case is a loss on appeal, not a win; a bipartisan federal amendment to rein in the readers was killed in committee in May. The dragnet is being dented, not dismantled. But look at who is doing the denting, because it is the rarest coalition in American politics: the Institute for Justice beside the ACLU, Cato beside the EFF, a Republican and a Democrat co-sponsoring the same amendment, a mayor and a county supervisor and a city council all reaching the same verdict. Surveillance of movement turns out to be the issue where "get a warrant" is genuinely nonpartisan — where the small-government right and the civil-liberties left look at the same private dragnet and both say no. That is not nothing. That is the off-switch, and unlike almost every other surveillance fight this series has covered, it is a switch ordinary people can actually reach.

The right to be unfollowed

The freedom the Fourth of July is really about, underneath the fireworks, is the freedom from a standing power to watch you — the specific tyranny the founders named when they banned the general warrant. The plate reader is the general warrant rebuilt in software and sold as a subscription: a permanent, suspicionless, searchable record of where everyone goes, held by a company, rented to the state, and blessed, so far, by the courts. There is no gadget that fixes it. Encryption cannot reach it. It is the one privacy frontier where the whole apparatus of personal, technical self-defense simply does not apply.

And that is why the response has to be the oldest one in the book, and why, on this day, it is worth celebrating that the response is working. You cannot encrypt your car. But you can vote the camera off the pole, cap the retention, require the warrant, and refuse to let a private company assemble the record in the first place. Denver unbolted a hundred and ten of them. Twenty-eight states are arguing about it. The right to move through your own country without a permanent tail is not defended by code — it is defended by citizens, in council chambers, on the one surveillance question where left and right have found they agree.

The dragnet you didn't vote for can be voted down. This July 4, in the rarest of the series' findings, that is a fight the public is actually winning.


URnetwork builds censorship-resistant, privacy-preserving transport for the internet — a peer-to-peer overlay that minimizes the data any single party can collect about where you connect and how. It is honest about its limits: it protects your traffic, not your license plate, and no user-side tool can defeat a camera reading a legally-mandated plate on a public road. That is precisely the point of this edition — some privacy fights are won not in code but in law and local democracy, and the movement to tear out the physical-space dragnet is the clearest proof that the persistent-identity infrastructure this publication resists can be refused, minimized, and unbuilt when the public decides to reach the off-switch.

https://ur.io

Further Discussion

The Dragnet Won

**Position.** Start with the loss, because it is real and nearly total. A private company you never voted for has built the general warrant the Constitution was written to forbid — and rented it to the state. Flock Safety has bolted roughly a hundred thousand license-plate cameras across forty-nine states, logs more than twenty billion vehicle scans a month, and lets some five thousand police agencies search the whole national network — not just their own town's cameras, but everywhere. No warrant is required, because the government didn't collect the data; it subscribes to it. That single move — privatize the collection, rent the query — has so far defeated the Fourth Amendment outright. A federal judge in Norfolk ruled in January that photographing your plate 475 times in four months is *not* a search; a Washington court agreed the same week; more than thirty courts have found no violation at all. No appellate court in the country has struck one of these networks down. And the machine is already pointed where you'd fear: out-of-state agencies could query San Francisco's "local" network 1.6 million times in seven months; the EFF found a one-click hotlist wired to the federal immigration file; a Texas sheriff searched eighty-three thousand cameras for a woman because she "had an abortion." Now the face is following the plate — Britain is rolling out forty live-facial-recognition vans, Clearview backs ICE and CBP with sixty billion scraped images, and at least a dozen Americans have been wrongfully arrested on a bad match, nearly all of them Black. There is no gadget that fixes this. You cannot encrypt your car or leave your face at home. The record of everywhere you go is being assembled by a company, sold to the state, and blessed by the courts — and you were never asked. **Headline candidates.** - The Dragnet Won · A Private Company Rebuilt the General Warrant and Rented It to the State - 100,000 Cameras, 20 Billion Scans a Month, Zero Warrants - The Fourth Amendment Was Outsourced · Privatize the Collection, Rent the Query - You Can't Encrypt Your Car **Kicker.** A private company blanketed America with 100,000 plate cameras, and sold the searchable history of where every car goes to 5,000 police agencies — no warrant, because the state doesn't collect it, it subscribes. Thirty-plus courts have said that's fine. The general warrant the founders banned is back, in software, as a subscription.

The Dragnet Is Losing

**Position.** Now read the same year as the rarest thing this series ever gets to report: a mass-surveillance system the public is actually tearing out. Not through the Constitution — the courts keep upholding the cameras — but through the one mechanism that is winning, which is local democracy. This spring, Denver physically unbolted all one hundred and ten of its Flock cameras and replaced them with a smaller system that can't search the nation; auto theft fell anyway. By the best tally, more than eighty Flock contracts have been canceled across twenty-eight states — thirty-nine in the first five months of 2026 alone — each one a city council that looked at the dragnet and voted it off the poles. An open-source project mapped half the hidden network onto a public map and refused the company's cease-and-desist. Washington outlawed plate-scanning near clinics and churches; Virginia capped retention and blocked warrantless federal sharing; Kentucky imposed a ninety-day limit. And the coalition doing it is the rarest in American politics — the Institute for Justice beside the ACLU, Cato beside the EFF, a Republican and a Democrat co-sponsoring the same bill — because "get a warrant" is the one privacy demand that is genuinely nonpartisan. Be honest about the limits: the cancellations are a fraction of the network, private cameras persist, the marquee court case is a loss on appeal, and a federal fix died in committee. The dragnet is dented, not dismantled. But here is why it matters more than any app: there is *no* client-side defense against a camera reading your plate — no VPN for your car, no Tor for your face. The off-switch was never going to be technical. It was always going to be civic. And on the one surveillance question where left and right agree, ordinary people are reaching it, camera by camera. You can't encrypt your car — but you can vote the camera off the pole. **Headline candidates.** - The Dragnet Is Losing · The Off-Switch Is a City-Council Vote, and It's Being Flipped - Denver Unbolted 110 Cameras · The Surveillance Fight the Public Is Actually Winning - No VPN for Your Car — So They Voted the Camera Off the Pole - The One Privacy Fight Where Left and Right Both Say "Get a Warrant" **Kicker.** Denver ripped out all 110 of its cameras; 80+ contracts are canceled across 28 states; IJ and Cato are filing beside the ACLU and EFF. There's no app that defeats a plate reader — so the counter was never code. It's a council vote, and on the one surveillance question where left and right agree, the public is winning it.

Comics

#1The Dragnet Won
#2The Dragnet Is Losing