The EU wants to scan all chat messages, using the guise of combating child abuse

The European Commission, the executive arm of the European Union, has proposed a scanning obligation for messaging providers to combat the spreading of child sexual abuse material (CSAM).

The proposal states that, at the request of a government agency, “Providers of hosting services and providers of interpersonal communication services that have received a detection order shall execute it by installing and operating technologies to detect” CSAM.

We obtained a copy of the proposal for you here.

The document further says that companies should use CSAM detection technology that is reliable, effective and state of the art. The technology should also be “the least intrusive” as it is not supposed to “be able to extract any other information from the relevant communications than the information strictly necessary to detect.”

Keep reading

Delete your personal data from Google

Google now has a new tool allowing anyone to request the removal of their personal data from search results, including contact information.

“The availability of personal contact information online can be jarring,” said Google’s head of global policy in search Michelle Chang. She added that personal data could lead to “unwanted direct contact or even physical harm.”

Google already allowed the removal of personal or financial information from search results if a user could prove it was real danger or a potential threat. Now you can request the removal of your information even if there is no risk.

Keep reading

Mental health and worship apps are found to be some of the most privacy invasive

Apps that deal with some of the most sensitive and personal data, such as that concerning a user’s mental health or religious activities, are said to rank among the worst privacy offenders.

This is the conclusion of a study conducted by the Mozilla Foundation, which singled out mental health and prayer apps as being prone to track and collect data revealing a person’s state of mind, feelings, and thoughts, and then “share” that for-profit via targeted advertising.

Mozilla’s team looked into 32 apps from this category, putting a “privacy not included” label on 29, and publishing the findings in a guide of the same name. 25 of these apps didn’t pass the foundations’ minimum security standards around password quality and handling of security updates.

PTSD Coach, developed by the US The Department of Veterans Affairs, has “strong privacy policies and security practices,” while chatbot Wysa “seems to value users’ privacy.” And the Catholic prayer app Hallow was the only one to “respond in a timely manner” to Mozilla’s emails.

Besides these technical issues, the apps singled out in the report are also said to target “vulnerable users with personalized advertisements” and track and share biometric data.

Keep reading

Scooping private data doesn’t violate Fourth Amendment if the owner can still access it, court rules

The US Ninth Circuit Court of Appeals appears to have given the government permission to order anyone’s internet account data copied and held without any cause, whenever they want, without providing any justification, according to University of California, Berkeley School of Law professor Orin Kerr’s analysis of a recent Ninth Circuit briefing that affirmed Carsten Igor Rosenow’s conviction and sentencing for sexually exploiting children in the Philippines.

In his appeal to the Ninth Circuit, Rosenow argued that he had a right to privacy in his digital data and that law enforcement requests to preserve his Yahoo! account data, which were submitted without a warrant after a tip from Yahoo!, violated the Fourth Amendment’s protection against unreasonable search and seizure.

But the Ninth Circuit rejected his argument and affirmed his conviction, saying that Yahoo!’s preservation of Rosenow’s records didn’t amount to an unreasonable seizure because the preservation requests didn’t prevent him from accessing his account and Yahoo! didn’t provide the government with access to his data without further legal process:

“A ‘seizure’ of property requires ‘some meaningful interference [by the government,] with an individual’s possessory interests in [his] property.’ Jacobsen, 466 U.S. at 113. Here, the preservation requests themselves, which applied only retrospectively, did not meaningfully interfere with Rosenow’s possessory interests in his digital data because they did not prevent Rosenow from accessing his account. Nor did they provide the government with access to any of Rosenow’s digital information without further legal process.”

The court also claimed that Rosenow had already consented to these preservation requests when he accepted Yahoo!’s terms of service:

“It also is worth noting that Rosenow consented to the ESPs [electronic service providers] honoring preservation requests from law enforcement under the ESPs’ terms of use.”

We obtained a copy of the Ninth Circuit’s briefing for you here.

Keep reading

Chief Advisor of Klaus Schwab and the WEF Boasts: Dreams of Dictators Are Now Possible

“Dictators always dreamt about eliminating privacy, monitoring everyone, knowing everything you do, think, and feel…It is now possible.”

The privacy versus security debate is as old as civilization, historian and writer Yuval Noah Harari said recently at the Athens Democracy Forum, an annual international conference in Greece. “But there is now something new: for the first time in history, it is possible to eliminate privacy completely,” said Harari, chief advisor to the World Economic Forum’s leader, Klaus Schwab. 

“It was not possible before,” said Harari, “It is now possible. A fundamental change has taken place. “Dictators always dreamt about completely eliminating privacy, monitoring everyone all the time, and knowing everything you do, and not just everything you do but everything you think, and everything you feel.”

Keep reading

Michigan School Under Fire After Student Leaks “McCarthyist” Questionnaire

A Michigan school system is under fire after a student posted a photograph of a questionnaire which asked deeply personal questions – including their parents’ political affiliation, whether a family member has ever been convicted of a crime, whether the student or family members have seen a psychologist, and whether their parents have ever lost a job.

After the post went viral, the Grosse Point School District issued an explanation, claiming that students “were provided with a questionnaire which looked like an official document from South Administration,” which “was shared on social media without any context.”

According to the district, “The document and questions were intentionally designed as a simulation of McCarthyism and to make students question the appropriateness of the information being requested,” and that “within a minute, the teacher explained the purpose of the exercise was not to collect this information, but to demonstrate how private citizens’ rights and privacy were invaded during McCarthyism in the 1950s.”

The note goes on to say that the document, created several years ago, was “collected and destroyed,” and that this is the first time they’ve experienced an issue with it.

Needless to say, a lengthy debate has ensued.

Keep reading

Muting your mic doesn’t stop big tech from recording your audio

Anytime you use a video teleconferencing app, you’re sending your audio data to the company hosting the services. And, according to a new study, that means all of your audio data. This includes voice and background noise whether you’re broadcasting or muted.

Researchers at the University of Wisconsin-Madison investigated “many popular apps” to determine the extent that video conferencing apps capture data while users employ the in-software ‘mute’ button.

According to a university press release, their findings were substantial:

They used runtime binary analysis tools to trace raw audio in popular video conferencing applications as the audio traveled from the app to the computer audio driver and then to the network while the app was muted.

They found that all of the apps they tested occasionally gather raw audio data while mute is activated, with one popular app gathering information and delivering data to its server at the same rate regardless of whether the microphone is muted or not.

Keep reading

White House, IRS, CDC, and many other US government websites sending data to Big Tech via Google tracking code

Most of the major US federal government websites and numerous state and local government websites are sending real-time surveillance data back to Google as users browse their websites. Even websites where users are submitting sensitive or personal information, such as the Federal Bureau of Investigation’s (FBI’s) tips page and the Internal Revenue Service (IRS) website, contain tracking code that sends real-time visitor data back to Google.

Most of these government websites contain tracking code from the web traffic analytics tool Google Analytics. This code collects detailed user data which is sent to Google’s servers, analyzed, and presented to website owners via an online dashboard.

Google Analytics automatically collects data on the pages visited, the time and duration of each visit, and other visitor data (such as the device, browser, operating system, and screen resolution of visitors). It can also be configured to collect data on more specific actions such as when users click or tap specific links, download content, or fill out forms.

Some government websites also have code from other Google services (such as DoubleClick, Google Adsense, Google Maps, Google Play, and YouTube) and other tech giants (such as Facebook, Microsoft, and Twitter) embedded on some of their pages.

The US government openly admits to using Google Analytics tracking code on 400 executive branch domains and 5,700 total websites. It even displays this surveillance data publicly via a real-time online dashboard which also tracks visitors with Google Analytics.

Keep reading

Barack Obama Suggests Social Media Anonymity Should Be Stripped From People Who Are “Rude” or “Lie”

Barack Obama has suggested that people who are “rude,” “obnoxious,” or “lie” on social media should have be stripped of their online anonymity.

Yes, really.

The former president made the comments during a keynote conversation with The Atlantic’s Editor in Chief Jeffrey Goldberg at the ‘Disinformation and Erosion of Democracy’ conference.

After Obama initially claimed he was “close to a First Amendment absolutist,” his response to Goldberg asking him how he would regulate social media companies “to make sure that they’re not privileging anger, privileging division and polarization through their algorithms,” suggests otherwise.

Obama argued that online anonymity protections should be removed when it comes to speech of which he doesn’t personally approve.

“In some circumstances, it’s important to preserve anonymity…so that there’s space in repressive societies to discuss issues but as we’ve all learned, it’s a lot harder to be rude, obnoxious, cruel, or lie when somebody knows you’re lying and knows who you are and I think that there may be modifications there that can be made,” said Obama.

Keep reading