Guardian, The

Privacy commissioner seeks better surveillance guidelines

Australia’s privacy commissioner says reforms are needed to ensure law enforcement agencies act proportionately when they access people’s private communications.

The commissioner has joined Australia’s intelligence watchdog, the Inspector General of Intelligence and Security, in flagging potential adjustments to the surveillance regime to ensure agencies strike the correct balance between protecting consumer privacy and conducting necessary investigations to prevent crimes.

“There is a clear public interest in allowing law enforcement and intelligence agencies to access communications where it is necessary for the prevention of serious and organized crime and threats to Australia’s national security,” the privacy commissioner, Timothy Pilgrim, says in a new submission to the Senate. “However, by their very nature such activities will require access to the private communications of individuals. Such accesses should be proportional to the risk they seek to address.”

Pilgrim says current proportionality tests in legislation allowing people’s communications to be intercepted should be re-examined, and government could also consider reducing the number of agencies able to access private telecommunications data. He adds that there is merit in considering changes that would make the current regulatory approaches to handling personal data less fragmented.

Journalism startups aren't a revolution if they're filled with all these white men

[Commentary] The Internet has presented journalists with an extraordinary opportunity to remake their own profession. And the rhetoric of the new wave of creativity in journalism is spattered with words that denote transformation.

But the new micro-institutions of journalism already bear the hallmarks of the restrictive heritage they abandoned with such glee. At the risk of being the old bat in the back, allow me to quote Faye Dunaway’s character from Network: “Look, all I’m saying is if you’re going to hustle, at least do it right.”

Of the many others who have eloped from the portals of the industrial presses to big, shiny and new things (as in, not Yahoo or The Information), the sole female top editor or founder is Kara Swisher at Re/code. And she is running that technology site collaboratively with a man, Walt Mossberg. At First Look, behind-the-scenes Laura Poitras is one of two main female names on a virtual masthead that just added John Cook from Gawker (to run Greenwald’s magazine) to join Matt Taibbi of Rolling Stone (to lead his own).

It is not just the four new (and still exciting) breakout projects: Vice, Quartz, Buzzfeed, Politico, Grantland -- these, too, are led by white men, and filled with more of them. It is as if Arianna Huffington never happened. Or as if diversity of leadership and ownership did not really matter, as long as the data-driven, responsively designed new news becomes a radical and successful enough departure from the drab anecdote laden guff put out by those other men.

[Bell is director of the Tow Center for Digital Journalism at Columbia's Graduate School of Journalism.]

An online Magna Carta: Berners-Lee calls for bill of rights for web

The inventor of the World Wide Web believes an online "Magna Carta" is needed to protect and enshrine the independence of the medium he created and the rights of its users worldwide.

Sir Tim Berners-Lee told the Guardian the web had come under increasing attack from governments and corporate influence and that new rules were needed to protect the "open, neutral" system. Speaking exactly 25 years after he wrote the first draft of the first proposal for what would become the World Wide Web, the computer scientist said: "We need a global constitution -- a bill of rights." Berners-Lee's Magna Carta plan is to be taken up as part of an initiative called "the web we want", which calls on people to generate a digital bill of rights in each country -- a statement of principles he hopes will be supported by public institutions, government officials and corporations. "Unless we have an open, neutral Internet we can rely on without worrying about what's happening at the back door, we can't have open government, good democracy, good healthcare, connected communities and diversity of culture."

Principles of privacy, free speech and responsible anonymity would be explored in the Magna Carta scheme. Berners-Lee also spoke out strongly in favor of changing a key and controversial element of Internet governance that would remove a small but symbolic piece of US control. The US has clung on to the Internet Assigned Numbers Authority (IANA) contract, which controls the dominant database of all domain names, but has faced increased pressure post-Snowden.

He said: "The removal of the explicit link to the US department of commerce is long overdue. The US can't have a global place in the running of something which is so non-national. There is huge momentum towards that uncoupling but it is right that we keep a multi-stakeholder approach, and one where governments and companies are both kept at arm's length."

Snowden told me the NSA set fire to the web. Silicon Valley needs to put it out

[Commentary] “You are the firefighters,” National Security Agency whistleblower Edward Snowden told a tech savvy audience, during my conversation with him at the South by Southwest festival. “The people in Austin are the ones who can protect our rights through technical standards.”

Ed’s comments were a call to arms for the tech community to protect its users from indiscriminate mass surveillance by the NSA and the insecurity it creates. Over the past few years, and even more so after Ed’s revelations, Silicon Valley companies have begun to enable -- by default -- basic security features, such as the use of HTTPS encryption to protect data as it is transmitted from their customers’ to the companies’ servers. While HTTPS encryption by default is a great start, isn’t enough. The tech companies must offer apps and services that are safe and secure by default.

  • Disable data, all the way. Far too often, security is an opt-in feature that few regular people will even know about, much less seek out and enable.
  • Limit collection, move up storage deadlines. As Ed stressed, tech companies can also begin to limit the data they collect from their customers and only store it for as long as it’s needed for genuine business purposes -- and not one second longer.
  • Rethink our relationship with tech companies. We, the everyday consumers, must make privacy and security profitable. If we want these companies to put our interests first, we must pay for the services that they provide us. We must demand that those products preserve privacy -- again, by default. Until this business model changes, the services that are made for the mass market will remain insecure, vulnerable and optimized for data collection.

[Soghoian is principal technologist for the American Civil Liberties Union]

[March 11]