December 2013

State Of Deception

[Commentary] August 2013, at the height of the frenzy over Edward Snowden’s disclosures, President Barack Obama delivered remarks at the White House suggesting that he was wrestling with whether, as President, he had struck the proper balance on surveillance policy: “Given the history of abuse by governments, it’s right to ask questions about surveillance -- particularly as technology is reshaping every aspect of our lives.” In practice, President Obama has not wavered from the position taken by the National Security Agency’s lawyers and embraced by Sen Dianne Feinstein (D-CA), senior intelligence committee chairwoman, or from the majority of the Intelligence Committee.

The history of the intelligence community, though, reveals a willingness to violate the spirit and the letter of the law, even with oversight. In recent years, Americans have become accustomed to the idea of advertisers gathering wide swaths of information about their private transactions. The NSA’s collecting of data looks a lot like what Facebook does, but it is fundamentally different. It inverts the crucial legal principle of probable cause: the government may not seize or inspect private property or information without evidence of a crime. Sen Feinstein maintains that data collection is not surveillance. But it is no longer clear if there is a distinction.

The Internet spying debate begins in earnest

[Commentary] A coalition of Internet firms -- including AOL, Apple, Facebook, Google, LinkedIn, Microsoft, Twitter and Yahoo -- issued a powerful but thoughtful call for reform of government online spying activities. The five principles they put forward are: 1) Limiting Governments’ authority to collect users’ information; 2) Oversight and accountability; 3) Transparency about Government demands; 4) Respecting the free flow of information; and 5) Avoiding conflicts among governments.

Three points are worth making.

  • First, the principles laid out by the coalition are hardly radical ones, but rather common sense expressions of rights most Americans surely thought, until recently, they already had. If folks in the national security establishment have problems with any of these, they ought to explain what and why.
  • Second, based on what we know, it seems clear that many governments, including our own, have been violating at least some of these principles. The political problem facing the US -- as is so often the case in privacy matters -- is the violation of expectations, which is another way of saying that the US national security establishment appears to have been operating in a political vacuum, either imagining that its surveillance activities (e.g., the NSA’s 1.5 million square foot Utah data storage facility) would never be publicly revealed (Really?), or completely clueless to, and unprepared for, the reaction once they were.
  • Third, it would be interesting to assess the list of companies joining the coalition based on two variables: (1) Government contracts as a percentage of revenues; and, (2) Extent of operations in heavily regulated markets.

Google catches French finance ministry pretending to be Google

Google appears to have caught the French finance ministry spying on its workers’ Internet traffic by spoofing Google security certificates, judging from an episode that took place recently.

The web firm said in a blog post that it had become aware of “unauthorized digital certificates for several Google domains.” It tracked the provenance of these certificates back to ANSSI, the French state information security agency, which in turn pointed to the Treasury as the culprit. Browsers use such certificates to verify that a web service is what it says it is, and creating a fake certificate can allow an attacker to impersonate a service like Google, duping the user into handing over personal information. This is known as a man-in-the-middle attack – it’s been used by the NSA, and is probably that agency’s chief weapon in circumventing industry-standard TLS/SSL web encryption.

Lawsuit may ‘chill online speech’

From Twitter and Facebook to Amazon and Google, the biggest names of the Internet are blasting a federal judge's decision allowing an Arizona-based gossip website to be sued for defamation by a former Cincinnati Bengals cheerleader convicted of having sex with a teenager.

In court briefs recently filed in the 6th U.S. Circuit Court of Appeals in Cincinnati, the Internet giants warn that if upheld, the northern Kentucky judge's ruling to let the former cheerleader's lawsuit proceed has the potential to "significantly chill online speech" and undermine a law passed by Congress in 1996 that provides broad immunity to websites. "If websites are subject to liability for failing to remove third-party content whenever someone objects, they will be subject to the `heckler's veto,' giving anyone who complains unfettered power to censor speech," according to briefs filed Nov. 19 by lawyers for Facebook, Google, Microsoft, Twitter, Amazon, Gawker and BuzzFeed, among others. Those heavy hitters "really tell you how major of an issue this is," said David Gingras, attorney for Scottsdale (AZ)-based thedirty.com and its owner, Nik Richie, who lives in Orange Count (CA)

Slowly They Modernize: A Federal Agency That Still Uses Floppy Disks

The technology troubles that plagued the HealthCare.gov website rollout may not have come as a shock to people who work for certain agencies of the government — especially those who still use floppy disks, the cutting-edge technology of the 1980s.

Every day, The Federal Register, the daily journal of the United States government, publishes on its website and in a thick booklet around 100 executive orders, proclamations, proposed rule changes and other government notices that federal agencies are mandated to submit for public inspection. So far, so good. It turns out, however, that the Federal Register employees who take in the information for publication from across the government still receive some of it on the 3.5-inch plastic storage squares that have become all but obsolete in the United States. Now government infrastructure experts are hoping that public embarrassments like the HealthCare.gov debacle will prompt a closer look at the government’s technological prowess, especially if it might mean getting rid of floppy disks.

What’s worse than sponsored content? The FTC regulating it

[Commentary] What’s more dangerous to consumer well-being, sponsored content or the intervention of the Federal Trade Commission?

The agency held a conference, “Blurred Lines: Advertising or Content,” to “discuss native advertising,” as the New York Times put it. When convening a conference to “discuss” something or other, the FTC (or other regulatory entities) is almost never in pursuit of discussion -- any more than a police officer who says he just wants to talk. Such conversational assemblies usually become venues in which the agency can issue a veiled threat, either directly or indirectly, to its targets, instructing them sotto voce that unless they change their ways they’ll suffer the agency’s wrath. The regulatory playbook usually dictates that the agency promise targets that unless they start observing “voluntary” restrictions, the agency will have to request legislative authority to make restrictions mandatory. Nothing can be “voluntary” if somebody is threatening to make it mandatory, but the gambit works nine times out of ten.

Given the power of the First Amendment, the FTC will have to step more lightly in its legal thrusts against news and information websites than it does against advertisers, whose rights to commercial speech are huge but do not include a right to deceive. Would FTC action encourage advertisers to switch to their own sites rather than fight the regulators, preventing publishers from finding a way serve the mutual benefit of both reader and advertiser? The publication-reader-advertising symbiosis that worked so well for so many decades has obviously broken down, and the flight to sponsored content marks a failure of publishers and advertisers to build something of its equal.

Frontier exec storms out of broadband meeting

Frontier Communications executive Dana Waldo abruptly walked out of a public meeting at the West Virginia Capitol, after he accused Citynet CEO Jim Martin of misleading state officials and defaming Frontier.

"Jim, it's over," Waldo told Martin during a Broadband Deployment Council meeting. "I'm done talking to you. I'm done . . . wasting my time responding to your mischaracterizations… I'll excuse myself." Waldo stood up, left the governor's conference room, and didn't return. After the meeting, Martin said he was just asking a question. He said Frontier's Internet DSL service in rural areas doesn't provide the 1-megabit upload speed -- a minimum standard passed by the Legislature and set into law earlier this year. "[Waldo] couldn't defend it," Martin said. "That's why he blew up." Martin said Waldo repeatedly has misled state lawmakers and Broadband Deployment Council members. "It's unfortunate that Frontier is misleading the council that its current broadband technology meets the state definition of broadband," he said. A Frontier spokesman said the company offers 1-megabit-per-second upload speeds to customers in rural parts of the state, and faster speeds in urban areas.

Meaningful-use deadline pushed back one year

The Centers for Medicare & Medicaid Services (CMS) is giving providers another year to show they've met the Stage 2 criteria of the federal government's incentive program to encourage the adoption and meaningful use of electronic health records. That means the start of the next phase will be pushed back a year.

Stage 2 will be extended through 2016 and Stage 3 won't begin until at least fiscal year 2017 for hospitals and calendar year 2017 for physicians and other eligible professionals that have by then completed at least two years at Stage 2, the CMS said. The latest extension parallels what the feds did with Stage 1, which was originally set to last two years but was lengthened by a year when it appeared the industry would be overstretched to build and get acclimated to systems capable of meeting the federal payment program's more stringent Stage 2 criteria. “The goal of this change is two-fold,” according to a CMS statement from Robert Tagalicod, director of the Office for E-Health Standards and Services at the CMS, and Dr. Jacob Reider, acting head of the ONC, the Office of the National Coordinator for Health Information Technology at HHS. The delay, they said, is intended to allow the CMS and ONC to focus on helping providers meet Stage 2's demands for patient engagement, interoperability and information exchange, as well as use data collected during that phase to inform policy decisions for Stage 3. The proposed rules are expected to be released in the fall of 2014 for the requirements providers must meet for Stage 3, as well as the 2017 Edition of standards health IT developers must build and test their systems to match.

With No Notice, Putin Scraps Kremlin News Agencies

President Vladimir V. Putin dissolved one of Russia’s official news agencies, RIA Novosti, along with its international radio broadcaster, signaling a significant reorganization in state media at a time when Russia’s international reputation has faced criticism over political and human rights and Russian influence in neighboring countries like Ukraine.

The two agencies will be absorbed into a new state organization known as Rossiya Sevodnya, or Russia Today, to be led by a television executive and host, Dmitry K. Kiselyov, who has provoked controversy with starkly homophobic remarks and virulent commentary about foreign conspiracies against Russia. Putin’s presidential chief of staff, Sergei B. Ivanov, said the decision was part of an effort to reduce costs and make the country’s state media more efficient, but RIA Novosti’s report on its own demise said the changes “appear to point toward a tightening of state control in the already heavily regulated media sector.”

Outgoing Deutsche Telekom chief blasts EU and German leaders over surveillance inaction

René Obermann, the chief executive of German telecommunications giant Deutsche Telekom, has attacked the European Commission and the German government for “pussy-footing” around the US on the subject of mass surveillance.

Obermann, who will leave Deutsche Telekom for the relatively small Dutch cable provider Ziggo at the end of December 2013, said that indiscriminate spying had “shaken confidence in two pillars of our society, free communications and privacy,” and was dangerous for democracy. The Deutsche Telekom chief also said EU member states’ data protection policies should be harmonized to strict German standards. “When companies from the US or any other country want to do business here, then they have to adhere to our standards,” Obermann argued. “That is also how one combats economic espionage. I don’t understand the pussy-footing.”