Facebook to Change European Service After Data-Privacy Probe – Businessweek

Facebook Inc., the world’s biggest social networking site, will overhaul its service in Europe over the next six months as a result of an investigation into how the social network handles personal data.

Facebook “has agreed to a wide range of best practice improvements” to its service that will get a formal review in July, the Irish data-protection agency said today, after concluding a three-month audit. Facebook’s Ireland operation is responsible for all the Palo Alto, California-based company’s users outside the U.S. and Canada, the agency said.

“This was a challenging engagement both for my office and for Facebook Ireland,” Billy Hawkes, Ireland’s data-protection commissioner, said in an e-mail. The report said there has to be “increased transparency and controls for the use of personal data for advertising purposes” and “the deletion of data held from user interactions with the site much sooner.”

via Facebook to Change European Service After Data-Privacy Probe – Businessweek.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Army: Manning Kept a Copy of His Chatroom Confession | Wired.com

Forensic investigators searching Bradley Manning’s computers and removable media found a full log of the online chats Manning conducted with former hacker Adrian Lamo in which Manning described his alleged leaking of classified information, a government witness revealed during testimony on Saturday.

Investigators also discovered classified information on an SD memory card they found at the Maryland home of Manning’s aunt, Debra Van Alstyne, where he had been living before enlisting in the Army.

Additionally, the government was able to recover logs from a Secret-level U.S. intelligence search engine called Intel Link, a system that allows government workers to search for classified documents on the SIPRnet. The logs detailed the searches performed from the IP address assigned to Manning’s workstation in Iraq. Government witnesses did not directly reveal Saturday what searches Manning had conducted.

The  testimony in the second day of Manning’s Article 32 hearing — a hearing that will decide if his case proceeds to court martial — provided the first public overview of the government’s case against Manning, who turned 24-years-old Saturday.

via Army: Manning Kept a Copy of His Chatroom Confession | Threat Level | Wired.com.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Forensic Expert: Manning’s Computer Had 10K Cables, Downloading Scripts | Wired.com

A government digital forensic expert linked accused Army leaker Bradley Manning to documents published by WikiLeaks with damning evidence Sunday, testifying that he found thousands of U.S. State Department cables on one of Manning’s work computers, ranging from unclassified to SECRET cables, among other incriminating documents.

Special agent David Shaver, who works for the Army’s Computer Crime Investigative Unit, said that on one of two laptops that Manning used he found a folder called “blue,” in which he found a zip file containing 10,000 diplomatic cables in HTML format, and an Excel spreadsheet with three tabs.

The first tab listed scripts for Wget, a program used to crawl a network and download large numbers of files, that would allow someone to go directly to the Net Centric Diplomacy database where the State Department documents were located on the military’s classified SIPRnet and download them easily; the second tab listed message record identification numbers of State Department cables from March and April 2010; the third tab listed message record numbers for cables from May 2010. The spreadsheet included information about which U.S. embassy originated the cable. The earliest indications on Manning’s computer that he was using the Wget tool was March 2010.

via Forensic Expert: Manning’s Computer Had 10K Cables, Downloading Scripts | Threat Level | Wired.com.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Court Finds Costs Related to Database “Used as Means of Document Production” are Taxable but Reverses Award in Light of Cost Sharing Agreement : Electronic Discovery Law | K & L Gates

In re Ricoh Co., Ltd. Patent Litig., No. 2011-1199, 2011 WL 5928689 (Fed. Cir. Nov. 23, 2011)

In this case, Ricoh sought review of the district court’s award of costs to Synopsys related to the parties’ use of Stratify (“a third-party electronic database service”) for the production of email.  The appellate court concluded that the district court did not err in determining that costs related to the database could be recovered pursuant to 28 U.S.C. § 1920(4), but reversed the lower court’s award in light of the parties’ agreement to split the costs.

In the course of the underlying litigation, the parties were initially unable to agree on the form of production.  Eventually, Ricoh suggested using Stratify, “a third party electronic database service,” and that the costs be divided between the parties.  Synopsys agreed.  After the case was resolved in favor of Synopsys, the district court awarded costs, pursuant to 28 U.S.C. § 1920, including costs related to Stratify.  On appeal, Ricoh argued that the district court erred in awarding such costs.

via Court Finds Costs Related to Database “Used as Means of Document Production” are Taxable but Reverses Award in Light of Cost Sharing Agreement : Electronic Discovery Law.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

BT sues Google over Android ‘patent infringements’ | BBC News

UK-based telecoms group BT is suing Google in the US over claims that six of its patents have been infringed.

The British company’s complaints centre on technologies at the core of Google’s Android mobile system, search site, and a wide range of other services.

BT is seeking unspecified damages and an injunction against Google’s continued use of its innovations.

via BBC News – BT sues Google over Android ‘patent infringements’.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

E-discovery: Congress might revise e-discovery rules again | Inside Counsel (Steven Hunter)

On Dec. 13, Congress will hold hearings on the “Costs and Burdens of Civil Discovery.” It’s anyone’s guess which (if any) revisions to the existing e-discovery rules will be adopted. What is clear, however, is that Congress is focused on reducing e-discovery costs. One approach that Congress is considering is to inject additional expertise and know-how into the litigation process through e-discovery liaisons, e-discovery special masters and e-discovery mediators.

The e-Discovery Liaison

Unlike the current process (where each party’s counsel is responsible for presenting disputes regarding e-discovery directly to the court), the 7th Circuit’s Electronic Discovery Pilot Program (the e-Liaison Program) requires each litigant to designate an e-discovery liaison at the beginning of each case. The liaison is responsible for “meeting, conferring and attending court hearings” where e-discovery is an issue. The 7th Circuit program requires that the liaison be knowledgeable about the party’s computer systems, e-discovery efforts and cost-saving strategies; however, the e-Liaison Program does not mandate that the e-discovery liaison be a lawyer, computer technician or disinterested third-party. Selection of the liaison is left to each party.

The first phase of the Pilot Program is now completed, and the results were sufficiently positive to justify an expanded Phase II, which is now underway. The efficiencies of using an e-discovery liaison are obvious: The liaison brings preparation and knowledge to the Rule 26(f) conference and other e-discovery disputes. With a knowledgeable resource at hand, the parties will speak a common language and avoid the time-consuming and expensive processes of delayed meetings and negotiations prompted by counsel repeatedly having to check with more knowledgeable technical resources. The Pilot Program requires those resources to be front and center.

via E-discovery: Congress might revise e-discovery rules again.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Old Smartphones Leave Tons Of Data For Digital Dumpster Divers – Dark Reading (Ericka Chickowski)

A recent exploration made by a digital forensics company into a handful of phones found in the smartphone secondary market showed how easy it is to glean information from old or lost phones, even if a factory reset has been committed. Today an expert from Access Data gave Dark Reading the skinny on his findings from his informal research and explained some of the repercussions for both corporations and consumers who don’t pick, manage, or dispose of their phones wisely.

“I buy a lot of recycled phones and there is tons of data still on them,” says Lee Reiber, director of mobile forensics for AccessData, “I’d guess if you went and grabbed ten phones [from recycling companies], 60 percent of those are going to contain data still.”

Reiber says that at the behest of a customer interested in the data lingering on phones sold by used phone resellers and consumers using Craigslist and eBay, he used AccessData’s tools to do an in-depth forensics dive into five handsets acquired from this secondary market. The phones were the iPhone 3G, Sanyo 2300, HTC Wildfire, LG Optimus, and HTC Hero. Of those five, the iPhone and the old Sanyo had not been reset and contained what Reiber called logical data, things like active account sign-ons, contacts, and calendar information easily usable by any person who turns on the phone.

via Old Smartphones Leave Tons Of Data For Digital Dumpster Divers – Dark Reading.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Breach Response: The Legal View | Gov Info Security (Jeffrey Roman)

As legal issues surrounding data breaches become increasingly complex, more organizations are turning to attorneys for post-breach response, says Lisa Sotto, a managing partner for New York-based law firm Hunton & Williams.

Complying with a multitude of regional and international laws when consumers’ personal information is compromised is critical. And depending on the size and reach of the organization breached, that could mean complying with dozens of mandates and regulations in various parts of the country and world.

Sotto, who focuses on privacy and information security, says the role of attorneys has changed significantly in recent years. After a data breach, attorneys handle many facets during the response process. “A lawyer who’s well-versed in managing data breaches knows that she or he needs to manage really much more than the straight legal compliance issues,” Sotto says in an interview with BankInfoSecurity’s Tracy Kitten

via Breach Response: The Legal View.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Preparing In-House Counsel for a New Year of Cybersecurity Threats | Corporate Counsel (Catherine Dunn)

As CorpCounsel has discussed on these web pages before, 2011 has been a banner year for cyber attacks on company networks and corporate data breaches involving sensitive customer information. There’s been much discussion of how government and the private sector need to put their heads together on cybersecurity measures, just as laws governing data privacy continue to proliferate around the globe.

In-house lawyers need to stay ahead of these evolving issues in the New Year, says Alan Brill, who has liaised with a number of counsel as the senior managing director of the cybersecurity and information assurance division at the consultancy Kroll. And more often than he would have predicted, Brill says, it’s counsel who point out the digital red flags to their companies.

Having put together a “cybersecurity forecast” for the new year, Brill points to some of the specific internal and regulatory concerns that counsel will face in 2012. “It is far easier—in my experience—for counsel to prevent a problem than to solve a problem after it has occurred,” he says.

The Kroll analysis highlights areas where companies will be particularly vulnerable. Those include rapidly changing mobile technologies—think iPads and Android smartphones, all loaded with apps—which are often deployed by an organization before they can be adequately secured.

via Preparing In-House Counsel for a New Year of Cybersecurity Threats.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare

Federal Judge Dismisses Twitter Stalking Case | PCMag.com

A federal judge on Thursday dismissed a case against a man accused of stalking a religious leader on Twitter, ruling that his speech, though “uncomfortable,” is protected under the Constitution.

The New York Times reported that defendant William Lawrence Cassidy was accused of harassing and inflicting “substantial emotional distress” on Buddhist leader Alyce Zeoli. Cassidy was involved with Zeoli and her sect in 2007, but the two had a falling out and in 2010 he began posting hundreds of harassing messages directed at Zeoli via Twitter and a blog hosted on Blogspot.

Cassidy lived in California, while Zeoli was based in Maryland.

The tweets, posted from a variety of handles, were often similar to this: “Do the world a favor and go kill yourself. P.S. Have a nice day.”

Zeoli claimed the tweets caused her to suffer “substantial emotional distress.” She said she feared for her safety and hadn’t left her house for a year and a half, except to visit her psychiatrist.

via Federal Judge Dismisses Twitter Stalking Case | News & Opinion | PCMag.com.

LinkedInPinterestEvernoteWordPressBlogger PostEmailShare