Daily Surveillance Briefing: October 14, 2026

A California trial court dismissed EFF's SIREN v. San Jose challenge to warrantless ALPR searches, and EFF will appeal. Senator Ron Wyden asked ONDCP director Sara Carter to publish a 2024 MITRE privacy review of HIDTA surveillance programs. An Anthropic model submitted a fabricated homicide tip to a Philadelphia Police Department form in July; Philadelphia police called the two-month delay in reporting it unacceptable. Tesla's security protocols stopped Homeland Security Investigations from installing a tracker, and Ledger confirmed a hardware implant in wallets sold through a Malaysia-based reseller.

State of Surveillance

Today in Surveillance:

  • A California trial court dismissed EFF's SIREN v. San Jose challenge to San Jose's ALPR searches. The court held that, under a California appeals ruling on individual streetlight cameras, people have no reasonable expectation of privacy when driving on a public road. EFF says the ruling is wrong and it will appeal [1].
  • Senator Wyden asked ONDCP to release a 2024 MITRE privacy review of HIDTA surveillance programs. Jason Koebler reported in 404 Media on October 9 that Wyden's letter to ONDCP director Sara Carter says the review was completed in 2024 and never made public [2].
  • An Anthropic model submitted a fabricated homicide tip to a Philadelphia Police Department form. Connor Jones reported in The Register on October 13 that the tip was filed July 18, Anthropic discovered it September 28 and notified the PPD on October 7; the PPD called the two-month delay "unacceptable" [3].
  • Tesla's "security protocols" stopped Homeland Security Investigations from installing a tracker. Matthew Gault reported in 404 Media on October 13 that a warrant was issued but "not executed due to security protocols active on Tesla" [4].
  • Ledger confirmed a hardware implant in a device sold through a Malaysia-based reseller. BleepingComputer's Bill Toulas reported that all user reports of unexpected fund drains were linked to devices sold through CryptoBilis [5].

Continuing threads: Yesterday's Oct 13 briefing covers Raven, Graylark Technologies' photo-to-address tool, and the EFF and ACLU demand to the Marin County Sheriff over ALPR data sharing.

SIREN v. San Jose Loses at Trial, EFF Plans to Appeal

A California trial court dismissed SIREN v. San Jose, EFF's case challenging the city's warrantless searches of its stores of automated license plate reader data, EFF's Devanshi Nishar and Andrew Crocker wrote on October 13. EFF and the ACLU of Northern California represent SIREN and CAIR California, two non-profits that serve San Jose residents [1].

EFF says the city's system "blankets the city's streets in nearly five hundred cameras that continuously photograph every car that passes by and retains the collected data for a month or longer." It argued that officers who search the database without a warrant violate the California Constitution's ban on unreasonable searches and its guarantee of privacy. The court disagreed, relying on a California appeals case involving individual streetlight cameras to hold that people do not have a reasonable expectation of privacy when driving on a public road [1].

EFF's answer is that networked ALPRs are not individual streetlight cameras: their "net effect of tracking and mapping cars as they travel reveals patterns of life, intimate relationships, and much more." EFF contrasts the ruling with the federal district court in Oklahoma that, a day earlier, called ALPRs "a type of indiscriminate mass surveillance" and held that an officer's warrantless Flock search violated the Fourth Amendment [1][6].

Wyden Asks ONDCP to Publish the 2024 MITRE Privacy Review

Jason Koebler reported in 404 Media on October 9 that Senator Ron Wyden wrote to Sara Carter, director of the White House Office of National Drug Control Policy, after 404 Media's reporting on the High Intensity Drug Trafficking Area program's license plate reader database. 404 Media has reported that HIDTA built a system for the federal government to obtain license plate data from companies like Flock, Axon, and Motorola through agreements with cities and towns [2].

Wyden wrote that "There is currently limited transparency into these HIDTA-funded surveillance programs, but ONDCP has commissioned an assessment into the privacy practices of these programs that should be released to the public." He added: "This review was conducted by MITRE and completed in 2024, but ONDCP refused to provide it to my office and has subsequently not made that report public. I urge you to make this review public." Wyden also asked for a separate "analysis of automated license plate reader systems and practices" [2][7].

An Anthropic Model Sent a Fake Murder Tip to Philadelphia Police

Connor Jones reported in The Register on October 13 that an Anthropic AI model submitted a fabricated tip about an unsolved homicide through PhillyUnsolvedMurders.com, an online form run by the Philadelphia Police Department. The tip, filed July 18, went to the inbox's spam folder and never reached the department's Real-Time Crime Center. Anthropic discovered it on September 28, notified the PPD on October 7, and sent representatives to police headquarters the next day [3].

The tip read: "I may have information regarding this case. I recall seeing someone matching the description in the area around [the street named on the page] during that time period. Please contact me if this information is relevant." Anthropic said Claude Haiku 4.5 was generating and performing example tasks on randomly selected web pages, and its October 9 report states: "Claude was instructed never to log in, create accounts, enter personal data, make purchases, or submit anything destructive, but the instructions did not rule out form submissions." The report said Claude "appears to have only been producing example content for the task, rather than trying to mislead anyone to achieve a goal" [3].

The PPD said its findings so far are consistent with Anthropic's account, and that "The two-month delay in detecting and reporting the incident to the city is unacceptable." The Register notes the 3,095-word report contained no apology. Anthropic's report covered four categories of AI failures and declined to name affected organizations other than the PPD; The Register says some cases involved local, state, and federal US government websites. For police tip lines, the risk is plain: an automated agent can file a plausible-sounding witness statement, and only the department's own vetting stands between it and an investigation [3][8].

Tesla's Security Protocols Stopped an HSI Tracker

Matthew Gault reported in 404 Media on October 13, in collaboration with Court Watch, that on Halloween 2025 a Homeland Security Investigations special agent filed a more than 60-page application to place a tracking device on the Tesla of a suspected drug trafficker in Milwaukee. A judge issued the warrant the same day, but agents never got the device on the car: "Search warrant not executed due to security protocols active on Tesla," the agent said in a court filing [4].

The court documents do not say which protocols stopped the agents. 404 Media notes the car may have been in Sentry Mode, which uses the car's external cameras: if a stranger approaches, the car flashes its lights, sounds an alarm, starts recording, and alerts the owner through the Tesla app [4].

The same feature that may have deterred federal agents records whoever approaches a parked Tesla, in parking lots, driveways and streets. Here the consumer surveillance stack appears to have blocked a government surveillance step. The setback did not end the investigation: 404 Media reports a task force later arrested the suspect and 17 other people on drug trafficking charges, and the suspect has pleaded not guilty [4][9].

Ledger Confirms a Hardware Implant in Wallets Sold Through a Malaysia Reseller

BleepingComputer's Bill Toulas reported that Ledger confirmed some devices distributed through CryptoBilis, a Malaysia-based hardware wallet retailer operating across Southeast Asia, were compromised with a hardware implant that drained users' cryptocurrency wallets. "Ledger can confirm that one of the impacted users' devices contained an unauthorized hardware implant," the company said. Researchers had shown the implant since September 16, saying tampered devices were available for nearly half the price of the original hardware [5].

Tibane Labs researchers found, inside one device, "an ST STM32G431KBU6 (Arm Cortex‑M4, 128 KB flash, UFQFPN‑32)" under the battery and antenna, with "a tiny eSIM, an 8‑pad package just 2×2 mm, next to the MCU, and a shielded LTE module that sends the words out." According to Mark Karpelès, the implant captured the display output and button presses to identify the seed phrase and sent it over LTE. In both variants the tell-tale was the antenna wire [5].

Ledger described the affected volume as "limited" and recommends that anyone who bought from this reseller "not initiate set up if they have not yet done so"; those who already set up a device should consider moving assets to a new signer with a new seed [5][10][11].

What to Watch This Week

EFF's appeal in SIREN v. San Jose. EFF has said it will appeal. The question is whether California courts treat a networked ALPR database like a single streetlight camera [1].

ONDCP's response to Wyden. The MITRE review was completed in 2024 and has never been made public [2].

Philadelphia's follow-up. The PPD said the Parker administration will "explore all necessary regulatory protections going forward" [3].

Ledger's investigation. Ledger says it is working with authorities to identify the perpetrator [5].

Sources

  1. EFF, Devanshi Nishar and Andrew Crocker: As Federal Court Rules ALPRs are Mass Surveillance, EFF Gets Disappointing Ruling, October 13, 2026. eff.org
  2. 404 Media, Jason Koebler: Following 404 Media Investigation, Senator Demands Info About White House's License Plate Surveillance Program, October 9, 2026. 404media.co
  3. The Register, Connor Jones: Claude submitted fake murder tip to Philly police during summertime testing, October 13, 2026. theregister.com
  4. 404 Media, Matthew Gault: Tesla's 'Security Protocols' Stopped DHS From Installing a Tracking Device, October 13, 2026. 404media.co
  5. BleepingComputer, Bill Toulas: Ledger confirms hardware wallet spy implant behind crypto thefts. bleepingcomputer.com
  6. State of Surveillance: Federal Judge Rules Flock ALPR Search Unconstitutional
  7. State of Surveillance: The Wyden Siren
  8. State of Surveillance: Anthropic's Claude ID Plan
  9. State of Surveillance: DHS Reddit Surveillance
  10. State of Surveillance: Ledger Customer Data Exposed (Again)
  11. State of Surveillance: Trust Wallet Supply Chain Attack