You're thinking in the wrong way. You have a pool of people and an automated system of sniffing out bad guys. You detect one. You don't have the 90% chance of that person being a bad guy, but just a .3% chance due to him being selected from a pool.
This is exactly what's going on right now. The pool size is the entire United States of America. The entire pool is being sampled to find terrorists, and because the automated systems sampling the pool have error rates, they come up with false positives (which is the example of this article) an order of magnitudes more often than they come up with terrorists.
THis is a matter of false positives, not of catching bad guys. The concept in the united states is innocent until proven guilty, but due to massive size of the sample pool (310 million and growing), even small error rates generate far more false positives than correct matches.
99.7% of people detected in the city by the machine are 100% innocent and only .3% of the people detected by the machine are guilty. Those probabilities are the definition of doing more harm than good.
Nope. Hell, even only half of what I do on the web is monitored and sold. The vast majority of what I do on the Internet doesn't even involve the web.
Fun fact: the NSA destroys all non-encrypted files under PRISM, but keeps encrypted files for cryptographic anolysis (read: until they can crack them). This means that, for me at least, the NSA has a nice backup of all my computers
