Archive | Rule of law

Cyber war capabilities and mass surveillance

We definitely need cyber defence capabilities. Foreign powers, terrorists, and criminal networks have the capability to harm key functions in our societies.

We also need capacity for offensive cyber operations. No doubt, this will be a part of tomorrow’s conflicts and there is an ongoing cyber war arms race. Several western countries affiliated with NSA is adapting to this. (E.g. Sweden has recently made changes to legalise offensive operations, that according to the Snowden documents are already in place.)

First of all, the threshold for cyber attacks is lower than for conventional military conflicts. At the same time, most countries have made it clear that they will consider cyber attacks as an actual act of war. So there are reasons to tread carefully.

This is a grey area. It is difficult to be sure if a cyber attack originates from another nation or a criminal or terrorist organisation. In the same way, it is difficult to know who you engage in defensive or offensive cyber operations. Things might easily escalate.

Second, there is no clear line separating conventional mass surveillance and cyber warfare. One can easily spill over into the other. The lines are muddled. The rule of law can easily be circumvented by labelling surveillance that would be illegal in “civil” law enforcement as secret “military” operations.

Third, cyber warfare capabilities are frequently outsourced to private contractors. This will make it even harder to uphold democratic oversight and accountability.

I would argue that one major problem with cyber warfare capabilities is that they might be used to conceal domestic intelligence operations outside the realm of the law.

This calls for vigilance.

/ HAX

Statewatch » Council documents: responses to offensive cyber operations; “cyber capacity building” in non-EU countries; implementation report on Cyber Defence Policy Framework »

0

Europols web censorship under fire

Europol’s Internet Referral Unit (IRU) celebrated its first birthday at the weekend, but civil liberties organisations are worried that it goes too far in its efforts to keep the Web free from extremist propaganda. (…)

However AccessNow a global digital rights organisation said Europe’s approach to dealing with online extremism is “haphazard, alarming, tone-deaf, and entirely counter-productive.”

According to AccessNow, “the IRU is outside the rule of law on several grounds. First, illegal content is just that—illegal. If law enforcement encounters illegal activity, be it online or off, it is expected to proceed in dealing with that in a legal, rights-respecting manner.”

Ars Technica: Europol’s online censorship unit is haphazard and unaccountable says NGO »

0

Make UN member states stand by their word on the Internet and privacy

“1. Affirms that the same rights that people have offline must also be protected online, in particular freedom of expression, which is applicable regardless of frontiers and through any media of one’s choice, in accordance with articles 19 of the Universal Declaration of Human Rights and the International Covenant on Civil and Political Rights;”

These are words from the United Nations Human Rights Council, in a declaration of the 27:th of June. (PDF») It continues…

“8. Calls upon all States to address security concerns on the Internet in accordance with their international human rights obligations to ensure protection of freedom of expression, freedom of association, privacy and other human rights online, including through national democratic, transparent institutions, based on the rule of law, in a way that ensures freedom and security on the Internet so that it can continue to be a vibrant force that generates economic, social and cultural development;”

“9. Condemns unequivocally all human rights violations and abuses, such as torture, extrajudicial killings, enforced disappearances and arbitrary detention, expulsion, intimidation and harassment, as well as gender based violence, committed against persons for exercising their human rights and fundamental freedoms on the Internet, and calls on all States to ensure accountability in this regard;”

“10. Condemns unequivocally measures to intentionally prevent or disrupt access to or dissemination of information online in violation of international human rights law and calls on all States to refrain from and cease such measures;”

Great! Or… what?

I cannot help noticing that Turkey is one of the signing countries… And Poland, despite the country’s ever more dubious approach to free speech.

The United Kingdom (with the GCHQ) and the United States (home of the NSA) have signed the declaration. And countries like Sweden (FRA), Germany (BND) – who are part of the global surveillance network.

Do they really mean what they say? Probably not.

This is a great UN declaration. But the fight for a free and open internet, free speech, privacy and civil rights still needs to be fought by an army of activists. You simply cannot trust governments with this, just because they say so.

It’s like 5 July 2012. The day that gave the 5 July-foundation (who, among other things is running this blog) its name. (Read more») This was the date for an ambitious UN resolution “on the Promotion, Protection, and Enjoyment of Human Rights on the Internet”.

Then, like now, we believe that words are not enough and that the Internet community must engage in the battle to defend the values stated in the resolution.

Today the 5 July-foundation runs several projects for security, privacy and liberty. (Read more»)

Actually, today is also the second anniversary of this blog – trying to identify threats to digital liberty. I hope you enjoy it.

And let’s use this UN resolution as valuable support when our governments go back to Big Brother Business as usual. We have their words on paper. And we demand that they stand by them!

/ HAX

• The Declaration (PDF) »
• UN rights council condemns internet blocking »
• UN rights council condemns the disruption of internet access »
• UN Human Rights Body Condemns Nations Blocking Internet Access »
• UN Human Rights Council Passes Resolution ‘Unequivocally’ Condemning Internet Shutdowns »
• Disrupting Internet Access Is A Human Rights Violation, UN Says »

0

Corporatism vs. free speech

Politics should stick to lawmaking. Companies should stick to making business.

When the two mix, the result is usually damaging. Politicians lose their focus on principles, their mandate from the voters and the public good. Companies who lobby for subsidies and (often competition reducing) special laws will find themselves worse of in the long run, as they detach from the realities of the market.

Nevertheless, politicians and businessmen are often involved in mutual back-scratching.

Lately, the political EU-apparatus and big data companies have ganged up to curb free speech. The EU, Facebook, Twitter, Youtube and Microsoft have decided on a mutual approach to keep back hate speech and religious radicalisation on the net.

In other words, the EU encourages private companies to censor statements on the Internet that the politicians do not approve of.

If you are to limit free speech at all — the rules must be clearly set out in law. If there should be any censorship at all — it must be decided in a court of law, in accordance with the laws. And if anyone is being censored — there must be a possibility to appeal the decision.

All these three principles are being thrown out in the EU-Big Data agreement.

And there is nothing you can do about it. Having signed e.g. various social networks terms and conditions, you have essentially given up your rights.

From a political point of view, the EU is acting in a deceptive way. When there are no legal means to censor voices they would like to silence – they turn to private companies to do what they themselves cannot accomplish. (It’s just like when US authorities had PayPal, credit card companies, and the banks to throttle the stream of donations to Wikileaks.)

The EU is short-circuiting the rule of law and democracy itself – in order to curb the people’s civil rights.

This is totally unacceptable.

/ HAX

2

CoE on blocking of Internet content and rule of law

EDRi reports…

Several European countries lack clear legal provisions and transparent procedures when it comes to blocking and removal of online content. A comparative study published by the Council of Europe stresses that any restriction on the right to freedom of expression must be provided for by law, be proportionate and follow legitimate objectives. Blocking should only be a measure of last resort and applied with great caution. Furthermore, if a state endorses voluntary blocking measures by private companies, the authors of the study ascribe full responsibility to the state for not placing such a system on a legislative basis, accepting insufficient judicial review and the possibility of overblocking.

EDRi: CoE study: Blocking content has to respect fundamental rights »

Council of Europe: Filtering, blocking and take-down of illegal content on the Internet »

0

Who should Police the Internet?

copyfail_3-1-768x377

Privatised law enforcement undermines democracy and creates serious risks for fundamental rights, particularly for freedom of expression. Despite this, in current copyright debates, the focus is far too often on how private companies should police the internet, not on the need of a copyright reform.

Internet companies will always take the easiest option. If they fear laws, punishment or bad publicity, it’s always easier and safer for them to delete legal content along with possibly unauthorised or illegal content, just in case.

EDRi: Copyfail #3 – Google and Facebook becoming the Internet police force »

0

EDRi on hate speech, social media, EU and the rule of law

On 31 May, the European Commission, together with Facebook, YouTube (Google), Twitter and Microsoft, agreed a “code of conduct” on fighting hate speech.

In a society based on the rule of law, private companies should not take the lead in law enforcement, theirs should always have only a supporting role – otherwise this leads to arbitrary censorship of our communications. (…)

In practice, as illegal activity will be banned by terms of service, it will never be “necessary” to check a report against the law. (…)

In the code of conduct, there is not a single mention about the essential role of judges in our democratic societies. There is no mention about the enforcement of the law by public authorities. At each crucial point where law should be mentioned, it is not.

EDRi: Guide to the Code of Conduct on Hate Speech »

0

Snowden on whistleblowing

When you first go on duty at CIA headquarters, you raise your hand and swear an oath — not to government, not to the agency, not to secrecy. You swear an oath to the Constitution. So there’s this friction, this emerging contest between the obligations and values that the government asks you to uphold, and the actual activities that you’re asked to participate in. (…)

By preying on the modern necessity to stay connected, governments can reduce our dignity to something like that of tagged animals, the primary difference being that we paid for the tags and they’re in our pockets. It sounds like fantasist paranoia, but on the technical level it’s so trivial to implement that I cannot imagine a future in which it won’t be attempted. It will be limited to the war zones at first, in accordance with our customs, but surveillance technology has a tendency to follow us home.

Edward Snowden in The Intercept: Whistleblowing Is Not Just Leaking — It’s an Act of Political Resistance »

0