Tuesday, July 15, 2008

Why Educational Change is Hard

Chris Lehmann has some thoughts on why educational change is hard and the limits of "Here Comes Everybody" for schools.

"So there are a couple of questions that we can examine through Shirkey's lens, then... first, why is it that schools are so hard to transform using these tools when commerce (for instance) has been so easy to change? And second, what has to happen within the community of folks -- loose as it may be -- who care about the notion of 21st Century schools.

So why is it that the changes that are taking root in so many other aspects are not changing education as quickly as we'd like? One of the things that Shirkey writes about is how the new social tools and the powerline graph of user use / success / downloads / etc... has meant that there is no longer a high cost of failure... On an institutional level, schools have an incredible infrastructure that makes them hard to change, but that's really not the big problem when we question the change through this lens.

The big problem is that we never, ever have a low cost of failure. When schools fail, kids lose. Shirky writes in Chapter 10 about how in a traditional business infrastructure, there is a natural disincentive to innovate because "more people will remember you saying yes to a failure than no to a radical but promising idea." (p. 246) I'd argue this is more true in education than in traditional businesses, again because the stakes are so high. So the educational establishment sticks to safe ideas and traditional schooling because we know that while the outcomes may not be amazing, they are predictably mediocre at worst."

"Predictably mediocre". Sadly that sums up our education system and it is predictably failing most people.

Patent Gridlock Suppresses Innovation

The Wall Street Journal seems to have noticed some empirical research (rare enough in itself in the intellectual property arena) suggesting the US patent system undermines innovation.

"New empirical research by Boston University law professors James Bessen and Michael Meurer, reported in their book, "Patent Failure," found that the value of pharmaceutical patents outweighed the costs of pharmaceutical-patent litigation. But for all other industries combined, they estimate that since the mid-1990s, the cost of U.S. patent litigation to alleged infringers ($12 billion in legal and business costs in 1999) is greater than the global profits that companies earn from patents (less than $4 billion in 1999). Since the 1980s, patent litigation has tripled and the probability that a particular patent is litigated within four years has more than doubled. Small inventors feel the brunt of the uncertainty costs, since bigger companies only pay for rights they think the system will protect.

These are shocking findings... Imagine how much more productive our information-driven economy would be if the patent system lived up to the intention of the Founders, by encouraging progress instead of suppressing it."

Understanding identity systems

John Udell has been explaining the virtues of the laws of identity to some non-techie friends and to his surprise they got it!

"In conversation with English and Welsh friends last week, the subject of Britain’s imminent National Identity Scheme came up. My friends, who are worldly and well-educated but not technical, voiced concerns about the amount of personal information that will be stored. Their understanding was that a lot of this information will be kept on the new ID card. In fact, the proposal says that only a subset will stored on the card, which will be backed by a cloud-based (and decentralized) National Identity Register. But either way, my friends’ concerns are of course valid. If governments or businesses aggregate too much personal information, accidents and abuses will occur.

At the same time, my friends do recognize the need for a strong and secure means of identification. So they’re not opposed to identity cards on principle, they just don’t want those cards to contain, or link to, extensive dossiers.

At this point, channeling Kim Cameron, I launched into an explanation of the laws of identity and the identity metasystem. Well, sort of. I didn’t say anything about cryptography, or digital certificates, or XML web services. But I did paint a picture of a world in which individuals interact with many identity providers and many relying parties, in which all actors trust one another in exactly the ways they already do today, and in which disclosure of personal information is minimal and context-dependent.

Halfway through I thought, well, this will never fly. This whole scheme is based on decentralization and indirection, and I know people don’t take naturally to those concepts.

But…they completely got it! ... it was a hopeful moment. "

Google and Viacom deal on anonomising YouTube data

YouTube blog and the Guardian are suggesting that an agreement has been reached about anonymising the data from the YouTube logging database that a court ordered Google to hand over to Viacom. From the Guardian:

"Google has struck a deal to protect the personal data of millions of YouTube users in the $1bn (£497m) copyright court case brought against the video-sharing website by Viacom.

Under the deal, Google will make user information and internet protocol addresses from its YouTube subsidiary anonymous before handing over the data to Viacom in the US legal case."

YouTube blog (Google) says:

"As we let you know on July 4, YouTube received a court order to produce viewing history data. We are pleased to report that Viacom, MTV and other litigants have backed off their original demand for all users' viewing histories and we will not be providing that information. (Read the official legalese here.)

In addition, Viacom and the plaintiffs had originally demanded access to users' private videos, our search technology, and our video identification technology. Our lawyers strongly opposed each of those demands and the court sided with us.

We'll keep you informed of any important developments in this lawsuit. We remain committed to protecting your privacy and we'll continue to fight for your right to share and broadcast your work on YouTube. "

As with all these things the devil will be in the detail. The key provision in the agreement is:

"1. Substituted Values: When producing data from the Logging Database
pursuant to the Order, Defendants shall substitute values while preserving uniqueness for
entries in the following fields: User ID, IP Address and Visitor ID. The parties shall
agree as promptly as feasible on a specific protocol to govern this substitution whereby
each unique value contained in these fields shall be assigned a correlative unique
substituted value, and preexisting interdependencies shall be retained in the version of the
data produced. Defendants shall promptly (no later than 7 business days after execution
of this Stipulation) provide a proposed protocol for this substitution. Defendants agree to
reasonably consult with Plaintiffs’ consultant if necessary to reach agreement on the
protocol."

And the key wording in that provision is "each unique value contained in these fields shall be assigned a correlative unique substituted value, and preexisting interdependencies shall be retained in the version of the data produced" i.e. they can work back to identifying people at a later date when the dust has settled on the negative publicity. Google are also going to have to be very careful with the protocol they use for amending the entries.

The upshot is that the data will not be truly anonymised but Viacom and Google will probably each claw back some points in the PR stakes (for effort), Viacom in particular having been caught off guard by the negative public reaction to their courtroom success.

Viacom's page on the litigation is here.

Republicans and Democrats want national surveillance state

Jack Balkan sees the US Congress's recent passing of the "Foreign Intelligence Surveillance Act of 1978 Amendments Act of 2008" (the act granting telcos immunity for facilitating the Bush administration's mass illegal wiretapping) as another step in a worrying trend whereby the Republicans and Democrats are systematically turning the US into a surveillance society.

"Sandy Levinson and I have noted previously that we are in the midst of the creation of a National Surveillance State, which is the logical successor to the National Security State. And we have noted that, like the National Security State before it, the construction of this new form of governance will be a joint effort by the two major parties... both major political parties are committed to the build up of surveillance programs and technologies for purposes of security and the delivery of government services. We are going to get some form of National Surveillance State. The only question is what kind of state we will get. As of right now, it looks like we will get one that is far less protective of civil liberties than we could have gotten...

Indeed, the fact that Congress is now giving the President the authority to do much of what he was probably doing (illegally) before suggests that Bush's illegal program has to a large degree been ratified by Congress... It is true as a formal matter that Congress has not officially approved of what Bush has done, and it has granted immunity only to the telecom companies, and not to those Administration officials who, in effect, conspired to violate FISA. But at this point I am doubtful that the next Administration will try to prosecute former officials for violating FISA, especially now that Congress has effectively blessed the formerly illegal programs. If this is not a ratification in form, it is surely one in substance."

Dan Solove agrees.

"
I've been particularly dismayed at the Democrats' strategy in dealing with the FISA Amendments. Why bother to try to negotiate a FISA compromise with a presidential administration that has shown nothing but contempt for the law to begin with? The Bush Administration, instead of going to Congress and requesting a change in the FISA, went ahead and blatantly violated that law. And the Administration said it would continue to violate the law, so what's the pressing need to fix the FISA, especially when negotiating with an Administration that only will meet you about 2% of the way? Why force Obama to make a difficult choice about voting on the law, risking either looking weak on security or like a sell-out? Why not wait a few months and then pass a law with a new administration, one that will hopefully be easier to negotiate with? And how is this law any more binding on a president who says he has the right to violate a law based on his Article II powers?

Future presidents can learn a lot from all this -- do exactly what the Bush Administration did! If the law holds you back, don't first go to Congress and try to work something out. Secretly violate that law, and then when you get caught, staunchly demand that Congress change the law to your liking and then immunize any company that might have illegally cooperated with you. That's the lesson. You spit in Congress's face, and they'll give you what you want."

Sunday, July 13, 2008

WALL-E to be a copyright criminal in Canada?

This is quite amusing. The animated hero of one of Hollywood's children's summer blockbusters would be a copyright-infringing criminal under Canada's proposed new copyright law, Bill C061.

Friday, July 11, 2008

Sulston and Stiglitz on the dangers of unbalanced IP

John Sulston and Joseph Stiglitz recently shared a platform at the launch of Manchester University’s new Institute for Science, Ethics and Innovation and both warned of the dangers of unbalanced intellectual property laws and practices. From IP Watch:

"The basic framework of the intellectual property (IP) regime aims to “close down access to knowledge” rather than allowing its dissemination, Professor Joseph Stiglitz said at a 5 July lecture on “Who Owns Science?” Stiglitz, a 2001 Nobel Laureate in Economics, and Professor John Sulston, a 2002 Nobel Laureate in Physiology/Medicine, launched Manchester University’s new Institute for Science, Ethics and Innovation.

Both were highly critical of today’s patent system, saying it stifles science and innovation.

IP is often compared to physical property rights but knowledge is fundamentally different, Stiglitz said. It is a public good with two attributes - “non-rivalrous competition” and non-excludability - meaning it is difficult to prevent others from enjoying its benefits. That runs counter to IP regimes, which are worse than exclusion because they create monopoly power over knowledge that is often abused, he said...

Sulston said science can be driven by need and curiosity, which requires a substantial degree of openness and trust among players. Increasingly, however, the picture is one of private ownership of science and innovation, a situation welcomed by governments and investors who control the direction of research, he said. But the consequence is to funnel science into profitable areas and steer clear of those that will not make money, he said.

That trend has several consequences, including the neglect of research on diseases of the poor and the production of unnecessary drugs sold through high-pressure marketing, Sulston said...

Reversing the trend toward privatisation of science is critical, Sulston said. The world should concentrate on the survival and thriving of humanity, and exploration of the universe, he said. The outcome, he added, depends to a great extent on “who owns science.”"

ICO Data Sharing Review Report

The Data Sharing Review report by the Information Commissioner, Richard Thomas and Mark Walport, the Director of the Wellcome Trust is now available from the Justice Department.

"

Final report

The review's final report concludes that:

  • there is a lack of transparency and accountability in the way organisations deal with personal information
  • there is confusion surrounding the Data Protection Act, particularly the way it interacts with other strands of law
  • greater use could be made of the ability to share personal data safely, particularly in the field of research and statistical analysis
  • the Information Commissioner needs more effective powers, and the resources to allow him to use them properly.

Recommendations

The report makes a series of recommendations, aimed at transforming the personal and organisational culture of those who collect, manage and share information:

  • to improve leadership, accountability and training within organisations
  • to ensure all organisations are as transparent and open as possible about how and with whom data are shared, with what authority, for what purposes and with what protections and safeguards
  • to clarify and simplify the legal framework governing data sharing, including provisions to guarantee better and more authoritative guidance for practitioners
  • to introduce a new statutory procedure to remove unnecessary legal barriers, whilst maintaining robust privacy protections
  • to enhance the role of the Information Commissioner's Officer, providing more robust and properly-resourced powers
  • to develop mechanisms that will enable population-based research and statistical analysis for public benefit, whilst safeguarding the privacy of individuals
  • to help safeguard and protect personal information held in publicly available sources.

You can obtain a hard copy of the report by contacting the review team.

Patent law US style

Amusing short video about how patent law works in the US:

Vendor misinformation in the e-voting world

Dan Wallach has been testifying before the Texas House Committee on Elections. He explains his disappointment with the process at Freedom to Tinker.

Thursday, July 10, 2008

Patry on Fair Use

William Patry has a must read post on fair use for IP geeks, in connection with the criticism by the head of the Copyright Alliance of the release of a code of best practices for online video from a very prestigious group of scholars.

Data Breach Caused by File Sharing

Thanks to Michael Geist for the pointer to this story from the Washington Post: Justice Breyer Is Among Victims in Data Breach Caused by File Sharing

"Sometime late last year, an employee of a McLean investment firm decided to trade some music, or maybe a movie, with like-minded users of the online file-sharing network LimeWire while using a company computer. In doing so, he inadvertently opened the private files of his firm, Wagner Resource Group, to the public.

That exposed the names, dates of birth and Social Security numbers of about 2,000 of the firm's clients, including a number of high-powered lawyers and Supreme Court Justice Stephen G. Breyer."

And this: Dutch chipmaker sues to silence security researchers

"Dutch chipmaker NXP Semiconductors has sued a university in The Netherlands to block publication of research that details security flaws in NXP's Mifare Classic wireless smart cards, which are used in transit and building entry systems around the world."

Senate give telcos immunity for mass wiretapping

Well the US Senate has followed the House's lead in passing a law to give retrospective immunity to all the telecommunications companies which actively took part in the Bush administration's mass unconstitutional wiretapping.

"The Senate approved and sent to the White House a bill overhauling controversial rules on secret government eavesdropping today, bowing to President Bush's demand to protect telecommunications companies from lawsuits complaining they helped the U.S. spy on Americans...

The long fight on Capitol Hill centered on one main question: whether to shield from civil lawsuits any telecommunications companies that helped the government eavesdrop on American phone and computer lines without the permission or knowledge of a secret court created by the Foreign Intelligence Surveillance Act.

The White House had threatened to veto the bill unless it immunized companies such as AT&T Inc. and Verizon Communications Inc. from wiretapping lawsuits. About 40 such lawsuits have been filed, and all are pending before a single U.S. District court...

Just under a third of the Senate, including Democratic presidential candidate Barack Obama, supported an amendment that would have stripped immunity from the bill. They were defeated on a 66-32 vote. Republican rival John McCain did not attend the vote.

Obama ended up voting for the final bill"

Update: Larry Lessig has now shared his views on Obama's change of tack on the telcos immunity. Actually he shared his view that it was "swiftboating" a few days ago not too long after I was wondering what his thoughts on the matter were.

EU study on counterfeiting and piracy

The EU Parliament recently published an interesting study, The Fight Against Counterfeiting and Piracy in the Bilateral Trade Agreements of the EU.

Yes I realise it is unlikely to appeal to anyone outside IP geekdom and not likely to endanger J.K Rowling's place in the bestseller lists but it does make some really sensible recommendations. Here's the Executive Summary:

"Concerns about counterfeiting and piracy are becoming increasingly
widespread and have now taken on an international dimension. Higher
standards of intellectual property protection are being set multilaterally and
through the inclusion of intellectual property provisions in bilateral trade
agreements. The EU Strategy for the Enforcement of Intellectual Property
Rights in Third Countries has undertaken to revisit the approach to the
intellectual property rights chapter of bilateral agreements, including the
clarification and strengthening of the enforcement clauses. This approach
should be reconsidered in the light of on-going negotiations on bilateral trade
agreements with a number of trading partners such as Korea, India, and
ASEAN, while negotiations on bilateral trade with Ukraine and Russia are also
being considered. If the Lisbon Treaty on the Functioning of the European
Union (TFEU) comes into force, the European Parliament will have a
significantly enhanced role to play in the negotiation of such agreements,
including the power of veto. In scrutinising and giving consent to agreements,
it is recommended that the European Parliament takes account of the
following: (1) if intellectual property enforcement provisions are to be included
in agreements, this must be done on the basis of adequate evidence on the
level of counterfeiting and piracy and its effects; (2) intellectual property rights
are private rights and the main responsibility for taking measures to protect
and enforce intellectual property rights should lie with individual right holders;
(3) the European Parliament should consider carefully the need to balance
flexibilities in the TRIPS Agreement with the need for additional provisions in
bilateral agreements to fight counterfeiting and piracy; (4) agreements that
contain provisions on recourse to bilateral dispute settlement mechanisms risk
weakening the multilateral dispute settlement system; (5) provisions in
agreements that expand the scope of border measures to cover exports as
well as goods in transit or transhipment should not be unnecessarily
burdensome and should be subject to the availability of judicial review; (6) the
European Parliament should encourage the EU to undertake needs
assessments in third countries to ensure that adequate and appropriate
technical and financial cooperation is made available on mutually agreed
terms and conditions in order to assist with the training of police, customs
officers, judiciary and other government officials; (7) it would be advantageous
to establish a parliamentary forum or an inter-parliamentary observatory to
monitor and assess the impact of bilateral agreements in the fight against
counterfeiting and piracy."

Well done to Dr. Duncan Matthews at Queen Mary College who produced the study for the Policy Department of the Directorate-General for External Policies of the Union. I wonder how many people know there is such a thing as the Policy Department of the Directorate-General for External Policies of the Union?

Wednesday, July 09, 2008

Patenting indigenous plants

On hearing I had an interest in intellectual property recently, a South American friend told me I should look up the story of the trade dispute over a 1986 US patent in an Amazonian plant called ayahuasca. The plant is considered to be a sacred source of food and medicine by many of the indigenous peoples in the Amazon basin. Here is an outline of the story from the Biopark website:

"Ayahuasca is a traditional medicine central to the lives of indigenous peoples throughout the Amazon river basin. Almost a decade ago, Loren Miller of the International Plant Medicine Corporation applied to the US government to be recognized as the "inventor" of ayahuasca. Although ayahuasca has been produced and used by Amazonian peoples since time immemorial, the US Patent and Trademark Office agreed to grant Miller a patent, a form of intellectual property that conveys exclusive rights to produce and trade the patented item, at least within the country where the patent is granted.

Currently, the patent on ayahuasca applies only to a few western countries, including the U.S.. However, when Amazonian peoples first learned about the patent in the summer of 1996, the Ecuadorian government was considering entering into a trade agreement with the U.S. that would have led to patents granted in the US being extended to Ecuador. Although popular organizing by indigenous peoples and environmentalists temporarily defeated that trade deal, the threat remains that some day the patent on ayahuasca may be recognized and enforced in the Amazon, leading to restrictions on indigenous peoples' use of their sacred plant.

And regardless of whether or not this threat ever turns into reality, granting a foreign corporation intellectual property rights over ayahuasca represents a direct denial of indigenous peoples' rights over their own knowledge and innovation. As stated by COICA, the coordinating body for indigenous peoples' organizations in the Amazon region, "ayahuasca is a fundamental ingredient of the religious ceremonies and of healing for our people, and this patent is a real affront to the over four hundred cultures that populate the Amazon Basin.""

Eventually the US Patent and Trademark Office overturned the patent in 1999 on the basis of prior art. For the academically inclined some further information on the story can be found in Fecteau, L.M. (2001). The ayahuasca patent revocation: Raising questions about current US patent policy. Boston College Third World Law Journal. 69, 74-75.

I believe the patent was reinstated in 2001 following an appeal by the patent holder. I assume it lapsed in 2006? But if anyone knows better do let me know.

Fact checking Viacom's PR on YouTube order

Pamela Jones at Groklaw has been fact checking Viacom's back-peddling PR after the negative reaction to the company following a New York judge's order last week that Google hand over the IP addresses of all YouTube users.

" Viacom has a statement on its site now about the YouTube litigation it probably hopes will reassure you. Leaving out the anti-Google trash talk, it reads like this:
A recent discovery order by the Federal Court hearing the case of Viacom v. YouTube has triggered concern about what information will be disclosed by Google and YouTube and how it will be used. Viacom has not asked for and will not be obtaining any personally identifiable information of any YouTube user. The personally identifiable information that YouTube collects from its users will be stripped from the data before it is transferred to Viacom. Viacom will use the data exclusively for the purpose of proving our case against You Tube and Google.

Viacom has been in discussions with Google to develop a framework to share this data. We are committed to a process that will not only comply with the Court’s confidentiality order, but that will also meet our commitment to the strongest possible internet privacy protections.

That's some progress, if it's true, the part about Google redacting it first. But what's that part about Viacom didn't ask for it? They say the same thing on their homepage, where you can see this questionably true statement:

Viacom has not requested any personally identifiable information from YouTube as part of the litigation.

Say what? I think it would be more truthful to say that they *did too* ask for it, Google asked them to let them redact, Viacom saw the public's reaction, and so it agreed. I gather Viacom has noticed that a lot of consumers, as they view us human beings, seriously hate Viacom's guts because of this over-the-top litigation.

Viacom may think they can say whatever they wish about what they asked for, since the details of their motion to compel were filed in a sealed memorandum. But we're not stupid, and we can read the Order, where the judge tells us what Viacom asked for...

I think they meant to say, we asked for everything we could think of, and now we're sorry we did it, because you hate us now."

I'm not going to dissect the order regarding what Viacom did or didn't ask for since Ms Jones does that very nicely. I will remind you what the judge ordered, however:

"(3) The motion to compel production of all removed videos is granted;
(4) The motion to compel production of all data from the Logging database concerning each time a YouTube video has been viewed on the YouTube website or through embedding on a third-party website is granted...
(7) The motion to compel production of the schema for the Google Video Content database is
granted; "

There is quite a lot of material in YouTube video content that constitutes 'personally identifiable information', including a proportion of those videos that were removed from YouTube that Google now has to hand over to Viacom.

In addition there is quite a lot of 'personally identifiable information' in the collection of 'all data from the Logging database concerning each time a YouTube video has been viewed on the YouTube website or through embedding on a third-party website' that Google has also been ordered to hand over to Viacom.

It is a bit of a stretch to ask us to believe that "Viacom has not requested any personally identifiable information from YouTube as part of the litigation" and that the judge just spontaneously decided that such information should be extracted from Google and passed to Viacom for no reason. Fortunately we can look at the evidence and deduce that the Viacom PR merchants are being economical with the truth. Sadly even the most compelling evidence of falsehood is often not enough to convince people about what has happened. The temporary negative reaction to Viacom will pass and the Google order will be forgotten, since these things are too ethereal for our world of short attention spans to pay attention to for very long.

Thanks to Glyn via the ORG list for the pointer.

Justice can't be done in secret

I recommend Damiel Finkelstein's article in the Times today, Justice can't be done in secret. And here's why

"This week in times2, my colleague Camilla Cavendish has been telling some terrible stories of children taken from their parents without good reason and adopted against their will, never to be returned. And all in secret. Not a word to be published...the secrecy is a scandal.

On April 19, 1989, a young woman jogging in Central Park, New York, was attacked. That understates it. She was brutally beaten and raped...

About ten years after being sentenced for his part... Kharey Wise met a man in prison, another New York rapist, called Matias Reyes. And the more Reyes got to think about it the sorrier he felt for his new friend. For Reyes knew something that the police and the courts did not... The confessions were coerced, as the young men had claimed for years. How did he know it? Because he, Matias Reyes, had really raped and beaten the Central Park Jogger... he moment that Reyes confessed, it was clear that he was indeed guilty. His DNA was linked to the rape...

Yet the prosecution lawyer in the original case refused to accept this. She was furious. She stridently opposed the finding of the DA. So did the New York Police Department. They convened a panel that concluded that the police had done nothing wrong...

It is commonly thought that we have theories and that they are tested by the facts. The opposite is true. We have theories and then we strive mightily to fit the facts into them, ignoring those that don't quite work or reinterpreting them if we have to. The more we have at stake emotionally, the more pressing this task becomes."

I'm sure few people understand this as well as Shirley McKie and her family. As Michael Russell says:

"There can now be no doubt at all that the evidence offered against Shirley by the authorities at the time of her trial was false. There were no possible grounds for believing that the fingerprint at the crime scene was hers. That has been attested to by finger print experts from across the world...

Over recent months and years both Shirley’s father, Iain, and myself have written on many occasions to the Lord Advocate (Scotland’s Chief Prosecutor) and to the Scottish Justice Minister . We both became increasingly frustrated at the total lack of response to our enquiries.

Throughout this case, it has become obvious that political pressure coupled with media attention, are the most effective weapons when democratic institutions become arrogant or defensive.

I am still concerned that the oppressive and unjustified police behaviour against Shirley at the time of her arrest and subsequently has not yet been explained, still less apologised for. Responses to me from Strathclyde Police have been evasive and unsatisfactory.

There is also little sign that the question of possible perjury by witnesses at the trial is being seriously addressed. Nor is there any official willingness to acknowledge that Ms McKie suffered unjust treatment at the hands of the Scottish Criminal Records Office. Without an apology there can be no real acknowledgement of what has actually happened, nor any real possibility of moving forward.

In addition there must be substantial concern, given what has discovered over the past months and years, that there may be other cases in which SCRO has dealt with tainted evidence."

Shirley's father, Iain, was tremendously helpful when I wanted to include her story in my book as a seminal example of how badly things can go wrong when experts make mistakes and the system, within which those experts operate, closes ranks and refuses to acknowledge and make recompense for them, in spite of overwhelming evidence.

Essentially, then, it can be incredibly difficult to get through to people who don't want to know and the resultant consequences are often appalling.

Tuesday, July 08, 2008

42 days

I have refrained from commenting on the 42 day detention without charge period that the UK House of Commons voted for on 11th June, 2008.

The Independent reports that members of the House of Lords are starting an attack on the
measure today. In addition Liberty have launched a 'say no to 42 days' charge or release campaign.

Of all the news commentary, political excuses etc. I've been through on this, one of the best remains a simple message to the ORG list from a Martin Coxhall the day after our political representatives made such a reprehensible decision:

"Canada - 24 hours
South Africa, New Zealand and Germany - 2 days
Denmark and Norway - 3 days
Italy - 4 days
Russia and Spain - 5 days
France - 6 days
Ireland - 7 days
Turkey - 7.5 days
Australia - 12 days.
USA - 2 days

And...

UK - 42 days."

It is the 60th anniversary of the signing of the Universal Declaration of Human Rights(UDHR) on 10th December this year. It's hard to imagine the contempt that Eleanor Roosevelt - who lead the UDHR drafting commission and as a direct result of that work became one of the few people in history to receive a standing ovation from the UN General Assembly - would feel for modern politicians on both sides of the pond (the US 2-day pre-charge detention period doesn't apply to Guantanamo Bay) and the damage they have done to civil rights worldwide.

Update: The former head of MI5, Baroness Manningham-Buller has, much to the disgust of government ministers, used her maiden speech in the House of Lords to oppose the 42 day detention without charge period. She said (scroll down to 'column 647'):

"On a matter of principle, I cannot support 42 days’ precharge detention. I don’t see on a practical basis, as well as a principled one, that these proposals are in any way workable."

MEPs back telecoms package with 3 strikes amendment

The BBC is reporting that MEPs have voted in favour of the telecoms package with the 800 amendments relating to everything from online privacy invasion to lack of due process banning people from the internet for suspected copyright infringement.

You'll recall that the IMCO (Committee on Internal Market and Consumer Protection) and the ITRE (Committee on Industry, Research and Energy) were considering the package yesterday. There are no direct details from either of these committees yet to see what exactly was discussed or agreed.

UK Conservative MEP
Malcolm Harbour has been rolled out to explain how dismayed the MEPs are at the misunderstanding of their intentions. He made a heartfelt plea to be seen to be working towards protecting and improving internet users rights and claimed that this was what the telecoms package was really about.

The IMCO committee is chaired by UK Labour MEP Arlene McCarthy. Now why am I putting those two names together in the recesses of my mind with an IP expansionist agenda? Well it could be because Harbour and McCarthy were a couple of the prime movers, along with rapporteur Janelly Fourtou (wife of Jean-Rene Fourtou, CEO of Vivendi Universal), behind fast tracking the intellectual property rights enforcement directive in 2004? Isn't that nice - Labour and Conservative working in harmony.

They failed at the time to get the absolute worst excesses of the original draft of that directive through - which would have included provisions to jail teenagers (and the managers of the ISPs they used) for swapping songs on the Net - but they are working hard on getting these included in the second IPR enforcement directive, coming to the EU and a member state near you very soon.

McCarthy incidentally was the rapporteur who drove the software patents directive to the edge of implementation too. Software patent anoraks will recall that there were several attempts to slip that one through the agriculture and fisheries committee without discussion.

I presume, therefore, I can be forgiven for not accepting at face value statements from Mr Harbour that he's really looking out for the interests of ordinary Internet users when he supports complex legislative monsters like the telecoms package and its inherent regulatory timebombs. He may even be sincere in that belief but he needs to realise that the interests of agents (commerce), creators and the public are not exactly aligned or coincident though they do sometimes overlap.

Update: Lilian at least is feeling cheered by Mr Harbour's assurances.

Code of Best Practices in Fair Use for Online Video

After the Google v Viacom decision last week, here's a timely release of a code of best practices for online video from a very prestigious group of scholars, via the Center for Social Media.

"Remixes, mashups, fan tributes and other creative work burgeoning in online video often use copyrighted material without permission or payment. When is it fair to do so? In many cases, creators can employ fair use, a key feature of copyright law. Today marks the release of the Center’s newest publication, the Code of Best Practices in Fair Use for Online Video. Our latest effort in promoting fair use practices among media makers, the code focuses on the still-evolving world of online video, and will help to protect creators from automatic censorship that results from copyright filtering.

The Code of Best Practices in Fair Use for Online Video was written collaboratively with a committee of legal and media scholars, and was coordinated by Pat Aufderheide and Peter Jaszi of American University. Our acclaimed committee of writers includes:

  • Michael C. Donaldson, Esq., Los Angeles
  • Anthony Falzone, lecturer, executive director, Fair Use Project, Stanford Law School
  • Lewis Hyde, Richard L. Thomas Professor of Creative Writing, Kenyon College; fellow, Berkman Center for Internet and Society, Harvard University
  • Mizuko Ito, research scientist, School of Cinematic Arts, University of Southern California
  • Henry Jenkins, professor, program head, comparative media studies, Massachusetts Institute of Technology
  • Michael Madison, associate dean for research, associate professor of law, University of Pittsburgh School of Law
  • Pamela Samuelson, Richard M. Sherman Distinguished Professor of Law and Information, University of California, Berkeley
  • Rebecca Tushnet, professor, Georgetown University Law Center, Georgetown University
  • Jennifer Urban, clinical associate professor of law; director of Intellectual Property and Technology Law Clinic, University of Southern California

The goals of the code are to clearly establish what constitutes fair use in online video, and to reach out to creators and copyright holders alike to create a common awareness of what kind of quoting is legal and illegal. This can only be accomplished through participation — by spreading the word to your users, you can help to protect this emerging culture."

Monday, July 07, 2008

Naughton on Zittrain

John has done a terrific review of Jonathan Zittrain's new book, The Future of the Internet and How to Stop It, at Management Today.

"Life without this digital ecosystem is now unthinkable - as Estonia discovered when it underwent a savage cyber-attack a year ago. And yet the very features that have made the internet such a creative force in our societies now threaten its future - as citizens, governments and corporations, exasperated or terrified by online mayhem, combine to 'lock down' and regulate the network. Such a future - if it came about - would implement an Orwellian nightmare of comprehensive surveillance and perfect enforcement. It might also strangle the technological goose that has laid so many golden eggs. And it will happen, unless we take avoiding action...

Zittrain's great insight is that the combination of the personal computer and the open internet created what he calls a 'generative system'. He defines generativity as 'a system's capacity to produce unanticipated social change through unfiltered contributions from broad and varied audiences'. In other words, an endless capacity for springing surprises...

The beauty of The Future of the Internet is that it's an ideal primer for the debate that we now need to have about all this."

Europe votes on anti-piracy laws

The BBC has picked up on the EU telecoms package vote which treatens to incorporate 3 strikes copyright rules by the back door.

Corruption of the EU policymaking process?

Given that the telecoms framework legislative package, with its secret 3 strikes copyright amendments, is being considered by two important EU committes today (the IMCO (Committee on Internal Market and Consumer Protection) and ITRE (Committee on Industry, Research and Energy) committees for the EU anoraks amongst you), it is perhaps unsurprising that Phillipe Aigrain takes the opportunity to rail against what he perceives to be corruption of the policymaking process in the EU. Monsieur Aigrain dedicates the post to Larry Lessig and his change Congress initiative.

Friday, July 04, 2008

A new business model for the music industry

Bennett Lincoff has a really interesting article at IP Watch suggesting a new business model for the music industry.

Highly recommended and it should be read in conjunction with Fred Von Lohmann's A Better Way Forward: Voluntary Collective Licensing of Music File Sharing.

Thursday, July 03, 2008

3 strikes amendments to EU telecoms proposals

Thanks also ORG for an update on the music industry's lobbying efforts to encourage the introduction of a 3 strikes law at European level, via last minute amendments to proposed telecoms legislation.

"Over in France, President Nicolas Sarkozy (who also took over the European presidency yesterday) has put his weight behind legislation proposed by the Olivennes report. The bill, which has been delayed until the Autumn, will mandate termination of internet connections. It goes without saying that it is the subject of much controversy across the Channel.

La Quadrature du Net - a French pressure group - have been actively campaigning on the issue. They’re also tracking the progress of the Telecoms Package, a review of European telecoms law currently in the European Parliament. Ordinarily this bill would deal with network infrastructure, universal service and other purely telecoms matters.

But as La Quadrature du Net announced yesterday:

“One week before a key vote in the reform of European law on electronic communications (”Telecom Package”), La Quadrature du Net (Squaring the Net) denounces a series of amendments aimed at closing the open architecture of the Internet for more control and surveillance of users..

…this set of amendments creates the unprecedented mechanism known as graduated response in European law; judicial authority and law courts are vacated in favour of private actors and “technical measures” of surveillance and filtering. According to rules set forth by administrative authorities and rights holders, intermediaries will be forced to cooperate in monitoring and filtering their subscribers, or they will be exposed to administrative sanctions”

If you want to voice your concerns about 3 strikes legislation brought in through the backdoor in Brussels, you have until 7 July, the date of the vote in IMCO and ITRE committees, to contact your MEP and inform them that the “Telecoms Package” amendments could bring in disproportionate and ineffective law.

You can find details of your MEPs here. Suggestions for topics to raise in your letters are here and analysis and commented amendments with other resources about the Telecoms Package are also available."

Lilian Edwards has pointed out in great detail why a 3 strikes approach to tackling copyright infringement on the Net is inappropriate from all kinds of legal perspectives, so I won't repeat her lessons here. This is just the latest example of how the EU can be used and abused as a policy laundering mechanism for proposals which have been categorically rejected at member state level. It's also the kind of thing which simultaneously undermines the ideals of the EU and the sovereignty of member states and I guess reinforces the wisdom of my fellow countrymen and women in the recent referendum on the Lisbon treaty.

Update: If you'd like the whole story in one gulp, a relatively large gulp, then there's nothing to beat Lilian's latest blog post on the subject. Essential reading. And btw the vote on the complex telecoms legislation, which will mandate a 3 strikes rule across the EU as one of many major side effects, is tomorrow, Monday 7th July.

Judge orders Google to hand over IP addresses of all YouTube users

A New York judge this week has ordered Google to hand over the IP addresses of all YouTube users to Viacom. In a 25 page ruling with good and bad news for both Google and Viacom, the judge concluded:

"(1) The cross-motion for a protective order
barring disclosure of the source code for the
YouTube.com search function is granted, and the
motion to compel production of that search code is
denied;
(2) The motion to compel production of the
source code for the Video ID program is denied;
(3) The motion to compel production of all
removed videos is granted;
(4) The motion to compel production of all data
from the Logging database concerning each time a
YouTube video has been viewed on the YouTube website
or through embedding on a third-party website is
granted;
(5) The motion to compel production of those
data fields which defendants have agreed t o produce
for works-in-suit, for all videos that have been posted
to the YouTube website is denied;
(6) The motion t o compel production of the
schema for the Google Advertising database is
denied ;
(7) The motion to compel production of the
schema for the Google Video Content database is
granted; and
(8) The motion to compel production of the
private videos and data related to them is denied at
this time except to the extent it seeks production
of specified non-content data about such videos ."

The EFF are appalled at the ruling, particularly item (4) and are claiming it:

"erroneously ignores the protections of the federal Video Privacy Protection Act (VPPA), and threatens to expose deeply private information about what videos are watched by YouTube users. The VPPA passed after a newspaper disclosed Supreme Court nominee Robert Bork's video rental records. As Congress recognized, your selection of videos to watch is deeply personal and deserves the strongest protection...

The VPPA protects “personally identifiable information,” which is defined to include “information which identifies a person as having requested or obtained specific video materials or services.” This is exactly what is in the Logging database.

Accordingly, pursuant to this federal law, the Court may not order the production of “personally identifiable information”:

in a civil proceeding [except] upon a showing of compelling need for the information that cannot be accommodated by any other means, if—

(i) the consumer is given reasonable notice, by the person seeking the disclosure, of the court proceeding relevant to the issuance of the court order; and
(ii) the consumer is afforded the opportunity to appear and contest the claim of the person seeking the disclosure.

Today’s court order made no finding that Viacom could not be accommodated by any other means, nor were the YouTube users provided with notice and an opportunity to contest the claim...

In any event, the court ordered production of not just IP addresses, but also all the associated information in the Logging database. Whatever might be said about 'an IP address without additional information,' the the AOL search history leak fiasco shows that the material viewed by a user alone can be sufficient to identify the user, even with neither a login nor an IP address.

The Court's erroneous ruling is a set-back to privacy rights, and will allow Viacom to see what you are watching on YouTube. We urge Viacom to back off this overbroad request and Google to take all steps necessary to challenge this order and protect the rights of its users."

Thanks to Glyn at ORG for the alert via the Wired blog.

Update: The Lib Dems have noticed the judgment and expressed concern.

University asserts downloading texts is fair use

Here's an interesting case - Georgia State University are actually rolling out the lawyers to assert that its online distribution of course material is permitted under copyright law's fair-use exemption.

The argument is in response to a copyright infringement lawsuit brought by Oxford University Press, Cambridge University Press and Sage Publications.

"The outcome of the lawsuit could have consequences for how colleges throughout the country distribute course material online. Publishers and colleges have been tussling for years about whether and under what circumstances colleges can make publishers' electronic material available to students."

Wednesday, July 02, 2008

ORG report on London elections published

ORG's report on the May 2008 elections in London has just been published. (Thanks for the alert, Glyn). It comes at a timely moment for me, since I'm scheduled to draft a case study on evoting at some stage in the next few weeks, for a forthcoming Open University course on ICT. I'm also hoping to get together the main framework of a response to the government's consultation, nominally on choice of election day. But buried deep within said consultation are apparently throw away questions on evoting:

"Question 4 Do you think that greater access to remote voting (whether through traditional postal voting or by electronic means) should be made available alongside weekend voting? Should such arrangements be explored even if polling day were not moved to the weekend? Please explain why.

Question 5 What do you perceive to be the benefits and the drawbacks of remote e-voting?"

The ORG report on London is a clinical indictment of the reality of using evoting in a live election, even when the project managers of that election do a commendable job within the constraints that they are operating to, and it concludes that:

"There is insufficient evidence available to let independent observers reliably state whether the results declared in the May 2008 elections for the Mayor of London and the London Assembly are an accurate representation of voters‘ intentions."

The good folks at ORG also make a number of recommendations:

"Recommendations

ORG‘s position is that e-counting obscures the workings of elections from voters and candidates. Mitigating this risk in order to sufficiently enhance the transparency of e-counts could well be more expensive than sticking with manual methods. ORG has received comments that suggest that e-counting is inevitable and that opposing these technologies is a Luddite view. ORG disagrees, and considers it telling that a significant proportion of those concerned about voting and counting technologies are computer scientists and professionals, who are normally the most enthusiastic adopters of new technology.

The political climate is still in the shadows of the chaotic May 2007 e-count in Scotland, and the electoral timetable is likely to preclude the deployment of computers in elections for the next two years. For the moment, therefore, ORG recognises that elections administrators may be turning away from experimenting with e-counting technologies in statutory elections. However, ORG suspects that in two years' time these deterrents may have faded and legislators may feel eager to experiment with e-counting again. ORG therefore makes the following recommendations for improved practice in e-counting below, and refers any legislators tempted to reopen the Pandora‘s box of e-voting to the conclusions and recommendations of ORG‘s May 2007 elections report.

Recommendation 1: A full cost-benefit analysis of electronic counting at the London elections in May 2008 should be performed by London Elects. The analysis should be set against a properly-costed manual count of similar scope. London Elects should also cost the following recommended enhancements to the electronic count, including:
o A statistically significant live manual audit on count day, or some other effective means, accessible to the layperson, of monitoring votes that are counted as valid
o A comprehensive, independent audit of all source code deployed on e-counting systems, made publicly available before the elections
o Improved record-keeping facilities at the ballot box verification stage
o Improved transparency around the contractor‘s service management desk
o System-designed assurance that the voter‘s paper ballot remains the ballot of record so that, for example, paper ballots can easily be retrieved by CROs wishing to ascertain the intention of a voter where this is not clear from the scanned image of a ballot.

Recommendation 2: Time should be given for formal consultation — at national and local levels — prior to the approval of e-counting being used in an election.

Recommendation 3: Administrators should remain committed to long lead-in times for procurement and implementation of election technology. Based on the experience of London Elects, ORG revises this figure upwards from one year (as recommended in ORG‘s May 2007 report) to 18 months as a suitable application and implementation timetable."

ECHR: UK phone tap practices illegal

Yesterday the European Court of Human Rights ruled, in a case brought by Liberty, the British Irish Rights Watch and the Irish Council for Civil Liberties, that UK phone tapping practices contravened Article 8 of the European Convention on Human Rights. Basically they noted that the practice of phone tapping under the relevant 1985 interception of communications act (now superceded by the Regulation of Investigatory Powers Act 2000) were way too broad and sweeping, had insufficient checks and balances, and breached the technical need for users of communications services to have come degree of clarity and foreseeability about the circumstances under which interception might occur.

I wonder what the court would make of the mass unconstitutional wiretapping programme sanctioned by the Bush administration and facilitated by the telcos in the US and the fact that both the main candidates for the presidential election in November are now committed to giving retroactive immunity to the organisations involved?

Extract from the court's decision yesterday:

"I. ALLEGED VIOLATION OF ARTICLE 8 OF THE CONVENTION

41. The applicants complained about the interception of their communications, contrary to Article 8 of the Convention:

“1. Everyone has the right to respect for his private and family life, his home and his correspondence.

2. There shall be no interference by a public authority with the exercise of this right except such as is in accordance with the law and is necessary in a democratic society in the interests of national security, public safety or the economic well-being of the country, for the prevention of disorder or crime, for the protection of health or morals, or for the protection of the rights and freedoms of others.”

A. The parties’ submissions

1. The applicants

42. The applicants complained that, between 1990 and 1997, telephone, facsimile, e-mail and data communications between them were intercepted by the Capenhurst facility, including legally privileged and confidential material.

43. Through the statements of Mr Duncan Campbell, a telecommunications expert, they alleged that the process applying to external warrants under section 3(2) of the 1985 Act embodied five stages...

44. The applicants contended that since the section 3(2) procedure permitted the interception of all communications falling within the large category set out in each warrant, the only protection afforded to those whose communications were intercepted was that the Secretary of State, under section 6(1) of the Act, had to “make such arrangements as he considers necessary for the purpose of securing that ... so much of the intercepted material as is not certified by the certificate is not read, looked at or listened to by any person” unless the requirements of section 6(2) were met. However, the precise nature of these “arrangements” were not, at the relevant time, made known to the public, nor was there any procedure available to permit an individual to satisfy him or herself that the “arrangements” had been followed. The Tribunal did not have jurisdiction to examine such compliance, and although the Commissioner was authorised under section 8 to review the adequacy of the “arrangements” in general, he had no power to review whether they had been met in an individual case.

45. It was plain that the alleged interception of communications constituted an interference with the applicants’ rights under Article 8 § 1. Any such interception, to comply with Article 8 § 2, had to be “in accordance with the law”, and thus have a basis in domestic law that was adequately accessible and formulated with sufficient precision as to be foreseeable. They contended that the United Kingdom legislation breached the requirements of foreseeability...

A. Admissibility

55. The Court notes that this complaint is not manifestly ill-founded within the meaning of Article 35 § 3 of the Convention. It further notes that it is not inadmissible on any other grounds. It must therefore be declared admissible.

B. Merits

1. Whether there was an interference

56. Telephone, facsimile and e-mail communications are covered by the notions of “private life” and “correspondence” within the meaning of Article 8 (see Weber and Saravia v. Germany (dec.), no. 54934/00, § 77, 29 June 2006, and the cases cited therein). The Court recalls its findings in previous cases to the effect that the mere existence of legislation which allows a system for the secret monitoring of communications entails a threat of surveillance for all those to whom the legislation may be applied. This threat necessarily strikes at freedom of communication between users of the telecommunications services and thereby amounts in itself to an interference with the exercise of the applicants’ rights under Article 8, irrespective of any measures actually taken against them (see Weber and Saravia, cited above, § 78).

57. The Court notes that the Government are prepared to proceed, for the purposes of the present application, on the basis that the applicants can claim to be victims of an interference with their communications sent to or from their offices in the United Kingdom and Ireland... The Court considers that the existence of these powers, particularly those permitting the examination, use and storage of intercepted communications constituted an interference with the Article 8 rights of the applicants, since they were persons to whom these powers might have been applied (see Weber and Saravia, cited above, §§ 78-79).

2. Whether the interference was justified

58. Such an interference is justified by the terms of paragraph 2 of Article 8 only if it is “in accordance with the law”, pursues one or more of the legitimate aims referred to in paragraph 2 and is “necessary in a democratic society” in order to achieve the aim or aims (see Weber and Saravia, cited above, § 80)...

69. In conclusion, the Court does not consider that the domestic law at the relevant time indicated with sufficient clarity, so as to provide adequate protection against abuse of power, the scope or manner of exercise of the very wide discretion conferred on the State to intercept and examine external communications. In particular, it did not, as required by the Court’s case-law, set out in a form accessible to the public any indication of the procedure to be followed for selecting for examination, sharing, storing and destroying intercepted material. The interference with the applicants’ rights under Article 8 was not, therefore, “in accordance with the law”.

70. It follows that there has been a violation of Article 8 in this case."

The court also awarded legal costs against the UK government. There's a brief report on the case in the Guardian. The other mainstream news outlets seem to have missed the decision for the moment.

Update: RTE have picked it up now, as have Reuters. Also possibly more accessible to ordinary mortals than the judgment itself is the press release related to it issued by the Court Registrar.

Update 2: I recommend the articles written by Richard Lamont, who deduced the real purpose of the 'Capenhurst Tower' interception facility at the centre of this case in 1999, available here and here. Thanks to Richard Lamont himself for the alert via the ukcrypto list.

Tuesday, July 01, 2008

d Data Control and Social Networking: Irreconcilable Ideas?

Lilian and Ian have just completed a chapter for a forthcoming book to be edited by Andrea Matwyshyn. They presented a really interesting talk at Gikii II last autumn about the privacy settings in Facebook, Stalking 2.0: privacy protection in a leading Social Networking Site, and this chapter serves to round off this work. I've been reading Data Control and Social Networking: Irreconcilable Ideas? this afternoon and recommend it highly.

Abstract:

" The future of both law and technology will require reconciling users' desire to self-disclose information with their simultaneous desire that this information be protected. Security of personal information and user privacy are potentially irreconcilable with the conflicting set of user preferences regarding information sharing behaviours and the convenience of using technology to do so. Social networking sites (SNSs) provide the latest and perhaps most complicated case study to date of these technologies where consumers' desire for data security and control conflict with their desire to self-disclose. Although the law may provide some data control protections, aspects of the code itself provide equally important means of achieving a delicate balance between users' expectations of data security and privacy and their desire to share information."

They raise serious concerns about the almost universal ignorance of the users of social networking sites about the uses of their sensitive private data by the owners of these sites and other third parties. They also suggest some ways forward, including privacy enhanced software/code architectures for such sites, as the abstract above notes.

The main value of this work though is in the clear and comprehensive analysis of the issues and their clarion call for an urgent review of how social networking sites might be regulated, through law and/or code, in a way which builds in a default respect for the privacy of their users and, in addition, recognises the wider value of privacy to society as a whole. Policymakers in government and industry please take note.

Programmed for control

Henry Porter was in full flow in the Observer again this past weekend.

"Rights, liberties and the liberty instinct are evaporating in this country, partly through ignorance of the historic struggle to win our freedoms - and the civilising effect this had on the world - and partly from selfishness and fear that has been remorselessly encouraged by the tabloid press. Into this gap have stepped sinister forces in the Civil Service and a government programmed to think of governance as no more than control.

We may be at the stage where we should coldly ask what is the point of personal freedom in our society? Russia has democracy without liberty and China has capitalism without democracy or liberty. Does the 21st century need to bother with the thing that tied up so much effort in the previous 250 years? Have personal freedom and rights become redundant...

Do we sacrifice the freedom to bring up children as best we can, to assembly, to protest, to free speech and privacy of communication and movement for the - unguaranteed - freedom from terror, crime and antisocial behaviour?...

Justice Secretary Jack Straw declared: 'Yes, the sun does rise in the East. And yes, we have deepened and extended civil liberties for all', sentences which should earn him a pelting with soft fruit whenever he appears in public...

Last week, the Poynter review on the loss of 25 million records from HM Revenue & Customs was published. The culprits - Gordon Brown, Dawn Primarolo MP and David Varney, the former head of the HRMC - have all moved on to other jobs, in Varney's case to the Transformational Government project that will oversee the merger of all government databases in a monstrous implement of surveillance. Forget privacy, let's just think about the appalling, and expensive, mess that this is likely to result in. And while we're about it, the waste of public funds in local government surveillance operations and CCTV systems which Detective Chief Inspector Mike Neville, Scotland Yard's CCTV expert, declared an 'utter fiasco'...

Parliament had better begin to address these issues soon or a chimpanzee living in Spain will have more rights than you and me."

Obama u-turn on telecomms immunity for mass wire-tapping

It appears that Barack Obama has changed his mind about retroactive immunity for telecoms companies involved in the Bush administration's mass, secret, unconstitutional wiretapping program.

During the Democratic primary campaign he made repeated commitments not to support retroactive immunity. Now he is apparently in favour of immunity for those companies.

From last Friday's Washington Post:

""To be clear: Barack will support a filibuster of any bill that includes retroactive immunity for telecommunications companies."

-- Obama spokesman Bill Burton, Oct. 24, 2007

That was then: Democratic primaries to be won, netroot lefties to be seduced. With all that (and Hillary Clinton) out of the way, Obama now says he'll vote in favor of the new FISA bill that gives the telecom companies blanket immunity for post-Sept. 11 eavesdropping...

Remember his pledge to stick to public financing? Now flush with cash, he is the first general-election candidate since Watergate to opt out. Some goo-goo clean-government types chided him, but the mainstream editorialists who for years had been railing against private financing as hopelessly corrupt and corrupting evinced only the mildest of disappointment.

Indeed, the New York Times expressed a sympathetic understanding of Obama's about-face by buying his preposterous claim that it was a preemptive attack on McCain's 527 independent expenditure groups -- notwithstanding the fact that (a) as Politico's Jonathan Martin notes, "there are no serious anti-Obama 527s in existence nor are there any immediate plans to create such a group" and (b) the only independent ad of any consequence now running in the entire country is an AFSCME-MoveOn.org co-production savaging McCain."

Dominic Lawson in the Independent is not impressed either but then he's never been an Obama fan. And sadly people have to realise that Obama is not bringing a new dawn. He's just a politcian and he does what modern politicians do - bend in the breeze and tell their various interests what they want to hear.

I would be interested to hear what Larry Lessig makes of Obama's opting out of the public campaign financing system though. Larry, after all, is committed to changing Congress. Not that McCain will be short of funds with lots of "independent" groups apparently spending significant funds campaigning on his behalf. Just don't go expecting massive change in US politics whichever of the two men succeeds in achieving the highest office in November's election. The paymasters will still be looking for their pound of flesh.

Just as Obama has dropped his commitment to dealing with illegal wiretapping, we can expect that David Cameron, should the Tories ever get elected this side of the pond, will drop his opposition to ID cards and other illiberal hi tech surveillance systems brought in by Nu Labour; and for the very same reason - fear of being accused of being soft on terror and despite the fact that the deployment of these systems make dealing with terror much more difficult.

Update: Jack Balkan's and Marty Lederman's posts on the substance of the new FISA amendments are essential reading for anyone interested in the subject.

NHS sinking in administrative drivel

Slightly off topic for this blog but Simon Carr has been listening to the Health Secretary's plans for the NHS and predicting that revered British institution is going to sink even deeper into an ever expanding sea of administrative drivel.

There will be "An increasing focus for GPs" on "improving the health of individuals". Hmmm. Ok. That's not exactly new but credit where credit is due.

They are committed to an improvement in the "Quality and Outcomes Framework" through the mechanism of a "clinical dashboard", annual "Quality Accounts" and "an unwavering, unrelenting, unprecedented focus on quality".

They plan "to bring clarity to quality", a "strong clinical voice elevated through the Review", "new expectations of professionalism" to "redefine their roles as practitioners" and a set of "rights and responsibilities of a newly-enhanced accountability".

We've been burdened with "quality assessment" in the education system for as long as I can remember and before that similarly during my time in industry there was an obsession with gaining external quality awards like ISO 9001 and the BSA equivalent, British Quality Awards etc. etc. An aspiration towards providing quality products and services is commendable. Unfortunately in practice the management of quality rapidly degenerates into a hugely complex box ticking paper chase, where the incentives to pretend the organisation is doing better than it is become overwhelming; and the resources expended on feeding the organisation's "quality" administrative system grow exponentially and have been known to overtake the resources spent on the core business, as sustaining the quality monster becomes an end in itself.

Monday, June 30, 2008

U.S. and Europe Near Agreement on Private Data

From Saturday's NYT, something else in the almost hard to believe category- ie hard to believe that this is the same EU that less than a decade ago was on the verge of a trade war with the US over the latter's lack of appropriate protection for personal data but eventually compromised with the data safe harbor provisions - U.S. and Europe Near Agreement on Private Data

"The United States and the European Union are nearing completion of an agreement allowing law enforcement and security agencies to obtain private information — like credit card transactions, travel histories and Internet browsing habits — about people on the other side of the Atlantic Ocean.

The potential agreement, as outlined in an internal report obtained by The New York Times, would represent a diplomatic breakthrough for American counterterrorism officials, who have clashed with the European Union over demands for personal data. Europe generally has more stringent laws restricting how governments and businesses can collect and transfer such information.

Negotiators, who have been meeting since February 2007, have largely agreed on draft language for 12 major issues central to a “binding international agreement,” the report said. The pact would make clear that it is lawful for European governments and companies to transfer personal information to the United States, and vice versa."

PM's claims about DNA database false

Speaking of fearmongering, GeneWatch UK have looked into Gordon Brown's recent claim that 114 murderers would have walked free if innocent people's DNA was not recorded on the national DNA database. They concluded, not surprisingly, that:

"
1. The Prime Minister’s claim is false;
2. Ministers are well aware that this claim is false;
3. This figure is misleading to members of the public who are concerned about the
implications of retaining innocent people’s records indefinitely on the National
DNA Database...

It is not possible – let alone probable - that 114 murderers would have walked away if
DNA profiles from innocent people were not kept on the NDNAD, because the number of
convictions is always considerably less than the number of DNA matches. In addition,
suspects in murder cases are often identified by means other than a ‘cold hit’ on the
Database: claiming that they would “walk away” if they did not have a record on the
Database is therefore highly misleading. Since the law changed, the Government has
provided no examples of murders that have been solved as a result of retaining the DNA
of innocent people beyond the period necessary to investigate whether they have
committed a past offence...

The British Academy of Forensic Sciences has noted that “in reality there are a number
of disadvantages” with profiling everyone at birth, which it lists as24:
• The scale of the operation would be disproportionate, since only a minority commit
crimes
• It would increase anxieties about ‘big brother’, already evoked by widespread CCTV
coverage and proposed biometric identity cards
• It might be seen to imply that we are all guilty until proven innocent
• There have, and will be, mistakes, chance matches and false matches with close
relatives, made even more likely where profiles are incomplete
• Links will be established all the time between the scene and innocent individuals,
leading to false inferences
• It would render every member of the population vulnerable to attack, by for example
having their DNA planted at a crime scene
• In future it is possible that profiles could also reveal confidential information about the
health of an individual
• It would be impossible to control for the large numbers of people who enter and leave
the country, both legally and illegally...

The NDNAD is a useful tool in criminal investigations, but the permanent retention on it
of everyone who has been arrested for a recordable offence raises important concerns
about privacy and rights, including:
· the potential threat to ‘genetic privacy’ if information is revealed about health or
family relationships, not just identity;
· the creation of a permanent ‘list of suspects’ that could be misused by governments
or others;
· the potential for unauthorised access, abuses and/or misuses and mistakes:
including the tracking of individuals and their relatives, and the implications of false
matches;
· the exacerbation of discrimination in the criminal justice system.
GeneWatch UK is not opposed to the existence of the DNA Database, or the use of DNA
in criminal investigations, but has questioned the benefits of its rapid expansion.

Overall, analysis of Home Office data shows that collecting more DNA from crime
scenes has made a significant difference to the number of crimes detected using DNA,
but keeping DNA from increasing numbers of individuals has not...

Examination of the evidence shows that:
· The figures cited by the Prime Minister refer to an estimate of DNA matches, not
solved crimes;
· The reported matches are not actual matches obtained with individuals’ profiles
retained on the NDNAD following acquittal or charges being dropped, but are an
estimate based on a number of unverifiable assumptions;
· DNA matches are not successful prosecutions and many matches occur with the
DNA of individuals who are not the perpetrator of the crime, including victims and
passers-by, or are false matches;
· The retention of DNA samples has not contributed to the detection and prosecution
of serious crime – only the retention of computerised DNA profiles on the NDNAD is
necessary to obtain a match. The DNA samples are stored by the commercial
laboratories which analyse them for an annual fee, and raise additional privacy
concerns because they contain unlimited genetic information.
· Misinformation about the impact of DNA retention on solved crimes is likely to
mislead the public about the recent massive expansion of the National DNA
Database. Retaining innocent individuals’ DNA is costly but has delivered no
detectable improvement in solving crimes: this contrasts with the improved collection
and analysis of crime scene DNA.

GeneWatch UK concludes that:

1.The Prime Minister’s claim that “in all probability” 114 murderers would have
walked away had innocent people’s records not been retained on the National
DNA Database is false.
2. Ministers are well aware that this claim is false;
3. This figure is seriously misleading to members of the public who are concerned
about the implications of retaining innocent people’s records indefinitely on the
National DNA Database.
"

Thanks to Glyn at ORG for the link. Sorry about the formating.

Fear of cameras

This six minute film of London community support officers hassling someone who was using his video camera on a public street is an indication of the kind of petty officialdom that gets let loose when politicians and mainstream media spend so much energy stoking up fear on a wide scale. Thanks to Mark Frauenfelder at BoingBoing for the link.



As the star of the film says, there are no restrictions on filming in public places in the UK of the type that the CSOs in the film seemed to think. There are a few specific exceptions and if you're interested in the smallprint, Linda Macpherson, a law lecturer at Heriot Watt University, has written a guide to photographers' rights in the UK.

Bert Krages' guide to photographers' rights in the US is also available on the Web.

Landmark US Supreme Court privacy decision turns 50

A landmark US Supreme Court decision on privacy, NAACP v. Alabama ex. Rel. Patterson, 357 U.S. 449 (1958), is 50 years old today. Anita Allen, professor of law at the University of Pennsylvania, has written a terrific essay on the case which privacy advocates everywhere should read.

It is almost hard to believe that the National Association for the Advancement of Colored People, the NAACP, was considered a dangerous radical group, particularly in the southern states of the US, for a large part of the 20th century, when all they were asking for was equal rights. The state of Alabama tried to expel the group on the legal technicality of not complying with corporate registration laws. There followed a series of legal proceedings which culminated in the state demanding the details of all NAACP members. The NAACP rightly refused to comply - as members faced risk of serious injury, damage to property and even death - and got fined the huge sum of $100,000 by the state courts. At this point the NAACP appealed to the US Supreme Court and the rest, as they say, is history.

From Professor Allen's esasy:

"The United States Supreme Court’s decision in NAACP v. Alabama ex. Rel. Patterson, 357 U.S. 449 (1958) turns 50 this year. For those who value privacy it is a birthday worth remembering.

In NAACP v. Alabama, the Court affirmed that the constitutional rights of speech and assembly include a right of private group association. The idea that Americans are free to join private groups was not new in 1958. However, the Court’s decision to allow private groups to keep membership information confidential was an important constitutional milestone.

In 1956, the state of Alabama demanded a copy of the NAACP’s membership list, as part of its effort to expel the group from the state for allegedly violating a state business law. But the Supreme Court held that the civil rights group had a right to keep its members’ identities secret, whether or not a technical business law had been broken. Revealing the group’s membership, argued the Court, “is likely to affect adversely the ability of [the NAACP] and its members to pursue their collective effort to foster beliefs which they admittedly have the right to advocate, in that it may induce members to withdraw from the Association and dissuade others from joining it because of fear of exposure of their beliefs shown through their associations and of the consequences of this exposure.” NAACP at 462-63.

Whether handwritten on lined paper or stored electronically in a computer system, membership data is constitutionally protected from mandatory disclosure.

Individuals who join forces with others can sleep comfortably knowing they have a constitutional right to privacy that minimizes the risk of reprisal flowing from group membership. Any peaceful religious, social or political organization with a sensitive or unpopular mission can promise meaningful confidentiality and anonymity to members.

No constitutional right is absolute, however. The right to maintain membership data in secrecy is not perfectly guaranteed. But the Court reassuringly characterized official demands for membership lists as substantial restraints on freedom of association. As such, courts must strike them down unless they are narrowly tailored and necessary to further a compelling state interest. NAACP at 463-66."