CDT, Common Cause Urge Clarification of Text Spam Laws

December 7, 2012

A week before the 2012 presidential election, a marketing firm called ccAdvertising launched a political outreach campaign via text message.  In and of itself, this was nothing unusual.  What was different, however, was that consumers had never signed up to receive these messages. The firm simply used wireless telephone numbers it had collected and effectively “cold texted” consumers with criticisms of President Obama’s agenda and an exhortation to vote against him on Election Day. 

Read more »
For updates, follow us on Twitter at @CenDemTech.

WCIT Watch Day 3: The Slog Begins

December 5, 2012

Wednesday's WCIT wonderland saw lots of debate but little in the way of final decisions.

A number of topics were raised for the first time: security came up during the discussion of guaranteeing quality of service on telephony networks, and lines were quickly drawn between states who do not want to introduce security" into the treaty and those who feel it deserves center stage. 

Discussions of number misuse (potentially relevant to fraud prevention in the telephony context) quickly raised the specter of Internet names and numbers and the role of ICANN.  Delegates also dipped their toes in the murky waters of "telecommunication/information and communication technologies (ICTs)" – key definitions that will affect the scope of the treaty and go a long way to determining whether it applies to the Internet.

Read more »
For updates, follow us on Twitter at @CenDemTech.

WCIT Watch Day 2: Everyone Loves Free Expression!

December 4, 2012

"Freedom of expression" was the phrase of the day on Day 2 of the World Conference on International Telecommunications (WCIT), as delegates debated Tunisia's proposal to include in the treaty an explicit reference to the right to freedom of opinion and expression, as guaranteed by Article 19 of the Universal Declaration of Human Rights. With delegates from China, to Europe, to the US all opposing the measure, the language was ultimately not adopted into the treaty. But was Member States' commitment to free expression really driving this decision?

The Tunisia proposal asserted that:

Read more »
For updates, follow us on Twitter at @CenDemTech.

Euro Security Experts Deem 'Right to be Forgotten' Impossible

December 4, 2012

Just before Thanksgiving, the European Network and Security Agency (ENISA) — an agency of the European Union tasked with improving network and information security — issued an extensive analysis of the controversial “Right to be Forgotten” contained in recently proposed European privacy legislation. CDT has been generally supportive of the proposed Regulation (a reboot to the current, inconsistent Directive was long overdue), but we’ve criticized some elements — such as the Right to be Forgotten — as impractical and ultimately counterproductive for consumers.

Read more »
For updates, follow us on Twitter at @CenDemTech.

WCIT Watch, Day 1: WCIT Opened to Public; Foundational Fights to Come

December 3, 2012

During the first day of the ITU’s World Conference on International Telecommunications (WCIT), being held in Dubai, leaders of government delegations decided to open the conference’s plenary sessions to the public.  We hope this move will increase opportunities for advocates and experts to observe and participate in key discussions over the next two weeks of this conference that could affect the Internet.

The lack of transparency and openness in the WCIT process has been a central concern for civil society advocates following the treaty conference. While it is heartening to hear from CDT’s expert on the ground, Matthew Shears, that the public will be permitted to enter the conference venue, we are disappointed to see that a formal announcement of this decision has not yet appeared on the ITU’s website.

Members of the public will also be permitted to attend the meetings of Committee 5, where substantive proposals to amend the treaty (called the International Telecommunication Regulations, or “ITRs”) will be under review.  Committee 5 will divide into two working groups focused on the various treaty articles, but it is not clear whether or how the public will be able to watch or participate in those.

Foundational Fights

Read more »
For updates, follow us on Twitter at @CenDemTech.

Stark Lesson of Syria: U.N. Must Condemn, Not Condone, Internet Blackouts

December 3, 2012

As CDT has said before: whether in Egypt or Libya, San Francisco or Syria, network shutdowns are never the right choice.  We strongly condemn the recent Internet blackout in Syria as an indefensible violation of human rights, and agree with international authorities on free expression and human rights who stated last year in their "Joint Declaration on Freedom of Expression and the Internet": "Cutting off access to the Internet, or parts of the Internet, for whole populations or segments of the public (shutting down the Internet) can never be justified, including on public order or national security grounds." 

Read more »
For updates, follow us on Twitter at @CenDemTech.

ECPA Reform Legislation Advances

November 29, 2012

Today, the Senate Judiciary Committee adopted by voice vote legislation that would amend the Electronic Communications Privacy Act to require government agents to obtain a warrant in order to access the content of email and other communications stored in the cloud. The legislation would help ensure that email, draft documents, and photos that people store online are as secure against government access as regular mail and material stored in a desk drawer. Establishing this principle has been a top CDT priority for years, and it is among the most important recommendations made by the Digital Due Process coalition, a diverse group of leading Internet companies and policy advocates from across the political spectrum. CDT’s statement to the press about the bill can be found here and those of other DDP members can be found here.

Read more »
For updates, follow us on Twitter at @CenDemTech.

'How-To' for De-Identification of Health Data is Good First Step; More Work Needed

November 29, 2012

A decision out of the Department of Health and Human Services, Monday, took a good first step toward achieving a better quality, less expensive health care system that carries the added benefit of better protections for individual patient health records.  That move was the issuance of long overdue guidance for methods of de-identify data gleaned from public health records, as required by federal law.

Read more »
For updates, follow us on Twitter at @CenDemTech.

Adoption of Traffic Sniffing Standard Fans WCIT Flames

November 28, 2012

Updated December 5

The telecommunications standards arm of the U.N. has quietly endorsed the standardization of technologies that could give governments and companies the ability to sift through all of an Internet user’s traffic – including emails, banking transactions, and voice calls – without adequate privacy safeguards.  The move suggests that some governments hope for a world where even encrypted communications may not be safe from prying eyes.

At the core of this development is the adoption of a proposed international standard that outlines requirements for a technology known as "Deep Packet Inspection" (DPI).  As we’ve noted several times before, depending on how it is used, DPI has the potential to be extremely privacy-invasive, to defy user expectations, and to facilitate wiretapping.

Read more »
For updates, follow us on Twitter at @CenDemTech.

Facebook Muscles Up Security… by Default

November 28, 2012

Thanks to some fancy math, it just got a lot harder for someone to snoop on your Facebook conversations. And that's all thanks to Facebook's decision to automatically scramble the communications stream from your keyboard to the actual site itself. 

The move actually entails changing the method your communications take before they land on a Facebook page.  What used to be a wide-open, snoop-able, stream of communications emanating from your keyboard to your latest status update is now protected by a secure method called "HTTPS." 

In January 2011, Facebook allowed users to opt into HTTPS, and alluded to a future default setting. The project of scaling HTTPS for all Facebook users while preserving the site’s performance presented a technical challenge, but Facebook says that it’s addressed those concerns. This is a very welcome move from CDT’s perspective as HTTPS provides a secure connection between users and websites. While users can opt out of the switch, Facebook’s move to HTTPS by default within North America (and to the rest of the world early next year) will provide users with heightened security as they use the world’s most popular social network service. 

Read more »
For updates, follow us on Twitter at @CenDemTech.