May 2016

Hill Seeks FCC Info on Set-Top Cybersecurity

The Chairs and Ranking Members of the House and Senate Homeland Security Committees have asked Federal Communications Commission Chairman Tom Wheeler to explain whether and how the commission took cybersecurity into account when coming up with its set-top proposal. The FCC's Democratic majority voted Feb 19 to propose requiring pay-TV providers to make their programming streams and set-top data available to third parties.

In a letter to Chairman Wheeler, the legislators pointed to the voluntary National Institute of Standards and Technology (NIST) Cybersecurity Framework, saying it was "unclear" how some of the FCC proposals aligned with those recommended practices or how multichannel video programming distributors (MVPDs) can monitor them on third-party devices attached to their networks. They did not take aim at the proposal but asked for information to better understand how and whether the FCC took the NIST protections into account. For example, they asked how the proposal insures that third-party device manufacturers and software developers are providing adequate security and whether it addresses the potential economic harms to content creators and network infrastructure from cyberattacks. They gave the FCC until June 10 to weigh in.

Machine Bias: There’s software used across the country to predict future criminals. And it’s biased against blacks.

Risk assessments, computer programs that produce a score based on the likelihood of person committing a future crime, are increasingly common in courtrooms across the nation. They are used to inform decisions about who can be set free at every stage of the criminal justice system, from assigning bond amounts to even more fundamental decisions about defendants’ freedom.

ProPublica obtained the risk scores assigned to more than 7,000 people arrested in Broward County (FL) in 2013 and 2014 and checked to see how many were charged with new crimes over the next two years, the same benchmark used by the creators of the algorithm. The score proved remarkably unreliable in forecasting violent crime: Only 20 percent of the people predicted to commit violent crimes actually went on to do so. When a full range of crimes were taken into account — including misdemeanors such as driving with an expired license — the algorithm was somewhat more accurate than a coin flip. Of those deemed likely to re-offend, 61 percent were arrested for any subsequent crimes within two years. We also turned up significant racial disparities. In forecasting who would re-offend, the algorithm made mistakes with black and white defendants at roughly the same rate but in very different ways.The formula was particularly likely to falsely flag black defendants as future criminals, wrongly labeling them this way at almost twice the rate as white defendants. White defendants were mislabeled as low risk more often than black defendants. Could this disparity be explained by defendants’ prior crimes or the type of crimes they were arrested for? No. We ran a statistical test that isolated the effect of race from criminal history and recidivism, as well as from defendants’ age and gender. Black defendants were still 77 percent more likely to be pegged as at higher risk of committing a future violent crime and 45 percent more likely to be predicted to commit a future crime of any kind.

Sprint now zero-rating some video, joining AT&T, Verizon, and T-Mobile

Sprint is now allowing some online video to be streamed without counting against customers' data caps, making it the fourth major wireless carrier in the US to implement data cap exemptions (or "zero-rating"). Sprint's first foray into zero-rating is for the Copa America Centenario soccer tournament being held in the US beginning June 3. Sprint has partnered with FuboTV, a soccer streaming service, to give customers access to every match if they sign up for a 60-day trial. Data streamed from FuboTV will not count against data caps during the tournament, but the zero-rating will end on June 27 right after the Copa America is over. Zero-rating plans are being scrutinized by the Federal Communications Commission.

AT&T streamlines its phone financing plans

AT&T announced a revised set of financing plans for its smartphone customers that shrink the options available from four to two. Called Next and Next Every Year, the new plans will replace the Next 12, Next 18, Next 24, and Next with Down Payment options starting on June 8th. While simpler and possibly easier to understand than AT&T's confusingly named (for example, the "Next 24" plan is actually a 30-month payment plan) existing options, the new plans remove options that allowed customers to pay off their phones in fewer installments. The Next plan is essentially the Next 24 plan with a new name. It splits the cost of a device over 30 equal installments and lets customers "upgrade" by trading in their device after 24 payments. Next Every Year is closer to the Next 18 option, but with upgrades available sooner. It is a 24-month payment plan with trade-in upgrades available after 12 months. Gone is the option to pay off your phone in less than 24 equal payments, as provided by the outgoing Next 12 plan.

Clinton e-mail hacker ‘Guccifer’ expected to plead guilty

A Romanian hacker who claimed to have broken into former Secretary of State Hillary Clinton’s personal e-mail server is expected to plead guilty to US criminal charges in a federal court. Court records show that Marcel Lehel Lazar, who goes by the alias “Guccifer,” will change his plea during a hearing in Alexandria (VA) on May 25. However, it is unclear which charges the 42-year-old will plead guilty to, or whether the move is part of a deal to cooperate with federal officials on other cases.

The hacker has been indicted on nine felony counts related to his hacking into accounts of senior US officials, including former President George W. Bush and ex-Secretary of State Colin Powell. Lazar’s hacking into Bush’s e-mail account exposed self-portraits and other paintings that the former president had after leaving office. His access to longtime Clinton ally Sidney Blumenthal’s e-mail account first exposed Clinton’s use of a private e-mail account during her time in office. The revelation opened the door to what has been a protracted controversy over the likely Democratic presidential nominee’s personal setup, which has dogged her presidential campaign. In May, Lazar claimed to have also broken into Clinton's “completely unsecured” server, which he compared to “an open orchid on the Internet.” Clinton’s campaign has dismissed the claim, and the State Department has said it has no reason to believe the hacker.