Entries Tagged as 'Uncategorized'

Is Sarah Palin a Computer Criminal?

Vanity Fair suggests that Sarah Palin's distinctive voice on Facebook and Twitter is actually someone else's. According to the article, she appears to have given a ghostwriter access to her social networking accounts to speak on her behalf:

When it was first set up, in January 2009, Palin's Facebook page might as well have been a file cabinet for official press releases ("Palin Pushes Parental Consent Legislation") written mostly in a stiff, third-person form. The same was true of her Twitter feed, which went live in April. After [writer Rebecca] Mansour's voice disappeared on [the pro-Palin blog] C4P, however, Palin's voice on Facebook and Twitter started sounding increasingly provocative and irascible. A company called Aries Petra Consulting was formed in September and registered to Mansour's home address, but under someone else's name. (In astrology, Aries is the ram—or "RAM.") SarahPAC's first payment to the firm was made in October, about two weeks before Palin began her book tour. By then, Palin's new virtual voice was growing in intensity. The more shrill it became, the more news Palin made: "QUIT MAKING THINGS UP DNC" … "OBAMA ADMINISTRATION'S ATROCIOUS DECISION: HORRIBLE DECISION, ABSOLUTELY HORRIBLE" … "ARE YOU CAPABLE OF DECENCY, RAHM EMANUEL?" The payments to Mansour were not made public until February 1, 2010, when SarahPAC had to disclose its quarterly filings with the Federal Elections Commission. The day before the disclosure, knowing what was coming, C4P made an official announcement acknowledging that . . . Mansour . . . had left the site months earlier and gone to work for SarahPAC.

Let's assume that Palin created her own Facebook account, and then hired Mansour to manage it. So what, right? Lots of high-profile people probably don't update their own Facebook pages. In fact, President Obama's Facebook page explicitly says that it's maintained by Organizing for America.

The problem is that Facebook's terms of use prohibit several things that Palin and her ghostwriter may have done. Specifically, it forbids users from:

  • accessing someone else's account
  • sharing their passwords to let someone else access their accounts
  • transferring their accounts to someone else (without Facebook's written permission)
  • providing false personal information
  • "facilitating" or "encouraging" someone else to violate the terms of use

If Palin and her ghostwriter are in fact violating Facebook's terms of use, that probably doesn't seem like a big deal to most people. Just by surfing around the internet, we "agree" to dozens of website terms of use every day, usually before we even read them. These terms can say anything a website operator wants, and often specifically note that they can be changed at any time without notice (or with minimal notice).

But violating a website's terms of use is a big deal, according to Facebook. In fact, Facebook says it's a federal crime.

In Facebook v. Power Ventures, Facebook has sued a service that lets social network users view all their information from various social networking sites on one page. Like the way Sarah Palin's ghostwriter accesses Sarah's account, Power's service uses your password to access your account, with your permission. Facebook claims that this violates its terms of use, and any act that violates its terms of use is a violation of computer intrusion laws such as the federal Computer Fraud and Abuse Act, which prohibits intentionally accessing certain computers without authorization or in excess of authorization. Violations of this law are punishable by both civil and criminal penalties. Facebook also tried to claim that Power's service violated California's state computer crime law, but a federal court recently rejected (pdf) that argument.

In short, Facebook believes that if you use Facebook in a way that Facebook doesn't like — as defined by its terms of use — you commit a federal crime.

Facebook's position is ridiculous. It's also dangerous. If we commit a crime every time we violate a website's terms of use, then millions of Americans are becoming criminals every day through routine online behavior and could be subject to lawsuits or even prosecution. And worse, internet companies have the power to decide what behavior a person could go to prison for, simply by instructing their lawyers to draft a document to forbid certain acts.

Are Sarah Palin and Barack Obama computer criminals? We don't think so. Facebook and other companies need to stop trying to misuse computer crime laws to turn violations of terms of use into crimes.

more...

European Parliament Asks EU ACTA Negotiators to Protect Citizens’ Fundamental Rights

In a victory for democracy and transparency, the European Parliament adopted Written Declaration 12/2010 (WD 12) on the proposed Anti-counterfeiting Trade Agreement earlier this week. WD 12 calls on EU negotiators to ensure that <a href="">ACTA does not weaken citizens' fundamental rights of freedom of expression, privacy, and judicial due process, and will not require Internet intermediaries to act as copyright police at the behest of the Entertainment Industry. WD 12 also calls on EU negotiators to make the ACTA negotiation texts public, and to ensure that ACTA's proposed border measures do not interfere with access to affordable medicines.

WD 12 became the official position of the European Parliament on ACTA when it was signed by 377 Members of the European Parliament prior to today's deadline - more than the required majority of MEPs (369). While the written declaration is not binding on the European Parliament, its adoption by a clear majority sends an important political signal to EU ACTA negotiators at a critical time - just before the next, and possibly final, round of ACTA negotiations taking place in Japan later this month. The European Parliament must give a "consent vote" for the EU to be bound by ACTA; WD 12 should be seen by EU negotiators as a clear statement about how the MEPs will approach that vote.

Kudos and special thanks to our friends at La Quadrature du Net who led this effort, our amazing European EFF activists, fellow members of EDRi and the TransAtlantic Consumer Dialogue, and our other allies who worked tirelessly to explain the impact of ACTA and convince Members of the European Parliament to sign WD 12 despite various pressures and constraints.

Let's hope that EU negotiators now recognize that ACTA should protect the fundamental rights of all citizens and 'net users, and not just the narrow interests of major content businesses.

more...

Jo-Ann Fabric and Craft Stores Recalls Roll-Up Blinds due to Risk of Strangulation

Strangulation can occur when the lifting loop slides off the side of the blind and a child's neck becomes entangled on the free-standing loop, or if a child places his/her neck between the lifting loop and the roll-up blind material.more...

Black & Decker Recalls Random Orbit Sanders Due to Laceration Hazard

The black plastic disc (called the platen) that holds the sandpaper can fly off or break apart during use and the disc, or pieces of the disc, can hit the user or those nearby, posing a laceration hazard.more...

Pro-Pac Distributing Corp. Agrees to Pay $125,000 Civil Penalty for Failing to Report Drawstrings in Children’s Sweatshirts

The U.S. Consumer Product Safety Commission (CPSC) announced today that Pro-Pac Distributing Corporation, of Gardena, Calif., has agreed to pay a civil penalty in the amount of $125,000, resolving CPSC staff allegations that Pro-Pac knowingly failed to report to CPSC immediately, as required by federal law, that two different children's hooded sweatshirts it imported and distributed had drawstrings at the neck.more...

Beyond “Censored”: What Craigslist’s “Adult Services” Decision Means for Free Speech

On Saturday, after years of pressure from law enforcement officials, Internet classified ad web site Craigslist bowed to demands to remove its "Adult Services" section which critics charged encouraged prostitution and other sex-related crimes. Or it least it appears that it did. Without explanation, following the latest in a series of open letters from state attorneys general decrying the third party content permitted on the site, Craigslist replaced the "Adult Services" link that formerly appeared on the front page of the site with a white-on-back "censored" bar. Whether this move will substantially affect the rate of illegal prostitution across the country remains to be seen. Many, even some of Craigslist's critics, appear to have their doubts. If nothing else, however, this latest turn in the AGs v. Craigslist saga underscores the misguided nature of the AGs' tactics as well as the fundamental disagreement that we (and Congress) have with the AGs' vision of how the Internet should operate.

Through this now years-long struggle, Craigslist's legal position has been and remains absolutely, unequivocally correct: the Communications Decency Act of 1996 (or CDA) grants providers of "interactive computer services" an absolute shield against state criminal law liability stemming from material posted by third parties. Put simply, the law ensures that the virtual soapbox is not liable for what the speaker says: merely creating a forum in which users post ads that may violate state law plainly does not lead to liability for a web site operator.

The federal statutory immunity upon which Craigslist relies is not some clever loophole. Rather, the intermediary immunity provided by the CDA represents a conscious policy decision by Congress to protect individuals and companies who would otherwise be vulnerable targets to litigants who want to silence speech to which they object, illegal or not. We agree with Congress that a federal policy of holding lawbreakers liable for their own illegal behavior instead of holding intermediaries responsible for the illegal acts of others is the right one, both as a matter of fairness as well as an effective strategy by which speech and innovation can be encouraged and rewarded.

This clear protection plays an essential role in how the Internet functions today, protecting every interactive web site operator -- from Facebook to Craigslist to the average solo blog operator -- from potentially crippling legal bills and liability stemming from comments or other material posted to web sites by third parties. Moreover, if they were obligated to pre-screen their users' content, wide swaths of First Amendment-protected speech would inevitably by sacrificed as web site operators, suddenly transformed into conservative content reviewers, permitted only the speech that they could be sure would not trigger lawsuits (or intimidating visits from the attorney general). The ability to encourage speech of all sorts without of fear of legal reprisal is a feature of the CDA 230 world, not a shortcoming, one that encourages the publication of a diverse range of viewpoints and not just those of rich and cautious media companies who can afford the financial risk of publication.

As the chief law enforcement officers of their respective states, the attorneys general certainly know that their legal threats are completely meritless. Yet these and other law enforcement officers have shown little regard for what the law actually requires and have instead embarked on a vigorous campaign to strong-arm a company into submission based on bogus legal threats that nonetheless play well to many of their constituents. This strategy might amount to good politics, especially in an election year, but it continues to show remarkable disdain for the bedrock legal principles that have largely served the Internet well over the past 15 years.

It didn't have to be this way. Over the past two years, Craigslist repeatedly offered to go far above and beyond their legal obligations to work with law enforcement officials, offering to manually screen ads, require working phone and credit card numbers from ad posters (thereby creating digital footprints by which lawbreakers could be tracked), and help identify missing persons. Not surprisingly, however, having offered to do more than they law required but less than the AGs demanded, the AGs kept coming back for more, some flatly stating that the essential protections offered by CDA 230 should be repealed.

At least two lessons can be drawn from this latest skirmish in the battle between Craigslist and its critics. First, there sadly appears to be little upside to working with many of these law enforcement officials to resolve such important Internet policy disagreements. At each step of this public debate, the AGs have inevitably rewarded completely voluntary, non-mandatory offers of cooperation from Craigslist with further demands and insults. What possible motivation will other companies have to work with law enforcement to address similar concerns in the future?

Second, and more importantly, supporters of the First Amendment should loudly voice their opposition to this type of misguided rhetoric from elected officials. While Craigslist may have "voluntarily" shuttered its Adult Services section, they did so under constant threat from government officials who continually promised meritless lawsuits and even criminal prosecution if their target did not comply. No one (including Craigslist) disputes that sex trafficking is a reprehensible practice that should be vigorously opposed. The dispute lies in whether law enforcement officials should be permitted to bully and dragoon private web site operators into becoming de facto censors. Many, including EFF, profoundly disagree with the prospect of such a reimagined Internet, and the AGs at minimum owe it to the public to be honest about the First Amendment impact of what they are proposing.

more...

Rechargeable Spotlights Recalled by Innovage Due to Burn Hazard

The spotlight's charging adapter can overcharge the battery, forcing it to rupture and leak battery acid. This poses a chemical burn hazard to consumers.more...

Simms Fishing Products Recalls Wading Staffs Due to Fall Hazard

The wading staff can collapse posing a fall hazard to consumers.more...

EFF’s E-Book Buyer’s Guide to Privacy v2

/* table/column settings */ .ebook td {padding:3px 0;vertical-align:top} /* colors */ .ebook td.bad {color:#e73138} .ebook td.good {color:#0c6aa1} .ebook td.neutral {color:#888} /* device style */ .ebook td.device {} /* question style */ .ebook td.question {padding:10px 0 2px} .ebook td.question h3 {font-weight:bold}

Can they keep track of book searches?

Google Books Yes Logs all search data with IP address. Will also associate searches with user's Google Account if logged in. Will not associate searches with users account if not logged in.
Amazon Kindle Yes Logs data on products viewed and/or searched for on the device, and associates info with Amazon account. Searches inside book require login to account which associates with credit card information.
B&N Nook Yes The privacy policy is unclear about whether searches made on the Nook are recorded, but B&N generally logs data on searches made and pages viewed on B&N website. B&N does not disclose whether it associates book searches with a user's account if logged in.
Sony Reader Yes/No The privacy policy is unclear, but if a customer uses the Reader Store, Sony will log IP address and message information, and can associate data with the Reader Store account (must be logged in to browse store).
FBReader No FBReader does not collect data about book searches.
Internet Archive No The Archive does not collect IP addresses/user-identifiable data about book searches
iPad Yes/No Yes if purchased from iBookstore or other Apple applications; otherwise no.
 

Can they monitor what you're reading after purchase and link back to you?

Google Books Yes Logs specific book and page viewed on website.
Amazon Kindle Yes Exact parameters of information logged is unclear, but includes books and pages read.
B&N Nook Unkown It does not appear that B&N can monitor reading after purchase, but the Privacy Policy and various applicable terms of use are unclear.
Sony Reader No Sony does not record info about content on device.
FBReader No FBReader does not collect information from users.
Internet Archive No The Archive does not collect user-specific information (including IP addresses) about what is read/downloaded. If, however, a user makes use of the Archive’s bookmark feature, it will by definition associate that item with the user’s account. A forthcoming lending library of modern books will retain some user information for a time to implement the system – the extent of information to be collected and the duration over which it will be stored are yet to be determined.
iPad No Terms of Use claim that any information gathered is non-identifiable.
 

Is the device ONLY compatible with books purchased from an associated eBook store?

Google Books N/A The Google Books service is not a reading device, but does allow downloads of public domain books in unprotected PDF or EPUB. Other books must be read online through Google's web interface.
Amazon Kindle Yes Only Amazon's proprietary AZW and unprotected TXT, MOBI, PRC files are directly compatible with Kindle. Kindles also have PDF support. Amazon also now allows publishers to offer books without DRM.
B&N Nook No Supports popular eBook formats like EPUB and PDF from other sources (if Adobe DRM or non-DRM), BUT they will not be compatible with many Nook features. Does not support AZW.
Sony Reader No Supports books in multiple DRM formats including EPUB (Adobe), PDF (Adobe), and BBeB book (PRS) in addition to non-DRM formats. Does not support AZW.
FBReader No Supports a wide variety of open, non-DRM versions of formats like EPUB, FB2, MOBI, PRC, OEB, etc. Does not support PDF or AZW.
Internet Archive N/A Internet Archive’s text collection is not a reading device, but is compatible with many different devices. Among the formats offered are PDF, EPUB, MOBI, Daisy (for sight-impaired/print-disabled), DJVU and OCR-generated txt formats.
iPad No Supports EPUB and PDFs. Supports AZW with additional software.
 

Can they keep track of book purchases?

Google Books Yes All book purchases must be associated with a Google Account.
Amazon Kindle Yes Amazon will compile a purchase history for users.
B&N Nook Yes For purchases from the B&N eBook Store, the privacy policy is unclear. B&N says it will associate book purchases with the user when he or she enrolls in a membership loyalty program, but it is silent as to whether purchases are associated with a B&N online account. B&N does not keep track of books obtained elsewhere that are read on the device.
Sony Reader Yes While the privacy policy is unclear, Sony appears to keep track of purchases from the Reader Store since the user must log in to purchase books and Sony assigns a identification cookie to users for licensing purposes. Sony does not keep track of books obtained elsewhere that are read on the device.
FBReader No FBReader does not collect data about book purchases.
Internet Archive N/A The Archive does not sell books, but some of its associated sites (e.g., www.openlibrary.org) link to bookstores.
iPad Yes/No Yes if searched on iBookstore or other Apple applications; otherwise no.
 

With whom can they share the information collected in non-aggregated form?

Google Books Law enforcement, civil litigants and within Google's own products.
Amazon Kindle Law enforcement, civil litigants and within Amazon's own products.
B&N Nook For information collected through the B&N eBook Store: law enforcement, civil litigants and within B&N's own products.
Sony Reader For information collected through the Reader Store: law enforcement, civil litigants, within Sony's own products, and with Borders, its Reader Store partner.
FBReader N/A No information is collected.
Internet Archive N/A The Archive does not collect user-specific information (including IP address) about the searching, reading, or downloading of texts. Books, bookmarks, reviews, and forum postings are publicly available.
iPad N/A Law enforcement or civil litigants as required by law, Apple's service providers, vendors and strategic partners within Apple Group.
 

Can they share information outside the company without the customer's consent?

Google Books No User must opt-in to have personal info shared outside Google.
Amazon Kindle Yes Users may opt-out of use of information only for certain promotional and marketing purposes.
B&N Nook Yes Users may opt-out of use of information only for certain promotional and marketing purposes or for certain analytic uses of info by third parties.
Sony Reader Yes For information collected through the Reader Store: User may refuse to share information (on either an opt-out or opt-in basis) only for promotional or marketing purposes. To opt-out of further sharing of information by Borders, which operates the Reader Store, user must contact Borders directly.
FBReader No No information is collected.
Internet Archive N/A The Archive does not collect user-specific information (including IP address) about the searching, reading, or downloading of texts. Books, bookmarks, reviews, and forum postings are publicly available.
iPad Yes Users may opt out of use of information only for certain marketing and personalized advertising uses.
 

Do they lack mechanisms for customers to access, correct, or delete the information?

Google Books No User may delete or disassociate book titles with account, but may lose ability to read them. Users can delete their search history.
Amazon Kindle Somewhat Users may access and update info in account profile, but Amazon may retain prior versions for its records. There is no right to access or delete search and purchase history.
B&N Nook Somewhat Users may access, correct, and change info in account profile at any time. There is no right to access or delete search and purchase history.
Sony Reader Somewhat For information collected through the Reader Store: Users may send a request to have certain personal information updated and it will be done in a reasonable time. There is no right to access or delete search and purchase history.
FBReader No No information is collected.
Internet Archive No No user info/IP addresses on searches/reading/downloads are collected. Bookmarks may be deleted.
iPad Somewhat Users may delete book titles within personal account but will likely lose ability to read them. There is no right to access or delete search and purchase history.

Updated 3/5/10: Added Internet Archive information.

more...

EFF Experts Address Security, Openness, and Privacy at United Nations’ Internet Governance Forum

Vilnius, Lithuania - Experts from the Electronic Frontier Foundation (EFF) will address security, openness, privacy, and other issues at the United Nations' Internet Governance Forum (IGF), set for September 14-17 in Vilnius, Lithuania.

This is the fifth meeting of the IGF, which was established to discuss public policy issues related to Internet governance on a global scale. Approximately 1,500 government policymakers, technologists, politicians, and others will attend.

EFF experts will participate in nine workshops in Vilnius, including "The Future of Privacy," with EFF Senior Staff Attorney Kevin Bankston and EFF International Rights Director Katitza Rodriguez, who is also a member of the Multistakeholder Advisory Group that helped plan the meeting. Also on the agenda is "Governance of Social Media," with EFF Senior Staff Attorney Kurt Opsahl and "Why We Need an Open Web," with EFF International Affairs Director Eddan Katz.

For a complete schedule of EFF's participation in IGF see http://www.eff.org/calendar/2010/09/14/eff-united-nations-internet-gover....

WHAT:
United Nations' Internet Governance Forum

WHEN:
September 14-17

WHERE: Lithuanian Exhibition Centre LITEXPO Laisves pr. 5 LT-04215 Vilnius, Lithuania

For more on the IGF:
http://www.intgovforum.org/cms/
http://www.igf2010.lt

Contact:

Rebecca Jeschke
Media Relations Director
Electronic Frontier Foundation
press@eff.org

more...