Showing posts with label privacy. Show all posts
Showing posts with label privacy. Show all posts

Friday, July 04, 2008

Shrinking internet privacy

YouTube ordered to reveal its viewers

NEW YORK (AP) -- Dismissing privacy concerns, a federal judge overseeing a $1 billion copyright-infringement lawsuit against YouTube has ordered the popular online video-sharing service to disclose who watches which video clips and when.

A judge ordered YouTube to produce data on which of its videos get viewed most often and by whom.

A judge ordered YouTube to produce data on which of its videos get viewed most often and by whom.

U.S. District Judge Louis L. Stanton authorized full access to the YouTube logs after Viacom Inc. and other copyright holders argued that they needed the data to show whether their copyright-protected videos are more heavily watched than amateur clips.

The data would not be publicly released but disclosed only to the plaintiffs, and it would include less specific identifiers than a user's real name or e-mail address.

Lawyers for Google Inc., which owns YouTube, said producing 12 terabytes of data -- equivalent to the text of roughly 12 million books -- would be expensive, time-consuming and a threat to users' privacy.

The database includes information on when each video gets played, which can be used to determine how often a clip is viewed. Attached to each entry is each viewer's unique login ID and the Internet Protocol, or IP, address for that viewer's computer.

Stanton ruled this week that the plaintiffs had a legitimate need for the information and that the privacy concerns are speculative.

Stanton rejected a request from the plaintiffs for Google to disclose the source code -- the technical secret sauce -- powering its market-leading search engine, saying there's no evidence Google manipulated its search algorithms to treat copyright-infringing videos differently.

The court has yet to rule on Google's requests to question comedians Jon Stewart and Stephen Colbert of Viacom's Comedy Central.

Viacom is seeking at least $1 billion in damages from Google, saying YouTube has built a business by using the Internet to "willfully infringe" copyrights on Viacom shows, which include Comedy Central's "The Daily Show with Jon Stewart" and Nickelodeon's "SpongeBob SquarePants" cartoon.

The lawsuit was combined with a similar case filed by a British soccer league and other parties.

Together, the plaintiffs are trying to prove that YouTube has known of copyright infringement and can do more to stop it, a finding that could dissolve the immunity protections that service providers have when they merely host content submitted by their users.

Though Google said giving the plaintiffs access to YouTube viewer data would threaten users' privacy, Stanton referred to Google's own blog entry in which the company argued that the IP address alone cannot identify a specific individual.

In a statement, Google said it was "disappointed the court granted Viacom's overreaching demand for viewing history. We are asking Viacom to respect users' privacy and allow us to anonymize the logs before producing them under the court's order."

Google did not say whether it would appeal the ruling or seek to narrow it.

Stanton's ruling made only passing reference to a 1988 federal law barring the disclosure of specific video materials that subscribers request or obtain.

Kurt Opsahl, a senior staff attorney with the Electronic Frontier Foundation, said Stanton should have considered that law along with constitutional free-speech rights, including a right to read or view materials anonymously.

He said a user's ID can sometimes include identifying information such as a first initial and last name.

Viacom said it isn't seeking any user's identity. The company said any data provided "will be used exclusively for the purpose of proving our case against YouTube and Google (and) will be handled subject to a court protective order and in a highly confidential manner."

This is not the first time Google has fought the disclosure of user information it had been stockpiling. While gathering evidence for a case involving online pornography, the U.S. Justice Department subpoenaed Google and other search engines for lists of search requests made by their users.

After Google resisted, a federal judge ruled that Google was obliged to turn over only a sample of Web addresses in its search index, not the actual search terms requested.

Original article posted here.

Thursday, April 03, 2008

Fuck the Constitution! We want your genetic code!

Defense Lawyers Fight DNA Samples Gained on Sly

The two Sacramento sheriff detectives tailed their suspect, Rolando Gallego, at a distance. They did not have a court order to compel him to give a DNA sample, but their assignment was to get one anyway — without his knowledge.

David Duprey/Associated Press

Altemio Sanchez was arrested in Buffalo last year after DNA extracted from a glass he had used at a restaurant matched DNA from a series of murders and rapes.

The DNA Age

Genetic Stakeout
Tariq Zehawi, via Associated Press

A letter John Athan was duped into sending to the police led to his arrest 20 years after the slaying of Kristen Sumstad, 13.

Kristen Sumstad's killer was convicted using D.N.A. evidence.

DNA collected from a used cigarette butt linked Rolando Gallego to a bloody towel found at the scene of a 1993 murder.

Recently, the sheriff’s cold case unit had extracted a DNA profile from blood on a towel found 15 years earlier at the scene of the murder of Mr. Gallego’s aunt. If his DNA matched, they believed they would finally be able to close the case.

On that spring day in 2006, the detectives watched as Mr. Gallego lit a cigarette, smoked it and threw away the butt. That was all they needed.

The practice, known among law enforcement officials as “surreptitious sampling,” is growing in popularity even as defense lawyers and civil liberties advocates argue that it violates a constitutional right to privacy. Mr. Gallego’s trial on murder charges, scheduled for next month, is the latest of several in which the defense argues that the police circumvented the Fourth Amendment protection against unreasonable search and seizure.

Critics argue that by covertly collecting DNA contained in the minute amounts of saliva, sweat and skin that everyone sheds in the course of daily life, police officers are exploiting an unforeseen loophole in the requirement to show “probable cause” that a suspect has committed a crime before conducting a search.

“The law cannot tolerate such back-door methods, which seize something that any reasonable person expects to remain private,” Mr. Gallego’s lawyer, David Lynch, wrote in a motion to suppress the DNA evidence extracted from the cigarette butt.

The privacy implications of surreptitious DNA sampling may extend beyond individual investigations. The police, critics say, could collect DNA deemed “abandoned” from targeted individuals and monitor their movements even if they are not suspected of committing a serious crime. Innocent people whose DNA turns up unexpectedly may find themselves identified by a database file that they did not know existed.

“Police can take a DNA sample from anyone, anytime, for any reason without raising oversight by any court,” said Elizabeth E. Joh, a law professor at University of California, Davis, who studies the intersection of genetics and privacy law. “I don’t think a lot of people understand that.”

Law enforcement officials say they are just trying to solve crimes. Over the last few years, several hundred suspects have been implicated by the traces of DNA they unwittingly shed well after the crime was committed, according to law enforcement officials. Many more have been eliminated from suspicion without ever knowing that their coffee cups, tissues, straws, utensils and cigarette butts were subject to DNA analysis by the police.

“It’s a great tool,” said Micki Links, a sergeant in the Sacramento sheriff’s homicide division. “Our hands are tied on a lot of things as far as what we can do and what we can search, so when we find something that’s within the law, we’re going to use it.”

Sometimes the police dupe suspects into relinquishing their genetic identity by offering them a Coke during a routine interview and picking up the can. In Buffalo last year, undercover police waited until Altemio Sanchez, suspected of strangling and raping several women over a quarter-century, paid the check and left after dinner with his wife at a local restaurant before confiscating his glass. He later admitted killing three women and received a life sentence.

Variations on the technique are multiplying as the adoption of DNA processing technology lets crime laboratories derive a full profile from ever smaller amounts of biological material at relatively low cost.

In Mr. Gallego’s case, the detectives first checked the DNA extracted from the blood on the towel against the F.B.I. database of some 4 million convicted offenders. Finding no match, they turned to suspects in the unsolved murder of Leticia Estores, a hairdresser. Mr. Gallego, 49, was among them.

They could have asked a judge for a search warrant to compel him to give them a DNA swab, but there was no guarantee that the judge would agree. Also, Mr. Gallego had passed a lie detector test in which he denied any involvement in the murder, and had they asked him to volunteer a sample, he might have refused.

Instead, the supervising detective ordered “the surreptitious collection of a DNA sample,” according to his report.

Some legal experts advocate curbs on surreptitious sampling. Albert E. Scherr, a professor at Franklin Pierce Law Center in Concord, N.H., who has a grant from the National Institutes of Health to study the practice, suggests that the police be required to meet the “reasonable suspicion” standard before secretly collecting DNA. “You’re not asking them to let criminals go free,” he said. “You’re just asking them to investigate a little more.”

In the meantime, anyone with something to hide might want to keep in mind a recent decision by the Massachusetts Court of Appeals, which admitted as evidence DNA collected after a suspected rapist spit on the street.

“We conclude that under the circumstances, the expectorating defendant had no reasonable expectation of privacy in his spittle,” the court ruled, “or in the DNA evidence derived therefrom.”

The United States Supreme Court has yet to address whether there are constitutional limits on the covert collection of DNA. But with a few exceptions, lower court judges in over a dozen recent cases have ruled that DNA clinging to water bottles left in interrogation rooms, on restaurant glassware and on those ubiquitous cigarette butts are fair game for police inspection.

“There is no subjective expectation of privacy in discarded genetic material, just as there is no subjective expectation of privacy in fingerprints or footprints left in a public place,” Washington State’s Supreme Court wrote last year in denying an appeal by John N. Athan, whose murder conviction was based on surreptitiously collected DNA. Seattle police detectives posing as a law firm sent Mr. Athan a letter on fake stationery, asking him to join a lawsuit to recover overcharged parking tickets, of which they knew he had had many. DNA from saliva on the envelope that he sent back matched a semen sample from the 1982 murder and rape of a 13-year-old Seattle girl.

In a dissenting opinion, Justice Mary E. Fairhurst argued that the fingerprint analogy was inappropriate, because Mr. Athan’s DNA “provided the government with vast amounts of intimate information beyond mere identity” including race, gender, predisposition to disease and, perhaps, forms of conduct.

But Tim Bradshaw, a senior prosecuting attorney in King County, Wash., who worked on the case, said he had received calls from prosecutors around the country eager to employ a similar DNA ruse. (Courts generally allow the police to use all sorts of deception to obtain evidence from people they suspect of committing crimes.)

“The success of it has emboldened investigators, and it should,” Mr. Bradshaw said. “Just because something is very clever doesn’t make it illegitimate.”

In Los Angeles, a Superior Court judge last year rejected a motion by attorneys for a suspected serial killer, Adolph Laudenberg, to suppress DNA evidence that the police had acquired by inviting him to a doughnut shop to discuss an unrelated case. One detective set aside Mr. Laudenberg’s Styrofoam coffee cup, and an undercover officer retrieved it.

Several court opinions on surreptitious sampling cite the United States Supreme Court decision in California v. Greenwood, which held that the Fourth Amendment did not apply when the police searched trash bags left on the curb by a suspected narcotics dealer.

But the Greenwood analogy, critics of surreptitious sampling argue, ignores that most people have no idea that they risk surrendering their genetic identity to the police by, for instance, failing to destroy a used coffee cup. Moreover, even if they do realize it, there is no way to avoid abandoning one’s DNA in public, short of living in a bubble.

“Unlike garbage that can be withheld or destroyed before it is released into the world,” reads the motion to suppress the DNA evidence in the Gallego case, “we cannot do so with our biological tissues.”

A few courts have found that certain forms of surreptitious sampling do violate the Fourth Amendment.

DNA from a water bottle given to a suspected rapist, for instance, was deemed inadmissible in an Iowa court because a police officer had swapped the suspect’s water with a similar bottle when the man went to the bathroom. He retained a reasonable expectation of privacy, the court ruled, because he had not “abandoned” it.

And last year, the North Carolina Court of Appeals ordered a new trial for Blake J. Reed, a convicted burglar, because a police officer kicked a cigarette butt off his patio and later picked it up. The court said Mr. Reed had an expectation of privacy at home.

Suspects may be wising up. After smoking another cigarette on the patio, Mr. Reed took apart the butt, removed the filter’s wrapper and shredded it, according to court documents. He had seen the popular television show “CSI,” where DNA often nails the suspect, he told the detective. Then he placed the remains in his pocket.

Original article posted here.

Wednesday, March 12, 2008

Between a rock and a hard place: We should know the basis of fingering a suspect in Antrax scare but confidential sources SHOULD remain as such

US reporter gets last minute stay from hefty contempt fines


WASHINGTON (AFP) — A former reporter for USAToday newspaper who was ordered to pay hefty fines starting at midnight Tuesday for refusing to name confidential sources for a story, has been granted a stay, court sources said.

"It is ordered that the motion for a stay pending appeal be granted," a clerk at the US court of appeals in Washington told AFP, reading from the order.

"Appellant has satisfied the stringent standards required for a stay pending appeal," the clerk read, hours before the first payment of 500 dollars (325 euros) was due.

Reporter Toni Locy was last week ordered by US District Court Judge Reggie Walton to pay a daily fine of 500 dollars, rising in steps to 5,000 dollars, for refusing to name the sources for a story she wrote about Steven Hatfill, the former army bioweapons scientist named a "person of interest" in the 2001 anthrax attacks.

The judge also ordered that Locy pay the fines with no help from her employer, friends, family or even anonymous supporters.

Gannett, the parent company of USAToday, on Monday filed a motion with the court of appeals for an emergency stay of the contempt citation, and a coalition of about two dozen media companies and non-profit journalism organizations also filed an 'amicus brief' in support of Locy the same day.

Hatfill, meanwhile, filed a response on Tuesday, seeking to bar the stay.

The former army scientist was named a "person of interest" by investigating authorities in the United States after anthrax-laced letters were sent to several lawmakers and television offices in October 2001.

Five people, including two post office workers in Washington, died of anthrax inhalation.

In the original complaint Hatfill filed against Locy in August 2003, he alleged that "the Justice Department had violated the Privacy Act by making unauthorized disclosures about him to the news media -- that is, by intentionally 'leaking' investigative information," his response to the motion for a stay said.

Locy has said in court that she could not remember all her sources, and was ordered to pay the rising fines, on her own, until such time as she did name them.

She also faced prison if she failed to name the confidential sources by early April.

"We've never seen anything like this," Gregg Leslie, the legal defense director at the Reporters Committee for Freedom of the Press, said of the rising fines imposed on Locy, and the judge's order that she pay them on her own.

"The only authority the judge tried to base it on were cases that had to do with whether a lawyer who was found in contempt of court could have a client reimburse him. So we think he based it on a pretty poor precedent and, yes, there isn't anything like it in any other contempt case," Leslie told AFP.

"It is troubling that courts are going to allow this kind of examination of a reporter's work product," he added.

Locy, who is currently a professor of journalism at West Virginia University, said she was delighted to be given a stay and would now "let the appellate process play out."

No date has been set for the appeal hearing.

Original article posted here.

Wednesday, February 13, 2008

The move for a global police state continues forward

Europe wants visitors fingerprinted

By Jeffrey Stinson, USA TODAY

LONDON — Americans and other foreigners entering and leaving Europe would be fingerprinted under a proposal to combat terrorism, organized crime and illegal immigration to be unveiled Wednesday.

The proposal is to be laid out in detail in Brussels by Franco Frattini, the European Commission's vice president in charge of justice and security. It would apply to tourists or business travelers visiting Europe for up to six months, as well as those staying longer on a visa for work or study.

The U.S. government already requires foreigners who need a visa to travel to the USA to provide fingerprints.

The European proposal follows calls from many European ministers to tighten security and improve information sharing following the alleged plot to blow up passenger jets flying from London's Heathrow airport to the USA. On Aug. 10, 2006, British police said they foiled that plot.

The proposal must be approved by the European Parliament before it could take effect, and it could take a year or longer before it could be implemented.

Taking digital fingerprints would allow security authorities to help check travelers' identities against lists of suspected terrorists and criminals, said Friso Roscam Abbing, Fratini's spokesman.

He said it also would be a key element of a major undertaking to identify who is entering the 27-nation European Union and help guarantee they don't overstay their welcome. Illegal immigration is a growing concern across Europe.

"We have 150 million entries and 150 million exits a year, and we have no information on them," Roscam Abbing said.

Roscam Abbing said the collection of biometric information on travelers could be extended to taking digital photographs and iris scans of visitors' eyes and putting the information into a Europe-wide database.

That information also could be used to ease travelers' border crossings in a "fast-track" fashion as they travel from one European country to another once they arrive in the EU bloc, he said.

Some privacy groups already were expressing concerns about the proposal. "It's boys with toys. They want to have the toys the Americans have," Gus Hosein of the group Privacy International told Reuters.

Russ Knocke, spokesman for the U.S. Department of Homeland Security, said the U.S. government supports the concept and was waiting to see the details from the European Commission, which is the EU's executive branch.

The EU proposal comes as Homeland Security is moving ahead with plans to tighten entry requirements for travelers from Europe, where citizens of 15 of the 27 EU nations can visit the USA for up to 90 days without a visa.

Homeland Security Secretary Michael Chertoff told the BBC last month that he has become increasingly concerned over "the possibility of Europe becoming a platform for a threat against the United States."

Original article posted here
.

Wednesday, November 21, 2007

Just one of the risks of the government having too much of your personal information

Lost in the post: the personal details of 25 million people

Who decided to post two discs with personal and financial details of 25 million people by unregistered delivery?
What has become of the missing discs and could they have fallen into the hands of fraudsters?
Why did the Government wait 10 days before telling the public what had happened?
Where will the buck stop after the revenue chief's resignation?
When can the British people be sure once again that their money is safe in their bank accounts?

By Colin Brown and Ben Russell

Seven million families are having to make urgent checks on their bank accounts today after the biggest security blunder in history led to the personal details of 25 million fathers, mothers and children being lost by the Whitehall department responsible for all tax and benefits.

The head of HM Revenue and Customs, Paul Gray – one of the country's most highly paid civil servants – resigned his £198,000-a-year post as the scale of the fiasco became clear.

But the Prime Minister and his embattled Chancellor, Alistair Darling, were counting the cost to their own reputations last night as the disaster left them looking accident-prone and open to opposition charges of incompetence.

The news that a package containing the personal details of every family in Britain with a child under 16 had gone missing in the post was greeted with astonishment and anger when it was revealed to MPs by the Chancellor.

It could not have come at a worse time for Mr Darling, who just 24 hours earlier had come under sustained attack from the opposition after admitting that taxpayers' money could be at risk in the £24bn rescue of Northern Rock.

Damaging as that crisis has been for the Government, the political fallout from the loss of millions of families' personal data could prove even more far-reaching. Gleeful Tories, urging the Chancellor in the starkest of language to "get a grip", were comparing it to John Major's hapless last days in power.

There was an audible intake of breath in the Commons as Mr Darling told MPs that two discs containing the details of all child benefit recipients, records for 25 million individuals and 7.25 million families, had been lost.

The records included the recipient's name and those of their children, their addresses and dates of birth, child benefit numbers, national insurance numbers and, where relevant, bank or building society account details – all the facts that fraudsters need to illegally remove money from banks.

They are the details that families are regularly being warned by the Government not to reveal to potential fraudsters. And they would be worth a fortune on the black market.

A junior official from HM Revenue and Customs had sent the discs to the National Audit Office at the NAO's request on 18 October by the HMRC's internal post, run by the courier firm TNT, even though it was in clear breach of the department's rules governing the release of such sensitive information and may have been in breach of data protection regulations.

The NAO, realising it had not received the data, ordered a further copy to be sent by HMRC. This time it was sent by registered post and did arrive.

It was only on 8 November, almost three weeks after the first discs were posted, that senior HMRC officials were told they were missing. They informed the Chancellor on 10 November, a Saturday. Hardly believing his ears, the Chancellor ordered "comprehensive searches to be carried out of all premises where the missing data might be found". He decided that the breach of security was so grave that he had to tell the Prime Minister immediately.

On 12 November, Mr Gray told Mr Darling that evidence might have been found of the route taken by the data and that the discs were likely to be recovered. However, two days later, those hopes were dashed when the HMRC chairman admitted that the internal searches had failed to trace the discs. The Chancellor ordered Mr Gray immediately to call in the Metropolitan Police to conduct a full investigation to find the missing package.

That inquiry was still under way yesterday. The police say they are confident no crime was involved.

Mr Darling told the Commons: "Our priority is to find this data. Searches continue to be carried out, including of the HMRC and NAO premises. Staff are being interviewed but so far the missing data has not been found."

It is not the first time that data has gone missing from the HMRC. The Information Commissioner was already investigating two earlier breaches by the department. In September, an HMRC employee reported that his laptop had been stolen from his car. The laptop contained customer details from about 15 financial institutions. The information was encrypted but the computer bag contained print-outs of some individuals' data.

And in October, the HMRC sent a CD via courier to Standard Life but the disc was lost en route. The CD was not encrypted and contained details of 15,000 Standard Life customers, including names and national insurance numbers.

For 10 days, the Government has been sitting on the news, knowing that when it came out there would be outrage mixed with deep anxiety. Last week, major clearing banks were secretly warned by the Government that there was a potential security breach. They were asked to make sure there had been no sudden surge in raids on personal bank accounts, evidence that the nightmare scenario – the discs falling into the hands of organised crime syndicates – had happened. On Monday, the Chancellor was told by the banks that they had found no trace of accounts being raided. That was the assurance he needed before a public announcement could be made.

George Osborne, the shadow Chancellor, urged Mr Darling to take control of the crisis. "Never mind the lack of vision; just get a grip," he said. "Let us be clear about the scale of this catastrophic mistake – half the country will be very anxious about the safety of their family and the security, and the whole country will be wondering how on earth the Government allowed this to happen."

Fall from grace of a dependable civil servant

Bearded and bespectacled, sober and sensible, Paul Gray was known throughout the Civil Service as trustworthy and dependable. But that reputation was dealt a huge blow when he was held responsible for the biggest blunder in British data protection history. Although many MPs believe he has been made the "fall guy" for the incompetence of others, there was little doubt that the head of the chairman of HM Revenue and Customs would have to be the first to roll. Mr Gray, 59, who is married with two sons, was one of the 300 highest-paid civil servants, earning £198,000 a year. It is likely he will keep his pension but the Cabinet Office said yesterday he would not receive a special resignation package. Mr Gray joined the Treasury in 1969 and rose steadily through the ranks to become the economic affairs private secretary to the Conservative prime minister, Margaret Thatcher. When she quit in 1990, he returned to the Treasury to work on monetary policy. He then became head of personnel and central services. In 1998, Mr Gray joined the Department of Social Security as head of policy, before becoming second permanent secretary for pensions and disability in the Department for Work and Pensions. He oversaw the merger of the former DSS, the Employment Service and parts of the Department for Education and Employment, which made him the ideal choice to head the merged Inland Revenue and Customs and Excise departments when the HMRC was established by Gordon Brown in 2004.

Mr Gray, a Leicester City football fan, keeps a small flock of Wensleydale sheep. He will now have a lot more time to tend them.

Original article posted here.

Monday, November 12, 2007

The push for slavery

Intelligence deputy to America: Rethink privacy

WASHINGTON (AP) -- As Congress debates new rules for government eavesdropping, a top intelligence official says it is time that people in the United States change their definition of privacy.

art.kerr.jpg

Donald Kerr, principal deputy director of national intelligence, wants Americans to redefine privacy.

Privacy no longer can mean anonymity, says Donald Kerr, the principal deputy director of national intelligence. Instead, it should mean that government and businesses properly safeguard people's private communications and financial information.

Kerr's comments come as Congress is taking a second look at the Foreign Intelligence Surveillance Act.

Lawmakers hastily changed the 1978 law last summer to allow the government to eavesdrop inside the United States without court permission, so long as one end of the conversation was reasonably believed to be located outside the U.S.

The original law required a court order for any surveillance conducted on U.S. soil in order to protect Americans' privacy. The White House argued that the law was obstructing intelligence gathering because, as technology has changed, a growing amount of foreign communications passes through U.S.-based channels.

The most contentious issue in the new legislation is whether to shield telecommunications companies from civil lawsuits for allegedly giving the government access to people's private e-mails and phone calls without a FISA court order between 2001 and 2007.

Some lawmakers, including members of the Senate Judiciary Committee, appear reluctant to grant immunity. Suits might be the only way to determine how far the government has burrowed into people's privacy without court permission.

The committee is expected to decide this week whether its version of the bill will protect telecommunications companies. About 40 wiretapping suits are pending.

The central witness in a California lawsuit against AT&T says the government is vacuuming up billions of e-mails and phone calls as they pass through an AT&T switching station in San Francisco, California.

Mark Klein, a retired AT&T technician, helped connect a device in 2003 that he says diverted and copied onto a government supercomputer every call, e-mail, and Internet site access on AT&T lines.

The Electronic Frontier Foundation, which filed the class-action suit, claims there are as many as 20 such sites in the U.S.

The White House has promised to veto any bill that does not grant immunity from suits such as this one.

Congressional leaders hope to finish the bill by Thanksgiving. It would replace the FISA update enacted in August that privacy groups and civil libertarians say allows the government to read Americans' e-mails and listen to their phone calls without court oversight.

Kerr said at an October intelligence conference in San Antonio, Texas, that he finds it odd that some would be concerned that the government may be listening in when people are "perfectly willing for a green-card holder at an [Internet service provider] who may or may have not have been an illegal entrant to the United States to handle their data."

He noted that government employees face up to five years in prison and $100,000 in fines if convicted of misusing private information.

Millions of people in this country -- particularly young people -- already have surrendered anonymity to social networking sites such as MySpace and Facebook, and to Internet commerce. These sites reveal to the public, government and corporations what was once closely guarded information, like personal statistics and credit card numbers.

"Those two generations younger than we are have a very different idea of what is essential privacy, what they would wish to protect about their lives and affairs. And so, it's not for us to inflict one size fits all," said Kerr, 68. "Protecting anonymity isn't a fight that can be won. Anyone that's typed in their name on Google understands that."

"Our job now is to engage in a productive debate, which focuses on privacy as a component of appropriate levels of security and public safety," Kerr said. "I think all of us have to really take stock of what we already are willing to give up, in terms of anonymity, but [also] what safeguards we want in place to be sure that giving that doesn't empty our bank account or do something equally bad elsewhere."

Kurt Opsahl, a senior staff lawyer with the Electronic Frontier Foundation, an advocacy group that defends online free speech, privacy and intellectual property rights, said Kerr's argument ignores both privacy laws and American history.

"Anonymity has been important since the Federalist Papers were written under pseudonyms," Opsahl said. "The government has tremendous power: the police power, the ability to arrest, to detain, to take away rights. Tying together that someone has spoken out on an issue with their identity is a far more dangerous thing if it is the government that is trying to tie it together."

Opsahl also said Kerr ignores the distinction between sacrificing protection from an intrusive government and voluntarily disclosing information in exchange for a service.

"There is something fundamentally different from the government having information about you than private parties," he said. "We shouldn't have to give people the choice between taking advantage of modern communication tools and sacrificing their privacy."

"It's just another 'trust us, we're the government,"' he said.

Original article posted here.

Thursday, August 23, 2007

Washington's witch hunt continues

Like McCarthy's Communist Scare, Washington warmongers would have you believe that a terrorist is hiding under every bed, or, in this case, is working at every aid organization.

U.S. to screen aid groups for terror links: report

WASHINGTON (Reuters) - The United States plans to screen thousands of people employed by aid organizations that receive funds from the U.S. Agency for International Development looking for possible links to terror organizations, The Washington Post reported on Thursday.

Outlined in a recent Federal Register notice, the program demands for the first time that nongovernmental organizations file detailed information on key personnel who apply for or manage funds distributed by the U.S. aid agency, the Post said.

The Federal Register notice said the program could involve 2,000 people and "will become effective on August 27," the last day that public comments about it are to be submitted, according to the report.


Article continues here.

Friday, August 17, 2007

The Police State as an International Movement

China Enacting a High-Tech Plan to Track People

Ariana Lindquist for The New York Times

Law enforcement technology is being introduced to monitor people, like these citizens from Hong Kong, crossing into Shenzhen.

SHENZHEN, China, Aug. 9 — At least 20,000 police surveillance cameras are being installed along streets here in southern China and will soon be guided by sophisticated computer software from an American-financed company to recognize automatically the faces of police suspects and detect unusual activity.

Starting this month in a port neighborhood and then spreading across Shenzhen, a city of 12.4 million people, residency cards fitted with powerful computer chips programmed by the same company will be issued to most citizens.

Data on the chip will include not just the citizen’s name and address but also work history, educational background, religion, ethnicity, police record, medical insurance status and landlord’s phone number. Even personal reproductive history will be included, for enforcement of China’s controversial “one child” policy. Plans are being studied to add credit histories, subway travel payments and small purchases charged to the card.

Security experts describe China’s plans as the world’s largest effort to meld cutting-edge computer technology with police work to track the activities of a population and fight crime. But they say the technology can be used to violate civil rights.

The Chinese government has ordered all large cities to apply technology to police work and to issue high-tech residency cards to 150 million people who have moved to a city but not yet acquired permanent residency.

Both steps are officially aimed at fighting crime and developing better controls on an increasingly mobile population, including the nearly 10 million peasants who move to big cities each year. But they could also help the Communist Party retain power by maintaining tight controls on an increasingly prosperous population at a time when street protests are becoming more common.

“If they do not get the permanent card, they cannot live here, they cannot get government benefits, and that is a way for the government to control the population in the future,” said Michael Lin, the vice president for investor relations at China Public Security Technology, the company providing the technology.

Incorporated in Florida, China Public Security has raised much of the money to develop its technology from two investment funds in Plano, Tex., Pinnacle Fund and Pinnacle China Fund. Three investment banks — Roth Capital Partners in Newport Beach, Calif.; Oppenheimer & Company in New York; and First Asia Finance Group of Hong Kong — helped raise the money.

Shenzhen, a computer manufacturing center next to Hong Kong, is the first Chinese city to introduce the new residency cards. It is also taking the lead in China in the large-scale use of law enforcement surveillance cameras — a tactic that would have drawn international criticism in the years after the Tiananmen Square killings in 1989.

But rising fears of terrorism have lessened public hostility to surveillance cameras in the West. This has been particularly true in Britain, where the police already install the cameras widely on lamp poles and in subway stations and are developing face recognition software as well.

New York police announced last month that they would install more than 100 security cameras to monitor license plates in Lower Manhattan by the end of the year. Police officials also said they hoped to obtain financing to establish links to 3,000 public and private cameras in the area by the end of next year; no decision has been made on whether face recognition technology has become reliable enough to use without the risk of false arrests.

Shenzhen already has 180,000 indoor and outdoor closed-circuit television cameras owned by businesses and government agencies, and the police will have the right to link them on request into the same system as the 20,000 police cameras, according to China Public Security.

Some civil rights activists contend that the cameras in China and Britain are a violation of the right of privacy contained in the International Covenant on Civil and Political Rights.

Large-scale surveillance in China is more threatening than surveillance in Britain, they said when told of Shenzhen’s plans.

“I don’t think they are remotely comparable, and even in Britain it’s quite controversial,” said Dinah PoKempner, the general counsel of Human Rights Watch in New York. China has fewer limits on police power, fewer restrictions on how government agencies use the information they gather and fewer legal protections for those suspected of crime, she noted.

While most countries issue identity cards, and many gather a lot of information about citizens, China also appears poised to go much further in putting personal information on identity cards, Ms. PoKempner added.

Every police officer in Shenzhen now carries global positioning satellite equipment on his or her belt. This allows senior police officers to direct their movements on large, high-resolution maps of the city that China Public Security has produced using software that runs on the Microsoft Windows operating system.

“We have a very good relationship with U.S. companies like I.B.M., Cisco, H.P., Dell,” said Robin Huang, the chief operating officer of China Public Security. “All of these U.S. companies work with us to build our system together.”

The role of American companies in helping Chinese security forces has periodically been controversial in the United States. Executives from Yahoo, Google, Microsoft and Cisco Systems testified in February 2006 at a Congressional hearing called to review whether they had deliberately designed their systems to help the Chinese state muzzle dissidents on the Internet; they denied having done so.

China Public Security proudly displays in its boardroom a certificate from I.B.M. labeling it as a partner. But Mr. Huang said that China Public Security had developed its own computer programs in China and that its suppliers had sent equipment that was not specially tailored for law enforcement purposes.

The company uses servers manufactured by Huawei Technologies of China for its own operations. But China Public Security needs to develop programs that run on I.B.M., Cisco and Hewlett-Packard servers because some Chinese police agencies have already bought these models, Mr. Huang said.

Mr. Lin said he had refrained from some transactions with the Chinese government because he is the chief executive of a company incorporated in the United States. “Of course our projects could be used by the military, but because it’s politically sensitive, I don’t want to do it,” he said.

Western security experts have suspected for several years that Chinese security agencies could track individuals based on the location of their cellphones, and the Shenzhen police tracking system confirms this.

When a police officer goes indoors and cannot receive a global positioning signal from satellites overhead, the system tracks the location of the officer’s cellphone, based on the three nearest cellphone towers. Mr. Huang used a real-time connection to local police dispatchers’ computers to show a detailed computer map of a Shenzhen district and the precise location of each of the 92 patrolling officers, represented by caricatures of officers in blue uniforms and the routes they had traveled in the last hour.

All Chinese citizens are required to carry national identity cards with very simple computer chips embedded, providing little more than the citizen’s name and date of birth. Since imperial times, a principal technique of social control has been for local government agencies to keep detailed records on every resident.

The system worked as long as most people spent their entire lives in their hometowns. But as ever more Chinese move in search of work, the system has eroded. This has made it easier for criminals and dissidents alike to hide from police, and it has raised questions about whether dissatisfied migrant workers could organize political protests without the knowledge of police.

Little more than a collection of duck and rice farms until the late 1970s, Shenzhen now has 10.55 million migrants from elsewhere in China, who will receive the new cards, and 1.87 million permanent residents, who will not receive cards because local agencies already have files on them. Shenzhen’s red-light districts have a nationwide reputation for murders and other crimes.

Original article posted here.

Saturday, July 07, 2007

Fascists back in business after ruling by brownshirts in black robes

US Appeals Court Throws Out Ruling Against Eavesdropping

CHICAGO - - A US federal appeals court on Friday struck down a lower court’s order against the US government’s domestic eavesdropping program, launched in the wake of the September 11, 2001 attacks.0706 10

The ruling allowed President George W. Bush’s administration to continue its controversial program of wartime spying on communications between US and foreign locations in suspected terror cases without first seeking a warrant.

The appeals court, in a 2-1 decision, said the plaintiffs should not have won an injunction against the National Security Agency’s surveillance program because they failed to show that they were personally affected by it.

The two judges ruling against the plaintiffs did not rule, however, on the legality of the controversial program, known as the Terrorist Surveillance Program, or TSP.

“Because we cannot find that any of the plaintiffs have standing for any of their claims, we must vacate the district court’s order and remand for dismissal of the entire action,” wrote Judge Alice Batchelder.

The surveillance program permitted the security agency to intercept e-mails and telephone conversations between the United States and terror suspects abroad.

“We have to have a reasonable basis to conclude that one party to the communication is a member of Al-Qaeda, affiliated with Al-Qaeda, or a member of an organization affiliated with Al-Qaeda, or working in support of Al-Qaeda,” Attorney General Alberto Gonzalez said of the program in 2005.

But in August 2006, a district court judge in Detroit, Michigan imposed an injunction against the program, arguing that Bush had overstepped his authority. Her ruling was suspended while it was under appeal.

The US Department of Justice welcomed the ruling, saying it protected “a vital intelligence program that helped detect and prevent terrorist attacks,” according to spokesman Brian Roehrkasse.

Lawyers, journalists and professors represented by the American Civil Liberties Union had argued that their communications risked being eavesdropped on because they were in frequent contact with people in the Middle East.

However, Friday’s ruling noted that “the plaintiffs do not allege as injury that they … anticipate or fear any form of direct reprisal by the government, such as criminal prosecution, deportation, administrative inquiry, civil litigation, or even public exposure.”

In addition, the plaintiffs were unable to prove that any of them had “actually been wiretapped,” and any declaration of injury was therefore “too speculative,” the ruling said.

The plaintiffs “allege only a subjective apprehension and a personal (self-imposed) unwillingness to communicate.”

The court also said the plaintiffs’ case fell short because they challenged the TSP’s ability to eavesdrop without warrants.

“Because all wiretaps are secret, neither the plaintiffs nor their overseas contacts would know — with or without warrants — whether their communications were being tapped.

“The secret possession of a warrant would have no more effect on the subjective willingness or unwillingness of these parties to ‘freely engage in conversations and correspond via email’ than would the secret absence of that warrant.”

The dissenting judge, Ronald Gilman, said he believed the plaintiffs were within their rights to sue and the TSP was “unlawful” because it violated the Foreign Intelligence Surveillance Act (FISA) of 1978, which defined since 1978 the rules of telephone spying.

In January, Gonzalez attempted to silence critics of the TSP by announcing that a special court created by FISA would oversee the program, though the details of the agreement remained secret.

Last month, a US Senate Committee slapped subpoenas on the White House and Vice President Dick Cheney’s office, seeking documents relating to the wiretap program. The administration has until July 18 to respond.

Original article posted here.

Wednesday, June 27, 2007

No Surprise: Once again EU compromises laws and privacy rights of citizens in face of US bully tactics and fraudulent fearmongering

EU approves US data transfer deal

Swift logo
Swift says it was obliged to obey US subpoenas
The European Union has approved a deal allowing the Swift international bank transfer network to show US investigators details of transactions.

European and Belgian watchdogs say Brussels-based Swift has been violating privacy rules since it started sharing the data after the 9/11 attacks.

The new deal says the US can only use the data to fight terrorism, and can only hold it for five years.

A senior European official will also monitor how the data is used.

Secret operation

BANK DATA CONTROVERSY
A Belgian money transfer firm, Swift handles 11m transactions per year
US agencies subpoenaed Swift to provide transaction data to help disrupt terrorist financing
The company has more than 7,500 clients, most of them global financial institutions
It operates in 200 countries, including Burma
In November, the European Commission told Swift to stop violating EU privacy laws
The deal is expected to be rubber-stamped by ministers on Thursday, after agreement among ambassadors.

The US says it needs the information, such as customer names, account numbers and amounts transferred, to crack down on funding for to terrorist cells.

Swift says it was obliged to obey US subpoenas to share the data, and denies breaking data protection rules.

The system operated secretly until it was exposed in summer 2006.

In February, European Data Protection Superviser Peter Hustinx said Swift had "breached the trust and private lives of many millions of people".

He also accused the European Central Bank of failing to demand a halt to the data transfers.

Original article posted here.

EU, U.S. officials clinch air data deal: EU


BRUSSELS (Reuters) - EU and U.S. officials reached a deal on Wednesday on the transfer to the United States of private data on transatlantic air passengers for use in the fight against terrorism, an EU spokesman said.

The deal was reached in talks between European Union Justice and Security Commissioner Franco Frattini, German Interior Minister Wolfgang Schaeuble and U.S. Homeland Security Secretary Michael Chertoff, a spokesman for Frattini said.

"Schaeuble, Frattini and Chertoff agreed," spokesman Friso Roscam Abbing said. Details of the accord must now be approved by the EU's 27 member states, who will study it on Friday.

Under an interim agreement reached in the aftermath of the September 11, 2001 attacks on the United States, European airlines must pass on up to 34 items of passenger data, including address and credit card details, to be allowed to land at U.S. airports.

That deal expires at the end of July, potentially leaving airlines in a legal limbo and exposed to privacy complaints.

Roscam Abbing did not give details of the deal but another EU diplomat has said previously that under the new arrangement, data would be kept for 15 years.

During the last eight years of that 15-year period, the information will only be available for access with the permission of a designated senior U.S. Homeland Security Department official, the diplomat said.

Under the interim accord, information can be held between 3-1/2 and 11-1/2 years.

Original article posted here.