A Canadian law expected to be introduced next week could greatly assist law enforcement authorities in the country to access date revealing internet-user habits and personal information. Privacy watchdogs caution if the so-called Lawful Access law is passed, it would give police access to webbrowsing history and sensitive personal information, and would grant greater permission to track the cellular phones of suspects -- much of it without the requirement of a warrant. more
Digital Civil Rights in Europe reports: "During an investors day on 10 May 2011 in London, Dutch Internet service provider KPN admitted to using deep packet inspection (DPI) technology, to determine the use of certain applications by its mobile internet customers. Vodafone soon followed with an announcement that it used this technology for traffic shaping. The Dutch minister of Economic Affairs within days announced an investigation into KPN's practices and promised to publish the results within two weeks." more
Neil Schwartzman writes: "There is a lot of press on the profound effect the take-down of the Rustock botnet, affected by Microsoft, some U.S. federal agencies, and countless others working in the background to assist in the effort. CAUCE has aggregated a few of the best stories and data-points. A community congratulations, and thank-you to all those involved!" more
The U.S. Federal Trade Commission (FTC) proposed on Wednesday a do-not-track list for the Web. "The proposal, which would allow consumers to opt out of having their online activities tracked, was included as part of the agency's preliminary report on consumer privacy," reports Gautham Nagesh in The Hill. "The report is intended as a framework for any potential privacy legislation from Congress but stops short of explicitly calling for a legislative solution." more
Michael Geist writes: "The bills contain a three-pronged approach focused on information disclosure, mandated surveillance technologies, and new police powers. The first prong mandates the disclosure of Internet provider customer information without court oversight. Under current privacy laws, providers may voluntarily disclose customer information but are not required to do so. The new system would require the disclosure of customer name, address, phone number, email address, Internet protocol address, and a series of device identification numbers." more
A directive known as "Written Declaration 29," adopted last week by the European Parliament, calls for legislation that would require search engines to make a record of all search queries, as reported today by Startpage and Ixquick, anonymous search engine providers. "Framed as a measure to crack down on paedophiles, the controversial Declaration calls on the EU to require that search engines store all search traffic for up to two years for possible analysis by authorities." more
Duncan Geere reporting in Wired: "Since the slow introduction of internet monitoring systems around the world began, more and more people have attempted to preserve their privacy by signing up for VPN services like the Pirate Bay's Ipredator and Pirate Party offering Relakks. But it turns out that there's a gaping security flaw in these services that allows individual users to be identified..." more
A recent study reveals a browser history detection method, largely dismissed as an issue with minimal impact, can in fact be used against a vast majority of Internet users with significant malicious potential. Researchers, Artur Janc and Lukasz Olejnik, analyzed real-world results obtained from 271,576 Internet users and have reported the results in a paper titled, "Feasibility and Real-World Implications of Web Browser History Detection". more
The highest court in Germany has ruled against telephone and email data retention used to track criminal networks. Melissa Eddy of the Global and Mail reports: "A law ordering data on calls made from mobile or landline telephones and e-mail exchanges be retained for six months for possible use by criminal authorities violated Germans' constitutional right to private correspondence, the Federal Constitutional Court ruled. In its ruling, the court said the law failed to sufficiently balance the need for personal privacy against that for providing security."
more
January 28 is marked as International Data Privacy Day in order to help raise awareness and generate discussions about information privacy. This year companies such as Intel, Microsoft, Google, AT&T, LexisNexis and The Privacy Projects are sponsoring Data Privacy Day efforts. more
According to reports today, the Australian federal government made a drastic change to a bill that could potentially allow ISPs to police online traffic. Karen Dearne of the Australian IT reports: "Electronic Frontiers Australia spokesman Geordie Guy said it was unclear if the draft Telecommunications (Interception and Access) Amendment Bill was an "attempt to sneak through" a wholesale expansion of intercepts of private emails and file-sharing or merely a badly drafted bill." more
Democracy Now has a video discussion on the recent reports about telecoms in Europe aiding the Iranian government develop highly sophisticated Internet censorship mechanisms or deep packet inspection. The WSJ recently reported that the Iranian monitoring capabilities where "at least in part [provided] by a joint venture of Siemens AG, the German conglomerate, and Nokia Corp., the Finish cellphone compnay, in second half of 2008." (also see previous report: Iran's Internet Censorship Most Sophisticated in the World) more
Government of Canada has introduced a new bill that could allow the police to access ISP's user data without warrant. According to Michael Geist, a law professor at the University of Ottawa, "the Government has taken another shot at lawful access legislation today, introducing a legislative package called the Investigative Powers for the 21st Century (IP21C) Act that would require mandated surveillance capabilities at Canadian ISPs, force ISPs to disclose subscriber information such as name and address, and grant the police broad new powers to obtain transmission data and force ISPs to preserve data." more
The Electronic Frontier Foundation (EFF) has launched a new site to keep track of 'Terms of Service' for major websites such as Google, Facebook, eBay and others. The new website called TOSBack has been created to help users easily find privacy policies of various websites and to alert them when those policies are changed. "Some changes to terms of service are good for consumers, and some are bad," says EFF Senior Staff Attorney Fred von Lohmann. "But Internet users are increasingly trusting websites with everything from their photos to their 'friends lists' to their calendar -- and sometimes even their medical information. TOSBack will help consumers flag changes in the websites they use every day and trust with their personal information." more
Researchers at the University of California, Berkeley's School of Information have released a report raising concern over website monitoring practices which appear to be taking advantage of critical loopholes in privacy protection. According to the study, most popular websites in the United States "all share data with their corporate affiliates and allow third parties to collect information directly by using tracking beacons known as 'Web bugs' -- despite the sites' claims that they don't share user data with third parties." more