Skip to main content
Podcast Episode: 'I Squared' Governance

EFFector - Volume 18, Issue 33 - Feds Unable to Search Own Anti-Terrorism Database

EFFECTOR

EFFector - Volume 18, Issue 33 - Feds Unable to Search Own Anti-Terrorism Database

EFFector       Vol. 18, No. 33       September 29, 2005

A Publication of the Electronic Frontier Foundation     ISSN 1062-9424

In the 349th Issue of EFFector:


Feds Unable to Search Own Anti-Terrorism Database

TSA Stops Deleting "Secure Flight" Records, But Drags Feet on Project Transparency

Washington, DC - After receiving hundreds of requests from Americans asking to know what personal information the government has obtained about them, the Transportation Security Administration (TSA) told passengers that it "does not have the capability to perform a simple computer-based search" to locate individual records.

TSA revealed last fall that it would use private passenger data from all domestic airline flights taken in June of 2004 to test its troubled "Secure Flight" passenger-screening system. In response to a fruitless Privacy Act request by four Alaska residents, EFF encouraged other airline passengers to request their own files. TSA recently began notifying the passengers who filed Freedom of Information Act (FOIA) and Privacy Act requests that it lacks the ability to easily search its own records. TSA also said that it would close such requests unless people provide additional detailed information, such as the air carrier, the dates of travel, and their phone numbers - part of the data that passengers were seeking in the first place.

"TSA is failing to follow the law," said EFF Staff Attorney Matt Zimmerman. "The Freedom of Information Act and the Privacy Act place very clear obligations on government agencies for searching their records, and TSA has simply said that it doesn't want to go through the effort. It's bad enough that Secure Flight has repeatedly failed to show that it can be a useful tool to strengthen airline security. However, that doesn't excuse the federal government from telling Americans about the private information it has gathered and used to test the project."

In light of the high volume of record requests that it has received, TSA recently agreed to stop deleting the passenger data it obtained for testing Secure Flight until it processed its backlog of requests. However, TSA told initial requestors that some of their data had already been deleted.

Secure Flight, a passenger-profiling system aimed at identifying security risks, is the successor of the controversial "CAPPS II" program that was cancelled in the wake of questions about its cost, effectiveness, and impact on privacy and civil liberties. The Secure Flight screening process would involve comparing airline passenger reservation data with an interagency terrorist watch list to determine who should be subject to more invasive screenings or arrest. After repeatedly misleading Congress and the public about its intention to use data provided by commercial data brokers to supplement the watch list, TSA recently announced that it would not use such data in the program for the time being. Despite the controversy surrounding the project, TSA has stated that it is moving forward this fall with plans for a partial roll-out involving two airlines.

For this release:
http://www.eff.org/news/archives/2005_09.php#004015

For more about Secure Flight:
http://action.eff.org/secureflight


Trusted Computing Group to Lock Down Mobile Phones

EFF Criticizes Plan for Restrictive New Cell Technology

San Francisco - The Trusted Computing Group (TCG), an industry consortium developing controversial computer security specifications, has released a wish list of applications of TCG technology to cell phone security. Unfortunately, much of this "security" aims to help cell phone carriers cement their control over their customers.

EFF attended TCG's announcement in San Francisco on Tuesday and criticized the proposals as steps in the wrong direction for the future of mobile communications.

"TCG is proudly offering to help cell phone carriers lock down your phone," said EFF Staff Technologist Seth Schoen. "The proposals described today aim to help your cell phone company decide who can publish software or media for your phone, whether you can load your own documents, and even whether you can switch carriers or resell your phone. These are not innovations that consumers will applaud."

TCG announced a set of eleven "use cases" that its members will discuss how to support with TCG technologies in cell phones. Among other applications, TCG suggested:

* "Device integrity" and "SIMlock/device personalization," which would prevent you from switching mobile carriers or reselling or donating your phone to someone else.

* "Platform integrity" and "software use" controls, which would let your cell phone company, not you, decide what software is allowed to run on your phone.

* "Digital rights management support" helps publishers, not you, control how you can use media on your cell phone.

TCG says these new applications are all in the name of "security" - whether they are protecting against viruses or ensuring that users can't take their phones with them when they change carriers and can't use third-party applications that aren't provided by their carriers. But this security is not necessarily for consumers' benefit. In many cases, TCG's proposals offer "security" only against you, not for you, and the legitimate security benefits could be achieved without also locking down consumer choice. You won't see such consumer benefits as being able to change cell phone carriers easily or freely use the media you have purchased.

TCG's proposals for cell phones contrast with its work on security chips for personal computers. In the PC environment, TCG has taken pains to say that its technology is not specifically aimed at restricting users. But TCG is now explicitly offering to help restrict users.

"The cell phone industry hasn't yet realized that cell phones are little computers, and that users expect the same amount of choice about how to use their phones as they enjoy with their PCs and PDAs," Schoen added. "We should be working to make cell phones more like PCs rather than making PCs more like restricted cell phones. But today TCG has demonstrated its eagerness to assist carriers who wish to force more restrictions on consumers, rather than offer them more control and flexibility."

For this release:
http://www.eff.org/news/archives/2005_09.php#004014

For TCG's announcements at the CTIA Wireless IT & Entertainment conference:

More about trusted computing on the PC:
http://www.eff.org/Infrastructure/trusted_computing


FCC Mandate Forces "Backdoors" for Broadband ISPs and VoIP Services

EFF and Others to Challenge Privacy-Invasive Rule

Washington, DC - The Federal Communications Commission (FCC) has issued a "First Report and Order" confirming its expansion of the Communications Assistance to Law Enforcement Act (CALEA) to the Internet. EFF is planning to challenge the rule in court.

The new rule forces Internet broadband providers and "interconnected" Voice-over-IP (VoIP) providers to build backdoors into their networks to make it easier for law enforcement to listen in on private communications.

"A tech mandate requiring backdoors in the Internet endangers the privacy of innocent people, stifles innovation, and risks the Internet as a forum for free and open expression," said Kurt Opsahl, EFF staff attorney.

CALEA, which was passed in the early 1990s, forced telephone companies to make their networks wiretap-ready, but due to pressure from EFF and other privacy groups, explicitly exempted "information services" like broadband. Yet the new FCC order now requires "facilities-based" providers of any type of broadband Internet access service, as well as interconnected VoIP services, to make their networks easy to wiretap - a blatant contradiction of Congress's intent.

FCC officials themselves tacitly admit that the Commission has overreached. FCC Commissioner Michael J. Copps said that "[the] statute is undeniably stretched," and FCC Commissioner Kathleen Q. Abernathy issued a plea that Congress revisit its decision to exempt the Internet, stating that "application of CALEA to these new services could be stymied for years" by litigation.

"By mandating backdoors in any service that has the capability to replace functions provided by a telephone, the FCC has stretched the statute to the breaking point," said Lee Tien, EFF senior staff attorney.

For the original version of this release online:
http://www.eff.org/news/archives/2005_09.php#004011

More about CALEA:
http://www.eff.org/Privacy/Surveillance/CALEA/


Cell Phones Used to Track People Without Probable Cause

New Case Reveals Routine Abuse of Government Surveillance Powers

San Francisco - EFF is fighting the Department of Justice in a New York federal court case that will determine whether the government is required to show probable cause to believe a crime has been or will be committed before secretly tracking people using their cell phones.

"This is the first case considering when the government can track the movements of your cell phone, and the answer couldn't be more important," said EFF Staff Attorney Kevin Bankston. "Allowing the government to turn anyone's cell phone into a tracking device without probable cause will enable a surveillance society that would make Big Brother jealous."

Last month, the court denied a Justice Department request to monitor a cell phone's location. The ruling revealed that the DOJ has routinely been securing court orders for real-time cell phone tracking without demonstrating probable cause and without any law authorizing the surveillance.

Many cell phone users aren't aware that their phones can be used to track their location in real-time, even when they aren't using them. EFF filed a friend-of-the-court brief last week to oppose a DOJ motion asking the court to reconsider its pro-privacy decision. EFF argues that the Fourth Amendment requires a search warrant for such invasive surveillance, issued under the same strict standards as warrants that authorize phone and Internet wiretaps.

The government has tried to justify this gross expansion of its authority by combining two surveillance statutes, neither of which authorize cell phone tracking on their own. As EFF explains in its brief, there is no support anywhere for this argument - not in the statutes' language, nor in legislative history, case law, or academic commentary. Indeed, it contradicts the government's own electronic evidence manual. "It's as if the government wants the court to believe that zero plus zero somehow equals one," said Bankston.

EFF's brief marks the first time the DOJ has had to face lawyers presenting an opposing argument on this issue. "Secrecy breeds abuse," said EFF Staff Attorney Kurt Opsahl. "Before this court had the courage to stand up to the government, the hearings were hidden from the public and the judge only saw the government's point of view. This led to secret tracking orders - without basis in law - that threaten our fundamental liberties."

The DOJ is expected to appeal to the district court if Magistrate Judge James Orenstein denies the government's motion to reconsider. The court has not said when it intends to rule.

For the original version of this release online:
http://www.eff.org/news/archives/2005_09.php#004002

For EFF's amicus brief:
http://www.eff.org/legal/cases/USA_v_PenRegister/celltracking_EFFbrief.pdf


EFF Asks Supreme Court to Consider Controversial Patent Case

Lower Court Ruling Threatens Free Speech

San Francisco - EFF this week filed a brief asking the United States Supreme Court to review an important patent case that has broad implications for free speech and consumers' rights.

The Federal Circuit Court of Appeals ruled earlier this year that eBay violated MercExchange's online auction patents, and that eBay could be permanently enjoined, or prohibited, from using the patented technology. Then the court went a dangerous step further. It held that patentees who prove their case have a right to permanent injunctions unless the injunction poses a risk to public health. This "automatic injunction" rule deprives judges of their traditional discretion to consider how an injunction might affect other public interests - including free speech online.

If this rule is allowed to stand, free expression could suffer.

"We're not saying injunctive relief is never a good idea," said EFF Staff Attorney Corynne McSherry. "But courts must have the ability to look at how an injunction will affect a variety of public interests. That's especially true now, when so many companies are claiming patents on basic technologies that citizens use to communicate online."

In its brief, EFF argues that this ruling threatens free speech because patent owners who claim control over Internet publishing mechanisms are in a position to threaten anyone who uses them to broadcast their ideas, even for noncommercial purposes.

Added McSherry, "Given the explosion of new communications technologies, such as blogs, instant messaging, and wikis, this is hardly the time to limit courts' ability to consider the benefits that a given technology brings to freedom of expression, or evaluate the chilling effects of forbidding the use of that technology."

For this release:
http://www.eff.org/news/archives/2005_09.php#004003

For the EFF brief:
http://www.eff.org/legal/cases/ebay_v_mercexchange/EFF_brief.pdf

More about patents and how bad law can harm the public:
http://www.eff.org/patent/


Come Celebrate EFF's 15th Anniversary Party!

When: Sunday, October 2nd, 2005, at 5 p.m. Where: EFF Headquarters in San Francisco, 454 Shotwell Street

EFF is 15 years old this year, and this Sunday night, we're having a party to celebrate! We're holding our anniversary bash at our San Francisco headquarters on Shotwell Street. The party starts at 5 p.m.

Join us for delicious Mexican food and drinks from Pancho Villa, hear a special address from our founders, John Perry Barlow and John Gilmore, taste our special 3D cake, and enjoy both the grooves of Gypsy Jazz from the Zegnotronic Rocket Society and the hypnotic beats of DJ Ripley and Kid Kameleon.

Our celebration is free of charge and open to anyone, so bring your friends and family. We look forward to celebrating with you!

Please let us know you're coming so we don't run out of food and libations! Send an email to rsvp@eff.org, or call 415-436-9333 x129.

EFF's office is located at 454 Shotwell Street and is BART accessible. Take BART to 16th and Mission, walk to 19th Street and take a left, and take another left on Shotwell Street, three blocks down. We are located between 18th and 19th on Shotwell.

Note: There is limited parking, but since we have only 30 spaces, they will be available to guests on a first come, first served basis. Stop by the EFF office to pick up a ticket, and we'll direct you to the lot. When the tickets are gone, the parking spaces are gone, so come on time!


Northern Rights
Just in time for government hearings on the proposal for copyright reform in Canada, Canadian copyright expert Michael Geist announces the release of a 600-page peer-reviewed book that covers every aspect of the current bill from a public-interest perspective. Fittingly, it's under a Creative Commons license, so you can download it for free:
http://www.michaelgeist.ca/index.php?option=content&task=view&id=970

More Rights Are Wrong for Broadcasters
James Boyle deconstructs the flimsy rationale behind WIPO's broadcast treaty:
http://news.ft.com/cms/s/441306be-2eb6-11da-9aed-00000e2511c8.html EFF action alert urging Congress to scrutinize the treaty:
http://action.eff.org/site/Advocacy?id=163

The Pizzaright Principle
Edward Felten proposes a new litmus test for determining whether an expansionist proposal for new intellectual property rights makes sense:
http://www.freedom-to-tinker.com/?p=902

Balancing the Curriculum
Incoming graduate researchers at Goldsmith College, University of London, will receive training on copyright and IP issues that expands the discussion beyond the confines of the traditional "all rights reserved" model:
http://creativecommons.org/weblog/entry/5637

Will the Real ID Please Stand Up?
MIT's eCitizen project has launched a blog to examine the Real ID Act:
http://civics.typepad.com/realid/

Cop to Suspect: Your DNA Is *Mine*
The Senate Judiciary Committee has approved a bill that would let the FBI extract and archive DNA samples from anyone placed under arrest:
http://www.politechbot.com/2005/09/26/white-house-supports/

What the Copyright Cartel Wants in a Broadcast Flag
Susan Crawford goggles at the broad language the RIAA is seeking in new legislation that would give the FCC the power to issue mandatory technology blueprints for "all possible home copying and transmission, all possible consumer devices, and all possible online audio services":
http://scrawford.blogware.com/blog/_archives/2005/9/23/1253300.html

Eurocrats Against Data Retention
The EU's privacy watchdog is not convinced that Europe's proposed mandatory data retention is necessary:
http://www.out-law.com/default.aspx?page=6156

miniLinks

miniLinks features noteworthy news items from around the Internet.

Don't Blame the User for Security Screw-ups
Jakob Nielsen says stop shouting at poor consumers for problems caused by badly designed security software. Spoilsport:
http://www.useit.com/alertbox/20041025.html

Practical Guide to Political Blogging and Activism
Reporters Without Borders publishes an outstanding how-to for bloggers seeking to make their voices heard in the face of government monitoring, censorship, and worse:
http://www.rsf.org/rubrique.php3?id_rubrique=542
EFF's own Legal Guide for Bloggers, which provides a collection of FAQs on the wide range of legal issues bloggers confront:
http://www.eff.org/bloggers/lg/

Levy Breaches in Sweden
A company that makes MP3 players refuses to pay the copyright levy on players, arguing that it's "outdated":
http://www.eff.org/cgi/tiny?urlID=530 (The Local)

Family Values
A Christian band from San Diego is helping fans circumvent industry-mandated DRM, explaining, "We refuse to allow corporate policy to taint the family we've developed together":
http://www.out-law.com/page-6136

Obscenity Regs to Hit the Net?
Susan Crawford looks at a draft telecom bill that could put the FCC in charge of "national consumer protection standards" aimed at stopping broadband, VoIP, and broadband video services from being used for annoying or "indecent" speech:
http://scrawford.blogware.com/blog/_archives/2005/9/15/1230798.html

Piercing the Copyright Reality-Distortion Field
EFF pal Wendy Seltzer and friends annotate the USPTO's one-sided copyright quiz for kids, highlighting its unfortunate distortions:
http://wendy.seltzer.org/blog/archives/2005/09/14/kids_understand_the_usptos_distortion_of_the_law.html

Boucher Seeks to Cut Copyright's Red Tape
Representative Rick Boucher (D-VA) says he's working on new legislation to make it easier to license musical works:
http://news.com.com/Politicos+call+for+music+copyright+reform/2100-1028_3-5863072.html

Hollywood to Waste $30 Million Believing It Can Build Better Copy Protection
That's the spot-on headline for a Techdirt piece criticizing Hollywood's plans to create home-grown DRM:
http://techdirt.com/articles/20050919/0124222_F.shtml Edward Felten's take: http://www.freedom-to-tinker.com/?p=898

Fair Use as...Illicit Housecleaning?
EFF's own Jason Schultz criticizes the strained analogies being used to describe the Google Print furor:
http://lawgeek.typepad.com/lawgeek/2005/09/another_inept_p.html

Red Hat and Patents
The deputy general counsel for Red Hat discusses patent reform and free software:
http://www.oreillynet.com/pub/a/policy/2005/09/16/patent-reform-bill.html


Staff Calendar

For a complete listing of EFF speaking engagements (with locations and times), please visit the full calendar:
http://www.eff.org/calendar/

September 24-25 -
Annalee Newitz emcees Webzine 2005, San Francisco, CA
http://www.webzine2005.com/

September 25 -
Jason Schultz speaks at ResFest "Copy Fight" panel
4:15 p.m., Palace of Fine Arts San Francisco, CA
http://www.resfest.com/index.php?page=talk&id=165

October 2 -
EFF hosts EFF 15th Anniversary Party
EFF Headquarters, 454 Shotwell Street
San Francisco, CA
http://www.eff.org/eff15/

Administrivia

EFFector is published by:

The Electronic Frontier Foundation
454 Shotwell Street
San Francisco CA 94110-1914 USA
+1 415 436 9333 (voice)
+1 415 436 9993 (fax)
 http://www.eff.org/

Editor:
Donna Wentworth, Web Writer/Activist
donna@eff.org

Membership & donation queries:
membership@eff.org

General EFF, legal, policy, or online resources queries:
information@eff.org

Reproduction of this publication in electronic media is encouraged. Signed articles do not necessarily represent the views of EFF. To reproduce signed articles individually, please contact the authors for their express permission. Press releases and EFF announcements & articles may be reproduced individually at will.

Current and back issues of EFFector are available via the Web at:
http://www.eff.org/effector/

Back to top

JavaScript license information