Petition calling on EU leaders to stop mass surveillance

Via Boing Boing comes the news that a coalition of of European privacy, free speech and civil liberties groups have started a petition calling on EU leaders to stop governments from carrying out programs of mass, suspicionless, warrantless dragnet surveillance like Prism and Tempora.

Thanks to recent revelations we know that governments are using digital technology to monitor our emails, phone calls and the websites we visit. This is an attack on our freedom of speech and an invasion of our privacy. Tell Europe’s leaders to take action to stop the US, UK and other governments from carrying out mass surveillance.

Go sign it.

Quote of the Day: America has no functioning democracy

He’s obviously violated the laws of America, for which he’s responsible, but I think the invasion of human rights and American privacy has gone too far. I think that the secrecy that has been surrounding this invasion of privacy has been excessive, so I think that the bringing of it to the public notice has probably been, in the long term, beneficial.

– Former US President, Jimmy Carter talking about Edward Snowden. As quoted by The Register.

Breaking out of PRISM

With the allegations about the US government spying on individuals still causing much concern, the EFF (via) has put together a website listing a variety of software and service alternatives that help you protect your online privacy.

The site is at prism-break.org and I’m a little bit ambivalent about it.

Not being dependent on a single supplier is, in itself, a good thing and using different providers for different services allow to to avoid being locked in to a single monopoly. There is also a lot to be said for not being dependent on a supplier whose business model involves building ever more detailed profiles of you for the benefit of advertisers. And, of course, being in control of the software that you run on your own devices is a good thing in and of itself.

What concerns me is that this list of alternatives is being presented as an alternative to PRISM. As I said earlier, the problem is not that the state is able to pry into your online activities but that they want to.

Being in control of your comnputing devices is a good thing; being in control of your online profile is a good thing; not being locked into a single supplier is a good thing; and service providers that see you as a customer rather than a product are a good thing.

The EFF’s list of alternatives is well worth looking through and, by taking advantage of some of these, you can greatly improve your online privacy. But don’t fool yourself into believing that dealing with the specific cases raised by the PRISM allegations absolve you of the need to address the wider problem of governments behaving unaccountably.

Stop Watching Us

This email landed in my inbox recently. It’s worth repeating in its entirety:

This Tuesday, Mozilla joined with a coalition of organizations from across the political and technical spectrum to send a message to the US government: Stop watching us.

We believe that technology’s most important use is for good. But if what we’ve heard about PRISM is true, then what has been happening is the opposite of that. And the more I hear about the massive spying program that has allegedly been collecting information on the way millions of people use the Web, the more I worry. I worry specifically about government agencies forcing private companies to hand over people’s data in secret — even if there is no suspicion that those people have done anything wrong.

The information that government agencies are reportedly collecting includes everything we do on the Web — our communication with friends and family, the way we conduct private business and manage our money. If these revelations are true, they confirm my worst fears about the potential for abuse of our basic rights. But for me, that’s not what worries me most. The worst part is seeing so many people just shrug their shoulders and say, “Well, this was inevitable. Privacy is dead.”

It’s not inevitable. We can can change things. Privacy is an essential part of Internet life that can be protected if we fight for it, and we’re fighting now. The first step: tell Congress to stop unwarranted spying on Internet users and to explain exactly what’s going on.

Please, I urge you to join me and so many others in telling the US government: stop watching us.

And if you — like me — don’t live in the US, you can still sign. This affects all of us.

I believe in a Web where we don’t have to fear that everything we do is tracked, monitored and logged — all behind closed doors. I believe that the Web thrives on openness and transparency. For 20 years, we’ve built the Web on these principles. We need to protect them.

Just over a year ago, we asked for the public’s help to stop the US Congress from considering legislation — the Stop Online Piracy and PROTECT IP Acts — that posed serious threats to the future of the Web. I was blown away by the response. It was the biggest online protest in history — hundreds of thousands of you got involved and together we shut down a fundamental attack on the Web as we know it. That’s what we can do when we work together — when we fight together.

Today we are taking a stand for everyone who uses technology, for any reason. Please stand with us. Don’t wait. Do it now:

StopWatching.Us

Geek Fatalism and Nerd Exceptionalism

In the wake of the various claims and counterclaims surrounding PRISM, I have seen a number of responses – both online and off – which strike me as being both disturbing and self-defeating. Broadly speaking, these responses fall into two categories: the fatalist and the exceptionalist.

The fatalist is the person who starts by saying: “Of course I knew the government was spying on me…” and then goes on to make some claim along the lines that there’s nothing you can do and/or you can’t remain outraged about these sorts of intrusions indefinitely.

The exceptionalist points to the fact that he properly encrypts his emails, federates his social networking and manages his entire online presence from his own server. This person then goes on to either say: “So I’m okay” or “… and everyone else should do the same.”

None of this is new so, before I continue, let me pause and refer you to an article Cory Doctorow wrote, slightly over a year ago, on The problem with nerd politics:

In “nerd determinism,” technologists dismiss dangerous and stupid political, legal and regulatory proposals on the grounds that they are technologically infeasible. Geeks who care about privacy dismiss broad wiretapping laws, easy lawful interception standards, and other networked surveillance on the grounds that they themselves can evade this surveillance. For example, US and EU police agencies demand that network carriers include backdoors for criminal investigations, and geeks snort derisively and say that none of that will work on smart people who use good cryptography in their email and web sessions.

But, while it’s true that geeks can get around this sort of thing – and other bad network policies, such as network-level censorship, or vendor locks on our tablets, phones, consoles, and computers – this isn’t enough to protect us, let alone the world. It doesn’t matter how good your email provider is, or how secure your messages are, if 95% of the people you correspond with use a free webmail service with a lawful interception backdoor, and if none of those people can figure out how to use crypto, then nearly all your email will be within reach of spooks and control-freaks and cops on fishing expeditions.

“Nerd fatalism” is the cynical counterpart of “nerd determinism.” Nerd fatalists hold that the geeky way of doing things – the famed “rough consensus and running code” – and have an ideological purity that can’t be matched by the old-time notions of deliberation, constitutionalism, and politics. These things are inherently corrupt and corrupting. If you move to Whitehall to defend technology, in a few years, you will be indistinguishable from any other Whitehall wonk, just another corrupted suit who sells out his ideals for realpolitik.

It’s true that politics has internal logic, and that habitual participants in politics are apt to adopt the view that politics is “the art of the possible” and no fit place for ideals. But there’s an important truth about politics and law: even if you don’t take an interest in them, it doesn’t follow that they won’t take an interest in you.

So we can design clever, decentralised systems such as BitTorrent all day long, systems that appear to have no convenient entity to sue or arrest or legislate against. But if our inventions rattle enough cages and threaten enough bottom lines, the law will come hunting for them.

To the fatalist, I would say that you should stay outraged about these intrusions. As Bruce Schneier points out:

Democracy requires an informed citizenry in order to function properly, and transparency and accountability are essential parts of that. That means knowing what our government is doing to us, in our name. That means knowing that the government is operating within the constraints of the law. Otherwise, we’re living in a police state.

It’s not enough to roll over and accept whatever our governments decide to do. Governments exist to serve the will of people – not the other way around – and if they fail in this then we can, and should, eject them from office.

I realise that there are people who will read the above line and immediately go into the usual whine about how democracy is broken and all politicians are in the pocket of corporate lobbyists and blah, blah, blah. So let me take a moment to address this point: It is your cynical disengagement that leaves the vacuum which wealthy special interests are so keen to fill.

Politicians will always pay most attention to those that keep them in power. In a democracy, that is the electorate. But if your vote, or your non-opposition, can be taken for granted then you cannot claim to be surprised that the politicians will then start to pay more attention to the people who fund their campaigns, and those people’s interests.

You have a vote. You should use it. And you should make sure that your representatives know how you intend to use it, and why.

And then there is the exceptionalist, the person who thinks that they can apply technical solutions to the problems of overbearing or incompetent government. If you are one of these people then I’m sorry to disappoint you, but you’re fooling yourself.

It is in the nature of communications that, unless you talk to no-one but yourself, you will eventually lose control of every message that you send. It doesn’t matter how carefully you encrypt your emails or how secure you keep your server, sooner or later you will find yourself messaging someone who doesn’t share your security concerns and then all bets are off.

You may think that everyone should encrypt everything but the reality is that everyone won’t. There is a trade-off to be had between security and convenience and some people will always place a greater value on convenience and a lower value on security than you do. Not only is this perfectly reasonable but, by focussing on the technicalities of computer security, you are addressing the wrong issue.

The problem is not that the state, or it’s agencies, are able to pry into your online activities. The problem is that they want to.

The vast majority of any country’s citizens are ordinary, law-abiding individuals in whom the state should have no interest. Obviously, there are people in whom the state are reasonably interested but that interest should be specific, limited, transparent and subject to judicial oversight.

I’m on the verge of repeating myself here, so back to Cory Doctorow:

If people who understand technology don’t claim positions that defend the positive uses of technology, if we don’t operate within the realm of traditional power and politics, if we don’t speak out for the rights of our technically unsophisticated friends and neighbours, then we will also be lost. Technology lets us organise and work together in new ways, and to build new kinds of institutions and groups, but these will always be in the wider world, not above it.

Elections to the European Parliament are less than a year away. Maybe now would be a good time to start documenting the positions being taken by the various political groupings on the question of privacy – both on and offline – and ensuring that they understand that there are votes to be won in taking these questions seriously.

Quote of the Day: On the need for whistleblowers

Knowing how the government spies on us is important. Not only because so much of it is illegal — or, to be as charitable as possible, based on novel interpretations of the law — but because we have a right to know. Democracy requires an informed citizenry in order to function properly, and transparency and accountability are essential parts of that. That means knowing what our government is doing to us, in our name. That means knowing that the government is operating within the constraints of the law. Otherwise, we’re living in a police state.

Bruce Schneier