Some have suggested that our legislation would empower the president to deny U.S. citizens access to the Internet. Nothing could be further from the truth.
-Joseph Lieberman (I-Conn.)
Aside from the obvious civil liberties concerns, the problem I see is largely a mechanical one, and it demonstrates the Senators' lack of fundamental understanding when it comes to the world in which they legislate: By the time a cyber attack is apparent, it's no longer likely an "external" threat. The most effective attacks known today are distributed amongst a multitude of machines in various locations, making it impossible to protect citizens without shutting down the Internet -- if such a thing could even be accomplished in this country.
The U.S. network infrastructure is much more complex and diverse than that of Egypt. In part, that has to do with the shear differences in scale. But, perhaps surprisingly, it also has to do with the age of our network. Parts of our interconnected network go back five decades. Some interconnected networks predate the Internet itself. And these are interconnected with new infrastructure being added every day without the need for government knowledge or consent.
Most importantly, when the Advanced Research Projects Agency Network (ARPANET) was conceived, it was specifically designed to survive and reroute against an outage. That means, depending on the final draft, the law would likely be either ineffective, dangerous, or both.
A byproduct of life in the 21st Century is that many of the perks of a post-centennial lifestyle require the abdication of a fair bit of privacy to cyberspace. That means that the paper records that once required a search warrant to read (and maybe the forceful extraction from your cold-dead-hands), are now in the possession of companies who don't. Of course there's Facebook and Twitter. Those didn't exist in the 20th. Century. But, what about your phone records and email? While your phone company has long been subject to a warrant or subpoena, in the 21st. Century new "self-service" tools have been developed to help telcos manage the onslaught of requests made particularly attractive by the fact that most of us carry what amounts to a homing-beacon in our pockets. Similarly, while email has always been an attractive source of discovery, until recently most of it resided on each correspondent's physical, and virtual, desktop waiting to get written-over by something more current. Today, it's more likely been put out to pasture in a seemingly-endless "server farm", waiting to be picked by a custodian of records.
Even our personal computers, which have always required a search warrant, and often require a cascading series of search warrants covering various regions of storage space and categories of searches, are rapidly being replaced by windows to the web -- sleek sheets of glass and sculpted-aluminum that act as a portal to your virtual existence. Like a supermodel, these tablets are thin and beautiful, but two-dimensional, with very little substance inside. What makes these devices a reality today is a combination of near-ubiquitous Internet connectivity and access to your personal online data once it's established. Even the notion of "backing up" is becoming a thing of the past, because the data you see, isn't really here. It's somewhere else, presumably safe from destruction, but not necessarily from dissemination. Like many things in life, it's a trade-off.
But, not when it comes to fighting crime. The shift of discovery from physical space to cyberspace is a decided advantage for law enforcement. In fact, Google reports that it responded to more than 4200 discovery requests in the first-half of 2010 alone. One of the reasons these requests have become so popular is that online data is easier seize than a laptop, and often much more useful. Much of what can be had requires no search warrant at all, and thanks to online tools, can be had without even so much as contacting the service provider. Why? Because, unlike the data on your hard drive, you don't necessarily own your data when it's stored in cyberspace.
Actress Winona Ryder doesn't use the Internet. She just got her first smartphone, but finds it unpredictable. She had a laptop, but rarely used it.
She's fearful of technology. And that just might make her smarter than you.
As evidenced in her "Late Night"interview with Jimmy Fallon, these days, such concerns are the fodder for comedians. It's the current equivalent of being afraid to drive or swim. In the late 20th. Century, it might have been a fear of handing one's money over to an ATM machine. Or more recently, making a purchase online. But, well over 30,000 people died in car accidents in 2009. Another 24,000 were injured. In a similar period, more that 3000 people died from drowning. Fear is not necessarily a bad thing. Not if it keeps you safe.
Most of us either fear what we don't know, or fear what we do. There's also a whole complicated subset of irrational, or misguided fears that really fall into the first category. According to her own interview, Ryder falls into the former classification.
Ryder told Fallon, "We're a button away from joining Al Queda!"
How many times have you accidentally opted yourself into joining a mailing list because you forgot to un-approve your pre-approved consent? What about that time when you accidentally installed a bunch of "trial-ware" that came along with a program you legitimately wanted to use. Somewhere, before or after the end-user-license agreement you didn't read, it may have been an option. In the 90's one of my attorney-client's accidentally sold a good investment when he was dabbling with online day trading. I have met people who accidentally purchased cars on eBay. Meanwhile, I promise (though I don't recommend confirming it) that many forms of contraband are just a few clicks, or even a typo, away from where you sit this very moment.Last Summer I gave National Public Radio (NPR) a glimpse into just how easy it can be.Even if you bleed apple pie filling, you're still just a click away from looking like someone else.
I haven't tried it myself, but I'll bet joining Al Queda requires, at least, the completion of an annoying CAPTCHAin order to submit a membership application. While I'm sure Ryder has no interest in joining, just the accusation, or even a rumor, that she ever supported a terrorist organization, or had some other frighting interest, could be just as detrimental. Remember Christine O'Donnell, the Republican Party's most famous witch? In some parts of the country that's harder to understand than extremism.
Ryder: "We're a button away from joining Al Queda."
Maybe -- even if unwittingly -- she's on to something. Maybe we'd have several thousand fewer vehicular deaths every year if more drivers understood the engineering that goes into the highway, or a car, it's tires, or even just its brakes and safety systems. Sure, it might scare a few people out of driving altogether. But it might make the rest think a little harder before they accelerated into a turn, or tried to beat a red light across a wet intersection. Maybe, if more people really understood the Internet better before hopping on the "Information Superhighway", law enforcement might have fewer accidents to investigate.
"Right now, anybody is just one search term and a click on Google away from most of the same files that I have seen as part of my work," he says.
Fischbach believes the easy-to-find images are a kind of public hazard.
He worked for one defendant who went to prison because of one night of ill-advised Web surfing. The easy-to-find images are also tempting weapons in messy custody battles and divorces — he's convinced that in some of the cases he's worked on, one spouse has been framed by another. All of this makes Fischbach wonder why more isn't done to block some of the more obvious sources of these "radioactive" files.
"It's the same thing as any other public nuisance. Part of the government's job is not just to go out there and stop people from doing bad things, but to stop good people from having to fall victim to that," he says.
It's probably not constitutional for the government to block offending Web sites outright, but Fischbach says Internet service providers and search engines could volunteer to filter the images that reach their customers, just as e-mail providers filter out known viruses.
He's been suggesting this idea for years, and now somebody is trying it.
Disgruntled Hacker[Debt Collector] Disables More Than 100 Cars Remotely
Pay Technology's Webtech Plus
Cleveland-based Pay Technologies is a company that sells hidden wireless black boxes that allow car dealers to remotely disable a car’s ignition, or trigger the horn to begin honking, as a not-so-gentle reminder that a payment is due. The Webtech Plus responds to commands issued through a central website, and relayed over a wireless pager network.
A car dealer in Austin Texas began receiving complaints from hundreds of stranded customers late last month. According to the dealership's manager, the complaints stopped several days later, when he reset all the Webtech Plus employee passwords. Then police obtained access logs from Pay Technologies, and traced an IP address to a former employee. Police say he hacked into the dealership's computer system to deactivate the starters on the cars and set off their horns.
To call the suspect a "hacker" is really an insult to hackers. On the other hand, anyone who's ever spoken with a debt collector probably isn't very surprised by allegations of unethical behavior.
According to the dealership, the employee's account had been closed when he was terminated last month, but they allege he got in through another employee’s account. They claim he was working his way alphabetically through a database of all 1,100 customers whose cars were equipped with the device.
Attn. MPAA: There are much worse ways to copy movies than with a computer.
In 2007 prosecutors in Anchorage Alaska accused 34 year old stripper Mechele Linehan of plotting a murder based on the 1994 movie "The Last Seduction". Life so closely imitated art, said prosecutors, that they even tried to have the movie played for the jury.
Rockstar Games Grand Theft Auto
In 2008 a teenager confessed that he was trying to imitate scenes from the video game "Grand Theft Auto" when he robbed a murdered a taxicab driver in BangkokThailand. Movies like "The Deer Hunter" (1978) are even believed to have inspired several "copycat" suicides in the late 1970's and early 80's.
All of this may seem like fodder for censorship advocates, but that debate has largely come and gone in favor preserving the First Amendment's right to free speech. Wise as the framers of the U.S. Constitution may have been, few would accuse them of being clairvoyant. After all, who could have predicted the impact the Internet would some day have on both the precept of free speech and the concept of privacy?
Though many speak of the "right to privacy", it is not, at least as far as the U.S. Constitution is concerned, a right at all. It is, nonetheless, an ethos that has long been coveted by Americans, and is implicit in the Fourth Amendment's:
...right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures...
Of course, mention the term "search" to most people today, and it's far more likely to conjure thoughts of friends lists", home pages and e-books, than actual people, houses and papers. And while, in just the past few years, popular culture has come to embrace the sharing of intimate, private and personal details with virtual strangers, the desire to remain "secure" seems to be very much alive in the 21st Century. In fact, more than any other, the Fourth Amendment has played a central, albeit contested, role in the litigation of hi-tech criminal evidence.
I know what you watched last summer...
So, what does all this have to do with your Netflix queue? Though Americans, and many other people around the world, may be willing to voluntarily divulge personal information, either in trade for modern conveniences and services, or increasingly, for a sense of online significance, we're not quite as enthusiastic when it's taken from us and shared without any tangible return. It's no longer a secret that the monetary value of data has been pre-calculated into the return on investment (ROI) of so many of today's business models, but consumers still tend to expect a certain level of security. In recent years the bar has been set pretty low. Still, it may surprise many to learn that "anonymous" usage data can be deciphered into personally-identifiable intelligence, as proven by a pair of researchers at the University of Texas using what was thought to be anonymous user data provided to contestants in the three-year $1 million "Netflix Prize" to improve the site's recommendation results.
The UT's results brought both unwanted attention from the Federal Trade Commission and a lawsuit from a private firm, resulting in Netflix's decision last week to cancel a planned sequel to the prize awarded last year.
It's not hard to imagine how this sort of data could be exploited to peddle shoes to people who have rented all six seasons of "Sex in the City", or BestBuy ads targeted at fans of NBC's "Chuck".
Dreamworks Minority Report (2002)
It's no longer extraordinary to see similar data exploited in the process of investigating crimes either. Certainly the viewing interests and habits of the individuals mentioned above have been considered relevant discovery by law enforcement. In these cases, there's little, if anything, to decipher. Anything that Netflix knows about you, your account, and your viewing habits, is subject to a warrant, and, with or without much imagination, could be incriminating. How many of us haven't seen a good fictional car case, a well-written murder plot, a scripted street-fight, or a perfectly executed crime? The consumption of such fiction could be hazardous to your defense, if it proceeds similar accusations.
WARNING: Portions of this video may be disturbing to automotive enthusiasts.
A brother and sister from Diamond Bar were arrested on suspicion of insurance fraud after investigators found a video on the Internet that appears to show their high-performance 2009 Nissan GT-R sports car crashing during a street race.
Investigators say Jay Chen, 21 from Diamond Bar, California first reported to his insurance company that his sister crashed his 2009 Nissan GT-Rsupercar on the 10 Freeway on March 16, 2009, but later withdrew the claim. They say his sister, Tracy Chen, corroborated the story. Months later, according to insurance investigators, Chen filed another claim (estimated at $76,000 in damage), saying that he had crashed the same car on the 60 Freeway in Riverside. Having received information from a body shop that they had the damaged vehicle on their premises for several months, an investigator turned to the Internet and discovered evidence the California Insurance Commission calls "key to building the case" against the Chens. Both have been booked on charges of felonyinsurance fraud.
This week Google introduced a new and improved Google Latitude -- with enhanced features like "Location History". With Location History Latitude users can go back in time retrace their footsteps, and even see where they stayed-put, and for how long. Kind of cool...yet, very creepy. But practical?
Imagine, for example, you're the owner of a Palm Pre on Sprint's 3G Now Network, having trouble remembering where your were when you told your spouse you were somewhere else? Now, there's a map for that!
But wait -- there's more! How about "Location Alerts"? Certainly, a application that would alert you when a particular individual, say a family member, has left work or school, would be very practical. After a while of being alerted every time someone is, or has arrived, exactly where you would expect them to be, however, could get old. So, Google's geniuses stepped it up a notch. According to Google, Latitude will learn user's patterns and behavior so that alerts can be issued when a person has strayed from their routine -- left at a different time, or arrived at a different place.
For example, if you decide to staycation with your mistress, you can receive a handy alert when your spouse leaves the office earlier than usual. Or, if traffic is particularly light, Latitude will let you know when it's time for a quick window-exit.
Best of all, when the jig is up, no one has to know, because -- for now -- Google is making all these free services available to you, and no one else... at least, without subpoena powers.
Recently, I had a wonderful opportunity to play a game of hi-tech "phone tag" on the streets of San Francisco with Reporter Martin Kaste from NPR's "All Things Considered". Late last Summer I was asked if I would be willing to sit down for an interview for a story he was researching about location privacy. But, instead of agreeing to meet Kaste, I told him he had to find me.
With the aid of his GPS-equipped smart-phone, some software, a little patience, and a good pair of walking shoes, he was able to "tag" me sipping a latte outside a coffee shop on Market St. Of course, with my own GPS, and software-equipped smart-phone, I was able to see him coming. What follows are the fruits of that encounter:
Digital Bread Crumbs: Following Your Cell Phone Trail
Jeff Fischbach is a little bit like those guys in The Matrix — when he puts on his shades and looks at the world, he sees data.
Walking down the street in San Francisco, he points out all the devices that record people's comings and goings: digital parking meters, apartment intercom systems, digital security cameras...
How Twitter says they'll hide your location from twits with subpoenas.
Recently, Twitter announced that they would be adding geolocation features to their service, allowing users to embed their physical location in their Twitter feed. As not to alarm: Twitter has always maintained that this would be an opt-in feature. But, frankly, any web site you visit is privy to some information about your physical location by virtue of the IP address assigned to your computer by your Internet Service Provider (ISP) from a group of IP addresses reserved for your neighborhood. The logs kept by a web server, combined with a subpoena to the appropriate ISP, usually yield a street address for the subscriber assigned that IP address.
SmarterWare'sGina Trapani (formerly of Lifehacker.com) is attending the Twitter Conference in LA. She's posted updates explaining how Twitter plans to deploy this service and how they intend to protect its Twitter geolocation users from subpoenas. According to Gina, "Twitter will scrub geo-data stored in tweets more than 14 days old to avoid getting subpoena’d about a user’s location in the past. They will outright delete the location information from their database, not just anonymize." ... CONTINUE READING »