Child Pornography Bill Makes Privacy Experts Skittish : NPR

Late last month, while Washington, D.C., was focused on the debt ceiling, the House Judiciary Committee approved legislation that could have long-term consequences on Internet privacy.

The bill requires all Internet service providers to save their customers’ IP addresses — or online identity numbers — for a year. The bill’s stated purpose is to help police find child pornographers, but critics say that’s just an excuse for another step toward Big Brother.

“We have to be able to get access to the data so that law enforcement has the ability to find who these people are and arrest them and be able to rescue the children who they are horrifically abusing,” says Rep. Debbie Wasserman Schultz of Florida, the Democratic co-sponsor of the “Protecting Children from Internet Pornographers Act of 2011.”

The legislation requires the Internet providers to save IP addresses just in case one of their customers turns up as a “visitor” on a child porn site. The problem is, says Wasserman Schultz, some Internet providers don’t store IP addresses very long.

“In some cases, you have Internet service providers who are actually going in the wrong direction,” Wasserman Schultz says. “There’s one Internet service provider who holds onto it for seven days and then discards it.”

via Child Pornography Bill Makes Privacy Experts Skittish : NPR.

Happy IPv6 Day! | TG Daily

Google, Facebook, and hundreds of other internet companies will today take part in the first worldwide test of IPV6.

As the world runs out of IP addresses, Internet Protocol Version 6 should expand the number from its present 4.3 billion addresses, almost all of which have been used. IPV6 will offer millions of times as many.

“The goal of the Test Flight Day is to motivate organizations across the industry – internet service providers, hardware makers, operating system vendors and web companies – to prepare their services for IPv6 to ensure a successful transition as IPv4 addresses run out,” says organizer the Internet Society.

Today, more than 400 organizations including some of the world’s largest websites will enable IPv6 across their servers for a 24-hour ‘test run’ to identify the scale of any problems. Network equipment vendors such as Cisco Systems will also take part.

“The vast majority of internet users will not see anything different on 8th June,” says Sebastien Lahtinen, co-founder of thinkbroadband.com. “Most of the time we type in addresses like www.facebook.com into a web browser, and our computer and the Domain Name System (DNS) takes care of converting this into an IP address, so we don’t have to remember IP addresses themselves.” he adds.

via Happy IPv6 Day! | TG Daily.

Test Driving a New Internet Starts Wednesday – Real Time Brussels – WSJ

Watch carefully when you turn your computer tomorrow. If everything goes according to plan, you won’t notice a thing, even though large parts of the Internet will be going through a test run for its next stage: Internet Protocol version 6 (IPv6), a new system to ensure that the web doesn’t run out of addresses.

On June 8, search and content giants including Google, Facebook, and Yahoo! will make their websites available over the new system – while your hardware and browser need to be able to set up to view them as well, it’s effectively the largest test yet of the new set of standards.

“Content providers are really keen to make sure their services are available very widely for end-users and distributed globally,” Mat Ford, the Internet Society’s technology program manager told Real Time Brussels on the phone from Edinburgh. This is worth doing now, because “the consequence of IPv4 running out of address space, is that services become very brittle and hard to debug when things go wrong.”

The concept is explained in this article – put simply, it’s like when telephone companies run out of numbers and have to add an extra digit in order to extend the network. The internet grew faster than anyone could have predicted and if the switchover isn’t made to IPv6, services will become increasingly disrupted as the system creaks under the weight of billions of new users from emerging countries joining the current masses online. That’s where the content providers come in, according to Mr. Ford.

“It’s a chicken and egg situation: for years you’d hear content providers saying there were no users with IPv6 access, while internet service providers said, there’s no content. IpV6 Day is about trying to change that cycle: we’re going to kill the chicken and break the egg.”

via Test Driving a New Internet Starts Wednesday – Real Time Brussels – WSJ.

Europe at Forefront of Digital Privacy Rights – NYTimes.com

As pressure grows for technology companies like Apple and Google to adjust how their phones and devices gather data, Europe seems to be where the new rules are being determined.

Last year, Google generated a storm of controversy in Germany when it had to acknowledge it had been recording information from unsecured wireless networks while compiling its Street View mapping service.

Then, last week, regulators in France, Germany and Italy said they would examine whether Apple’s iPhone and iPad violated privacy rules by tracking the location of users.

Also, reports emerged last month that the Dutch police had obtained information from TomTom, a maker of popular satellite navigation devices, while setting up speed traps, prompting concerns by users and an apology from TomTom.

The companies all said there was nothing sinister about their activities, though Apple said it would issue a software update limiting the time that location data was kept to seven days. None of the information, the companies said, is particularly sensitive from the point of view of personal privacy, and they claim it will help them to deliver better services in many cases.

To address concerns about data protection, Viviane Reding, the European justice commissioner, said in a speech Tuesday that she would propose extending unionwide rules about breaches of privacy to online banking, video games, shopping and social media.

The rules require phone companies and Internet service providers to inform customers of any data breach “without undue delay.”

“European citizens care deeply about protecting their privacy and data protection rights,” Ms. Reding said in a separate statement.

“Any company operating in the E.U. market or any online product that is targeted at E.U. consumers should comply with E.U. rules.”

via Europe at Forefront of Digital Privacy Rights – NYTimes.com.

Telecom firms prepare for big changes in uk data protection laws- The Inquirer

TELECOM FIRMS and Internet service providers (ISPs) are getting ready for important changes in UK data protection laws concerning privacy and electronic communications next month.

Speaking at London’s Infosecurity conference, the Information Commissioner’s Office (ICO) director of data protection David Smith said the new rules will only apply, for the moment, to telcos, such as British Telecom (BT), mobile phone companies and ISPs.

For ISPs, notification of data breaches to the ICO and customers who have been affected will become a legal requirement for the first time in the UK. They will also be legally obliged to have a security policy.

The ICO’s legal powers will be extended, which means it will have a compulsory power of audit to check that service providers have made the data breach notifications they have been supposed to, and it will have the ability to impose monetary penalties if they haven’t.

One of the most important new laws concerns “consent to cookies”. Cookies are data kept by the user’s web browser, which can often include information that they don’t want to share.

Smith said, “The directive behind the new law essentially says that any storage of information on the user which is not strictly necessary for the provision of a service (such as a cookie on a browser) can only take place with the consent of the individual.”

“That is a substantial change in the current law where essentially it is kept unless the user or individual objects,” he stated.

via Telecom firms prepare for big changes in uk data protection laws- The Inquirer.

Is Email Snooping a Crime? – Law Blog – WSJ

Michigan resident Leon Walker faces a peculiar predicament: he’s been charged with a felony for secretly checking out his wife’s email account.

Using his wife’s password, Walker accessed her Gmail account and learned she allegedly was having an affair, according to this article in the Detroit Free Press.

State prosecutors in Michigan have charged Walker under a statute used typically to prosecute identity theft or theft of trade secrets, the Free Press Reports. (Hat tip: JonathanTurley.org)

Walker, who divorced his wife this month, faces a criminal trial in February and up to 5 years in prison.

A few weeks back, we noted that the Sixth Circuit had ruled that people have a reasonable expectation that their emails will remain private and further that the government needs a search warrant to snoop through emails stored by Internet Service Providers.

But criminal charges for surreptitiously checking out a spouse’s emails?

It’s a legal gray area, the Free Press reports, and Walker could be helped by the fact that he was still living with his wife and had routine access to her computer. “It was a family computer,” Walker told the Free Press.

Oakland County, Michigan prosecutor Jessica Cooper told the Free Press that she was justified in charging Walker.  “The guy is a hacker,” she said. The email account “was password protected.”

via Is Email Snooping a Crime? – Law Blog – WSJ.

Shunned Profiling Technology on the Verge of Comeback – WSJ.com

One of the most potentially intrusive technologies for profiling and targeting Internet users with ads is on the verge of a comeback, two years after an outcry by privacy advocates in the U.S. and Britain appeared to kill it.

The technology, known as “deep packet inspection,” is capable of reading and analyzing the “packets” of data traveling across the Internet. It can be far more powerful than “cookies” and other techniques commonly used to track people online because it can be used to monitor all online activity, not just Web browsing. Spy agencies use the technology for surveillance.

Now, two U.S. companies, Kindsight Inc. and Phorm Inc., are pitching deep packet inspection services as a way for Internet service providers to claim a share of the lucrative online ad market.

Kindsight and Phorm say they protect people’s privacy with steps that include obtaining their consent. They also say they don’t use the full power of the technology, and refrain from reading email and analyzing sensitive online activities.

via Shunned Profiling Technology on the Verge of Comeback – WSJ.com.

Microsoft: virus-infected computers should be quarantined | Technology | guardian.co.uk

Virus-infected computers should be blocked from the internet and kept in quarantine until they are given a “health certificate”, a top Microsoft security researcher suggested on Thursday.

Under the proposed security regime, put forward by the technology giant’s trustworthy computing team, an individual’s internet connection would be “throttled” to prevent the virus spreading to other computers. But security experts today warned that cutting people off from the internet could be a drastic step too far – and that the question of who would issue and verify the “health certificate” was troubling.

Millions of computers around the world running versions of Microsoft’s Windows operating system are infected by viruses without their user’s knowledge and used to generate billions of spam emails and attacks against websites, such as that used against a British law company earlier this month.

The infected computers are often marshalled by virus writers into “botnets” which are hired out for criminal use. Microsoft, internet service providers, banks and web companies have fought long but so far unsuccessful battles against botnets. Earlier this year Microsoft took its fight to the US courts after a group of infected computers sent more than 650m spam emails to its Hotmail accounts. The spread of computer viruses has, however, continued unabated.

The new proposal, Microsoft claimed, is built on the lessons of public health. Scott Charney, corporate vice president of Microsoft’s trustworthy computing team, wrote on the company’s blog: “Just as when an individual who is not vaccinated puts others’ health at risk, computers that are not protected or have been compromised with a bot put others at risk and pose a greater threat to society.”

via Microsoft: virus-infected computers should be quarantined | Technology | guardian.co.uk.

China Moves to Tighten Data Controls – NYTimes.com

China is on the verge of requiring telecommunications companies and Internet service providers to halt and report leaks of what the government deems to be state secrets, the latest in a series of moves intended to strengthen the government’s control over private communications.

The proposed amendment to the state secrets law, reported Tuesday by the state news media, defines a state secret broadly and loosely as information that, if disclosed, would damage China’s security or interests in political, economic, defense and other realms.

The amendment was submitted Monday to the Standing Committee of the National People’s Congress, China’s legislature, for a third reading, the final step before being signed into law. Few measures reach that point in China without being adopted.

The wording of the amendment, as cited by the state-controlled newspaper China Daily, suggested that Internet and telecommunications companies would have to take a more proactive stance in identifying leaks of state secrets and their sources. The paper said companies must detect, report and delete unauthorized disclosures.

But reports by the state-run news agency Xinhua seemed less definitive about whether the companies must independently scour online transmissions for forbidden information or simply cooperate with the authorities if they suspect transgressions.

via China Moves to Tighten Data Controls – NYTimes.com.

FBI wants records kept of Web sites visited | Politics and Law – CNET News

The FBI is pressing Internet service providers to record which Web sites customers visit and retain those logs for two years, a requirement that law enforcement believes could help it in investigations of child pornography and other serious crimes.

FBI Director Robert Mueller supports storing Internet users' “origin and destination information,” a bureau attorney said at a federal task force meeting on Thursday.

As far back as a 2006 speech, Mueller had called for data retention on the part of Internet providers, and emphasized the point two years later when explicitly asking Congress to enact a law making it mandatory. But it had not been clear before that the FBI was asking companies to begin to keep logs of what Web sites are visited, which few if any currently do.

The FBI is not alone in renewing its push for data retention. As CNET reported earlier this week, a survey of state computer crime investigators found them to be nearly unanimous in supporting the idea. Matt Dunn, an Immigration and Customs Enforcement agent in the Department of Homeland Security, also expressed support for the idea during the task force meeting.

via FBI wants records kept of Web sites visited | Politics and Law – CNET News.