Tuesday, March 14, 2006


News Item 5493 ID management a 'human problem,' says privacy group.

ID management a 'human problem,' says privacy group. CIOs and IT managers should be aware that IT projects fail due to myriad factors and that technology may not be the answer to a problem, according to Australian Privacy Foundation Chair Anna Johnston. [Computerworld Privacy News]
9:49:04 AM  PermaLink   / trackback []  

News Item 5492 Security hole found in crypto program Gnu Privacy Guard.

Security hole found in crypto program Gnu Privacy Guard. Developers of the open source Gnu Privacy Guard encryption software have reported a security flaw that could allow an attacker to sneak malicious code into a signed e-mail message. [Network World on Privacy]
9:46:31 AM  PermaLink   / trackback []  

News Item 5491 ISO rejects China's WAPI security protocol.

ISO rejects China's WAPI security protocol. The International Organization for Standardization (ISO) last week rejected a security protocol that was backed by some Chinese representatives as an amendment to the group's wireless LAN standard. [Network World on Privacy]
9:44:19 AM  PermaLink   / trackback []  

News Item 5490 Google, Government Square Off over Search Terms

Search provider Google and the U.S. Department of Justice are expected to clash March 14 inside a federal court over whether Google should surrender information on its customers' search habits to law enforcement officials.

U.S. District Judge James Ware presides over a hearing slated to begin at 9 a.m. and to last about an hour. While Ware isn't expected to make a ruling March 14, his give and take with attorneys may provide indications as to how he might rule in the future.

The case has touched a nerve with consumers and businesses, because Internet searches often reveal private information and trade secrets.


9:41:41 AM  PermaLink   / trackback []  

News Item 5489 Downloadable RMS Lectures About Software Freedom.

Downloadable RMS Lectures About Software Freedom.   Goran Gugic writes "On a recent visit to Croatia Richard Stallman gave two speeches which are now available as podcasts: 'Dangers of Software Patents' (OGG, 80MB, 132') and 'GNU Movement, Free Software and the Future of Freedom' (OGG, 65MB, 110'). The files can be found in the podcast section (site in Croatian). A higher-bandwidth mirror is also available"  [Slashdot: Your Rights Online]
9:36:20 AM  PermaLink   / trackback []  

News Item 5488 PATRIOT Renewal Rubber Stamped, NSA Spying May Be Next.

PATRIOT Renewal Rubber Stamped, NSA Spying May Be Next.

Despite the best efforts of EFF, other civil liberties organizations, and their supporters, Americans' privacy rights took some serious body-blows from Congress this week. For more on the PATRIOT Act: The USA PATRIOT Act was renewed without meaningful reform, and key Congressmen backed away from a full investigation of the NSA's domestic spying program, instead making a deal with the White House to legalize it.

Whether because of election year fears or White House pressures, Republican Senators who had been holding out for significant new checks on the PATRIOT Act dropped the fight when offered a few sham reforms. The renewal bill was then quickly approved by the Senate and, this week, approved by the House and signed by the President.

Why are the "compromise" bill's three reforms worthless? Let's take each in turn.

The bill provides a procedure for recipients of super-secret National Security Letters (NSLs) to challenge the never-ending gag orders that accompany these FBI-issued subpoenas. But the ACLU (with help from EFF) already demonstrated that these gag orders could be successfully challenged in court without a change to the law. This new "reform" actually makes things worse: under the new law, these gag orders can't be challenged at all within a year of being issued, and if the government simply tells the court that lifting the gag order will hurt national security, the government wins. We think this procedure is just as unconstitutional as the original law.

The bill didn't include a requirement that NSL recipients seeking legal advice disclose their lawyer's name to the FBI. But this "reform" simply removed something bad from one of the renewal bill's earlier versions; it didn't change the original PATRIOT Act at all.

Finally, the bill clarified that NSLs can't be served on libraries that don't provide electronic communication services. But NSLs already can't be served on libraries lacking those services.

Unfortunately, it gets worse. Senate Republicans this week stated that they had reached a deal with the White House to legalize the NSA's domestic spying program. The agreement allows government investigators to conduct warrantless wiretaps for up to 45 days before having to go to a court, even in non-emergency situations. Currently, the law only allows such surveillance without a warrant for 72 hours in emergencies and for 15 days by the Executive when war is declared. Because of this deal, an in-depth Congressional investigation of the NSA program -- what it actually involves and whether it broke the law -- has been deflected for now.

Nevertheless, this week's events shouldn't be taken as final defeats. Members of Congress who were dissatisfied with the PATRIOT bill -- Democrats and Republicans alike -- are already proposing new non-sham reforms, while the plan to legalize the NSA Program still has opponents on both sides of the aisle. EFF believes that the spying program did in fact break the law and violate the Constitution, as we have alleged in our lawsuit against AT&T for helping the NSA with this massive fishing expedition into Americans' private communications. As always, EFF will stay on the front lines and fight hard to ensure that your civil liberties are protected.

[EFF: Deep Links]
9:31:33 AM  PermaLink   / trackback []  

News Item 5487 PaulDotCom's Web Site: Security Podcasts Roundup

We at PaulDotCom security weekly listen to many podcasts in an attempt to assimilate as much information as possible. Each podcast we listen to has its own strengths, and there are few on this list that I would dismiss altogether, but I'll let you be the judge. There have been a few other blog postings related to security podcasts:

What follows is an attempt to be a comprehensive list of what we've found out there, so if we miss something, just let us know!


9:20:49 AM  PermaLink   / trackback []  

News Item 5486 Proposed New Jersey Laws Would Chill Free Speech.

Proposed New Jersey Laws Would Chill Free Speech.

EFF and Other Groups Call for Bills' Withdrawal

San Francisco - A diverse coalition of companies, public interest organizations, and legal scholars, including the Electronic Frontier Foundation (EFF), craigslist, Public Citizen, the US Internet Industry Association (USIIA), the Center for Democracy and Technology (CDT) and Professors Lyrissa C. Barnett Lidsky and Jennifer M. Urban, sent an open letter today to three New Jersey assemblymen, urging them to withdraw their support from two bills designed to eliminate anonymous online speech.

Assembly bills A1327 and A2623 would require Internet service providers to record users' identities and reveal them in any claim of defamation. While aimed at curbing online bad actors, the bills instead run afoul of the First Amendment[~]which protects the right to speak anonymously[~]as well as a federal law designed to protect speech in online fora. The bills would require identification of an online poster before the facts were resolved, leading to a flood of unsubstantiated claims designed simply to unmask online speakers.

"Protecting anonymity is vital to maintaining the diversity of viewpoints on the Internet," said EFF Staff Attorney Kurt Opsahl. "Keeping online debates robust enables democracy, even if it allows name-calling and strongly worded opinions about political figures."

The open letter calls for Assemblymen Peter J. Biodi, Wilfredo Caraballo, and Upendra J. Chivukula not to waste taxpayer resources in defending these bills that will inevitably be struck down in court. New Jersey courts are already handling claims of defamation online in a careful and constitutionally appropriate manner, balancing a speaker's anonymity rights with the merits of the plaintiff's claim. The well-established standard in New Jersey and elsewhere for deciding whether to order the identification of anonymous defendants has functioned well to separate ill-founded lawsuits from cases in which identification is appropriate.

As evidence of this balanced approach, the open letter points to the cases available for review on a web site maintained by the Cyberslapp Coalition[~]several of whose members signed the open letter[~]at www.cyberslapp.org. The Cyberslapp web site provides briefs, evidence, and opinions from nearly four dozen "John Doe" cases in which the standard has been discussed and applied. The site, which permits search both by keyword and by state of decision, is provided free of charge as a resource for litigants on both sides of Doe disputes.

For the full text of the open letter:
http://eff.org/Privacy/Anonymity/NewJerseyLetter.pdf

The Cyberslapp Coalition:
http://www.cyberslapp.org

Contact:

Kurt Opsahl
Staff Attorney
Electronic Frontier Foundation
kurt@eff.org

[EFF: Breaking News]
9:17:52 AM  PermaLink   / trackback []  

News Item 5485 Blanket digital licence fails in France - Carry on pirates, carry on DRM

Blanket digital licence fails in France.

Carry on pirates, carry on DRM

Under heavy pressure from the French government, the country's parliament has voted against introducing the world's first blanket licence for sharing digital media. A section that would have permitted internet users to freely exchange copyrighted material, effectively legitimizing file sharing, and hastening the demise of digital rights management (DRM) software, had passed an earlier reading in a vote last December.

[The Register - Internet and Law: Digital Rights/Digital Wrongs]
9:14:13 AM  PermaLink   / trackback []  

News Item 5484 Security Hole Found in GPG Crypto Program.

Security Hole Found in GPG Crypto Program. could allow attacker to place code in signed e-mail. [PCWorld.com - Latest News Stories]
9:11:21 AM  PermaLink   / trackback []  

News Item 5483 Faulty McAfee Update Wreaks Havoc.

Faulty McAfee Update Wreaks Havoc. VirusScan update prompted users to delete good software along with viruses. [PCWorld.com - Latest News Stories]
9:09:57 AM  PermaLink   / trackback []