Tuesday, December 20, 2005


News Item 4554 "Analog hole" legislation introduced [ arstechnica ]

A frightening bit of legislation was introduced to the US House Judiciary Committee on Friday. The Digital Transition Content Security Act of 2005 (PDF) is sponsored by Rep. Jim Sensenbrenner (R-WI) and Rep. John Conyers (D-MI) (PDF) and would close that pesky analog hole that poses such a dire threat to the survival of the music and movie industries. The bill was originally planned for introduction in early November, but was tabled after hearings held by the House Subcomittee on Courts, the Internet, and Intellectual Property.

Calling the ability to convert analog video content to a digital format a "significant technical weakness in content protection," H.R. 4569 would require all consumer electronics video devices manufactured more than 12 months after the DTCSA is passed to be able to detect and obey a "rights signaling system" that would be used to limit how content is viewed and used. That rights signaling system would consist of two DRM technologies, Video Encoded Invisible Light (VEIL) and Content Generation Management Systemâo[per thou]Analog (CGMS-A), which would be embedded in broadcasts and other analog video content.

Under the legislation, all devices sold in the US would fall under the auspices of the DTCSA: it would be illegal to "manufacture, import, offer to the public, provide or otherwise traffic" in such products. It's a dream-come-true for Hollywood, and in combination with a new broadcast flag legislation (not yet introduced) would strike a near-fatal blow to the long-established right of Fair Use.

[...]

And this bill is ridiculously hard on timeshifting. Section 201 (b) (1) of the DTCSA gives you all of 90 minutes from the initial reception of a "unit of content" to watch your recordings. Heaven forbid you get a long phone call or an unscheduled visit from a neighbor when you're engaged in some delayed viewingâo[per thou]once that 90-minute window closes you're out of luck until the next broadcast.

Our Fair Use rights have been on the endangered list for the past several years, and the passage of this legislation would mark a habitat loss so severe that it would threaten the very survival of the species. No matter what the MPAA and RIAA tell us, it's not about piracy. It's about squeezing every last dollar out of our pockets if we want to do anything other than watch a live broadcast.

This is bad legislation for everyone except Hollywood and its lackeys. If you are represented by a member of the House Committee on the Judiciary, contact him or her and make your feelings known. Given what's at stake here, expressing your views to your congressional representative and senators is an excellent idea as well.



11:22:06 PM  PermaLink   / trackback []  

News Item 4553 Analog Hole Legislation Formally Introduced.

Analog Hole Legislation Formally Introduced. phaedo00 writes "Ars Technica is covering a recent bit of legislation introduced to the U.S. House Judiciary Committee this past week. The laws would seek to close the 'Analog Hole' that serves as a sort of last-ditch pirating mechanism when corporate DRM goes all crazy and tramples on your fair-use rights: 'Calling the ability to convert analog video content to a digital format a significant technical weakness in content protection, H.R. 4569 would require all consumer electronics video devices manufactured more than 12 months after the DTCSA is passed to be able to detect and obey a rights signaling system that would be used to limit how content is viewed and used. That rights signaling system would consist of two DRM technologies, Video Encoded Invisible Light (VEIL) and Content Generation Management System--Analog (CGMS-A), which would be embedded in broadcasts and other analog video content.'" We've previously covered this bill.[Slashdot: Your Rights Online]
11:17:27 PM  PermaLink   / trackback []  

News Item 4552 ISPs Race to Create Two-Tiered Internet.

ISPs Race to Create Two-Tiered Internet. An anonymous reader writes "The ISP race toward a two-tiered Internet is picking up speed. This article from Michael Geist points to a wide range of examples involving packet preferencing, content blocking, traffic shaping, and public musings about premium charges for faster content downloads. ISPs are now reducing access to peer-to-peer applications, blocking Skype, and, scariest of all, lobbying Congress to let them do it." [Slashdot: Your Rights Online]
11:14:11 PM  PermaLink   / trackback []  

News Item 4551 The new technology at the root of the NSA wiretap scandal [ arstechnica ]

The domestic electronic surveillance ball really got rolling under the Clinton administration, with the 1994 Communications Assistance for Law Enforcement Act ("CALEA"). CALEA mandated that the telcos aid wiretapping by installing remote wiretap ports onto their digital switches so that the switch traffic would be available for snooping by law enforcement. After CALEA passed, the FBI no longer had to go on-site with wiretapping equipment in order to tap a lineâo[per thou]they could monitor and digitally process voice communications from the comfort of the home office. (The FCC has recently ruled that CALEA covers VOIP services, which means that providers like Vonage will have to find a way to comply.)

CALEA opened up a huge can of worms, and PGP creator Phil Zimmermann sounded the alarm back in 1999 about where the program was headed:

A year after the CALEA passed, the FBI disclosed plans to require the phone companies to build into their infrastructure the capacity to simultaneously wiretap 1 percent of all phone calls in all major U.S. cities. This would represent more than a thousandfold increase over previous levels in the number of phones that could be wiretapped. In previous years, there were only about a thousand court-ordered wiretaps in the United States per year, at the federal, state, and local levels combined. It's hard to see how the government could even employ enough judges to sign enough wiretap orders to wiretap 1 percent of all our phone calls, much less hire enough federal agents to sit and listen to all that traffic in real time. The only plausible way of processing that amount of traffic is a massive Orwellian application of automated voice recognition technology to sift through it all, searching for interesting keywords or searching for a particular speaker's voice. If the government doesn't find the target in the first 1 percent sample, the wiretaps can be shifted over to a different 1 percent until the target is found, or until everyone's phone line has been checked for subversive traffic. The FBI said they need this capacity to plan for the future. This plan sparked such outrage that it was defeated in Congress. But the mere fact that the FBI even asked for these broad powers is revealing of their agenda.

Read the quote above carefully, and see if it doesn't ring any bells for you. The salient points that Zimmermann makes are these:

  • In 1995, back when the Pentium Pro was hot stuff, the FBI requested the legal authorization to do very high-volume monitoring of digital calls.
  • There's no way for the judicial system to approve warrants for the number of calls that the FBI wanted to monitor.
  • The agency could never hire enough humans to be able to monitor that many calls simultaneously, which means that they'd have to use voice recognition technology to look for "hits" that they could then follow up on with human wiretaps.

It is entirely possible that the NSA technology at issue here is some kind of high-volume, automated voice recognition and pattern matching system. Now, I don't at all believe that all international calls are or could be monitored with such a system, or anything like that. Rather, the NSA could very easily narrow down the amount of phone traffic that they'd have to a relatively small fraction of international calls with some smart filtering. First, they'd only monitor calls where one end of the connection is in a country of interest. Then, they'd only need the ability to do a roving random sample of a few seconds from each call in that already greatly narrowed pool of calls. As Zimmermann describes above, you monitor a few seconds of some fraction of the calls looking for "hits," and then you move on to another fraction. If a particular call generates a hit, then you zero in on it for further real-time analysis and possible human interception. All the calls can be recorded, cached, and further examined later for items that may have been overlooked in the real-time analysis.


11:11:02 PM  PermaLink   / trackback []  

News Item 4550 The Future of Tech And NSA Wiretaps.

The Future of Tech And NSA Wiretaps. Tyler Too writes  "Is there more to last week's story about President Bush authorizing wiretaps without court review? Ars Technica writes about what's going on behind the curtains with the National Security Agency's technology: 'When the truth comes out (if it ever does), this NSA wiretapping story will almost certainly be a story not just about the Constitutional concept of the separation of powers, but about high technology.'"  [Slashdot: Your Rights Online]
11:04:25 PM  PermaLink   / trackback []  

News Item 4549 Feds Assess 2-Year-Old Spam Law.

Feds Assess 2-Year-Old Spam Law. Feds to report on effectiveness of CAN-SPAM Act and describe new antispam efforts. [PCWorld.com - Latest News Stories]
10:56:39 PM  PermaLink   / trackback []  

News Item 4548 Spam Slayer: FTC's CAN-SPAM Report Card.

Spam Slayer: FTC's CAN-SPAM Report Card. FTC releases progress report on Congress's antispam law, but some experts are not impressed. [PCWorld.com - Latest News Stories]
10:53:42 PM  PermaLink   / trackback []  

News Item 4547 New instant-messaging worm promises a picture of Santa Claus, but delivers a rootkit.

Here Comes Santa Claus Worm. New instant-messaging worm promises a picture of Santa Claus, but delivers a rootkit. [PCWorld.com - Latest News Stories]
10:52:06 PM  PermaLink   / trackback []  

News Item 4546 Database Hack Exposes Police Financial Data.

Database Hack Exposes Police Financial Data. Reevesnamepins.com, a company that manufacturers the plastic and metal name tags that police officers around the country wear on their uniforms, had its customer database hacked recently, exposing credit card and other personal data for a number of police departments. A woman who answered the phone at ReevesNamepins confirmed that the company had recently experienced a security breach, but declined... [Security Fix]
10:49:35 PM  PermaLink   / trackback []  

News Item 4545 Guidance Software's Customer Database Compromised

Guidance Software's Customer Database Compromised. Read Brian Krebs's latest story: Hackers Break Into Computer-Security Firm's Customer Database. Here's the story lead: Guidance Software -- the leading provider of software used to diagnose hacker break-ins -- has itself been hacked, resulting in the exposure of financial and personal data connected to thousands of law enforcement officials and network-security professionals. Continue reading.... [Security Fix]
10:47:52 PM  PermaLink   / trackback []  

News Item 4544 Pro-Hollywood bill aims to restrict digital tuners.

Pro-Hollywood bill aims to restrict digital tuners.

A new proposal in Congress aims to please Hollywood studios, which are increasingly worried about Internet piracy, by embedding anticopying technology into the next generation of digital video products.

If the legislation were enacted, one year later it would outlaw the manufacture or sale of electronic devices that convert analog video signals into digital ones--unless those encoders honor an anticopying plan designed to curb redistribution. Affected devices would include PC-based tuners and digital video recorders.

[Public Knowledge - Breaking News]
10:43:34 PM  PermaLink   / trackback []  

News Item 4543 EFF - Summary of Claims Against Sony-BMG.

Summary of Claims Against Sony-BMG.

My most recent column at Law.com, "Sony-BMG's Copy-Protection Quagmire", describes the various legal theories that have been brought against Sony-BMG over the CD copy-protection debacle. The quick summary: more than a dozen class action suits filed around the country, based on a mix of state anti-spyware statutes, the federal Computer Fraud and Abuse Act, common law trespass to chattels claims, and state law consumer protection and deceptive advertisting statutes.

Complete text of the article after the jump.

[EFF: Deep Links]
10:41:06 PM  PermaLink   / trackback []  

News Item 4542 Secondary Screening: Something's Happening Here

I'm even more convinced that some new technology is being used here, besides traditional wiretaps, based on a just-released July, 2003 letter from Senator Rockefeller to Vice President Cheney outlining his concerns about the eavesdropping.

Rockefeller says he isn't a lawyer or a "technician" and that he can't make a judgement on the program because he can't consult with his staff.

Wiretaps aren't that complicated to understand.

Also, Rockefeller said his briefing reminded him of the Total Information Awareness project (defunded for purposes of data-mining citizens' records, but being developed using black-budget funds for overseas data-mining).

That makes me think the project involved some large scale mostly-suspicionless scanning of outgoing communications. Then, the NSA would focus in on targets, and discard other numbers and email addresses, after some technological sifting.

Josh Marshall has posted two-page hand-written letter.

Editor: Just one man's theroy, but it would explain a few things.

10:38:40 PM  PermaLink   / trackback []  


News Item 4541 Support the Senate PATRIOT Filibuster.

Support the Senate PATRIOT Filibuster.

Reform the PATRIOT Act! On Friday, December 16, 46 senators took a stand against the bill meant to renew the USA PATRIOT Act. Citing a lack of meaningful checks and balances in the bill, this bipartisan group of senators successfully fought back a motion that would have ended debate and forced a vote on the flawed PATRIOT renewal. If your senator joined the rebellion, write and thank him or her for protecting your civil liberties, and encourage continued opposition to PATRIOT renewal! [EFF Action Alerts]
10:31:57 PM  PermaLink   / trackback []