Category Archives: Privacy

After Petition Against CISPA, Obama Responds

Responding to a petition signed by over 100,000 people on the White House’s We The People website, the Obama Administration has issued clarifying remarks on its stance towards CISPA. The President does not support the version of CISPA that the House of Representatives passed earlier this month. And as the Senate is expected to put forth its own version of the bill, Obama hopes to provide guidance for any new legislation.

According to Obama’s official response, the Administration will only stand by information-sharing legislation that embody “three key principles.”

1. “minimizing information that can be used to identify specific individuals.” This means erring on the side of discretion regarding the personal information of users/clients especially if that data is irrelevant to a specific cyber attack.

This, of course, is uncomfortably vague. Without the need for warrants, how will government agencies and private companies decide what is relevant information and what is not?

2. “new information should enter the government through a civilian department rather than an intelligence agency.” Here, Obama would like to see that the data collected under the protection of CISPA is gathered not by the NSA or the CIA but through civilian channels, like the Department of Homeland Security.

A longstanding American axiom: the CIA should not be able to spy on US citizens.

3. “Any new legislation ought to provide legal clarity for companies…But it should not provide broad immunity for businesses and organizations.” The Administration is hoping to guard against “unwarranted disclosure of personal information,” as well as practices that would “likely to cause damage to third parties.”

This last principle hopes to rid the legislation of dangerously broad language that would embolden companies to needlessly turn over damning personal data.

Tagged , , , ,

Updating an E-Mail Law From the Last Century

Somini Sengupta reports in the New York Times

The current statute requires a warrant for e-mails that are less than six months old. But it lets the authorities gain access to older communications — or bizarrely, e-mails that have already been opened — with just a subpoena and no judicial review.

The law governs the privacy of practically everything entrusted to the Internet — family photos stored with a Web service, journal entries kept online, company documents uploaded to the cloud, and the flurry of e-mails exchanged every day. The problem is that it was written when the cloud was just vapor in the sky.

Tagged , , , , , , ,

The FBI And Gmail Spying Powers

“It’s no secret that under the Electronic Communications Privacy Act, the feds can easily obtain archive copies of emails. When it comes to spying on emails or Gchat in real time, however, it’s a different story, writes Ryan Gallagher of Slate.

From the perspective of law enforcement, the data that passes through email, cloud services and chat is difficult to monitor in real time. As Gallagher notes, “That’s because a 1994 surveillance law called the Communications Assistance for Law Enforcement Act only allows the government to force Internet providers and phone companies to install surveillance equipment within their networks.” For newer forms of communication, the FBI’s spying power is restricted.

Gallagher summarizes a recent speech by the FBI’s general counsel, Andrew Weissmann, and reports that the agency will push a proposal this year to expand their “Internet spy powers.”

Tagged , , , , , , , , , , , , ,

Google Testifies To Congress Calling For Email Privacy

Writing on The Verge, Carl Franzen reports that Google’s legal director, Richard Salgado, will testify in front of a subcommittee in the House of Representatives. Salgado will argue for a legislative update on the 1986 Electronic Communications Privacy Act (ECPA).

The subcommittee’s meeting subject: “Lawful access to stored content,” will deal with our society’s mismatch between new information technology and outdated legal paradigms.

Other companies and privacy advocates have spent years calling for updates to ECPA. The law currently gives government agencies and law enforcement organizations the ability to request all user email older than 180 days with just a subpoena, while access to newer email requires a stricter search warrant. The law has also been used to enable the government to request other cloud-based user information and even mobile device location information. But Google and those calling for reform want to see search warrants required to access all stored web user info and emails, regardless of their freshness or whether users have opened them.

Tagged , , , , , , , , , , , ,

Google Concedes That Drive-by Prying Violated Privacy

Google Car

The New York Times/Karen Bleier/Agence France-Presse — Getty Images

David Streitfeld reports on the New York Times:

Google on Tuesday acknowledged to state officials that it had violated people’s privacy during its Street View mapping project when it casually scooped up passwords, e-mail and other personal information from unsuspecting computer users…

The Street View case arose out of Google’s deployment of special vehicles to photograph the houses and offices lining the world’s avenues and boulevards and lanes. For several years, the company also secretly collected personal information — e-mail, medical and financial records, passwords — as it cruised by. It was data-scooping from millions of unencrypted wireless networks.

Proposed Ohio Law Would Officially Allow Snooping on Kids’ Text Messages, Calls, and Emails

Writing on Slate, Ryan Gallagher reports on an Ohio representative’s bill that would enable adults to monitor their children’s digital communication.

“Rep. Brian Hill, R-Zanesville, is pushing to amend a state wiretapping law…making it permissible for parents, grandparents, guardians, and custodians to snoop on their kids’ communications so long as they are under the age of 18. The interception would have to be made, according to the proposed law, “in good faith for the protection of the child.”

Tagged , , , , , , , ,

Even If It Enrages Your Boss, Social Net Speech Is Protected

In it’s 2nd social media report, the National Labor Relations Board aims to protect employees’ rights to speech.  The memo “covers 14 cases, half of which involve questions about employer social media policies…The remaining cases involved discharges of employees after they posted comments to Facebook.”

Writing in The New York Times, Steven Greenhouse goes through some of these cases and helps explain what kind of things employees can say online and what things can rightfully get someone fired.

The labor board’s rulings, which apply to virtually all private sector employers, generally tell companies that it is illegal to adopt broad social media policies — like bans on “disrespectful” comments or posts that criticize the employer — if those policies discourage workers from exercising their right to communicate with one another with the aim of improving wages, benefits or working conditions.

Greenhouse also mentions that California and Illinois recently joined 4 other states in preventing companies from forcing workers to hand over their social media passwords.

The author quotes the president of the National Workrights Institute, Lewis L. Maltby: “No one should be fired for anything they post that’s legal, off-duty and not job-related.”

These rulings do not apply to public sector workers, however. And as Greenhouse reminds us, the internet speech of teachers, police officers, corporate execs and college students falls into a bizarro grey area that we are only beginning to grapple with.

Tagged , , , , , , , , ,

My Post on BuzzFeed: The 10 Outstanding Essays of 2012

Grantland.com

Grantland.com

A collection of this year’s best culture writing.

LeBron James’ Hairline, Manufacturing Rick Ross and Lana, Twitter subpoenas, Obama’s paradoxical blackness, an Asian hoops star, doxxing twitter trolls, a future beyond Facebook, our infatuation with busyness, breaking down Breaking Bad, and the revolutionary women of the Arab Spring.

Tagged , , , , , , , , , , , , , ,

The Password As Paradox

After his entire digital life was hacked, writer Mat Honan pokes holes in the idea of the password. Logging in is supposed to be both easy and seamless for the user, but also private and hard to breach. But these two features are at cross purposes. Honan explores the paradox of the password.

Let’s say you’re on AOL. All I need to do is go to the website and supply your name plus maybe the city you were born in, info that’s easy to find in the age of Google. With that, AOL gives me a password reset, and I can log in as you.

First thing I do? Search for the word “bank” to figure out where you do your online banking. I go there and click on the Forgot Password? link. I get the password reset and log in to your account, which I control. Now I own your checking account as well as your email.

Tagged , , , , , , , , ,

The “G” Stands For Government: What Are Google’s Criteria For Handing Over Gmail?

As the Petraeus scandal grows more absurd, it’s hard not to see the irony: our head spy-guy snooped on by a secretive government agency with expanding surveillance powers.

Writing in Forbes, Andy Greenberg notes that the FBI’s search of Paula Broadwell’s email was just 1 out of 7,172 fulfilled requests of Google handing over its users’ data to the US government. (That 7,172 stat was just in the first 6 months of 2012.)

Greenberg goes on to say that unlike Facebook, Microsoft and Yahoo, Google puts out a semi-annual transparency report disclosing such information.

In a statement Greenberg received from a Google representative, the criteria for honoring government requests are summarized: “the requests come in a written form, are sent from an appropriate agency, cite a criminal case and are sufficiently narrow in their demands, both in terms of which users are affected and what time frame of data is requested.”

It’s important to note that while Google is trying to appear both compliant to law enforcement and protective of their users, Greenberg reminds us that there is no strict legal standard over the data these internet companies hold.

As journalists and elected officials question why Ms. Broadwell’s email was searched in the first place,* many tech observers and industry professionals are calling for legal reform in what is known as Digital Due Process.

*While the FBI states that Ms. Broadwell’s harassing emails to Jill Kelley were enough to warrant investigation, many see this as dubious pretext and police-state overreach.

Tagged , , , , , , , ,
Follow

Get every new post delivered to your Inbox.

Join 291 other followers