Archive | Civil liberties

And now… automated web censorship

Automated systems to identify child abuse material (and flag it for removal) on the Internet is now going to be used to combat “extremist” and “hateful” content on social media.

“However, the definition of “extremist content” is everything but clear; CEP’s algorithm does not (and logically cannot) contain this definition either. Even if it were to use a database of previously identified material, that still would create problems for legitimate quotation, research and illustration purposes, as well as problems regarding varying laws from one jurisdiction to another.”

“The Joint Referral Platform has the potential to automate Europol’s not-formal-censorship activities by an automatic detection of re-upload. However, it remains unclear whether any investigative measures will be taken apart from the referral – particularly as Europol’s activities, bizarrely, do not deal with illegal material. There is obviously no redress available for incorrectly identified and deleted content, as it is not the law but broad and unpredictable terms of service that are being used.”

What could possibly go wrong..?

EDRi: Algorithms – censorship à la carte? »

0

EU-US Privacy Shield adopted by the EU despite privacy flaws

The much criticized EU-U.S. Privacy Shield agreement concerning data protection for personal data transferred from the EU to the U.S. has – as expected – been approved by EU member states.

• Statement by Vice-President Ansip and Commissioner Jourová on the occasion of the adoption by Member States of the EU-U.S. Privacy Shield »

• Privacy Shield data pact gets European approval »

• EU-U.S. commercial data transfer pact clears final hurdle »

• New Privacy Shield Could Face Legal Challenge in Europe, Experts Say »

• Official: Privacy Shield dragged across finish line »

Most likely this agreement will end up in the European Court of Justice – as it is suffering from many of the same shortcomings as its predecessor, the Safe Harbour agreement. The latter was invalidated by the court for violating citizens rights to privacy.

0

Cyber war capabilities and mass surveillance

We definitely need cyber defence capabilities. Foreign powers, terrorists, and criminal networks have the capability to harm key functions in our societies.

We also need capacity for offensive cyber operations. No doubt, this will be a part of tomorrow’s conflicts and there is an ongoing cyber war arms race. Several western countries affiliated with NSA is adapting to this. (E.g. Sweden has recently made changes to legalise offensive operations, that according to the Snowden documents are already in place.)

First of all, the threshold for cyber attacks is lower than for conventional military conflicts. At the same time, most countries have made it clear that they will consider cyber attacks as an actual act of war. So there are reasons to tread carefully.

This is a grey area. It is difficult to be sure if a cyber attack originates from another nation or a criminal or terrorist organisation. In the same way, it is difficult to know who you engage in defensive or offensive cyber operations. Things might easily escalate.

Second, there is no clear line separating conventional mass surveillance and cyber warfare. One can easily spill over into the other. The lines are muddled. The rule of law can easily be circumvented by labelling surveillance that would be illegal in “civil” law enforcement as secret “military” operations.

Third, cyber warfare capabilities are frequently outsourced to private contractors. This will make it even harder to uphold democratic oversight and accountability.

I would argue that one major problem with cyber warfare capabilities is that they might be used to conceal domestic intelligence operations outside the realm of the law.

This calls for vigilance.

/ HAX

Statewatch » Council documents: responses to offensive cyber operations; “cyber capacity building” in non-EU countries; implementation report on Cyber Defence Policy Framework »

0

Next up: EU e-Privacy Directive

The EU General Data Protection Regulation (GDPR) and the Data Protection Directive for Law Enforcement Agencies (LEDP) have now been approved — after being watered down as the result of an unprecedented lobbying campaign.

Next up is the EU e-Privacy Directive. EDRi explains…

The e-Privacy Directive contains specific rules on data protection in the area of telecommunication in public electronic networks. It is hugely important, as it is the only EU legislation that regulates confidentiality of communications. (…)

Specifically, the ePrivacy Directive regulates aspects related to the right to confidentiality of communications and the right to freedom of expression.

Once again, we can expect a massive lobby campaign to weaken citizens rights.

To get up to date with what is at stake, read this blog post from EDRi:

• e-Privacy Directive revision: An analysis from the civil society »

/ HAX

0

Make UN member states stand by their word on the Internet and privacy

“1. Affirms that the same rights that people have offline must also be protected online, in particular freedom of expression, which is applicable regardless of frontiers and through any media of one’s choice, in accordance with articles 19 of the Universal Declaration of Human Rights and the International Covenant on Civil and Political Rights;”

These are words from the United Nations Human Rights Council, in a declaration of the 27:th of June. (PDF») It continues…

“8. Calls upon all States to address security concerns on the Internet in accordance with their international human rights obligations to ensure protection of freedom of expression, freedom of association, privacy and other human rights online, including through national democratic, transparent institutions, based on the rule of law, in a way that ensures freedom and security on the Internet so that it can continue to be a vibrant force that generates economic, social and cultural development;”

“9. Condemns unequivocally all human rights violations and abuses, such as torture, extrajudicial killings, enforced disappearances and arbitrary detention, expulsion, intimidation and harassment, as well as gender based violence, committed against persons for exercising their human rights and fundamental freedoms on the Internet, and calls on all States to ensure accountability in this regard;”

“10. Condemns unequivocally measures to intentionally prevent or disrupt access to or dissemination of information online in violation of international human rights law and calls on all States to refrain from and cease such measures;”

Great! Or… what?

I cannot help noticing that Turkey is one of the signing countries… And Poland, despite the country’s ever more dubious approach to free speech.

The United Kingdom (with the GCHQ) and the United States (home of the NSA) have signed the declaration. And countries like Sweden (FRA), Germany (BND) – who are part of the global surveillance network.

Do they really mean what they say? Probably not.

This is a great UN declaration. But the fight for a free and open internet, free speech, privacy and civil rights still needs to be fought by an army of activists. You simply cannot trust governments with this, just because they say so.

It’s like 5 July 2012. The day that gave the 5 July-foundation (who, among other things is running this blog) its name. (Read more») This was the date for an ambitious UN resolution “on the Promotion, Protection, and Enjoyment of Human Rights on the Internet”.

Then, like now, we believe that words are not enough and that the Internet community must engage in the battle to defend the values stated in the resolution.

Today the 5 July-foundation runs several projects for security, privacy and liberty. (Read more»)

Actually, today is also the second anniversary of this blog – trying to identify threats to digital liberty. I hope you enjoy it.

And let’s use this UN resolution as valuable support when our governments go back to Big Brother Business as usual. We have their words on paper. And we demand that they stand by them!

/ HAX

• The Declaration (PDF) »
• UN rights council condemns internet blocking »
• UN rights council condemns the disruption of internet access »
• UN Human Rights Body Condemns Nations Blocking Internet Access »
• UN Human Rights Council Passes Resolution ‘Unequivocally’ Condemning Internet Shutdowns »
• Disrupting Internet Access Is A Human Rights Violation, UN Says »

0

European Parliament in new attempt to introduce web blocking

Tomorrow the Europeans Parliaments civil liberties (LIBE) committee will vote on new EU regulation to combat terrorism.

In the committee, German MEP Monika Hohlmeier (EPP) has introduced an amendment stating that member states “may take all necessary measures to remove or to block access to web pages publicly inciting to commit terrorist offences”.

EP LIBE meeting documents »

In a comment in Ars Technica, EDRi says…

“This leaves the door wide open for private companies to police content and very likely over-block or delete any content they are unsure about,” EDRi (European Digital Rights) head Joe McNamee told Ars. He added that European law requires that any blocking or content restriction measures “must be provided for by law, subject to initial judicial control and periodic review.”

If adopted in the LIBE committee, this proposal will be voted in plenary, probably as soon as 4-7 July.

Jennifer Baker in Ars Technica: Web content blocking squeezed into draft EU anti-terrorism law »

EDRi: Terrorism and internet blocking – is this the most ridiculous amendment ever? »

terrorism_directive_20160620-768x379

/ HAX

0

Meanwhile, in Poland….

In response to the Polish government’s new counter-terrorism and surveillance laws, which allow authorities to block websites and telecommunications, limit the freedom of assembly, and allow secret surveillance of virtually the whole population, Freedom House issued the following statement:

“Granting open-ended powers to intelligence agencies to counter terrorism at the cost of every citizen’s privacy and freedom marks a clear abuse of power by the government,” said Daniel Calingaert, executive vice president. “The government seems determined to allow police and intelligence agencies to monitor all personal data and all communications without needing to establish the existence of any actual threat, a disturbing step toward removing checks and balances on government action.”

Via Techdirt »

0

Corporatism vs. free speech

Politics should stick to lawmaking. Companies should stick to making business.

When the two mix, the result is usually damaging. Politicians lose their focus on principles, their mandate from the voters and the public good. Companies who lobby for subsidies and (often competition reducing) special laws will find themselves worse of in the long run, as they detach from the realities of the market.

Nevertheless, politicians and businessmen are often involved in mutual back-scratching.

Lately, the political EU-apparatus and big data companies have ganged up to curb free speech. The EU, Facebook, Twitter, Youtube and Microsoft have decided on a mutual approach to keep back hate speech and religious radicalisation on the net.

In other words, the EU encourages private companies to censor statements on the Internet that the politicians do not approve of.

If you are to limit free speech at all — the rules must be clearly set out in law. If there should be any censorship at all — it must be decided in a court of law, in accordance with the laws. And if anyone is being censored — there must be a possibility to appeal the decision.

All these three principles are being thrown out in the EU-Big Data agreement.

And there is nothing you can do about it. Having signed e.g. various social networks terms and conditions, you have essentially given up your rights.

From a political point of view, the EU is acting in a deceptive way. When there are no legal means to censor voices they would like to silence – they turn to private companies to do what they themselves cannot accomplish. (It’s just like when US authorities had PayPal, credit card companies, and the banks to throttle the stream of donations to Wikileaks.)

The EU is short-circuiting the rule of law and democracy itself – in order to curb the people’s civil rights.

This is totally unacceptable.

/ HAX

2

CoE on blocking of Internet content and rule of law

EDRi reports…

Several European countries lack clear legal provisions and transparent procedures when it comes to blocking and removal of online content. A comparative study published by the Council of Europe stresses that any restriction on the right to freedom of expression must be provided for by law, be proportionate and follow legitimate objectives. Blocking should only be a measure of last resort and applied with great caution. Furthermore, if a state endorses voluntary blocking measures by private companies, the authors of the study ascribe full responsibility to the state for not placing such a system on a legislative basis, accepting insufficient judicial review and the possibility of overblocking.

EDRi: CoE study: Blocking content has to respect fundamental rights »

Council of Europe: Filtering, blocking and take-down of illegal content on the Internet »

0