GILC Alert, Volume 4, Issue 9



GILC Alert
Volume 4, Issue 9
November 6, 2000

Welcome to the Global Internet Liberty Campaign Newsletter.

Welcome to GILC Alert, the newsletter of the Global Internet Liberty
Campaign. We are an international organization of groups working for
cyber-liberties, who are determined to preserve civil liberties and human
rights on the Internet.
We hope you find this newsletter interesting, and we very much hope that you
will avail yourselves of the action items in future issues.
If you are a part of an organization that would be interested in joining
GILC, please contact us at <gilc@gilc.org>.
If you are aware of threats to cyber-liberties that we may not know about,
please contact the GILC members in your country, or contact GILC as a whole.
Please feel free to redistribute this newsletter to appropriate forums.

===============================================
Free Expression
[1] Mainland China's new Net censorship rules
[2] Problems persist during & after ICANN elections
[3] Korean online protesters face persecution
[4] New domain name proposals raise concern
[5] US mega-blocking bill moves forward
[6] Olympic Net regulations stifle expression
[7] Malaysia cybercafes fear gov't ban
[8] ImageFilter software empowers gov't censors
[9] Moodwatch program threatens free speech
[10] US students battle schools over online expression
[11] Foil the Filters contest winners announced

Privacy and Encryption
[12] EU anti-privacy "cybercrime" treaty drafted
[13] Digital Angel body chip may allow Net tracking
[14] US spyware review panel flawed
[15] ECHELON faces criminal charges
[16] Japanese groups push for stronger privacy laws
[17] Clothing store web body scans spark concern
[18] Australian gov't health website bad on privacy
[19] US companies push weak privacy bills
[20] Free & secure web email service launched
[21] Study: privacy worries hurt e-commerce
[22] Amazon.com privacy fiasco
[23] US gov't gets low privacy marks
[24] New P2P crypto mail program
[25] Web "cat" tracks users
[26] Privacy flaws in Bluetooth palmtop devices
[27] Austrian Big Brother Awards ceremony held

===============================================
[1] Mainland China's new Net censorship rules
===============================================
Mainland China is launching yet another campaign against online dissenters.

Communist Chinese officials have unveiled new "Measures for Managing
Internet Information Services." These new rules criminalize many types of
behavior on the Information Superhighway, even including such acts as merely
"insulting other people" through the Internet. The proposal especially
concerned with the transfer of online information that "undermines national
unification, is detrimental to the honor and interests of the state,
disseminates rumors, disturbs social order," or otherwise "undermines social
stability." These standards target a variety of groups, particularly
supporters of religious freedom; it bars the dissemination of data "that
undermines the state's policy for religions, or that preaches evil cults or
feudalistic and superstitious beliefs." Under this regime, Internet service
providers must inform the government of any possible transgressions and keep
stringent records. Violators may face fines of up to CNY 1 000 000.

In addition, Communist authorities have jailed several people for their
online speech activities. The list of prisoners includes Qi Yanchen-a
freelance journalist who urged political reform in several of his articles.
After these items were posted on the Internet and in a Chinese policy
magazine, mainland Chinese officials arrested, tried and convicted Qi of
subversion. He was unable to appeal his sentence because his lawyer refused
to continue defending him and he could not find another lawyer within the
appeals period. Meanwhile, a freelance writer friend of Qi who wrote about
the case was also arrested and charged with undermining state power.

Not surprisingly, these moves have drawn fire from a number of free speech
advocates. The Digital Freedom Network (DFN-a GILC member) said that
Beijing's latest moves would "probably do little to improve the growth of
the Internet in China" while "placing an additional burden on the country's
struggling Internet industry." Ann Cooper, who is executive director of the
Committee to Project Journalists (CPJ), decried the Chinese government's
attempts to appoint "the companies involved in e-commerce as their proxy
policemen." Similarly, Reporters Sans Frontieres criticized the sentencing
of Qi Yanchen, saying that his imprisonment constituted "a serious violation
of press freedom."

To read an English language translation of China's "Measures for Managing
Internet Information Services," visit the DFN website under
http://dfn.org/Voices/Asia/china/netreg-0010txt.htm

For press coverage of China's new Internet standards, read "China drafts law
on Internet-based crimes," China Online, Oct. 24, 2000 at
http://www.chinaonline.com/topstories/001024/1/C00102312.asp

For a CPJ press release on this proposal, click
http://www.cpj.org/news/2000/China03oct00na.html

RSF's comments on the Qi Yanchen case are located under
http://www.rsf.fr/uk/html/asie/cplp/lp/210900.html

For a DFN news bulletin about the jailing of Chinese dissenters, located at
http://dfn.org/Voices/Asia/china/qiyanchen-appeal.htm

======================================================
[2] Problems persist during & after ICANN elections
======================================================
Despite a bevy of technical problems, Internet users have elected five
representatives to the global body that runs the Internet domain name
system.

The list of newly elected ICANN (the Internet Corporation for Assigned Names
and Numbers) Directors includes several vehement critics of the
organization, including Karl Auerbach (from North America) and Andy
Mueller-Maguhn (Europe). Auerbach ran on a platform that, among other
things, would require all ICANN decisions to be subject to an automatic
"sunset" provision. Under this plan, which is intended to promote greater
public accountability, any measures approved by ICANN would automatically
expire within a certain time period unless they were re-examined and
reauthorized. Both Auerbach and Mueller-Maguhn have attacked ICANN's Uniform
Domain Name Dispute Resolution (UDRP) as a burden on free speech; indeed,
Mueller-Maguhn went so far as to call the process by which the UDRP was
adopted as "evil."

The other winners were Ivan Moura Campos (to represent Latin America and the
Caribbean), Masanobu Katoh (Asia/Australia) and Nii Quaynor (Africa).

Overall, voter turnout was low in several sectors. This partly due to a
programming error that blocked many computer users from registering their
votes. While ICANN's contractor (election.com) claimed it had solved the
problem within a day or so, a number of would-be voters complained of
continued difficulties after the fixes were supposedly made.

More recently, ICANN announced that it will not allow these new Board
members to assume their positions as Directors until the end of its annual
general meeting, which takes place Nov. 13-17, 2000. Critics have attacked
this move because they believe it will reduce these publicly elected
representatives to mere non-voting observers, at a time when ICANN will
consider several pressing issues related to Internet governance, notably the
introduction of new Top-Level Domain names (see item 4 below).

These events came after charges from many observers that ICANN is
undemocratic. A law review article from Professor A. Michael Froomkin
suggests that ICANN's actions in conjunction with the United States
Department of Commerce (DoC) may have violated numerous standards designed
to ensure public input. According to Froomkin, "Depending on the precise
nature of the DoC-ICANN relationship, not all of which is public, DoC's use
of ICANN to run the DNS violates the Administrative Procedures Act (APA)
and/or the US Constitution."

These concerns have been heightened by ICANN's recent decision to extend the
terms of four nonelected directors. In spite of previous promises to allow
the public to elect a larger portion of its Board, ICANN has announced that
four of its appointed directors (Frank Fitzsimmons, Hans Kraaijenbrink, Jun
Murai, and Linda Wilson) will stay on for two more years (through November
2002). Some observers, including Froomkin, are now calling on these
unelected Board members to resign.

For the official elections results, click
http://www.election.com/us/icann/icannresult.html

To learn more about Karl Auerbach's positions, see
http://www.internetdemocracyproject.org/IDPanswersauerbach.htm

To learn more about Andy Mueller-Maguhn's positions, visit
http://www.internetdemocracyproject.org/IDPanswersmueller.htm

For the latest on ICANN's treatment of new At-Large Board members, see
Andrew Orlowski, "ICANN locks elected reps out of AGM," The Register (UK),
November 5, 2000 at
http://www.theregister.co.uk/content/1/14488.html

Read Declan McCullagh, "ICANN Elects Iconoclasts," Wired News, Oct. 12, 2000
at
http://www.wired.com/news/print/0,1294,39385,00.html

For more on the technical difficulties surrounding ICANN elections, read
Anick Jesdanun, "Internet Voting Snag," Associated Press, Oct. 3, 2000 at
http://www.abcnews.go.com/sections/tech/DailyNews/cyberelections001003.html

For more on comments from Professor Froomkin, see Andrew Orlowski,
"J'accuse: ICANN's 'Government sponsored extortion' unconstitutional," The
Register (UK), Oct. 3, 2000 at
http://www.theregister.co.uk/content/6/13706.html

For ICANN's Oct. 27 announcement that it will extend the terms of 4
unelected directors, click
http://www.icann.org/announcements/icann-pr27oct00.htm

For Froomkin's comments on this term extension, see
http://personal.law.miami.edu/~froomkin/boardsquat.htm

==================================================
[3] Korean online protesters may face persecution
==================================================
Observers fear that a recent Korean government raid of a noncommercial
Internet service provider will have chilling effect on speech in cyberspace.

Previously, the South Korean Information and Communications Ministry has
proposed a ratings system that would force web site creators to label
themselves if their materials could somehow be considered harmful to
teenagers. A Ministry spokesperson explained that once the ratings system
was implemented, websites with controversial content could then be blocked
off. The agency intends to submit this bill to the National Assembly within
the next few months, and the entire system could be up and running by
mid-2001.

Subsequently, hundreds of enraged Internet users simultaneously visited the
Ministry's home page and disrupted service for hours, apparently as part of
massive "virtual sit-in" protest-a form of demonstration that is generally
considered legal in Korea. However, Korean police officers soon showed up at
the offices of Jinbonet, an Internet service provider for noncommercial
users. The officers demanded that organization hand over numerous personal
information files regarding Jinbonet subscribers, apparently without a
warrant.  Though the ISP initially refused to comply with these demands,
after continued pressure from investigators, government agents eventually
did gain access to Jinbonet log files.

Since then, Jinbonet issued a statement condemning the government's actions
and noted that state officials have had a history of using criminal
investigations as a pretext to stifle dissent: "Jinbonet has received
threats from many investigative agencies in an attempt to obtain information
about Jinbonet users. To inspect hard disks which have information of not
only the Korean Confederation of Trade Unions, Korean Women's Group United,
Green Korea United, but also many users can be regarded as censuring their
online activities and if many hard disks were to be confiscated, the Jinbo
Network Center could not exist."

To read a JinboNet statement on these events, visit
http://cham.jinbo.net/maybbs/view_e.php?db=freeonline_eng&code=Statement&n=4
&page=1

See also
http://www.apc.org/english/news/fulltext.shtml?sh_itm=8ec5894688fcc1685369c2
9d5dd6dc73

For further information on Korean government Internet rating plans, visit
http://cham.jinbo.net/maybbs/view_e.php?db=freeonline_eng&code=infobank&n=3&;
page=1

===============================================
[4] New domain name proposals raise concern
===============================================
Experts are worried that a variety of new domain name proposals may help
corporations but will leave noncommercial entities, private individuals and
other members of the dot-org world behind.

The Internet Corporation for Assigned Names and Numbers (ICANN) has received
dozens of applications to create new top-level domains names. However, while
there were numerous suggestions to create new names for e-commerce purposes
(such as .shop and .biz), there were very few proposals specifically
targeted for noncommercial groups or ordinary Internet users. This dearth of
noncommercial-type domain name proposals has been attributed in part to
ICANN's decision to levy $50,000 nonrefundable application fees. For
example, while there had been considerable interest in creating .humanrights
before the $50,000 fee structure was announced, attempts to submit a formal
application were dropped due to a lack of funds. Another source of concern
comes from proposals to label websites with controversial content with
domain names like .sex and .xxx, which could then be blocked-a proposal that
has been savaged by numerous free speech advocates. In addition, many of
these proposals contain famous names lists and "sunrise provisions" that
might allow large intellectual property interests first dibs on new domain
name space at the expense of the general public. Finally, at least one
proposal "will also incorporate software that eliminates anonymous e-mail
and chat," a suggestion that experts fear would serious undermine freedom of
expression online.

To see ICANN's official list of submitted proposals, click
http://www.icann.org/tlds/

To submit comments on these proposals, visit
http://www.icann.org/mbx/tldapps/

For more details, see David Lawsky, "ICANN Will Decide Last Word on the Web
Addresses," Reuters, Oct. 22, 2000 at
http://www.upside.com/texis/mvm/news/wire?id=39f321de15

See also Sascha Segan, "Making a Name for Oneself," ABCNews.com (US), Oct.
6, 2000 at
http://www.abcnews.go.com/sections/tech/DailyNews/domainnames001005.html

Read Chris Oaks, "Inching Toward Dot-Whatever," Wired News, Oct. 4, 2000 at
http://www.wired.com/news/business/0,1367,39246,00.html

See also Ian Lynch, "Battle starts for control of new domains," Vnunet.com,
Oct. 4, 2000 at
http://www.uk.internet.com/Article/100613


===============================================
[5] US mega-blocking bill moves forward
===============================================
The United States Congress may soon approve a massive proposal to force
Internet blocking software on librarians, teachers and many other groups.

The so-called "Children's Internet Protection Act" is contained within a
Labor-Health and Human Resources funding bill, and combines several
different filtering plans. Among other things, the legislation would
essentially require high schools and libraries to include blocking software
on all of their computers. Institutions that refused to do so (or implement
policies to that effect) would receive federal funding.

Not surprisingly, a broad coalition of groups are fighting against this
package because it may severely restrict the flow of information online. The
list of opponents to this bill is broad based and includes cyberliberties
organizations such as GILC members the American Civil Liberties Union (ACLU)
and the Center for Democracy and Technology (CDT), conservative thinktanks
such as the Free Congress Foundation and Americans for Tax Reform,
educational institutions, industrial trade associations and many other
groups.

In addition, a new government report has rejected the mandatory use of
computer blocking programs. In its report, the Federal Child Online
Protection Act (COPA) Commission argued that, rather than using filtering
regimes, the "most effective current means of protecting children from
content on the Internet harmful to minors" should be "aggressive efforts
toward public education, consumer empowerment, increased resources for
enforcement of existing laws, and greater use of existing technologies." The
Commission specifically noted that there are "significant concerns"
regarding filtering software when they are "used in libraries and schools,"
and mentioned that these and other free speech-based "[c]oncerns are
increased because the extent of blocking is often unclear and not disclosed,
and may not be based on parental choices."

Yet despite this backlash, Congress seems more likely than ever to approve
this legislation within the next week or so, before it adjourns in
anticipation of the upcoming national elections. Moreover, White House
officials have indicated that President Clinton is likely to sign the
proposal.

See "Internet Filter Bill Hits Snag," Associated Press, Oct. 24, 2000 at
http://www.abcnews.go.com/sections/tech/DailyNews/netfiltering001024.html

To see an ACLU Action Alert on this subject, click
http://www.aclu.org/action/blocking106.html

For an open letter to Congress from the Free Congress Foundation and other
groups, visit
http://www.cdt.org/speech/filtering/001011fcf.shtml

To read the COPA Commission report, visit
http://www.copacommission.org/report/

For more on President Clinton's view on Internet filtering, read Keith
Perine, "White House Won't Fight Anti-Porn Measures," The Industry Standard,
Oct. 30, 2000 at
http://www.thestandard.com/article/display/0,1151,19802,00.html

See also "Keeping Web Smut From Kids," Associated Press, Oct. 20, 2000 at
http://cbsnews.cbs.com/now/story/0,1597,243016-412,00.shtml

===============================================
[6] Olympic Net regulations stifle expression
===============================================
Fans and athletes alike are charging that stringent Olympic regulations
violated their online free speech rights.

Prior to the games in Sydney, the International Olympic Committee (IOC)
issued a series of commandments that essentially barred live webcasting of
Olympic events. Similarly, the Committee also prevented journalists from
online news services from reporting on the games, and banned unofficial
websites from using audio or video coverage of Olympics. The IOC also
prohibited Olympic athletes (in its Code of Conduct) from disseminating
their comments and thoughts (including diary entries) on the Internet. The
Committee even went so far as to sue approximately 2,000 domains for using
"Olympic" language in their URLs; the defendants included a watchdog
organization dedicated to reporting on corruption in the Olympic process.

These moves have led to scorn and dismay from various quarters, including
members of the press, Olympic games participants and private Internet users.
Author Helen Lensky, author of "Inside the Olympic Industry: Power,
Politics, and Activism," charged that the IOC was engaging in this behavior
as part of a "wider commercial imperative" to protect its corporate
sponsors. She further noted that the "IOC has shown itself determined to
stamp out any voices contrary to the official Olympic message. It is not
interested in any kind of coverage that might be critical to the games."

Many of these critics also feel that IOC missed a golden opportunity to
reach out to millions of Internet users worldwide. Indeed, a number of
observers have suggested that these tough rules have contributed to public
apathy toward the Games-a view that was bolstered by low television and
Internet ratings.

Read Sean Dodson and Patrick Barkham, "Why the net is not invited to
Sydney," The Guardian, Sept. 14, 2000 at
http://www.guardianunlimited.co.uk/Print/0,3858,4063190,00.html

See also Laura Carr, "Olympics Sites Come Up Short," The Industry Standard,
Oct. 5, 2000 at
http://www.thestandard.com/article/display/0,1151,19145,00.html

===============================================
[7] Malaysian cybercafes fear gov't ban
===============================================
New rules from the Malaysian government may prevent many Internet users from
going online.

Several weeks ago, Malaysian officials banned all video game arcades within
the country. Since then, officials have turned their attention to
cybercafes. Energy Communications and Multimedia Deputy Minister Tan Chai Ho
has sternly admonished cybercafe owners and suggested that the ban on video
games also applied to them. Curiously, Deputy Prime Minister Abdullah Ahmad
Badawi justified these moves by comparing these activities to the use of
illegal drugs such as opium.

These developments have led to considerable concern among policymakers and
the Malaysian Internet community. One cybercafe owner, Lim Kah Hai, worried
that the government crackdown would keep many people off the Information
Superhighway. He pointed out that cybercafes "offer a cheap means for people
who can't afford computers to access the Internet. I have parents who bring
their children in here on weekends and nearby college students who need them
to complete assignments." Similarly, opposition politician Kerk Kim Hock
argued, "If you start banning video arcades, where do you stop? Should you
now ban cybercafes, snooker centers and nightclubs?"

Read Julian Matthews, "Malaysian Cybercafes Could Be Banned," ZDNet Asia,
Oct. 10, 2000 at
http://www.zdnet.com:80/zdnn/stories/news/0,4586,2638965,00.html

================================================
[8] ImageFilter software empowers gov't censors
================================================
Experts worry that a new "image recognition engine" will help government
agents to scan and censor Internet speech.

ImageFilter supposedly categorizes graphics files using criteria such as
shapes, colors, and textures. It then compares these files with other images
and decides whether the sorted pictures should be blocked, based on a
sliding "acceptance" rating scale. Eventually the program sends an email
warning to the computer where the image is stored. French police are already
using this program to hunt through the hard drives of Internet users, hoping
to find objectionable material. Interestingly, no statistics are apparently
available regarding product's misidentification rates.

A variety of observers have voiced concerns that this software will
seriously hamper freedom of expression. The list of concerned parties even
includes child abuse experts such as Professor Murray Straus, who worried
that "[i]f we have [the United States] Congress saying, 'Search engines must
block this, businesses must block that,' that raises free speech issues."

To see an official demonstration of ImageFilter, visit
http://www.lookthatup.com/eng/imagefilter_f.htm

Read Rachel Konrad, "New filter scours servers for illicit content," CNet
News, Oct. 24, 2000 at
http://news.cnet.com/news/0-1005-200-3277835.html

===============================================
[9] Moodwatch program threatens free speech
===============================================
A new e-mail program that supposedly detects the sender's emotions may
hamper freedom of expression online.

The program, called Moodwatch, is actually a feature built into the latest
version of Eudora, a popular e-mail handler made by Qualcomm. Moodwatch
scans through both incoming and outgoing e-mail messages looking for
keywords as contained within a "flame dictionary." Afterwards, the program
rates messages based on their content, then issues paternalistic warnings
depending on the purported severity of the language. One such warning reads:
"Your message is the sort of thing that might get your keyboard washed out
with soap, if you get my drift. You might consider toning it down."

Moodwatch has created considerable concern that it will curb free speech and
invade user privacy. Experts are particularly concerned that the program may
flag words and phrases as offensive even when they are used in jest or
otherwise not meant as insults. Indeed, Moodwatch's "dictionary" includes
plain phrases such as "I'm not about to let you," which might cause a given
message to be branded as abusive language regardless of context.

See Adam Pasick, "Subject: You're an Idiot," Fox News, Oct. 4, 2000 at
http://www.foxnews.com/vtech/100400/email.sml

======================================================
[10] US students battle schools over online expression
======================================================
Many American students are going online to air their views, but are being
frustrated by school officials who refuse to let them say what they think.

In one such instance, two Kansas students, Lee Dunfield and Brad Quellhorst,
wrote a satirical student newspaper and posted it on the Internet.
Initially, "Low Budget" included stories such as "NYC Police Arrest Man For
Being Black," and "Pope Apologizes for All 2000 Years of Christian
Persecution." School officials responded by suspending the authors, and
later required mandatory school screening of future issues prior to
publication. Dunfield commented, "We didn't think it would be a problem.
People are labeling us as rebels, but I don't look at it that way. We were
just trying to express the opinions a lot of people have in a sarcastic
way." Similar battles have occurred in several other states.

A number of experts worry that these efforts by school administrators may
have a detrimental impact on free speech. Paul McMasters of the Freedom
Forum believes this problem arises in part from a stunted view of how the
Internet can used: "Many school officials think the role of the student
paper should be no more than a bulletin board or public relations vehicle.
For many students the only way to have freedom of expression and spread
their intellectual wings is to go the online route."

Read David Koeppel, "Students Flee School Newspapers For Censor-Free Web,"
Fox News, Sept. 28, 2000 at
http://www.foxnews.com/national/092800/studentpaper_koeppel.sml

===================================================
[11] Foil the Filters contest winners announced
===================================================
Internet filtering software is still very clumsy.

That's apparently the conclusion being drawn from a recent contest sponsored
by the Digital Freedom Network (DFN-a GILC member). In "Foil the Filters,"
participants competed to find the most outrageous mistakes made by Internet
content blockers. The Grand Prize winner, Joe J., was cut off from his high
school's website while using a computer in the school's own library. The
runner up, Hillary Anne, was prevented from registering
hillaryanne@hotmail.com because blocking software detected the word "aryan"
in the username.

The contest included several categories including the Poetic Justice award,
where websites of blocking software proponents were censored by filtering
programs. In the latter category, one winner was American politician Richard
Armey, whose official webpages (which contained his popular name, "Dick")
were shunned by numerous software packages. Similarly, the Focus on the
Family website was blocked by Cybersitter because of pages that described,
among other things, hardcore pornography and bondage. The Twilight Zone
award (for unexplained blocking) went to an Australian high school student,
Scott, who was barred by filtering software from finishing a mathematics
essay.

The full list of contest winners is posted on the DFN website under
http://dfn.org/Alerts/contest.htm

====================================================
[12] EU anti-privacy "cybercrime" treaty drafted
====================================================
A new draft cybercrime convention is receiving heavy fire from privacy
advocates.

Among other things, the Council of Europe proposal would have signatory
countries enact laws to make Internet service providers (ISPs) liable for
their customers' content, as well as force ISPs to monitor and retain
records on customer activities. Additionally, the scheme would make it
easier for government agents to search the accounts of private Internet
users as well as gain access to encryption keys. The plan also includes a
broadly worded section on "Illegal Devices" that would prohibit many types
of computing technologies that could possibly be used by hackers.
Furthermore, the draft treaty mandates signatories to create new harsh
penalties for copyright infringement.

The revised plan has drawn fire from numerous privacy advocates. David
Banisar of Privacy International (a GILC member) lamented that although the
proposal had gone through "months of criticism from industry, security and
privacy experts, ... most of the controversial provisions on issues such as
security tools and access to encrypted data are unchanged or are even worse
than before." Banisar pointed out that the newest sections of the treaty
would "require countries to adopt laws to 'compel a service provider' to
either capture content themselves by building in surveillance capabilities,
or to 'cooperate and assist' authorities Carnivore-style." He also
challenged the bill's ever increasing scope: "Not content with limiting this
monstrosity to Europe, this draft is no longer limited to countries in the
Council of Europe and countries that participated in the drafting such as
the US and Canada. Now, it specifically opens the treaty to all countries in
the world once it goes into effect."

The Global Internet Liberty Campaign has since issued a statement saying
that "the draft treaty is contrary to well established norms for the
protection of the individual, that it improperly extends the police
authority of national governments, that it will undermine the development of
network security techniques, and that it will reduce government
accountability in future law enforcement conduct." This statement has
garnered the approval of several dozen cyberliberties groups from around the
world.

To read the draft treaty, click
http://conventions.coe.int/treaty/EN/projets/cybercrime.doc

To see the GILC statement (along with a list of signatories), click
http://www.gilc.org/privacy/coe-letter-1000.html

To read more of David Banisar's comments, visit
http://www.securityfocus.com/commentary/98

For press coverage of this event, read Declan McCullagh, "Police Treaty a
Global Invasion?" Wired News, Oct. 17, 2000 at
http://www.wired.com/news/politics/0,1283,39519,00.html

For French coverage of this development, see Florent Latrive, "Pas touche à
mon disque dur! Des associations dénoncentce texte qui donne trop de
pouvoirs à la police," Libération, Oct. 19, 2000 at
http://www.libe.fr/multi/pirates/20001019jeuzg.html

For a special dossier of cybercrime materials created by Imaginons un Reseau
Internet Solidaire (IRIS-a GILC member), visit
http://www.iris.sgdg.org/actions/cybercrime

==========================================================
[13] Digital Angel body chip may allow Net tracking
==========================================================
A new biometric device might allow Internet users to track your every move.

According to the device's would-be manufacturer, Applied Digital Solutions,
Digital Angel (DA) is a special chip that would collect information such as
body temperature, pulse rate, blood pressure and geographical location, then
send this data to special ground stations. Afterwards, these tidbits would
ostensibly be made available through the Information Superhighway.  While
spokesperson for the firm said that the device will merely be worn close to
the body, the original Digital Angel patent claims the system is "designed
to be implanted under the skin of an individual."

The company is hoping to sell this device on a global scale for
identification purposes; as one spokesperson said, "You want to access and
go online with your MSN [Microsoft Network] or AOL [America Online] account,
you'll have DA transmitting your profile at request." Indeed, at least one
major company, DoubleClick, is already looking at ways to use Digital Angel
to send better targeted commercials; for example, DA information would allow
DoubleClick to send coffee ads to a given user every that person passes by a
Starbucks coffee shop. It should be noted that DoubleClick, which provides
banner ads to many websites, has faced heavy criticism over its system for
tracking Internet users through the placing of digital identification
numbers in files known as "cookies" on users' hard drives.

Experts have raised serious questions as to whether these plans are
technically feasible. However, the unveiling of Digital Angel has heightened
public concern over potential threats to individual privacy. James Dempsey
of the Center for Democracy and Technology (CDT-a GILC member) worried that
current laws will not be sufficient to prevent such intrusions: "Clearly our
legislation now is outdated. The ... technology is going to become, I
believe, more and more widely integrated into electronic devices. We have to
catch up with this. ... [W]e need to have some clear-cut privacy rules."

Read Michael Della Bitta, "Digital Angel: The New Eye in the Sky," Fox News,
Oct. 16, 2000 at
http://www.foxnews.com/vtech/101600/da.sml

For more on Digital Angel's privacy implications, see Michael Della Bitta,
"Digital Angel: Privacy Problems?" Fox News, Oct. 16, 2000 at
http://www.foxnews.com/vtech/101600/da_side.sml

To read the patent for Digital Angel (U.S. Patent No. 5,629,678), visit
http://www.digitalangel.net/graphics/05629678.pdf

See Linda Harrison, "Human chip implants not going skin deep," The Register
UK, Oct. 27, 2000 at
http://www.theregister.co.uk/content/1/14292.html

See also Anick Jesdanun, "Digital Tracking Devices Coming Soon," Associated
Press, Oct. 30, 2000 at
http://www.abcnews.go.com/sections/tech/DailyNews/wirelesstracking001030.htm
l

The official Digital Angel website is located at
http://www.digitalangel.net

===================================================
[14] US spyware review panel flawed
===================================================
Controversy continues to grow over a US government spyware program.

The device, known as Carnivore, is attached to the server of a given
Internet service provider. It intercepts all Internet transmissions that
come through the server, then parses out pertinent material, based on chosen
keywords. The US Department of Justice (DoJ) has confirmed that Carnivore
can monitor private e-mail messages as well as activity on the World Wide
Web and in chat rooms. The US Federal Bureau of Investigations (FBI) then
decides which particular communications it believes it is entitled to
review.

After considerable public outcry, the US government commissioned an
"independent" review panel to see whether Carnivore complies with Federal
wiretapping laws. However, a close examination of a poorly masked Department
of Justice (DOJ) report (which had been posted on the official DOJ website)
has revealed that the review team includes a large number of White House
insiders, including a former Clinton information policy advisor, and a
former Justice Department official. Other team members have backgrounds in
the National Security Agency (NSA), the Department of Defense, and the
Department of the Treasury. Barry Steinhardt, Associate Director of the
American Civil Liberties Union (ACLU), said that "[b]y selecting people with
extensive government ties for what is supposedly an independent review, the
Executive Branch has shown once again that it cannot be trusted with carte
blanche authority to conduct searches."

Oddly enough, in spite of these developments, Carnivore has actually
received some support from within the computing industry. Grant Sieffert of
the Telecommunications Industry Association suggested that "[i]f Carnivore
could be tested through the normal testing process that the industry uses, I
think there are a lot of people who do think that it's a solution that could
work." Moreover, despite a recent court ruling that suggested otherwise, and
despite strong objections from privacy groups, Sieffert seemed to accept the
FBI's assertions that Carnivore protects privacy: "If it does what the FBI
claims it does, then it seems to solve the problem of separating
call-identifying information from the content."

These industry claims were further brought into question by the recent
disclosure of several government papers regarding Carnivore and similar
programs. These papers were made available in response to requests from both
the Electronic Privacy Information Center (EPIC) and the ACLU. Contrary to
past suggestions that Carnivore only intercepts e-mail messages, the
documents revealed that the latest versions of the system included many new
and powerful features, which allow it to sift through virtually all types of
Internet transmissions. One of these add-ons, DragonNet, can intercept
telephone calls made through the Information Superhighway.  The documents
also showed that millions of US dollars had been spent in developing
Carnivore and its predecessors.

These events have added momentum to legislation that would increase the
privacy of Internet users. One of these bills, the Electronic Communications
Privacy Act of 2000, has now been approved by a committee of the US House of
Representatives. However, it is unclear whether this proposal will be passed
by both houses of the federal legislature before Congress adjourns (within
the next few weeks).

The original (masked) DOJ report, is available (in PDF Format) under
http://www.usdoj.gov/jmd/pss/iitritechnicalproposal.pdf

The list of "unmasked" and coded review team names is at
http://cryptome.org/carnivore-mask.htm

To see EPIC's collection of the Carnivore documents, click
http://www.epic.org/privacy/carnivore/foia_documents.html

The ACLU press release is available under
http://www.aclu.org/features/f100400a.html

Further press coverage is available from Brock Meeks, "FBI's Carnivore hunts
in a pack," MSNBC, Oct. 18, 2000 at
http://www.zdnet.com/zdnn/stories/news/0,4586,2641902,00.html

See also "Ties taint Carnivore Review," USA Today, Oct. 4, 2000, page 27A,
at
http://www.usatoday.com/usatonline/20001004/2717405s.htm

For more on the industry's apparent assent to the use of Carnivore spyware,
see Oscar S. Cisneros, "FCC Could Adopt Carnivore," Wired News, Sept. 29,
2000 at
http://www.wired.com/news/politics/0,1283,39129,00.html

For additional details on the Electronic Communications Privacy Act of 2000,
see Declan McCullagh, "Keeping Cops' Hands Off Email," Wired News, Sept. 27,
2000 at
http://www.wired.com/news/print/0,1294,39120,00.html

====================================================
[15] ECHELON faces criminal charges
====================================================
A super-secret global surveillance network may soon face criminal charges.

ECHELON is a highly classified system designed to intercept communications
from around the world. ECHELON is reportedly operated by the US National
Security Agency (NSA), in conjunction with several other intelligence
agencies, including Great Britain's Government Communications Headquarters
(GCHQ), and Australia's Defence Signals Directorate (DSD). According to
experts, ECHELON is capable of intercepting e-mail messages, faxes,
telephone conversations.

A special French government panel that is looking into possible ECHELON
wrongdoing has now recommended greater use of computer cryptography to deter
a super-secret global spy network. Interestingly, the chairman of the
enquiry, Arthur Paecht, deplored the fact that neither the United States
government nor British officials cooperated with the investigation. The
report went on to suggest that ECHELON had already been used to conduct
industrial espionage against European corporations, and noted that ECHELON's
activities underlined the lack of privacy online. As a response, the enquiry
advocated liberalized European Union policies towards encryption technology,
and even urged the EU to help develop more sophisticated computer security
systems.

Since then, Ilka Schrvder, a member of the European Parliament (EP) who sits
on a special EP ECHELON investigation committee, has filed criminal
complaints against the spy systems' operators. She specifically targeted
"unknown suspects especially from the U.S. And Great Britain, as well as
possibly the German Federal Government, for operating and tolerating the
Echelon network." These papers were served on several key German government
offices, including the offce public prosecutor of Traunstein, which is
located near a purported NSA/ECHELON base in Bad Aibling.

For more on the Schrvder complaint, read Steve Gold, "Criminal charges filed
against 'Echelon'," Newsbytes, Oct. 17, 2000 at
http://www.usatoday.com/life/cyber/nb/nb4.htm

See John Lettice, "French Echelon report says Europe should lock out US
snoops," The Register (UK), Oct. 13, 2000 at
http://www.theregister.co.uk/content/1/13974.html

====================================================
[16] Japanese groups push for stronger privacy laws
====================================================
In Japan, there is growing support for tougher privacy standards in both
public and private sector.

A newly issued Japanese government report proposes legislation to protect
personal data held by private companies. The plan includes many key
principles regarding fair information practices, including use of
information for only specific purposes, obtaining such data through proper
methods, making sure the data is accurate, properly securing the information
before it is used, and allowing individuals control over their own files.
The report also recommends new opt-in laws that would require companies to
ask individuals for permission before transferring their respective personal
information to third parties.

There are also efforts underway to protect Japanese citizens from
unnecessary government intrusions online. Opposition party leaders will soon
submit a bill to abolish a controversial Japanese wiretapping law that went
into effect this past August. The law in question considerably expands the
powers of the Japanese law enforcement officials, and allows Ministry of
Justice officials tremendous leeway in conducting taps of phone
conversations, fax transmission and Internet communications. Concerns over
potential privacy violations were further heightened by the National Police
Agency's new budget, which includes plans to use a government server to
conduct e-mail surveillance throughout the Land of the Rising Sun. Against
this backdrop, numerous civic groups, including Japanese Net Workers Against
Surveillance Taskforce (NaST-a GILC member), are throwing their support
behind the bill to repeal this new statute. However, the current ruling
parties has so far refused to even allow formal debates over the proposal.

See "Report on data privacy gets nod, exempts press," Japan Times, October
12, 2000 at
http://www.japantimes.co.jp/cgi-bin/getarticle.pl5?nn20001012a8.htm

See also "Petition against wiretapping law submitted to Diet," Japan Times,
Sept. 26, 2000, at
http://www.japantimes.co.jp/cgi-bin/getarticle.pl5?nn20000926b8.htm

For further information in Japanese, visit the NaST homepage at
http://www.jca.apc.org/privacy

==========================================================
[17] Clothing store web body scans spark privacy concerns
==========================================================
Think body scans are an invasion of personal privacy? Would you feel any
better if these scans were posted on the World Wide Web?

American clothing store giant Land's End has launched a "Virtual Model Tour"
to promote its new Body Scanning service. Under the program, customers "step
into a scanning room," where "200 000 points of measuring data" are
recorded, "enough to determine your size and dimensions more accurately than
ever," according company documents. Afterwards, the information is used to
create a personal "Virtual Model" profile that is made available on the
Land's End website. Users can then "try on hundreds of clothes online" using
a given "Virtual Model." Similar services are available through ESize.com.

Experts are now questioning whether these companies have made sufficient
efforts to keep this information private. Indeed, the Land's End tacitly
admits through its Security Policy that it transfers customer information
(such as names and addresses) to various third parties, including other
companies, but the Policy is silent as to what the company does with
personal body scans.

To see a Land's End statement regarding their body scan program, click
http://www.landsend.com/spawn.cgi?target=SCANTOUR1000&sid=0971796905205

Read Dianne Lynch, "Sizing Up EZSize.com," ABCNews.com (US), Sept. 6, 2000
at
http://abcnews.go.com/sections/tech/WiredWomen/wiredwomen000906.html

====================================================
[18] Australian gov't health website bad on privacy
====================================================
Many groups are voicing concerns that an Australian government website may
needlessly expose sensitive medical information about several million
citizens.

The Australian government has been forging ahead with attempts to make many
government services available via the Internet, including tax services and
registrations. As part of this effort, the Australian Department of Health
is trying to establish an electronic network by sometime next year. However,
there are apparently no clear guidelines as to who will have access to these
files, or for what purposes they can be used. Similarly, there are major
questions over whether personal health data will be properly secured when
posted to the World Wide Web.

Experts have suggested that these thorny problems could be solved through
stronger privacy laws. Privacy Commissioner Chris Puplick said that "there
has to be appropriate legislation to ensure that this isn't linked with
social security payments or with taxation arrangements or as a means of
controlling health costs or linked to the law enforcement people who might
be involved in investigating complaints about over charging by doctors,
things of that nature."

Read Adam Creed, "Privacy Concerns Over Australian E-Health Network Rise,"
ComputerUser.com, Sept. 23, 2000 at
http://www.computeruser.com/news/00/09/23/news8.html

==================================================
[19] US companies push weak privacy bills
==================================================
Consumer advocates warn that a new industry-backed bill will not go very far
to protect privacy online.

The proposal, which is being considered by the United States Congress, would
merely require websites to provide notice of their policies regarding
privacy, as well as provide customers with the ability to "opt out" of
company information collection systems. The bill has been endorsed by
several major companies, including America Online, and Walt Disney Internet
Group.

However, many groups feel that this legislation does not do enough to
safeguard user privacy. At a recent hearing, Executive Director Marc
Rotenberg of the Electronic Privacy Information Center (EPIC-a GILC member)
testified that the notices required under the plan "without other
substantive rights operate more like warning labels or disclaimers than
actual privacy safeguards." Similar concerns were voiced in a later hearing
by EPIC Policy Analyst Andrew Shen, who argued that "Technologies available
to consumers ... will only have significant impact once legal standards
become effective" and that "Congress ... should build on the legal framework
for privacy protection, consistent through many federal laws protecting
personal information."

EPIC and other organizations are supporting a rival bill from Senator Ernest
Hollings as a more comprehensive way to strengthen privacy on the Internet.
Among other things, the Hollings bill would require companies to get their
customers' permission before collecting personal information about them.

Marc Rotenberg's testimony is posted at
http://www.epic.org/privacy/internet/testimony_1000.html

Andrew Shen's testimony is available under
http://www.epic.org/privacy/internet/shen_testimony_1000.html

Read Ariana Eunjung Cha, "Key Firms Back Bill On Web Privacy," Washington
Post, Oct. 4, 2000, page E1, at
http://washingtonpost.com/wp-dyn/articles/A5310-2000Oct3.html

See also Jim Wolf, "Opting-Out for Online Privacy," Reuters, Oct. 4, 2000 at
http://www.abcnews.go.com/sections/tech/DailyNews/onlineprivacy001004.html

==================================================
[20] Free & secure web email service launched
==================================================
A new British e-mail service may greatly enhance privacy along the
Information Superhighway.

The service, Cyber-Rights.Net, is the result of a partnership between Hush
Communications and Cyber-Rights & Cyber-Liberties UK (a GILC member). The
system allows users to send and receive email that is encrypted and secured
from end-to-end. Because the system is web-based, registrants can utilize
Cyber-Rights.Net from any location in the world that has Internet access.
Furthermore, the entire package is available free of charge.

The partnership is part of a campaign against the controversial British
Regulation of Investigatory Powers Act (RIP) 2000, which passed into law on
this past October. The RIP bill is highly controversial because its
potentially damaging impact on Internet privacy. Among other things, it
extends the reach of law enforcement agencies, making it easier for them to
monitor and intercept communications in cyberspace, as well as giving the
government greater access to users' encryption keys and passwords.

Yaman Akdeniz, Director of Cyber-Rights & Cyber-Liberties (UK), bemoaned
"the absence of clearly defined conditions and safeguards protecting the
privacy of communications in homes and in working environments." He hopes
that "Cyber-Rights.Net will be an additional tool for concerned Internet
users when securing their communications."

This new service is available through
http://www.cyber-rights.net

For more details, visit the Cyber-Rights & Cyber-liberties (UK) homepage at:
http://www.cyber-rights.org

==================================================
[21] Study: privacy worries hurt e-commerce
==================================================
A new study suggests that public concern over the lack of online privacy is
continuing to have a detrimental impact on e-commerce.

The Forrester Research report found consumers still worry about how dot-coms
handle privacy matters. In this project, researchers had 400 computer users
rate numerous e-commerce sites on privacy grounds, including their posted
privacy policies, on a scale of 1 to 100 (with 100 as the highest score).
The list of sites tested included Amazon.com, eToys.com, WalMart.com and
many others. Most of the websites (along with their privacy statements)
received ratings of around 60 to 76. Interestingly, evaluators often
complained that they had a hard time figuring out how these dot-coms handled
personal information.

The report warned that e-commerce companies must do a better job of
explaining to the public their stances on sensitive user data. Forrester
Research analyst Christopher Kelley noted that many of these retailers "may
not be aware of how important the privacy issue is to consumers and how it
can negatively affect their bottom line."

See "Study: Sites Need Private Xmas," Wired News Report, Oct. 12, 2000 at
http://www.wired.com/news/print/0,1294,39398,00.html

==================================================
[22] Amazon.com privacy fiasco
==================================================
A change in business practices by a major online bookseller is drawing heavy
fire from privacy groups.

Amazon.com recently altered its privacy policy to allow transfers of
customer information to third parties. Specifically, Amazon added language
saying that it would treat sensitive "customer information" as merely
"business assets" that could be bought or sold as the company continued to
develop its business.  This comes in stark contrast to its prior notice,
which explained that the firm would never buy or sell customer data. In
addition, the company removed a past feature of its website, which allowed
consumers to completely opt out of these types of information transfers (by
sending e-mail to never@amazon.com). Instead, the company allows users
limited access to their files, apparently without allowing them to fully
opt-out. Indeed, when Jason Catlett from the privacy group Junkbusters.com
asked Amazon to terminate this account and destroy all information related
to him, the company replied that it "cannot totally remove account
information" from its system. Oddly enough, Amazon spokesperson Patty Smith
said that these new procedures (particularly privacy notice) were actually
an improvement because they clarified how the company handled user data.

This decision was slammed by several organizations, including the Electronic
Privacy Information Center (EPIC-a GILC member), which had sold books
through Amazon's affiliates program. EPIC eventually severed all ties with
the bookseller; EPIC Executive Director Marc Rotenberg said the retailer's
move was further evidence of a "slow erosion of online privacy under the
industry's self-regulatory approach." Similar comments came from Catlett,
who called the revised policy "unacceptably weak" and noted that "Amazon's
leadership position means that it directly affects a very large number of
individuals as well as prevailing industry standards."

To read EPIC's letter, click
http://www.epic.org/privacy/internet/amazon/letter.html

To see more of Jason Catlett's comments, visit
http://www.junkbusters.com/ht/en/amazon.html

Read "Privacy groups protest Amazon's policies," Associated Press, Sept. 14,
2000 at
http://salon.com/tech/wire/2000/09/14/amazon/print.html

See also Miguel Helft, "For Amazon, Honesty May Not Be the Best Policy," The
Industry Standard, Sept. 14, 2000 at
http://www.thestandard.com/article/display/0,1151,18538,00.html

==================================================
[23] US gov't gets low privacy marks
==================================================
There is growing concern that the United States government is not doing a
good job protecting people's privacy.

A survey conducted by the Information Technology Association of America
(ITAA) showed that nearly 80% of Americans were concerned that the US
government would use data about them. Furthermore, about half of the
respondents wanted to see a Federal "chief information officer" appointed to
safeguard their privacy. This comes after a US General Accounting Office
(GAO) report that showed a majority of US government Web Sites do not comply
with privacy standards proposed by the U.S. Federal Trade Commission (FTC).
Of 65 web sites tested, only two of them conformed with the FTC's "fair
information principles" that previously had been proposed to protect
consumers' personal information when collected by dot-coms and other
e-commerce companies. According to the latest revelations, 13 government
agencies are apparently tracking Internet users, and in one instance
(involving the U.S. Forest Service), the collected data was handed over to a
private firm.

A number of groups have cited these revelations as evidence that new and
tougher privacy laws are needed. David Banisar of Privacy International (a
GILC member) noted that the U.S. Privacy Act, which theoretically protects
citizens when the government agencies collect information, "these days is
largely a paper tiger." Banisar suggested that an independent agency should
formed to help solve these problems-a view that may receive considerable
public support, judging from the ITAA poll results.

This view was further buttressed by a recent report, "Privacy and Human
Rights 2000: An International Survey of Privacy Laws and Developments," that
was jointly issued by Privacy International and the Electronic Privacy
Information Center (EPIC-a GILC member). This report indicates that the US
is in the dubious position of leading in efforts to remove laws and
technical measures that protect individual privacy.  EPIC Executive Director
Marc Rotenberg commented that the report indicated "an urgent need to
establish privacy rights in law to protect the interests of citizens
particularly in the digital world."

See D. Ian Hopper, "Big Brother Is Still Watching," Associated Press, Oct.
22, 2000, at
http://www.abcnews.go.com/sections/tech/DailyNews/tracking001021.html

For more on the ITAA survey, see "Poll: Most Americans Wary of Privacy,"
Reuters, Oct. 17, 2000, at
http://www.abcnews.go.com/sections/tech/DailyNews/computerreport001017.html

For more on the GAO report, read Patrick Riley, "Report: Government Web
Sites Have Few Privacy Safeguards," Fox News, Sept. 12, 2000 at
http://www.foxnews.com/national/091200/webprivacy_riley.sml

For more on "Privacy and Human Rights 2000: An International Survey of
Privacy Laws and Developments," click
http://www.epic.org/bookstore/phr/PHRrelease.htm

See also David McGuire, "US Privacy Protections Are World's Weakest-Report,"
Newsbytes, Sept. 20, 2000 at
http://www.newsbytes.com/pubNews/00/155490.html

==================================================
[24] New P2P crypto mail program
==================================================
A new e-mail program that uses peer-to-peer (P2P) technology may greatly
enhance online privacy.

Created by AbsoluteFuture, SafeMessage sends messages directly from the
creator's machine to recipient's computer (via the software manufacturer's
systems), without going through normal e-mail servers that act as middlemen.
In order to avoid the possibility that past transmissions may be preserved
on e-mail server logs, minute amounts of authorization data are kept on
AbsoluteFuture's computers, but other information (such as the contents of
each message and the identities of the parties involved) is not retained.
The program also encrypts each message sent between the two parties; both
sides must have SafeMessage software and each others' keys to be able to
communicate. The entire setup has been compared to Napster, the popular
music-file sharing website and software package.

AbsoluteFuture's Chief Executive Officer, Graham Andrews, said "SafeMessage
is the electronic answer to the shredding machine. It is the first
industrial-strength, secure messaging product of its kind for not only large
corporations, but also individuals." While the system can be somewhat
tedious, the company hopes that cybernauts will use SafeMessage to secure
ultrasensitive information transfers.
  Read Chris Oakes, "This Email Will Self-Destruct," Wired News, Sept. 21,
2000 at
http://www.wired.com/news/print/0,1294,38936,00.html

See also Cecily Barnes, "New email could confound law enforcement," CNet
News, Sept. 22, 2000 at
http://news.cnet.com/news/0-1005-200-2841067.html

==================================================
[25] Web "cat" tracks users
==================================================
Many computer users have heard about the threat "cookies" and "webbugs" pose
to their privacy. Now there's apparently a new menace: web "cats".

CueCats allow users to scan special barcodes contained on print articles and
advertisements, which triggers their computers into accessing websites for
more information. This system is already being used by numerous publications
(including Forbes and Wired magazine) and by hundreds of thousands of users.
However, scientists have discovered that CueCats include special
individualized serial numbers that allow the tracking of computer users as
they surf the Internet and the creation of highly detailed profiles
regarding their behavior. Indeed, the maker of CueCats, Digital Convergence,
has admitted that it "is responsible for the creation and analysis of the
largest consumer database that provides the unique combination of Web
tracking with all forms of media." Worse still, Digital Convergence recently
suffered a security breach that revealed personal information files on
nearly 140,000 users, including such data as customer names, email addresses
and postal codes.

Not surprisingly, these revelations have caused considerable concern among
privacy advocates. The Privacy Foundation's Richard M. Smith said that his
group "has serious privacy concerns with the CueCat. We are asking the
company to fix the service now, before it is in widespread use." Smith noted
that the CueCats' serial numbers put Digital Convergence "in a very powerful
position to track people. And the question is, what happens with your
information at the other end? Frankly, the company has not been very
forthcoming about their practices."

Read Stefanie Olsen, "Privacy group slams Web tracking 'cat'," CNet News,
Sept. 22, 2000 at
http://news.cnet.com/news/0-1005-200-2841044.html

==================================================
[26] Privacy flaws in Bluetooth palmtop devices
==================================================
Scientists have discovered anomalies within various palmtop computer systems
that may have a detrimental impact on user privacy.

The flaws occur in the Bluetooth wireless radio beams that palmtops use to
communicate with one another. Researchers have apparently discovered that it
is possible to rig a palmtop in such a way that it can intercept the
encryption keys of other machines, then use them to decrypt and eavesdrop on
transmissions between third parties. Investigators reported that they were
even able to discover the identity of targeted machines and trace their
users' locations.

The two Lucent Technologies employees who made these discoveries, Markus
Jacobsen and Susanne Wetzel, have suggested that these problems can
nevertheless be fixed. For example, they recommend changing Bluetooth
standards so that the identity numbers of palmtops will be masked, in part
through constantly changing pseudonyms.

See Elisa Batista, "PDA: 'Public' Display Assistant?" Wired News, Sept. 11,
2000, at
http://www.wired.com/news/print/0,1294,38688,00.html

===============================================
[27] Austrian Big Brother Awards ceremony held
===============================================
On October 26, a number of digital human rights organizations (including
GILC members ARGE Daten, VIBE!AT and quintessenz) presented the Austrian Big
Brother Awards for the year 2000. These annual prizes are given to members
of the public and private sector who have done the most to invade the
privacy of Austrian citizens. This year's gala was held at a prominent
Viennese night club, the Flex, and was cybercast through the official Awards
website.

Among the winners was an Austrian police union that "deliberately
misappropriated data from the [Austrian] Department of the Interior to
intimidate political opponents." Another recipient was the Austrian division
of communications giant Siemens, which worked with various law enforcement
agencies to come up with plans that will allow the interception of "all
future digital telephone nodes in Europe." Meanwhile, European multimedia
store Saturn, which surreptitiously forwarded personal information about
their unsuspecting customers, received a special Big Brother Award in the
Business/Finances category.

For more information about this event, see
http://www.bigbrotherawards.at/2000/presse

See also Valerie Thompson, "Apache wins Big Brother award," The Register
(UK), Oct. 27, 2000 at
http://www.theregister.co.uk/content/1/14287.html

==========================================================
	ABOUT THE GILC NEWS ALERT:
==========================================================
The GILC News Alert is the newsletter of the Global Internet Liberty
Campaign, an international coalition of organizations working to protect and
enhance online civil liberties and human rights.  Organizations are invited
to join GILC by contacting us at
gilc@gilc.org.

To alert members about threats to cyber liberties, please contact members
from your country or send a message to the general GILC address.

To submit information about upcoming events, new activist tools and news
stories, contact:

Christopher Chiu
GILC Coordinator
American Civil Liberties Union
125 Broad Street, 17th Floor
New York, New York 10004
USA

Or email:
cchiu@aclu.org

More information about GILC members and news is available at
http://www.gilc.org

You may re-print or redistribute the GILC NEWS ALERT freely.

To subscribe to the alert, please send e-mail to
gilc-announce@gilc.org

with the following message in the body:
subscribe gilc-announce

========================================================
PUBLICATION OF THIS NEWSLETTER IS MADE POSSIBLE BY A
GRANT FROM THE OPEN SOCIETY INSTITUTE (OSI)
========================================================



========== HURIDOCS-Tech listserv ==========
Send mail intended for the list to <huridocs-tech@hrea.org>.
Archives of the list can be found at: http://www.hrea.org/lists/huridocs-tech/
To subscribe to the list, send a message to <majordomo@hrea.org>,
with the following text in the message: subscribe huridocs-tech
To unsubscribe from the list, send a message to <majordomo@hrea.org>,
with the following text in the message: unsubscribe huridocs-tech
If you have problems (un)subscribing, contact <owner-huridocs-tech@hrea.org>.


[Reply to this message] [Start a new topic] [Date Index] [Thread Index] [Author Index] [Subject Index] [List Home Page] [HREA Home Page]