Tuesday, October 07, 2008

UK government's unlucky 13 IT projects

Tony Collins at Computer Weekly has been compiling a list of UK government IT disasters. He thinks the failures are down to politics.

"In 2000 the Cabinet office published "Successful IT", a worthwhile guide to avoiding not-so-obvious traps. The Public Accounts Committee and the National Audit Office have published many reports for more than a decade on what tends to make projects successes or not.

As well as these, the Office of Government Commerce launched the "gateway review" scheme early in the new millennium which is supposed to filter out flawed projects and programmes before their defects become manifest to MPs, the media and public. Impressive government CIOs including Ian Watmore and John Suffolk have tried to pre-empt high-profile failures.

But still the high-profile calamities drown out the successes: the IT fiasco over SAT tests, delays of four years in the "Scope" system to help combat terrorism and other threats by linking intelligence services and provide interfaces with the MoD and government departments, the anger among junior doctors over the failed MTAS applications system, and some local implementations under the NHS's £12.7bn National Programme for IT which have seriously disrupted patient care and operations and appointments. These are only a few of New Labour's IT embarrassments.

Why is its record on large projects so bad? The failures, we believe, have more to do with politics and culture than technical architectures and project management methodologies.

Building a bridge from the US to England may seem a good idea in theory but it is not practical. Yet ministers embarked on the technological equivalent with the NHS's £12.7bn National Programme for IT because nobody they would want to listen to told them it was fanciful.

One reason so many large public sector projects fail is that executives from some IT suppliers regularly propose to government unrealistic but ostensibly credible and beneficial solutions to problems civil servants did not know existed until suppliers explained what could be achieved with new technology."

Home Office extend deadline for ORG FOI request on Intercept Modernisation

ORG have had a response to their FOI request on the UK government's interception modernisation programme (IMP), the objective of which, according to a Home Office minister, "to maintain the UK's lawful intercept and communications data capabilities in the changing communications environment." What exactly that means is another question. In keeping with government through obscurity the response to ORG basically says 'we're thinking about getting back to you but we're not sure we should; and just because we're thinking about getting back to you doesn't mean that we're admitting to having the information you're fishing for'

" Back in August, we submitted a Freedom of Information request to the Home Office, asking them to shed light on the Intercept Modernisation Programme (IMP). Over the Summer, a number of news reports had claimed that as part of this programme a new national database would be created containing the electronic communications data of the entire population. You can read more about the IMP here.

The Home Office have now got in touch to say they are extending the 20 working day response period (which ended today) in order to consider whether our request meets the public interest test. They write:

We are considering your information request. Although the Freedom of Information Act carries a presumption in favour of disclosure, it provides exemptions which may be used to refuse to confirm whether or not we hold information, or where we do, to withhold that information in specified circumstances. Some of these exemptions are subject to a public interest test. These exemptions are known as qualified exemptions. The public interest test is used to balance the public interest in openness against the public interest in favour of applying exemptions. Section 10(3) of the Act allows us to exceed the 20 working day response target where reasonably necessary to consider the public interest test fully. This is subject to us telling applicants when we expect to conclude our deliberations and provide a full response.

We are currently assessing the public interest in saying whether or not we hold the information you have requested, and should we do so, in providing the information you have requested. We are doing so under the exemptions contained in Sections 23(5) and 24(2) (national security), 35(3) (formulation of government policy, 31(3) (prevention and detection of crime) and 43(3) (prejudice to commercial interests) of the Freedom of Information Act.

This letter should not be taken as conclusive evidence that the information you have requested exists or does not exist."

The Trouble with Data

William Heath alerts us to a 'terrific article by SA Mathieson in Government Computing in response to the earlier piece by Matthew Taylor about government use of data.'

"He points to limitations and unexpected side-effects of government driven by data. He argues that it ignores the human costs in something like abolishing the common travel area with Ireland, or of endemic workplace surveillance, and adds the dangers of new forms of discrimination eg against those unable to provide biometrics, or whose data is inaccurate...

The trouble with data by SA Mathieson

On a comparison of timetables, many of Britain’s train services are slower now than two decades ago. Part of the reason is that train companies are judged on punctuality, with fines if they miss targets, so they pad the timetables.

In September’s GC, Matthew Taylor, chief executive of the RSA, cogently made the case for increased government use of data. He sees it as a way for the government to govern more intelligently and to help those disadvantaged in society, such as in choice of school.

Gathering and analysing data is the dominant management technique of the age, standard practice for the management consultancies that have influenced and got much business, out of this government. Yet even in the private sector, managing by data has its drawbacks. In the public sector, these problems are significantly magnified.

The first, as with train companies, is that when data is used as the yardstick, those being judged start ‘teaching to the test’. Sats tests, taken at 11 and 14 mainly to gather data on the performance of schools, have a financial and administrative cost. But the opportunity cost, of training and examining all children for tests with little point to them when they could have been learning, is surely greater.

This is the main problem with managing government by data: you have to gather a lot of data on the governed.

The human costs of this are often ignored by government...

...data discrimination can hit two groups. There are those who do something wrong then suffer disproportionately. With the greatly increased use of criminal record checks in employment, a trivial offence long ago can narrow someone’s chances in life years after they have supposedly paid their debt to society.

Then there are those who suffer because their data is wrong, whether through error or fraud, and a greater reliance on data makes its fraudulent use much more attractive. The time taken sorting out the mess tends to be spent by the innocent data subject, not the organisation which fails to keep records properly.

It would be daft to say that government should stop using data. But the current government has tended to treat its gathering and analysis as a panacea. It is not."

There was another post at IdealGovernment that really tickled me recently and I never got round to blogging about it: the reverse Turing test.

"Dealing with the daily IdealGov spam dose it occurs to me we should have a reverse Turing test. If the original test is

a human judge engages in a natural language conversation with one human and one machine, each of which try to appear human; if the judge cannot reliably tell which is which, then the machine is said to pass the test

then our reverse Turing test is

a citizen or customer engages in a natural language conversation with one public servant and one machine, each of which adheres to prevailing policies and targets. If the citizen cannot reliably tell which is which, then the public servant is said to fail the test

We could include that in Sam’s UK Feedback/Bureaucracy Bingo service.

Wibbi public servants took pride and were rewarded for their humanity and not for their conformance to rules and targets? Wibbi we dropped the idea that personal service is something we can mechanise? "

Absolutely spot on!

Monday, October 06, 2008

Hollywood swoops on playschools

From the Sunday Times:

"PLAYSCHOOLS have been given an unexpected lesson on copyright law after a company representing Hollywood studios demanded that each child pay a fee of €3 plus 17.5% Vat per year to watch DVDs in their playgroup.

The Motion Picture Licensing Company (MPLC), which collects royalties on behalf of companies such as Walt Disney, Universal and 20th Century Fox, wrote to 2,500 playschools last month warning that it is illegal to show copyrighted DVDs in public without the correct license.

The letter was sent with the approval of the Irish Preschool Play Association (IPPA), which represents the schools and their 50,000 children...

...the MPLC had failed to register with the Irish Patent Office as a copyright licensing body. Under the 2000 Copyright Act, royalty collectors such as the Irish Music Rights Organisation (IMRO) and Phonographic Performance Ireland (PPI) are required to register before they can collect fees.

A spokesman for the Patent Office said that if an organisation collects money but hasn’t registered it may be fined or staff may be jailed if a complaint is made and it is found guilty."

FOIANet

The excellent InSITE Service of the Cornell Law Library has pointed me at

"FOIAnet: Freedom of Information Advocates Network http://www.foiadvocates.net/

FOIAnet--the Freedom of Information Advocates
Network--is an international organization
dedicated to the principle that the "right of
access to information is an important human
right, necessary for the enjoyment of other human
rights," and that the "right to information is
essential for transparent and accountable
government." For U.S. researchers, FOIAnet
provides an international perspective on a right
in most cases taken for granted in the United
States. The site is clearly intended for
activists (i.e., an "Experts" tab exists solely
to invite submissions of new information on how
to acquire government-held information in
different countries) and its greatest potential
usefulness for researchers and citizens lies in
the "Members" tab, which lists constituent NGOs
in different countries around the world, and
under "Resources" where are listed procedural
guides to laws in various countries regarding
citizens' right to obtain government information.
Regrettably, the "News" tab does not seem to
function and the "Projects" page only lists
activities for the annual Right to Know Day, held
on September 28 each year. No search engine is
available but the site is, at present, quite limited in scope. [JPC]"

Judge Suppresses Report on Voting Machine Security

Having recently been drafting a case study on electronic voting for a forthcoming Open University course I was interested to hear via Andrew Appel at Ed Felten's now multi-authored Freedom to Tinker blog that:

"

A judge of the New Jersey Superior Court has prohibited the scheduled release of a report on the security and accuracy of the Sequoia AVC Advantage voting machine. Last June, Judge Linda Feinberg ordered Sequoia Voting Systems to turn over its source code to me (serving as an expert witness, assisted by a team of computer scientists) for a thorough examination. At that time she also ordered that we could publish our report 30 days after delivering it to the Court--which should have been today.

Three weeks after we delivered the report, on September 24th Judge Feinberg ordered us not to release it. This is part of a lawsuit filed by the Rutgers Constitutional Litigation Clinic, seeking to decommission of all of New Jersey's voting computers. New Jersey mostly uses Sequoia AVC Advantage direct-recording electronic (DRE) models. None of those DREs can be audited: they do not produce a voter verified paper ballot that permit each voter to create a durable paper record of her electoral choices before casting her ballot electronically on a DRE. The legal basis for the lawsuit is quite simple: because there is no way to know whether the DRE voting computer is actually counting votes as cast, there is no proof that the voting computers comply with the constitution or with statutory law that require that all votes be counted as cast.

The question of whether this report can legally be suppressed was already argued once in this Court, in June 2008, and the Court concluded then that it should be released; I will discuss this below. But as a matter of basic policy--of running a democracy--the public and legislators who want to know the basic facts about the reliability of their elections need to be able to read reports such as this one...

On September 2nd we provided to the Court (and to the defendants and to Sequoia) a lengthy report concerning the accuracy and security of the Sequioa AVC Advantage. The terms of the Court's Protective Order of June 20 permit us to release the report today, October 2nd.

However, on September 24 Judge Feinberg, "with great reluctance," orally ordered the plaintiffs not to release the report on October 2nd, and not to publicly discuss their conclusions from the study. She did so after the attorney for Sequoia grossly mischaracterized our report. In order to respect the Judge's temporary stay, I cannot now comment further on what the report does contain.

The plaintiffs are deeply troubled by the Court's issuance of what is essentially a temporary restraining order restricting speech, without any motion or briefing whatsoever. Issuing such an order is an extreme measure, which should be done only in rare circumstances, and only if the moving party has satisfied its high burden of showing both imminent harm and likelihood of success on the merits. Those two requirements have not been satisfied, nor can they be. The plaintiffs have asked the Court to reconsider her decision to suppress our report. The Court will likely hear arguments on this issue sometime in October. We hope and expect that the Court will soon permit publication of our report."

That a month before a US presidential election a judge should feel obliged to veto a report on specific machines that count votes is yet another an indicator of serious fault lines in the US electoral process. If you'd like a dramatic take on how bad it gets then HBO's excellent Emmy award winning movie, Recount, which had its UK premiere on More4 over the weekend, details the shenanigans in the Florida vote count debacle in the 2000 presidential election. The depths that both the main parties will sink to in order to win the election should be prominent in voters minds when they go to the polls in November and reports on the security of the voting machines should certainly not be suppressed. Whatever the vendor might claim about trade secrets it should not be allowed to interfere with the transparency of the electoral process.

Senators Warn Bush Administration On ACTA

In what might be wrongly interpreted as a break from their usual support for expansion of intellectual property laws, Intellectual Property Watch reports two US Senators' concerns about ACTA, the proposed Anti-Counterfeiting Trade Alliance.

"The leaders of the powerful United States Senate Judiciary Committee on Thursday warned US trade negotiators to rein in the scope of negotiations on an international treaty against counterfeiting, and to make the process more transparent...

At issue is the Anti-Counterfeiting Trade Agreement (ACTA), which the United States has been trying to push through by year’s end.

“We are concerned … that the ACTA under consideration will prescribe rules for protection so specifically that it could impede Congress’s ability to make constructive policy changes in the future,” Senators Patrick Leahy (Democrat, Vermont) and Arlen Specter (Republican, Pennsylvania) said in a 2 October letter to US Trade Representative Susan Schwab."

The letter is available online.

Interestingly the senators are not concerned that ACTA will expand the reach of IP law too much. Rather they worry that the trade agreement might limit the ability of the US to expand IP law. That's a novel interpretation of what we know about ACTA but fits with generic concerns in the US Senate whenever the US negotiates international treaties and trade agreements. On an international economic scale it is not a bad model to assume that the US will act like an island with a protectionist agenda.

Friday, October 03, 2008

NHS Connecting for Health (CFH) public consultation

NHS Connecting for Health (CFH) are conducting a public consultation about sharing medical data for research and other purposes. I've filled it in in a bit of a hurry since I'm buried in various things again but I'm hoping the consultation gets a large and informed response.

At several points the survey claims that patients have no legal right to control information they have given the NHS about themselves once it has been anonymised. Thanks to Nicholas Bohm via the ORG list for pointing out that as a matter of law this claim is false. Information given in confidence may not be used or disclosed except for the purpose for which it was supplied unless the person supplying the information gives their consent.

The consultation also contains several underlying questionable assumptions. It talks about data being held in sealed envelopes. AFAIK these electronic sealed envelopes still don't exist and some of the proposed versions of them are not very secure. Richard Clayton and Ross Anderson at Cambridge University would be the people to check that with. The consultation also seems to seriously underestimate the real practical complexities of securing large amounts of medical data across a range of big networked databases.

They are suggesting setting up an office of an "Information Custodian" essentially to manage the sharing of medical data for a variety of purposes and "some of the tasks the Information Cusotdian might do" would be:

• manage the way patient data is anonymised
• link data from different sources using a code and then remove the identifiers
• perform data quality checks
• receive applications from researchers and others who want to use patient data and decide which ones to allow

I noted some concerns about this in my own rushed response:

"The idea of setting up such an office, the purpose of which is to be responsible for making patient data available for uses other than patient care, undermines the whole basis of medical privacy and patient doctor confidentiality. The nature of bureaucracy is also such that were such an office to exist the pressures to open up access to patient data would be difficult to withstand."

Towards the end they asked for suggestions on a list of organisations they should consult about the data sharing plan. I suggested about 25 including FIPR, ORG, Privacy International, the BMA, the Royal College of Nursing, the BCS, the Association of Medical Research Charities.

Thursday, October 02, 2008

Universal v RealNetworks

Fred von Lohmann has temporarily posted the complaints and the TRO briefing in Universal v.
RealNetworks on his personal page:

http://homepage.mac.com/fvl

Apple threaten to shut iTunes due to royalty rate increase

From the BBC:

"A veiled threat by Apple to close its iTunes store has emerged 18 months after it was issued and just a day before royalty rates are to be set.

The Copyright Royalty Board meets on Thursday to rule on a requested 66% increase for sales of digital music from 9 cents to 15 cents a track.

A rise would have to be paid by either Apple, the record company or consumer.

Apple opposed the rate hike and has said it is unwilling to raise its 99 cents a song price or absorb a rise."

Update: There's an error in the story (thanks to Paul Saunders via the ORG list for pointing it out). It is not the percentage royalty paid to artists which will change but the percentage paid to composers and songwriters.

Wednesday, October 01, 2008

Home Office Launch New e-crime unit

It seems that the Home Office has recognised that shutting down the high tech crime unit a couple of years ago was a mistake and they are now launching a new e-crime unit.

"

New £7m specialist e-crime unit launches

30 September 2008

A new £7M police unit dedicated to tackling electronic crime and internet fraud was announced today.

The new Police Central e-crime Unit (PCeU) will provide specialist officer training and coordinate cross-force initiatives to crack down on on-line offences.

E-crime is a global menace. An estimated 80%-90% of crime on the internet (excluding crime relating to children or images of child sexual abuse) is believed to be fraud-related.

The new unit will focus on supporting the new National Fraud Reporting Centre (NFRC) when it comes into operation in 2009. It will also work closely with other crime-fighting agencies to tackle international and serious organised crime groups operating on the internet.

Based in the Metropolitan Police Service, the PCeU will work with the NFRC and support the development of the police response to e-crime across the country.

Home Office minister's statement

E-crime Minister Vernon Coaker said, 'It is important that we stay one step ahead of criminals who increasingly use sophisticated computer networks and the internet to commit and facilitate crime.

'The new Police Central e-crime Unit will work closely with the National Fraud Reporting Centre to tackle electronic crime reported to it. This will ensure that the National Fraud Reporting Centre has support in this highly specialised area.

'The Police Central e-crime Unit will also play a vital role in helping police forces across the country improve skills and techniques needed to clamp down on e-crime.'

Association of Chief Police Officers' statement

Association of Chief Police Officers (ACPO) lead for e-crime, Deputy Assistant Commissioner Janet Williams, said, 'I am delighted that the Home Office has confirmed funding for this new unit that ACPO and law enforcement agencies have been developing. We can now work towards creating a national coordination centre to combat e-crime in England, Wales and Northern Ireland.

'It is our aim to improve the police response to victims of e-crime by developing the capability of the Police Service. We will be coordinating the law enforcement approach to all types of e-crime, and providing a national investigative capability for the most serious e-crime incidents.'

Attorney General's statement

Attorney General Baroness Scotland said, 'It is widely recognised that e-crime is the most rapidly expanding form of criminality and knows no borders. The network is a good example of the UK leading on an international initiative which improves our capability to prosecute e-crime.

'The new e-crime unit will work closely with the National Fraud Reporting Centre and National Fraud Intelligence Bureau, both currently in development, recognising the fact the majority of e-crime is fraud-related. I believe this relationship will deliver a strong and emphatic response to fraudsters and help encourage public confidence in electronic services and communication.'"

MPAA to sue RealNetworks over DVD copying software

Via Findlaw: Hollywood aims to block RealNetworks' DVD software

"Hollywood's six major movie studios plan to sue RealNetworks Inc. to prevent it from distributing DVD copying software, The Associated Press has learned.

A person close to the matter, who requested anonymity because the suit had not yet been filed, says the studios will ask for a temporary restraining order in federal court."

From Hollywood Reporter:

"The digital entertainment service was sued Tuesday by the MPAA in Los Angeles federal court over its RealDVD software, which went on sale to the public on the same day.

The studios, including Fox, Sony, Disney, Paramount, Warner Bros. and Universal, claim the software circumvents the copyright protections on DVDs, allowing users to make multiple copies and distribute them to others. The MPAA claims such software is a violation of the federal Digital Millennium Copyright Act and seeks a temporary restraining order to stop RealDVD from distributing the software.

Meanwhile, RealNetworks filed suit in federal court in Northern California, asking it to rule that Real is in full compliance with the DVD Copy Control Assn.'s license agreement.

When RealDVD was announced in early September, the studios appeared receptive to the idea, largely because of RealNetworks' claim that the software would leave Content Scramble System encryption intact and that it was targeting consumers with large DVD collections who were looking for a way to store and access purchased content without the hassle of "constantly removing and inserting new discs," the company said.

Three high-ranking home entertainment executives from the studios expressed interest, with one saying he "might consider" a licensing deal should the copy-protection turn out to be rock solid."

Tuesday, September 30, 2008

Conservatives promise to scrap ContactPoint

The Conservative Party has promised to scrap the big ContactPoint children's database if they get elected. Terri Dowty is pleased.

"

Here’s a headline that makes our last 5 years of hard slog feel more than worthwhile:

Conservatives would scrap controversial ContactPoint child database

A flagship database of every child living in England, which is due to be launched by the government next year, will be shutdown by a Conservative government.

I’ve just unearthed a briefing I wrote as a policy adviser to CRAE in 2003, when the plans for a giant database were first announced. It’s only available in archives now. The only response I received was a request from one of CRAE’s member orgs that a disclaimer was added to make it clear that the concerns it raised were not shared by all of the membership. The Guardian asked for an op-ed piece but I was forbidden to submit it. So I jumped ship and picked up the baton within ARCH.

Fortunately, I met the excellent Eileen Munro and we put on our first conference at LSE in April 2004: ‘Tracking Children’. A lot of people thought we were crazy and it was hard to get the media to take the problem seriously. We ploughed on.

Can you understand why I jumped up and down yelling like an idiot when I read that headline?"

Government sets up online child safety watchdog

The Government's new online child safety watchdog was all over the news yesterday.

"The Government has established a body to advise it on how it can increase the protection from dangers posed by the internet.

The UK Council for Child Internet Safety (UKCCIS) will police websites containing inappropriate content, write industry codes of practice for publishers and advertise to children about how to stay safe online.

UKCCIS said that it would tell the publishers of sites which accept material from the public for publication how quickly they must take down content once they have been told that it is inappropriate."

Norwegian test case to open iTunes drm

Via Findlaw: Apple faces iTunes test case in Norway

"Norway's top consumer advocate said Monday he is taking Apple Inc. to the government's Market Council in a test case seeking to force the American company to open its iTunes music store to digital players other than its own iPod.

Norway is leading a European campaign that began two years ago to get Apple to make its iTunes online store compatible with rivals' digital music players."

Monday, September 29, 2008

Clinton's press secretary v neutral net

According to David Reed, Bill Clinton's erstwhile press secretary is now running a company making it their business to sell the idea that net neutrality is a bad idea.

"The hottest new faux-digerati lobby firm in DC in the communications field is Mike McCurry’s new firm Arts+Labs. McCurry is an old political hand, Bill Clinton’s press secretary, looking for a second career after the Clintons. Apparently there’s no big cash to be had protecting our freedom of speech, but Cisco and AT&T are happy to fund him to run a firm to defend ISP’s right to do “deep packet inspection” (DPI).

Only Arts+Labs doesn’t dare call it DPI, which sounds just a bit scary and Big Brotherish. Instead they call it the “intelligent network” that will smooth our experience, cleansing it of all those uneven experiences. Those of us who are as old as I am - 56 - might remember that the term “Intelligent Network” was a Bell Labs idea that failed due to the success of the Internet. As David Isenberg told it, the Internet was the “Rise of the Stupid Network“."

GikIII

I spent a couple of days last week at one of my favorite workshops, GikIII, organised this year by Ian Brown at the Oxford Internet Institute, Lilian Edwards, now of Sheffield University and Andres Guadamuz and the good folk at SCRIPT Law and Technology Centre at the University of Edinburgh.

I had the honour of closing the first day with the tale of Fighter Command's information system, immediately in the wake of the perennially impossibly entertaining Fernando Barrio. Just to make my task of being the final barrier between a bunch of geeks and lawyers and their drink even more precarious, Fernando had been contemplating the possibility of 'Love, sex and rape in a world of autonomous robots.'

My favorite papers in the ever eclectic and stimulating mix over the two days were Burkhard Schafer's The “Eyre Affair” revisited - Jasper Fforde and the ontological foundations of IP in a digital world, (having just discovered Fforde myself earlier this year), Miranda Mowbray's Sherlock Holmes inspired The Fog over the Grimpen Mire: Cloud Computing Services and the Law, and Peter Yu's Legal Transplants in the Digital Age. Though to pick just three does a disservice to all of the presenters at the workshop who, without exception, produced hugely interesting and thought provoking talks.

I could spend the rest of the week on the ideas that came up but sadly day job commitments preclude that possibility. I would just say one thing about Burkhard Schafer's exploration of the possibilities of using logic based AI systems to aid the assessment of copyright infringement in works of fiction. It would appear that neither first order nor second order logic would come anywhere close to being able to determine whether a work infringed the copyright of another. It seems, therefore, that the natural conclusion of his investigations would be that copyright law (and possibly intellectual property law more generally) defies [all?] logic.

Well done to all the participants and a big thank you to everyone involved in the organisation.

Saturday, September 27, 2008

How children learn

I see Cory Doctorow has been reading a couple of my favorite books, John Holt's How Children Learn and How Children Fail. Both should be compulsory reading for every teacher everywhere.

"Earlier this year, a reader sent me copies of John Holt's classic books on children's education, How Children Learn and How Children Fail and tonight, I finished the first of them (and will be reading the other next). It was one of the most profoundly moving books I've ever read, the truest account of how I remember my best learning experiences as a child and an adult.

Holt was a dedicated teacher and a very, very keen observer of children from babyhood up. Most of How Children Learn takes the form of notes from his diaries, his later reflections on his failures and successes, and letters and feedback from other parents and educators.

Holt's basic thesis is that kids want to learn, are natural learners, and will learn more if we recognize that and let them explore their worlds, acting as respectful co-learners instead of bosses. Practically speaking, that means letting them play and playing with them, but resisting the temptation to quiz them on their knowledge or to patronize them. Most resonant for me was his description of kids' learning unfolding from the natural passionate obsessions that overtake them -- it made me remember my best learning moments, like the time when I was 7 and my teacher Bev Pannikar found me reading Alice in Wonderland to myself in a corner of her classroom, and she just let me be, as I branched out from there to book after book, hiding out and falling in lifelong love with reading. Or the time that Brian Kerr found me afire with a passion for math and just let me go at it, working through workbook after workbook to the detriment of my other studies -- I think I was ten. "

Friday, September 26, 2008

Anger as NHS shares confidential health records with councils

From Computer Weekly: Anger as NHS shares confidential health records with councils

"An NHS patient has complained to the information commissioner after the health service placed her "private and confidential" health records on a database which could be accessed by staff at the local council.

Elizbeth Dove said she learned that the NHS had shared her medical details with the council without her knowledge after she contacted her GP about suspected depression.

The case highlights the widespread, but little known, practice of data sharing between the NHS and local councils through the local council social care systems."

Thanks to HJ Affleck via FIPR for the link.

Microsoft win MP3 patent appeal case v Alcatel-Lucent

From CNet:

"A federal appeals court has upheld a lower court ruling that Microsoft need not pay damages to Alcatel-Lucent in a long-running patent dispute in a case that could have opened up a broad range of litigation over the MP3 music format."

Olympic organisers want trademark on phrases from national anthem

From CBC:

"Two phrases borrowed from Canada's national anthem have been chosen as the mottoes for the 2010 Olympic and Paralympic Winter Games, and organizers have already moved to protect the commercial rights to the lines.

The lines "With glowing hearts" from the English version and "Des plus brillants exploits" from the French version will soon be emblazoned on Olympic merchandise and promotional material as a national campaign to promote the mottoes is rolled out across Canada this fall.

The phrases were recently trademarked by the Vancouver Olympic Organizing Committee in anticipation of the announcement, it was revealed Wednesday"

Oink police don't pay copyright fees

From the Register: BitTorrent crackdown cops fail to pay music copyright fees

"Cleveland Police, the force that will today bring six people to court for alleged involvement in the OiNK BitTorrent network, does not pay licensing fees to legally play music in its canteens, it has emerged."

Thursday, September 25, 2008

Spore drm spawns class action suit

Also from CNet:

"Electronic Arts may have attempted to appease angry customers by amending its digital rights management policy on Spore, but the company's DRM troubles aren't over yet.

Earlier this week, a class action suit was filed in the Northern District of California Court on behalf of Melissa Thomas and all other Spore purchasers. The suit contends that EA violated the California Consumer Legal Remedies Act and Unfair Competition Law by failing to inform consumers that by installing Spore, they also inadvertently install a program called SecuROM. SecuROM is a copy protection program that limits the number of times software can be installed on a PC. In the case of Spore, that limit was set to three (and later upped to five)...

The copy protections associated with Spore have dogged the highly anticipated game since its launch earlier this month. The original restrictions placed on the game outraged many consumers, thousands of whom retaliated by posting negative reviews of the game on Amazon.com or downloading it illegally from file-sharing sites."

Bush administration oppose copyright cops

From CNet news: Bush administration opposes RIAA-based copyright bill

"The Bush administration has announced its strong opposition to a bill backed by the recording industry that would let federal prosecutors file civil lawsuits against peer-to-peer pirates.

In a letter sent to the Senate Judiciary Committee on Tuesday that amounts to a veto threat, the administration said it was "deeply concerned" that the proposal would divert resources from criminal prosecution to civil enforcement, and create "unnecessary bureaucracy." Currently prosecutors have authority to file criminal charges.

The two-page letter said that copyright owners already have plenty of legal methods to target infringers, including seeking injunctions, impounding infringing materials, recovering actual damages plus statutory damages, and, in some cases, obtaining attorney's fees."

Update: From Democratic Senator, Ron Wyden, Senate Drops Civil Enforcement Provisions from Intellectual Property Act

"Washington, DC— The U.S. Senate Judiciary Committee today removed provisions from S.3325, the Prioritizing Resources and Organization for Intellectual Property Act of 2008, that would have involved federal prosecutors in civil copyright cases. The provision was removed at the request of U.S. Senator Ron Wyden (D-Ore) who released the following statement:

“I am happy to announce that after substantial discussions Chairman Leahy and the Senate Judiciary Committee have agreed to remove provisions from S.3325 that would have resulted in a massive gift of scarce federal resources to Hollywood and the recording industry. I regret that the legislation still includes provisions that overzealous federal prosecutors could misconstrue to allow the seizure of important components of our Internet infrastructure. I will work with Senator Leahy to clarify these provisions in the future.

“I congratulate the committee on their strong efforts to improve enforcement of our anti-counterfeiting laws and hope those efforts will aid federal efforts to protect American producers and American jobs.

“The removal of Title 1 from the original version of S.3325 eliminates a grant of federal power that was not asked for, or desired by the Justice Department. It would have had the effect of turning our federal law enforcement personnel into collections agents for industries that are more than capable of taking care of themselves. The Justice Department has made clear that Title 1 would have resulted in the diversion of federal resources from important criminal actions into civil matters of questionable merit.

“Unleashing federal prosecutors on Internet communications and discourse would also have a chilling effect on both commercial activity and free expression. Both the individual desire to share ideas and creativity more broadly and the drive of business to expand their markets and reach new customers have been the engines behind the most dynamic and vital new industry in American history. This is why it is so important that unintended consequences not be allowed to tax, throttle, or otherwise inhibit those creative forces.

“With over 30,000 civil suits filed by a single entity against individual Americans it is clear that industry is more than able to enforce its intellectual property rights in civil courts without the contribution of taxpayer funds and busy federal prosecutors. I continue to urge the content industries to seek out distribution models that take into account, and profit from, the new technologies that have revolutionized the way Americans communicate, learn and share information."

The first ID cards

It's a big day for the Home Office, though it seems to be getting lost in the news cycle with all the panic about the banking system.

"The Home Office has unveiled identity cards to be issued to foreign residents in the UK.

Example of what a foreign ID card will look like.The plastic wallet cards show the holder’s photograph, name, date of birth, nationality and immigration status. A secure electronic chip holds their biometric details, including fingerprints, and a digital facial image.

First cards roll out in autumn

The first cards are scheduled to be issued 25 November. Within three years all foreign nationals applying to enter or remain in the UK will be required to have a card.

By 2014, 90% of foreign residents in Britain should have identity cards.

The introduction of national identity cards for foreign residents will be followed by the first ID cards for British citizens, targeting workers in sensitive roles - such as airports - from 2009.

Then from 2010 ID cards will be available to young people who want them.

From 2011, cards will be available to the general population."

There's the usual wild claims from the Home Secretary about how brilliant the cards are - as I said in my talk at GikIII yesterday, yet again we are to suffer the effects of scientifically and technically illiterate politicians having to make decisions about information systems they don't understand in depth.


The NO2ID folks are, needless to say, unimpressed:

"

BULLY-BOY STATE PICKS ON SOFT TARGETS

Desperate to shore up support for the ID scheme, the Home Secretary this week brandished a new plastic card to be issued to some foreign residents from November, calling it an "ID card" for foreign nationals. This cynical branding exercise with its sly appeal to xenophobia should fool no-one.

Having failed to convince industry and employers, the unions and the public at large that ID cards are necessary or desirable, the government has resorted to picking on soft targets - anonymous individuals seeking marriage visas or education - those who have no choice but to keep quiet and comply. And if the statements of junior minister Meg Hiller at Labour Party conference are to be believed, they also intend to target children as young as 14.

Ministers try to give the impression that their National Identity Scheme is inevitable It is not. All the opposition parties are committed to scrapping it and, without the National Identity Register (the database at the heart of the scheme) and with the repeal of the Identity Cards Act we can - and shall - go back to being a free country...

What just happened?

Government spins ID scheme by re-announcing "ID cards for foreigners"

Today the Home Secretary, Jacqui Smith closed the Labour Party conference by re-announcing "ID cards for foreigners". In fact a system of biometric visas is being introduced for some foreign residents from November but it is not really part of the National Identity Scheme which hasn't been built yet! This fact has not stopped the government using the words "ID cards", together with a sly appeal to xenophobia to drum up support for its unpopular scheme. It seems the BBC knows a thing or two - halfway down an item 'Foreign national ID card unveiled' on its website, there is a video box labelled "How an identity card will work". Knowledge-hungry surfers who clicked the little arrow were confronted with a black screen. It bore the words "This content doesn't seem to be working. Try again later."

NO2ID has an identity crisis at Labour conference

NO2ID's national co-ordinator Phil Booth was unable to get into a Labour Party conference fringe meeting this week because he couldn't get an ID card! Phil was due to debate the ID scheme with Home Office minister Meg Hillier but Labour's pass office in Manchester told him there had been a problem with his application and it would cost him £600 for a temporary pass to enter the conference for an hour! If this is how they organise ID for their own party conference it makes you wonder how the are they going to organise ID cards for 50 million people.

They're coming for your kids - Part 2

This week Meg Hillier told a Labour party conference fringe meeting (the one Phil Booth couldn't get into) that she saw no reason why ID cards couldn't be given to children as young as 14. The Identity and Passport Service has since denied that plans are afoot to lower the age from 16 (as laid out in the ID cards act). Hillier also hinted at attempts to fetter future governments when she said: "There isn%u2019t an easy way to unpick this [ID] scheme", and going on to claim, "quite rightly because it is invaluable". Meanwhile Action on Right for Children has put in a Freedom of Information request for the full security review of the government's children's database Contactpoint, following publication of the executive summary and the recent controversy over problems with "shielding" records of vulnerable (see last newsletter)."

So much of this falls into the "couldn't make it up" category that it makes you wonder whether we are actually living in an alternate reality.

Jammie Thomas granted new trial

The single mother who lost her copyright infringement case to the tune of $222,000 has been granted a new trial.

Alfred Yen at Mike Madison's blog says:

"The specific legal ground for the ruling was an erroneous jury instruction that merely offering a work on a peer-to-peer network is, in and of itself, infringement. Judge Davis has now concluded that without actual distribution, no infringement has occurred.

It’s hard to say whether this ruling would change the outcome if the case is tried again. If Thomas was offering songs over the Internet, there’s a pretty good chance she wound up actually distributing them to someone. At the same time, however, I wonder if the court is sending a message to the RIAA that it isn’t happy with how this case got resolved.

Judge Davis closed his opinion with a statement that Congress needs to change the statutory damages rule that resulted in the large award against Thomas. The judge asserted that the award was far out of proportion to the size of her offense, and that such large awards are really appropriate only against commercial infringers. "

Who wants ID cards

David Evans is wondering: Who wants ID cards?

Senators seek rights protections in FBI probes

Also via Findlaw: Senators seek rights protections in FBI probes

"Three Democratic senators are demanding civil rights protections for Americans who might be targeted in FBI national security investigations without any evidence of wrongdoing.

In a letter Tuesday to Attorney General Michael Mukasey, the senators also urged the Justice Department to delay still-tentative rules that would expand FBI powers to seek out potential terrorists."

Can't imagine the Obama camp will be too pleased about that being raised at the moment.

Harri Puttar wins Harry Potter lawsuit

From AP via Findlaw: Bollywood's 'Hari Puttar' wins 'Harry Potter' suit

""Hari Puttar" is set to hit cinema screens this week after an Indian court rejected a Warner Bros. lawsuit claiming the name was too close to its Harry Potter series.
Click here to find out more!

The court said in its ruling Monday that people who have watched the Harry Potter movies and read the books would know the difference between that and an Indian Punjabi film called "Hari Puttar - A Comedy of Terrors."

The producers, Mirchi Movies, said the Puttar movie bore no resemblance to the famous boy wizard franchise. Hari is a common name in India and Hindi for God, while "puttar" is Punjabi for son."

Tuesday, September 23, 2008

RIAA goes after the lawyer defending p2p cases

From Wired:

"The Recording Industry Association of America is declaring attorney-blogger Ray Beckerman a "vexatious" litigator. The association is seeking unspecified monetary sanctions to punish him in his defense of a New York woman accused of making copyrighted music available on the Kazaa file sharing system.

The RIAA said Beckerman, one of the nation's few attorneys who defends accused file sharers, "has maintained an anti-recording industry blog during the course of this case and has consistently posted virtually every one of his baseless motions on his blog seeking to bolster his public relations campaign and embarrass plaintiffs," the RIAA wrote (.pdf) in court briefs. "Such vexatious conduct demeans the integrity of these judicial proceedings and warrants this imposition of sanctions."

The RIAA's complaint is here. Beckerman's blog is Recording Industry vs The People

A Landmark Torture Trial

From Joanne Mariner at Findlaw:

" A landmark trial is scheduled to begin this week, in which a senior government official is accused of responsibility for vicious acts of torture committed in the name of fighting terrorism.

Alas, the defendant is not one of the many Bush Administration officials who so richly deserve their moment in the dock. But the trial does mark the first application of a federal law criminalizing extraterritorial acts of torture--a law that could someday be used to prosecute "war on terror" abuses.

Passport Fraud and Torture

The defendant in this case, Charles "Chuckie" Taylor, Jr., is the Boston-born son of former Liberian President Charles Taylor, himself facing trial before an international court in The Hague. An American citizen, Chuckie Taylor was taken into U.S. custody in March 2006, when he attempted to enter the United States at Miami airport. He arrived in Miami the day after his father was handed over to the UN-backed Special Court for Sierra Leone on charges of orchestrating violence in Sierra Leone's bloody civil war.

Chuckie Taylor was initially charged with passport fraud, for lying about his father's identity on his passport application. Later in the year, after pressure from human rights groups, he was indicted on charges of torture, conspiracy to torture, and using a firearm during the commission of a violent crime. Subsequent indictments included an added count of conspiracy to use a firearm during a crime of violence...

The Taylor prosecution is important and encouraging. Yet one cannot help but wonder whether torture is only considered deplorable when carried out by African warlords and their thuggish offspring. Were the Justice Department to announce a case involving U.S. counterterrorism abuses, the values expressed in the Extraterritorial Torture Statute would seem more secure."

Will CDs be replaced by SD memory cards

In another attempted move into the 21st century the music labels are reportedly hoping that there is a new market in albums sold on SD memory cards. I'm a bit surprised it has taken a while for this possibility to open up, as I think there may actually be some mileage in the idea. In any case it will be interesting to see how it pans out.

Cheney's deadly lie

John Dean, not a big fan of the Bush administration, has been dissecting Vice President Dick Cheney's "deadly lie" which convinced Republican Majority Leader Richard Armey of Texas to support the war in Iraq.

Police drop BT-Phorm investigation

The police have halted their investigation into BT and Phorm over the illegal secret interception of communications during the adware trials. A police representative claimed there was implied consent from customers to the trials - how they work that out when they were deliberately kept secret I'm not sure. They also say:

"The matter is considered a civil dispute, and ... desire to elicit clarity around the wording of the relevant acts would necessitate senior Counsel involvement and it is thought this would be inappropriate for Police to use public funds to pursue civil issues where there is no suggestion that Criminal Intent exists."

It's a fair point to say it is inappropriate for Police to use public funds to pursue civil issues (pity no one told Congress this as they merrily continue to rubber stamp the latest piece of IP expansionism in introducing copyright police) but he should have stopped there. Going on to say there was 'no suggestion that Criminal Intent exists' is stretching a point a bit. The logical extension of finding no criminal intent here is to say that a city speculator engaged in insider trading was doing nothing wrong as long as he believed he was doing nothing wrong.

Nicholas Bohm from FIPR is unimpressed:

"City of London Police's response expresses massive disinterest in what occurred. Saying that BT customers gave implied consent is absurd. There was never any behaviour by BT customers that could be interpreted as implied consent because they were deliberately kept in the dark.

"As for the issue of whether there was criminal intent, well, they intended to intercept communications. That was the purpose of what they were doing. To say that there was no criminal intent is to misunderstand the legal requirements for criminal intent."

Thanks to Zoe Nolan via the ORG list for the pointer.

Monday, September 22, 2008

European Patent Office staff on strike

It seems European Patent Office staff are so worried about the low quality of the patents being granted that they have gone on strike over the issue.

"Patent examiners and other staff of the European Patent Office (EPO) demonstrated outside the European Commission offices Thursday, demanding a thorough re-examination of the EPO."

Thanks to Glyn at ORG for the pointer, especially since I'm so buried in other things at the moment I haven't had the opportunity to sift through my newsreader.

Friday, September 19, 2008

Google comments on ACTA

Google has submitted an interesting set of views to the US trade representative's call for comments on the Anti-counterfeiting trade alliance, ACTA.

"Google Inc. appreciates the opportunity to comment on the pending negotiations for the proposed Anti-Counterfeiting Trade Agreement (ACTA). We have three areas of concern: (1) the scope of the issues proposed to be covered in the agreement and the competency of an Executive agreement to address such issues; (2) the alacrity with which the agreement is being negotiated and the need for transparency and openness to ensure a balanced agreement reflective of the balance in U.S. law; (3) specific substantive provisions affecting intermediaries, such as Internet Service Providers (ISPs) and other innovative companies. We address these below.


I. The Scope of ACTA

The ACTA should not address issues beyond border and customs enforcement issues. Internet companies and other intermediaries, like Google, telecom companies and ISPs more generally, do not engage in counterfeiting and piracy; they are legitimate businesses critical to the U.S. economy. To impose potential liability and obligations on them, or to dictate terms of substantive intellectual property law that affect Internet intermediaries, is shooting at the wrong target, potentially contrary to U.S. law, and in any event not appropriate subject matter for an Executive agreement not submitted to the Congress.

U.S. law regarding ISP/intermediary obligations and liability is sensitive and carefully balanced; there are ongoing legislative debates and litigation in domestic courts that seek to balance the interests of right holders according to the Congressional policy of encouraging innovation. Indeed, a decision this summer from the Second Circuit (the Cablevision case) calls into doubt what prior U.S. FTAs had assumed was U.S. law on temporary copies. A trade agreement should not affect or freeze these developments (especially one that will not even be submitted to the Congress). For this reason, provisions on obligations and liability of Internet intermediaries, such as ISP safe harbors, technological protection measures, and statutory damages, have no place in ACTA."

Unsurprisingly they don't want to get caught in the mass IP sweep up. They go on to say that the ACTA negotiations should be transparent, that they contribute to the economy and it would be a mistake to upset that contribution. They also draw a line in the sand on temporary copies and drm (or tpm) warning the trade negotiators to stay away from them.

Who owns ideas?

Paul Kennedy at CBC radio did a show on Who owns ideas recently, interviewing a range of IP dignitaries from James Boyle to Cory Doctorow and taking in Jane Ginsburg and Michael Geist along the way. Recommended.

Tuesday, September 16, 2008

ACTA fact or fiction

From Wired: Anti-Counterfeiting Trade Agreement: Fact or Fiction?

"There's been speculation for months concerning the Anti-Counterfeiting Trade Agreement. If ratified, many suggest it would criminalize peer-to-peer file sharing, subject iPods to border searches and allow internet service providers to monitor their customers' communications.

Yet all we know for certain is it's a treaty (.pdf) about beefing up intellectual property protections being negotiated in secret by the European Union, the United Sates, Japan, South Korea, Canada, Mexico, Australia, Switzerland and New Zealand.

Dozens of special-interests groups on Monday urged the trade representatives from those nations to disclose the language of the evolving agreement in a bid to end speculation on its contents and to assist in crafting its language."

Don't buy, download textbooks

From the NYT: Don’t Buy That Textbook, Download It Free

"SQUINT hard, and textbook publishers can look a lot like drug makers. They both make money from doing obvious good — healing, educating — and they both have customers who may be willing to sacrifice their last pennies to buy what these companies are selling.

It is that fact that can suddenly turn the good guys into bad guys, especially when the prices they charge are compared with generic drugs or ordinary books. A final similarity, in the words of R. Preston McAfee, an economics professor at Cal Tech, is that both textbook publishers and drug makers benefit from the problem of “moral hazards” — that is, the doctor who prescribes medication and the professor who requires a textbook don’t have to bear the cost and thus usually don’t think twice about it.

“The person who pays for the book, the parent or the student, doesn’t choose it,” he said. “There is this sort of creep. It’s always O.K. to add $5.”

In protest of what he says are textbooks’ intolerably high prices — and the dumbing down of their content to appeal to the widest possible market — Professor McAfee has put his introductory economics textbook online free. "

Radar would you believe it?

I came across a short piece about radar during World War II by Jevon MacDonald at the Fast Forward blog, when I was tidying up my talk on the same subject for the SLS conference this week.

"Radar was cheap, fast, and you could mash it in to existing process and workflow. Everything seemed rosy.

Those who worked on Radar each day, like Private Eliot at Pearl Harbor, came to trust their radar completely. They saw each and every aircraft coming and going within their range and often coordinated large influxes of aircraft. The problem, however, was that nobody else got to seem much of Radar in action. It was a few miles from Pearl Harbor itself and communicated by radio.

People couldn’t understand it, and they couldn’t trust it much either.

The 7th of December 1941, the Pearl Harbor Radar operator saw something new on his screen. It was filling up with dots. Little dots blinking on the radar screen.

This was the moment of crisis. 1 hour before the attacks would begin. Certainly enough time to move some ships and prepare some sort of defense.

When word came through that something was coming, nobody got very excited, until finally someone remembered that a group was flying from the mainland that day. The command was sent back that it was just friendly planes and not to worry, “you probably have your bearings off” or something like that.

Sure enough, Radar was right. It was a massive group of Japanese fighters coming to launch a full scale attack."

Monday, September 15, 2008

UN look into curbing Net anonymity

According to Declan McCullagh,

"A United Nations agency is quietly drafting technical standards, proposed by the Chinese government, to define methods of tracing the original source of Internet communications and potentially curbing the ability of users to remain anonymous.

The U.S. National Security Agency is also participating in the "IP Traceback" drafting group, named Q6/17, which is meeting next week in Geneva to work on the traceback proposal. Members of Q6/17 have declined to release key documents, and meetings are closed to the public"

He refers, in defence of anonymity, to the first amendment and the history of US jurisprudence, including the US Supreme Court decision in McIntyre v. Ohio Elections Commission in 1995, where Justice Stevens who delivered the opinion, concluded:

"Under our Constitution, anonymous pamphleteering is not a pernicious, fraudulent practice, but an honorable tradition of advocacy and of dissent. Anonymity is a shield from the tyranny of the majority. See generally J. S. Mill, On Liberty, in On Liberty and Considerations on Representative Government 1, 3-4 (R. McCallum ed. [ McINTYRE v. OHIO ELECTIONS COMM'N, ___ U.S. ___ (1995) , 24] 1947). It thus exemplifies the purpose behind the Bill of Rights, and of the First Amendment in particular: to protect unpopular individuals from retaliation - and their ideas from suppression - at the hand of an intolerant society. The right to remain anonymous may be abused when it shields fraudulent conduct. But political speech by its nature will sometimes have unpalatable consequences, and, in general, our society accords greater weight to the value of free speech than to the dangers of its misuse. See Abrams v. United States, 250 U.S. 616, 630-31 (1919) (Holmes, J., dissenting). Ohio has not shown that its interest in preventing the misuse of anonymous election-related speech justifies a prohibition of all uses of that speech. The State may, and does, punish fraud directly. But it cannot seek to punish fraud indirectly by indiscriminately outlawing a category of speech, based on its content, with no necessary relationship to the danger sought to be prevented. One would be hard pressed to think of a better example of the pitfalls of Ohio's blunderbuss approach than the facts of the case before us."

Commuter Flights Grounded Thanks To Bumbling TSA Inspector

From the Aero-News Network,

"Damaged TAT Probes On Nine Jets While Conducting 'Security Checks'

They're the government... and remember, they're here to help. A bumbling inspector with the Transportation Safety Administration apparently has some explaining to do, after nine American Eagle regional jets were grounded at Chicago's O'Hare International Airport on Tuesday.

Citing sources within the aviation industry, ABC News reports an overzealous TSA employee attempted to gain access to the parked aircraft by climbing up the fuselage... reportedly using the Total Air Temperature (TAT) probes mounted to the planes' noses as handholds.

"The brilliant employees used an instrument located just below the cockpit window that is critical to the operation of the onboard computers," one pilot wrote on an American Eagle internet forum. "They decided this instrument, the TAT probe, would be adequate to use as a ladder."

Officials with American Eagle confirmed to ANN the problem was discovered by maintenance personnel, who inspected the planes Tuesday morning... and questioned why the TAT probes all gave similar error indications.

One Eagle pilot says had the pilots not been so attentive, the damaged probes could have caused problems inflight. TSA agents "are now doing things to our aircraft that may put our lives, and the lives of our passengers at risk," the pilot wrote on the forum."

Thanks again to Bruce Schneier for the link. A classic example of how the rush to be seen to be doing something on security can be so dangerous.

Diebold Admits its Voting Machines Drop Votes

Via Bruce Schneier's Cryptogram, Diebold Finally Admits its Voting Machines Drop Votes

"Premier Election Solutions, formerly called Diebold Election Systems, has finally admitted that a ten-year-old error has caused votes to be dropped.

It's unclear if this error is random or systematic. If it's random -- a small percentage of all votes are dropped -- then it is highly unlikely that this affected the outcome of any election. If it's systematic -- a small percentage of votes for a particular candidate are dropped -- then it is much more problematic.

Ohio is trying to sue.

In other news, election officials sometimes take voting machines home for the night.

http://www.networkworld.com/news/2008/...
http://www.theregister.co.uk/2008/08/26/...
http://www.engadget.com/2008/08/23/...
http://voices.washingtonpost.com/the-trail/2008/08/...
http://www.mcclatchydc.com/election2008/story/...

http://thelede.blogs.nytimes.com/2008/08/19/...
My 2004 essay on election technology:
http://www.schneier.com/crypto-gram-0411.html#1"

The utility of free

Jamie Love has been extolling the virtues of Ubuntu in particular and free software in general over at the Huufington Post.

"In general however, it will be important for individuals to switch to Linux, not only from Microsoft, but also from Apple. Today many free software proponents don't use free software themselves. Because of this, they often don't fully understand or appreciate the ways the platform works, the policies (by individuals, organizations, regulators or governments) that would make it work better, or the interesting ways that innovation is created and managed in an environment where knowledge becomes community property. I'd like to use analogies to better explain the difference between talking about free software and using free software, and I'm sure there are plenty -- is reading about sex the same as having sex? Can you really understand foreign policy without visiting foreign countries?
[...]
Because of the stakes, people should increasingly be thinking of free software as a social movement. It is not only about a small number of programmers and engineers. It is about everyone who cares about the future of knowledge ecosystems."

Another step towards copyright cops

The Enforcement of Intellectual Property Rights Act, which will require the Justice Department to do the legwork in civil copyright litigation, took another step towards the US statute books through the approval of the Senate Judiciary Committee by a majority of 14-4 last Thursday.

Ars Technica bills the move an "enormous gift" to Big Content.

Once the US get their copyright cops, of course, the EU will be clambering for them too.

Sunday, September 14, 2008

Apple's tennis shoes drm patent

Yep, in the words of Nicholas Carr, Apple declares war on sneaker hackers.

"Today, reports New Scientist, Apple has applied for a patent to - no joke - extend digital rights management to tennis shoes and other articles of clothing. "What is desired," the patent application says, "is a method of electronically pairing a sensor and an authorized garment." It continues:

As used herein an authorized garment is a garment sanctioned to be electronically paired with an authenticated (i.e., certified) sensor. Once the garment and sensor are electronically paired, the sensor can receive (and in some cases process) sensing information (such as garment performance data or user performance data) received from the garment. Since only authorized garments are configured to electronically pair with authenticated sensors, a user (or manufacturer) can be assured that the sensing data received by the sensor is both accurate and consistent with its intended use (a sensor designed for use with running shoes can not properly be used with dance shoes, for example).

Apple views tennis-shoe DRM as a way to head off what it sees as a potential plague of sneaker hacking. "

Friday, September 12, 2008

RIAA and MPAA cheer as legislators return from their holidays

The RIAA and MPAA are back in the groove of influencing the continuing expansion of US copyright law, according to Declan McCullough. They're back on the old theme of getting the taxpayer and law enforcement agencies to pick up the tab for chasing peer to peer copyright infringers. It is so much better for business if the government pays for your lawyers. They are also promoting a bill through the Senate to ratchet up trade sanctions against pirate countries.

The usual suspects are opposing the proposed legislation.

Evaluating the Security of Electronic Voting Systems

A research group at the University of California in Santa Barbara, which took part in Debra Bowen's top-to-bottom review in 2007 of many of the voting systems certified for use in California, published a paper on their findings over the summer. Their public report on the investigation is available here.

They also made a video of some of their findings, now available in two parts on YouTube.





Together they run for about 16 and half minutes. Recommended.

Thanks to Martyn Thomas via FIPR for the pointer.

BBC 3 programme: Your Identity for Sale

I usually give a wide berth to self-styled cutting edge "investigative journalism" TV programmes but I did tune into BBC3's Mischief: Your Identity for Sale last night, after flicking through the channels and finding nothing remotely of interest anywhere else. It began with reporter Rebecca Wilcox bringing her laptop computer to a couple of security experts and discovering to her embarrassment that it had reams and reams of sextracker cookies. She had apparently never even heard of cookies - of the web tracking variety - before.

Having expected to turn off in disgust within minutes I found myself watching it through to the end. It did irritate badly at times with the compulsory sensationalist expose style. But Ms Wilox's innocent abroad turned innocent determined crusador, in pursuit of some of the big data harvesters, just about carried off a basic introduction to some of the problems associated with the routine mass digital surveillance that goes on in the virtual shadows of our modern world.

Richard Clayton of FIPR and University of Cambridge Computer Laboratory fame, came across particularly well in explaining the kind of tracking that goes on through social networking sites like Facebook. Ms Wilcox unfortunately went out of her way to make the chap from the Information Commissioner's Office look bad. Then she gave Michael Wills, the government minister who has just been put in charge of managing the regulation of data, a free ride; by not following through and asking the hard questions once she had got her shot of the embarrassed minister looking at the credit cards she could take out in his name. I guess that would have been expecting too much given the nature of the programme.

She succeeded in making the guy from Sky look smug and devious as he had the security people keep her away until he could dig up some dirt on the BBC, in a 'speck in my eye, plank in yours' kinda way. The BBC do send junk mail too but not seemingly in the underhand opt-out way that Sky do - Sky even put out a leaflet telling customers they'd have to ring a premium rate phone number to opt out of receiving their junk mail. Tescos got a going over too when someone at their store card call centre gave out the address linked with a card number to help Ms Wilcox who claimed she wanted to find the owner of a set of keys. Tescos promised to revise their procedures and training saying it shouldn't have happened as operators are already told not to give out information in such circumstances. I feel sorry for the woman who gave out the information.

In any case, if you've had trouble getting through to friends blind to the process of data harvesting, personal profiling and selling of personal data there are harder places to start than to get them to watch this light affair on the iPlayer sometime in the next week. Skip the bits in the Information Commissioner's office and the section on the guy whose credit card number found its way onto a child abuse website leading to him getting arrested during operation ore.

Statewatch report on EU surveillance plans

Tony Bunyan at Statewatch has recently produced a special report, The Shape of Things to Come on the European Union's ongoing plans for ubiquitous surveillance.

"EU: SPECIAL STATEWATCH REPORT: The Shape of Things to Come by Tony Bunyan. The EU is currently developing a new five year strategy for justice and home affairs and security policy for 2009-2014. The proposals set out by the shadowy "Future Group" set up by the Council of the European Union include a range of highly controversial measures including new technologies of surveillance, enhanced cooperation with the United States and harnessing the "digital tsunami". In the words of the EU Council presidency: "Every object the individual uses, every transaction they make and almost everywhere they go will create a detailed digital record. This will generate a wealth of information for public security organisations, and create huge opportunities for more effective and productive public security efforts." Seven years on from 11 September 2001 and the launch of the "war on terorism" this major new report The Shape of Things to come (60 pages) examines the proposals of the Future Group and their effect on civil liberties. It shows how European governments and EU policy-makers are pursuing unfettered powers to access and gather masses of personal data on the everyday life of everyone – on the grounds that we can all be safe and secure from perceived “threats”. The Statewatch report calls for a “meaningful and wide-ranging debate” before it is “too late” for privacy and civil liberties.The report also contains four Case Studies: 1) the "digital tsunami" and the surveillance state; 2) The "convergence principle"; 3) Privacy and data protection; 4) EU-US area of cooperation. Press release and Eight page Conclusions"

Ibrahim v DHS: no fly list challenged in court

Anita Ramisastry has a nice article on the recent Ibrahim v. Department of Homeland Security case in the the U.S. Court of Appeals for the Ninth Circuit. The court ruled, in a split 2-1 decision, that Stanford University graduate and mother of four, Rahinah Ibrahim, effectively has a right to challenge her inclusion on the no-fly list compiled by the 'Terrorist Screening Center' (a branch of the FBI) in a court of law before a judge and jury.

Chief Judge Alex Kozinski said:

"Just how would an appellate court review the agency's decision to put a particular name on the list? There was no hearing before an administrative law judge; there was no notice-and comment procedure... For all we know, there is no administrative record of any sort for us to review... So if any court is going to review the government's decision to put Ibrahim's name on the No-Fly List, it makes sense that it be a court with the ability to take evidence"

Professor Ramasastry says:

"This ruling is very significant, for this is the first judicial decision granting individuals the right to seek review of their status on the "no fly" list before a judge and jury. This decision will allow individuals to seek additional evidence about their inclusion on the "no fly" list, and it will allow trial courts to serve as independent checks on the work of the TSA...

passengers who have been adversely impacted by the "no fly" list will be able to seek vindication of their rights before an independent tribunal - rather than merely asking the TSA to de-list them. As for Ibrahim, while this was a procedural ruling, it was a very favorable one, and while it has not yet given her her day in court, it has allowed her to go to court to try and clear her name."

Wednesday, September 10, 2008

Access to knowledge conference

The Access to Knowledge A2K3 conference is in progress in Geneva and the conference blog is providing regular updates.

Tuesday, September 09, 2008

ORG submission to IPO on EU term extension

The Open Rights Group has made their submission to the UK Intellectual Property Office on the proposed EU copyright term extension available on their website. It takes a similar perspective to my own submission in looking at the winners and losers. From the ORG blog:

"Our submission shows that for the vast majority of performers the projected extra sales income resulting from term extension is likely to be meagre: from as little as 50¢ each year in the first ten years, to as “much” as €26.79 each year. That’s because most of the gains (89.5%) will go to the top 20% of recording artists. Meanwhile the major labels will be dividing up millions in extra handouts every year.

What’s more, performing artists will make no extra revenue from radio airplay and other income streams arising from so-called “secondary remuneration rights”, and may even make less. The Commission assumes that fees paid by users of recordings, e.g. broadcasters, will remain constant. That means the amount of earnings available to performers will not be any bigger - it will just be sliced more thinly and distributed longer to more rightsholders. Performers will not earn any more over their life time, and are likely to earn less, as money will be transferred from the living to the estates of the dead.

The proposal is set to cost hundreds of millions to consumers, with repercussions to the public interest, follow-on innovators and cultural diversity. It serves as a windfall for an industry the Commission would have us believe is immune from simple economic logic. No wonder Europe’s leading copyright thinker - and adviser to the European Commission - has accused the Commission of wilfully misleading the European Parliament, and the citizens of the European Union."

J.K.Rowling wins case v Harry Potter Lexicon

J.K. Rowling has won her case against the prospective publishers of a print version the Harry Potter Lexicon. The NYT has a brief report on the case.

Interestingly the judge, Robert P. Paterson Jr., concluded that the Lexicon was not a derivative work but he found for Ms Rowling on the basis of the substantive similarity of the Lexicon to the Potter novels. So the Harry Potter Lexicon would appear to be so different from the Harry Potter novels that it is not a derivative work but simultaneously so much like the originals that it is substantively similar. The judge says (apologies for the formatting):

"Although it is difficult to quantify how much of the language in the Lexicon is
directly lifted from the Harry Potter novels and companion books, the Lexicon indeed
contains at least a troubling amount of direct quotation or close paraphrasing of
Rowling’s original language. The Lexicon occasionally uses quotation marks to indicate
Rowling’s language, but more often the original language is copied without quotation
marks, often making it difficult to know which words are Rowling’s and which are
Vander Ark’s."

And he goes on to list a whole series of direct copying/paraphrasing and concludes:

"Plaintiffs have shown that the Lexicon copies a sufficient quantity of the Harry
Potter series14 to support a finding of substantial similarity between the Lexicon and
Rowling’s novels. The Lexicon draws 450 manuscript pages worth of material primarily
from the 4,100-page Harry Potter series.15 Most of the Lexicon’s 2,437 entries contain
direct quotations or paraphrases, plot details, or summaries of scenes from one or more of
the Harry Potter novels. As Defendant admits, “the Lexicon reports thousands of
fictional facts from the Harry Potter works.” (Def.’s Post-trial Br. at 35). Although
hundreds pages or thousands of fictional facts may amount to only a fraction of the
seven-book series, this quantum of copying is sufficient to support a finding of
substantial similarity where the copied expression is entirely the product of the original
author’s imagination and creation...

The quantitative extent of the Lexicon’s copying is even more substantial with
respect to Fantastic Beasts and Quidditch Through the Ages. Rowling’s companion
books are only fifty-nine and fifty-six pages long, respectively. The Lexicon reproduces
a substantial portion of their content, with only sporadic omissions, across hundreds of
entries...

The Castle Rock court held that a trivia book which
tested the reader’s knowledge of “facts” from the Seinfeld series copied protected
expression because “each ‘fact’ tested by [the trivia book] is in reality fictitious
expression created by Seinfeld’s authors.” Id. It follows that the same qualitative
conclusion should be drawn here, where each “fact” reported by the Lexicon is actually
expression invented by Rowling...

Furthermore, the law in this Circuit is clear that “the concept of similarity
embraces not only global similarities in structure and sequence, but localized similarity in
language.” Twin Peaks, 996 F.2d at 1372...

Plaintiffs have established a prima facie case of infringement...

Given that the Lexicon’s use of plot
elements is far from an “elaborate recounting” and does not follow the same plot
structure as the Harry Potter novels, Plaintiffs’ suggestion that these portions of the
Lexicon are “unauthorized abridgements” is unpersuasive. Second, and more
importantly, although the Lexicon “contain[s] a substantial amount of material” from the
Harry Potter works, the material is not merely “transformed from one medium to
another,”... By condensing, synthesizing, and
reorganizing the preexisting material in an A-to-Z reference guide, the Lexicon does not
recast the material in another medium to retell the story of Harry Potter, but instead gives
the copyrighted material another purpose. That purpose is to give the reader a ready
understanding of individual elements in the elaborate world of Harry Potter that appear in
voluminous and diverse sources. As a result, the Lexicon no longer “represents [the]
original work[s] of authorship.” 17 U.S.C. § 101. Under these circumstances, and
because the Lexicon does not fall under any example of derivative works listed in the
statute, Plaintiffs have failed to show that the Lexicon is a derivative work...

To the extent that Defendant seeks to provide a
useful reference guide to the Harry Potter novels that benefits the public, the use is fair,
and its commercial nature only weighs slightly against a finding of fair use...

The Court is
not persuaded, however, that the acts of RDR Books, which do not amount to more than
intentional delays in responding to Plaintiffs’ communications from counsel, constitute
acts of bad faith...

The Lexicon’s verbatim copying of such highly
aesthetic expression raises a significant question as to whether it was reasonably
necessary for the purpose of creating a useful and complete reference guide. While the
exact quantity of verbatim copying and paraphrasing in the Lexicon is difficult to assess,
the instances identified by Plaintiffs amount to a substantial enough taking to tip the third
factor against a finding of fair use in view of the expressive value of the language...

The Lexicon is thus
unlikely to serve as a market substitute for the Harry Potter series and cause market harm...On the other hand, publication of the Lexicon could harm sales of Rowling’s two
companion books. Unless they sought to enjoy the companion books for their
entertainment value alone, consumers who purchased the Lexicon would have scant
incentive to purchase either of Rowling’s companion books, as the information contained
in these short works has been incorporated into the Lexicon almost wholesale...

The fair-use factors, weighed together in light of the purposes of copyright law,
fail to support the defense of fair use in this case. The first factor does not completely
weigh in favor of Defendant because although the Lexicon has a transformative purpose,
its actual use of the copyrighted works is not consistently transformative. Without
drawing a line at the amount of copyrighted material that is reasonably necessary to
create an A-to-Z reference guide, many portions of the Lexicon take more of the
copyrighted works than is reasonably necessary in relation to the Lexicon’s purpose.
Thus, in balancing the first and third factors, the balance is tipped against a finding of fair
use. The creative nature of the copyrighted works and the harm to the market for
Rowling’s companion books weigh in favor of Plaintiffs...

Ultimately, because
the Lexicon appropriates too much of Rowling’s creative work for its purposes as a
reference guide, a permanent injunction must issue to prevent the possible proliferation of
67
works that do the same25 and thus deplete the incentive for original authors to create new
works...

Since the Lexicon has
not been published and thus Plaintiffs have suffered no harm beyond the fact of
infringement, the Court awards Plaintiffs the minimum award under the statute for each
work with respect to which Plaintiffs have established infringement. Plaintiffs are
entitled to statutory damages of $750.00 for each of the seven Harry Potter novels and
each of the two companion books, for a total of $6,750.00...

For the foregoing reasons, Plaintiffs have established copyright infringement of
the Harry Potter series, Fantastic Beasts & Where to Find Them, and Quidditch Through
the Ages by J.K. Rowling. Defendant has failed to establish its affirmative defense of fair use. Defendant's publication of the Lexicon (Doc. No. 22) is hereby permanently enjoined, and plaintiffs are awarded statutory damages of $6,750.00"


In addition, in laying out the facts of the case the Judge paints Roger Rapoport, the president of Defendant RDR Books, rather than Steven Vander Ark, the originator of the HP Lexicon, as the main driving force behind publishing and marketing a print version of the guide. Apparently Vander Ark had specific concerns in early meetings with Rapoport that a print version of the lexicon might infringe Rowling's copyrights.

One final point to note for now is that the judge seemed to place a lot of emphasis on Ms Rowling's testimony in court, in finding the publication of Vander Ark's lexicon would do her irreparable injury.

"Regardless, even if irreparable injury is not presumed, Plaintiffs have presented
sufficient evidence that such injury would result from Defendant’s infringement in the
absence of relief. First, Plaintiffs have established that publication of the Lexicon will
cause irreparable injury to Rowling as a writer. Rowling testified that if the Lexicon is
published, it would destroy her “will or heart to continue with [writing her own]
encyclopedia.” (Tr. (Rowling) at 54:9-12.) She further testified that if the Lexicon is
published—giving “carte blanche to . . . anyone who wants to make a quick bit of
money” by drawing freely from her works and opening the doors to “a surfeit of
substandard so-called lexicons and guides”—she would have much less incentive to write
her own book. (Tr. (Rowling) at 54:4-12.) By deterring Rowling from writing her
planned encyclopedia, publication of the Lexicon would also result in harm to the
charitable organizations that would receive the royalties from the sale of the book and the
reading public who would be unable to enjoy such a book. (Tr. (Rowling) at 55:1-5.)"

Update: The NYT and other places now have longer pieces on the case. Mike Madison's perspective in particular is worth reading in full. As is Groklaw's.