December 1999 Conference Participants

Total Page:16

File Type:pdf, Size:1020Kb

December 1999 Conference Participants Hoover Press : Cyber DP5 HPCYBEAPX2 06-09-:1 18:47:03 rev1 page 271 APPENDIX 2 December 1999 Conference Participants drew c. arena Former Senior Counsel to the Assistant Attorney General, U.S. Department of Justice; former Counselor for Criminal Justice Matters at the U.S. Mission to the European Union (EU) in Brussels, Belgium. Now retired from over twenty years of federal government service, he has served as the Attorney General’s senior representative in Europe for multilateral affairs and has been responsible for Justice Department relations with the EU, the Council of Europe, the United Nations Commission on Criminal Justice, and the G-8’s Senior Experts Group on Organized Crime. He has worked extensively with all these organizations on issues relating to cyber crime. joseph betser Project Leader, Business Development and Program Man- agement, Aerospace Corporation, El Segundo, California. He has served as a Defense Advanced Research Projects Agency (DARPA) Principal Investi- gator for a number of network management and information assurance pro- jects and led activities in the growing commercial satellite network business, as well as in Department of Defense space architecture planning, and Battle Awareness and Data Dissemination (BADD). He also led the CalREN (Cal- ifornia Research and Education Network) ATM Research Consortium (ARC), among the first ATM networks in Southern California, consisting of eleven premier university and research organizations. caspar bowden Director, Foundation for Information Policy Research (FIPR), London, United Kingdom (http://www.fipr.org),an independent non- profit organization that studies the interaction between information technol- ogy and society, identifies technical developments with significant social im- pact, and commissions research into public policy alternatives. He is the co- organizer of the Scrambling for Safety public conferences on U.K. cryptog- raphy policy. He was formerly an e-commerce and Internet security consul- tant, senior researcher of an option-arbitrage trading firm, a financial strat- Hoover Press : Cyber DP5 HPCYBEAPX2 06-09-:1 18:47:03 rev1 page 272 272 Appendix 2 egist with Goldman Sachs, and chief algorithm designer for a virtual reality software house. susan brenner Associate Dean and Professor, University of Dayton School of Law, Dayton, Ohio. The author of numerous publications, she counts cyber crime among her many and diverse interests. In particular, her “Cybercrimes Seminar,” featured in a story broadcast by “NBC Nightly News,” is a law school seminar taught entirely online, the output of which includes the “Model State Computer Crimes Code” (http://www. cybercimes.net). alan b. carroll Supervisory Special Agent (SSA), National Infrastruc- ture Protection Center (NIPC), U.S. Federal Bureau of Investigation (FBI). During his long career in law enforcement, he has specialized in undercover narcotics investigations, as well as bank robbery, kidnapping, and extortion cases. In addition, he has most recently worked in the areas of violent crimes, white-collar crimes, domestic terrorism, and foreign counterintelligence in- vestigations. george c. c. chen Principal, Law Firm of Tsai, Lee & Chen, Taipei, Taiwan; former Director of the Science and Technology Law Center, Institute for Information Industry. He has some twenty years of professional experi- ence, having practiced law at a number of firms in Sydney, Taipei, and To- ronto; served as an arbitrator for the Commercial Arbitration Association of Taiwan; and taught computer law and international trade law at Tunghai University. He has published extensively in the field of intellectual property law. william r. cheswick Member, Technical Staff, Lucent Technologies, Murray Hill, New Jersey. He has worked in the area of operating system security for nearly thirty years. His experience includes various positions in system management, consulting, software development,and communications design and installation at Temple University, LaSalle College, the Harvard Business School, Manhattan College, and the New Jersey Institute of Tech- nology. He has specialized in firewalls, network security, PC viruses, mailers, and interactive science exhibits, co-authoring in 1994 the first full book on Internet security in 1994 (with Steven M. Bellovin), Firewalls and Internet Security: Repelling the Wily Hacker (Reading, Mass.: Addison-Wesley, 1994). k. c. claffy Research Scientist, San Diego Supercomputer Center (SDSC)/ Hoover Press : Cyber DP5 HPCYBEAPX2 06-09-:1 18:47:03 rev1 page 273 Conference Participants 273 Principal Investigator, Cooperative Association for Internet Data Analysis (CAIDA), University of California, San Diego (UCSD), La Jolla. The recipient of numerous grants and awards, she has extensive publications to her credit in her fields of specialization: symbolic systems, and computer science and engineering. Her professional experience also includes positions at the Sony Computer Science Laboratory in Tokyo, Japan; the U.S. Federal Reserve Board; AT&T Bell Laboratories; and Harry Diamond Laboratories. mariano-florentino cue´llar Law Clerk to the Honorable Judge Mary M. Schroeder, U.S. Court of Appeals for the Ninth Circuit. A member of the Bar of the State of California, from 1997 to 1999 he served as Senior Adviser to the Under Secretary for Enforcement, U.S. Department of the Treasury. While in Washington, D.C., he co-chaired the Initiatives Subcom- mittee of the Attorney General’s Council on White Collar Crime. He has also worked at the President’s Council of Economic Advisers and the American Bar Foundation. He holds a Ph.D. in political sciencefrom Stanford University and a J.D. from Yale Law School. dorothy e. denning Professor, Department of Computer Science, Georgetown University, Washington, D.C. She has over thirty-two years of professional experience, twenty-four in universities (including Purdue Uni- versity, the University of Rochester, and the University of Michigan) and eight in industry (including work at the Systems Research Center at Digital Equip- ment Corporation and the Computer Science Laboratory at SRI Interna- tional), working mainly in the areas of information warfare and security and the impact of information technology on society. She has written over 100 articles and is the author of such books as: Information Warfare and Security (New York: ACM Press; Reading, Mass.: Addison-Wesley, 1999), Internet Besieged: Countering Cyberspace Scofflaws (New York: ACM Press; Read- ing, Mass.: Addison-Wesley, 1998), and Cryptography and Data Security (Reading, Mass.: Addison-Wesley, 1982). whitfield diffie Distinguished Engineer, Sun Microsystems. He is best known for his 1975 discovery of the concept of public key cryptography. He has occupied the position of Distinguished Engineer at Sun since 1991 and, since 1993, has worked largely on public policy aspects of cryptography. His opposition to limitations on the business and personal use of cryptography has been the subject of articles in the New York Times Magazine, Wired, Omni, and Discover, and he is the author, with Susan Landau, of Privacy on Hoover Press : Cyber DP5 HPCYBEAPX2 06-09-:1 18:47:03 rev1 page 274 274 Appendix 2 the Line: The Politics of Wiretapping and Encryption (Cambridge, Mass.: MIT Press, 1998). ekaterina a. drozdova Doctoral Candidate, Department of Informa- tion Systems, Stern School of Business, New York University; former Resear- cher, Consortium for Research on Information Security and Policy (CRISP), Stanford University; Center for International Security and Cooperation (CI- SAC), Stanford University. She holds a master’s degree in international policy studies from Stanford and has experience in information technology consult- ing in the Silicon Valley. She has conducted an in-depth survey and analysis of national laws in fifty countries to determine the extent of international consensus against cyber crime, and has published on the impact of the Internet on human rights. david d. elliott Member, Executive Committee, Consortium for Re- search on Information Security and Policy (CRISP), Stanford University; Con- sulting Professor, Center for International Security and Cooperation (CI- SAC), Stanford University; former senior staff member, U.S. National Security Council. A physicist, he has served in senior positions in government and the defense industry, including supervising the SRI International’s Stra- tegic Study Center and, as Senior Vice President, overseeing strategic planning at Science Applications International Corporation (SAIC). He has a Ph.D. in high-energy physics from the California Institute of Technology. michael erlinger Co-Chairman, Intrusion Detection Working Group, Internet Engineering Task Force (IETF); Professor of Computer Science, Har- vey Mudd College, Claremont, California. He has practical experience in managing industrial computer networks both as an employee and as a con- sultant to various aerospace firms. At IETF, he is developing protocols for the communication of intrusion information. He was formerly chair of the IETF Remote Network Monitoring Working Group, which developed the SNMP-based RMON MIB (RFC 1271) and the Token Ring extensions to RMON (RFC 1513), both of which have gained wide marketplace accep- tance. george l. fisher Professor, Stanford Law School. An award-winning teacher and acknowledged expert in the fields of evidence and criminal law and procedure, he has been an Assistant Attorney General and Assistant District Attorney in the State of Massachusetts. He has also served
Recommended publications
  • Intel X86 Considered Harmful
    Intel x86 considered harmful Joanna Rutkowska October 2015 Intel x86 considered harmful Version: 1.0 1 Contents 1 Introduction5 Trusted, Trustworthy, Secure?......................6 2 The BIOS and boot security8 BIOS as the root of trust. For everything................8 Bad SMM vs. Tails...........................9 How can the BIOS become malicious?.................9 Write-Protecting the flash chip..................... 10 Measuring the firmware: TPM and Static Root of Trust........ 11 A forgotten element: an immutable CRTM............... 12 Intel Boot Guard............................. 13 Problems maintaining long chains of trust............... 14 UEFI Secure Boot?........................... 15 Intel TXT to the rescue!......................... 15 The broken promise of Intel TXT.................... 16 Rescuing TXT: SMM sandboxing with STM.............. 18 The broken promise of an STM?.................... 19 Intel SGX: a next generation TXT?................... 20 Summary of x86 boot (in)security.................... 21 2 Intel x86 considered harmful Contents 3 The peripherals 23 Networking devices & subsystem as attack vectors........... 23 Networking devices as leaking apparatus................ 24 Sandboxing the networking devices................... 24 Keeping networking devices outside of the TCB............ 25 Preventing networking from leaking out data.............. 25 The USB as an attack vector...................... 26 The graphics subsystem......................... 29 The disk controller and storage subsystem............... 30 The audio
    [Show full text]
  • Mass Surveillance
    Mass Surveillance Mass Surveillance What are the risks for the citizens and the opportunities for the European Information Society? What are the possible mitigation strategies? Part 1 - Risks and opportunities raised by the current generation of network services and applications Study IP/G/STOA/FWC-2013-1/LOT 9/C5/SC1 January 2015 PE 527.409 STOA - Science and Technology Options Assessment The STOA project “Mass Surveillance Part 1 – Risks, Opportunities and Mitigation Strategies” was carried out by TECNALIA Research and Investigation in Spain. AUTHORS Arkaitz Gamino Garcia Concepción Cortes Velasco Eider Iturbe Zamalloa Erkuden Rios Velasco Iñaki Eguía Elejabarrieta Javier Herrera Lotero Jason Mansell (Linguistic Review) José Javier Larrañeta Ibañez Stefan Schuster (Editor) The authors acknowledge and would like to thank the following experts for their contributions to this report: Prof. Nigel Smart, University of Bristol; Matteo E. Bonfanti PhD, Research Fellow in International Law and Security, Scuola Superiore Sant’Anna Pisa; Prof. Fred Piper, University of London; Caspar Bowden, independent privacy researcher; Maria Pilar Torres Bruna, Head of Cybersecurity, Everis Aerospace, Defense and Security; Prof. Kenny Paterson, University of London; Agustín Martin and Luis Hernández Encinas, Tenured Scientists, Department of Information Processing and Cryptography (Cryptology and Information Security Group), CSIC; Alessandro Zanasi, Zanasi & Partners; Fernando Acero, Expert on Open Source Software; Luigi Coppolino,Università degli Studi di Napoli; Marcello Antonucci, EZNESS srl; Rachel Oldroyd, Managing Editor of The Bureau of Investigative Journalism; Peter Kruse, Founder of CSIS Security Group A/S; Ryan Gallagher, investigative Reporter of The Intercept; Capitán Alberto Redondo, Guardia Civil; Prof. Bart Preneel, KU Leuven; Raoul Chiesa, Security Brokers SCpA, CyberDefcon Ltd.; Prof.
    [Show full text]
  • NSA) Surveillance Programmes (PRISM) and Foreign Intelligence Surveillance Act (FISA) Activities and Their Impact on EU Citizens' Fundamental Rights
    DIRECTORATE GENERAL FOR INTERNAL POLICIES POLICY DEPARTMENT C: CITIZENS' RIGHTS AND CONSTITUTIONAL AFFAIRS The US National Security Agency (NSA) surveillance programmes (PRISM) and Foreign Intelligence Surveillance Act (FISA) activities and their impact on EU citizens' fundamental rights NOTE Abstract In light of the recent PRISM-related revelations, this briefing note analyzes the impact of US surveillance programmes on European citizens’ rights. The note explores the scope of surveillance that can be carried out under the US FISA Amendment Act 2008, and related practices of the US authorities which have very strong implications for EU data sovereignty and the protection of European citizens’ rights. PE xxx.xxx EN AUTHOR(S) Mr Caspar BOWDEN (Independent Privacy Researcher) Introduction by Prof. Didier BIGO (King’s College London / Director of the Centre d’Etudes sur les Conflits, Liberté et Sécurité – CCLS, Paris, France). Copy-Editing: Dr. Amandine SCHERRER (Centre d’Etudes sur les Conflits, Liberté et Sécurité – CCLS, Paris, France) Bibliographical assistance : Wendy Grossman RESPONSIBLE ADMINISTRATOR Mr Alessandro DAVOLI Policy Department Citizens' Rights and Constitutional Affairs European Parliament B-1047 Brussels E-mail: [email protected] LINGUISTIC VERSIONS Original: EN ABOUT THE EDITOR To contact the Policy Department or to subscribe to its monthly newsletter please write to: [email protected] Manuscript completed in MMMMM 200X. Brussels, © European Parliament, 200X. This document is available on the Internet at: http://www.europarl.europa.eu/studies DISCLAIMER The opinions expressed in this document are the sole responsibility of the author and do not necessarily represent the official position of the European Parliament.
    [Show full text]
  • Reloading Protection
    INFO 6 th INTERNATIONAL CONFERENCE T +32 2 629 20 93 • [email protected] 23 24 25 JANUARY 2013 l BRUSSELS BELGIUM COMPUTERS, PRIVACY DATES & DATA PROTECTION 23 24 25 January 2013 RELOADING LANGUAGE English DATA AUDIENCE PROTECTION Data protection authorities and offi cials, academics, civil liberties organisations, magistrates, barristers, legal consultants, lobbyists, representatives of ICT and security companies, etc. LOCATION www.nickvanhee.be © Les Halles de Schaerbeek (Grande Halle (6,237m2 - 750 seats), Petite Halle (380m2), and La Cave, Rue Royale-Sainte-Marie 22, 1030 Brussels side events De Markten: Oude Graanmarkt 5 Rue du Vieux Marché aux Grains, 1000 Brussels Bazar: Kapucijnenstraat 63 Rue des Capucins, 1000 Brussels WHAT’S GOING ON IN BRUSSELS AT THE MOMENT? www.agendamagazine.be www.brusselsmuseums.be www.visitbrussels.be www.europeanprivacyday.org WWW.CPDPCONFERENCES.ORG WWW.CPDPCONFERENCES.ORG CPDP2013_PROGRAMME_37.indd 48-49 21/01/13 21:07 CPDP CONFERENCE PARTNERS WHAT IS CPDP? Every year in Brussels, CPDP gathers policy makers, academics, computer scientists, consultants, practitioners and activists from all over the world to exchange ideas and discuss emerging issues in information technology, privacy, data protection and law. CPDP has been growing progressively since its inception in terms of speakers, participants and panels. Ambitions for CPDP 2013 are higher than ever, as it will stage more than 40 panels and workshops (with a stimulating mix of academics, practitioners, regulators and advocates), as well as multiple side events (such as open debates, PechaKucha talks and artistic interventions). CPDP will pay particular attention to high-level and innovative research, and four panels will be completely devoted to the presentations of outstanding junior and senior academics.
    [Show full text]
  • Submission Data for 2020-2021 CORE Conference Ranking Process Privacy Enhancing Technologies Symposium (Was International Workshop of Privacy Enhancing Technologies)
    Submission Data for 2020-2021 CORE conference Ranking process Privacy Enhancing Technologies Symposium (was International Workshop of Privacy Enhancing Technologies) Shaanan Cohney, Matthew Wright, Aaron Johnson, Veelasha Moonsamy Conference Details Conference Title: Privacy Enhancing Technologies Symposium (was International Workshop of Privacy Enhancing Technologies) Acronym : PETS Rank: B Requested Rank Rank: A Recent Years Proceedings Publishing Style Proceedings Publishing: journal Link to most recent proceedings: https://dblp.org/db/journals/popets/popets2020.html Further details: PETS papers are published in the journal Proceedings on Privacy Enhancing Technologies (PoPETs). PoPETs is an open-access journal published by Sciendo, part of the De Gruyter publishing house. PoPETs has four issues per year, and all papers that appear in PoPETs are full papers and are presented at the PETS conference. PoPETs builds on the scholarly tradition initiated by PETS in July 2000. The membership of the Editorial Board and Program Committee, as well as the high-quality publications, make PoPETs a premier venue for scholarship in the area of privacy and technology. Regarding Google Scholar Metrics, PoPETs is listed. However, the PoPETs journal only started in 2015, and Google Scholar Metrics doesn’t include the 2000âĂŞ2014 PETS proceedings published in Springer LNCS. Therefore, rankings are inaccurate that use metrics dependings on papers published before 2015 (e.g. h5-index). Most Recent Years Most Recent Year Year: 2019 URL: https://petsymposium.org/cfp19.php
    [Show full text]
  • Open Rights Group
    Company Registration Number 05581537 Open Rights Report and Accounts 31 October 2015 Open Rights Contents of the Financial Statements 31 October 2015 Page Company Information 1 Directors' Report 2 Accountants' Report 6 Income and Expenditure Account 7 Balance Sheet 8 Notes to Financial Statements 9 Open Rights Company Information 31 October 2015 Directors James Cronin Simon Phipps Alec Muffett Maria Farrell Harry Metcalfe Ben Laurie Milena Popova Owen Blacker John Elliott Secretary James Cronin Accountants Urban Ledgers Limited 14 Thornhill Square London N1 1BQ Bankers Cooperative Bank plc PO Box 101 1 Balloon Street Manchester Company number 05581537 Page 1 Open Rights Report of the Board of Directors for the year ended 31 October 2015 Introduction This year we campaigned against mass surveillance, and worked on data protection and e-privacy. It was also the year in which our legal strategy started to bite, as cases began to reach the courts with a high likelihood of changing the way that governments have to view surveillance, particularly in the UK, but also more widely. It was also the first year that we employed a Scotland Officer. Our supporter base grew significantly, to over 3000, giving us a more sustainable financial future. However, we had to adjust our expenditure downwards in the mid part of the year in order to balance it with our income, which was lower due to smaller grant receipts. Caspar Bowden This year, we also remember Advisory Council member Caspar Bowden, who passed away in July 2015. He contributed to our surveillance work, warning before the Snowden revelations of the legal instruments permitting mass surveillance.
    [Show full text]
  • Surveillance?
    Is “Big Data” simply a codeword for mass- surveillance? Caspar Bowden independent advocate for privacy rights (Chief Privacy Adviser - Microsoft 2002-2011, Director of FIPR 1998-2002) st Alpbach Forum – 21 August 2014 Cloud computing parallel processing power as commodity Consumer: Facebook, Skype, Microsoft, Google Business : Microsoft Azure/Office365, Google Apps, Amazon “Warrantless Wiretapping” 2001-7 ● 2003: AT&T San Francisco switching centre – Internet backbone split to DPI and forwarded to NSA ● 2005 New York Times broke story – media self-censored story until after 2004 election – several whistleblowers NSA, FBI, and AT&T ● tried official channels and then media – ignored, prosecuted – Traffic-analysis of call patterns and transaction data ● 2007: “legalized” by Protect America Act – retroactive immunity for telcos – new paradigm: “collect everything, minimize later” – no more particular warrants – FISC approves “procedures” What is “foreign intelligence information” ? (1) information that relates to, and if concerning a United States person is necessary to, the ability of the United States to protect against - (A) actual or potential attack or other grave hostile acts of a foreign power or an agent of a foreign power; (B) sabotage, international terrorism, or the international proliferation of weapons of mass destruction by a foreign power or an agent of a foreign power; or (C) clandestine intelligence activities by an intelligence service or network of a foreign power or by an agent of a foreign power; or (2) information with respect to a foreign power or foreign territory that relates to, and if concerning a United States person is necessary to - (A) the national defense or the security of the United States; or (B) the conduct of the foreign affairs of the United States.
    [Show full text]
  • Behind Datagate
    BEHIND DATAGATE Chiara Marchetti e Matteo Longeri Dipartimento di Informatica e Comunicazione Università degli Studi di Milano Milano, Italia [email protected], [email protected] 15 aprile 2015 Indice 1 Introduzione 4 2 Il background dello scandalo 8 2.1 Edward Snowden . 8 2.2 Glenn Greenwald . 9 2.3 NSA e GCHQ . 10 2.3.1 National Security Agency . 10 2.3.2 Government Communications HeadQuarters . 11 2.4 Terzi coinvolti ed elementi aggiuntivi . 12 2.5 Datagate . 16 3 Le aziende coinvolte 20 3.1 Google . 21 3.2 Yahoo . 26 3.3 Facebook . 28 3.3.1 WhatsApp . 32 3.4 Twitter . 33 3.5 Apple . 34 3.6 Microsoft . 40 3.6.1 Skype . 44 3.7 Verizon . 46 3.8 Le aziende in sintesi . 49 4 "Effetto Snowden" 51 4.1 La reazione dell’Europa . 51 4.1.1 Francia . 52 1 4.1.2 Germania . 53 4.1.3 Italia . 54 4.1.4 Regno Unito . 55 4.1.5 Russia . 56 4.1.6 Spagna . 57 4.1.7 Svezia . 57 4.1.8 Intervista a Mikko Hypponen . 58 4.2 Cosa dicono i nostri intervistati . 59 5 Gli strumenti per difendersi 70 5.1 Chat OTR e CryptoCat . 70 5.2 PGP e GnuPG . 71 5.3 Tor . 73 5.4 Telegram . 74 5.5 Tox................................. 75 5.6 Prism-Break . 75 5.7 I2P . 76 5.8 Freenet . 77 5.9 GNUnet . 77 5.10 MaidSafe . 78 5.11 Bitcoin . 79 5.12 File System Crittografici . 80 6 Conclusioni 82 2 Abstract Nel 2013 le rivelazioni di Edward Snowden hanno dato il via al grande dibattito sulla liceità delle intercettazioni di massa perpetrate in segreto dai più grandi governi mondiali.
    [Show full text]
  • Mass Surveillance Part 1 - Risks and Opportunities Raised by the Current Generation of Network Services and Applications
    Science and Technology Options Assessment (STOA) Mass Surveillance Part 1 - Risks and opportunities raised by the current generation of network services and applications ANNEX EPRS | European Parliamentary Research Service Scientific Foresight (STOA) Unit PE 527.409 EN Mass Surveillance What are the risks for the citizens and the opportunities for the European Information Society? What are the possible mitigation strategies? Part 1 - Risks and opportunities raised by the current generation of network services and applications Annex IP/G/STOA/FWC-2013-1 - LOT 9 – Safety and security technologies December 2014 STOA - Science and Technology Options Assessment The STOA project “Mass Surveillance – Risks, Opportunities and Mitigation Strategies Part 1” was carried out by TECNALIA Research and Investigation. AUTHORS Arkaitz Gamino Garcia Concepción Cortes Velasco Eider Iturbe Zamalloa Erkuden Rios Velasco Iñaki Eguía Elejabarrieta Javier Herrera Lotero José Javier Larrañeta Ibañez Stefan Schuster (Editor) STOA RESEARCH ADMINISTRATOR Peter Ide-Kostic Scientific Foresight Unit Directorate for Impact Assessment and European Added Value Directorate-General for Parliamentary Research Services European Parliament, Rue Wiertz 60, B-1047 Brussels E-mail: [email protected] LINGUISTIC VERSION Original: EN ABOUT THE PUBLISHER To contact STOA or to subscribe to its newsletter please write to: [email protected] This document is available on the Internet at: http://www.ep.europa.eu/stoa/ Manuscript completed in November, 2014 Brussels, © European Union, 2014 DISCLAIMER The content of this document is the sole responsibility of the author and any opinions expressed therein do not necessarily represent the official position of the European Parliament. It is addressed to the Members and staff of the EP for their parliamentary work.
    [Show full text]
  • Privacy and Security in an Age of Surveillance
    Report from Dagstuhl Perspectives Workshop 14401 Privacy and Security in an Age of Surveillance Edited by Bart Preneel1, Phillip Rogaway2, Mark D. Ryan3, and Peter Y. A. Ryan4 1 KU Leuven and iMinds, BE, [email protected] 2 University of California, Davis, US, [email protected] 3 University of Birmingham, GB, [email protected] 4 University of Luxembourg, LU, [email protected] Abstract The Snowden revelations have demonstrated that the US and other nations are amassing data about people’s lives at an unprecedented scale. Furthermore, these revelations have shown that intelligence agencies are not only pursuing passive surveillance over the world’s communication systems, but are also seeking to facilitate such surveillance by undermining the security of the internet and communications technologies. Thus the activities of these agencies threatens not only the rights of individual citizens but also the fabric of democratic society. Intelligence services do have a useful role to play in protecting society and for this need the capabilities and authority to perform targeted surveillance. But the scope of such surveillance must be strictly limited by an understanding of its costs as well as benefits, and it should not impinge on the privacy rights of citizens any more than necessary. Here we report on a recent Dagstuhl Perspectives Workshop addressing these issues – a four- day gathering of experts from multiple disciplines connected with privacy and security. The meeting explored the scope of mass-surveillance and the deliberate undermining of the security of the internet, defined basic principles that should underlie needed reforms, and discussed the potential for technical, legal and regulatory means to help restore the security of the internet and stem infringement of human-rights by ubiquitous electronic surveillance.
    [Show full text]
  • The US Surveillance Programmes and Their Impact on EU Citizens' Fundamental Rights
    DIRECTORATE GENERAL FOR INTERNAL POLICIES POLICY DEPARTMENT C: CITIZENS' RIGHTS AND CONSTITUTIONAL AFFAIRS CIVIL LIBERTIES, JUSTICE AND HOME AFFAIRS The US surveillance programmes and their impact on EU citizens' fundamental rights NOTE Abstract In light of the recent PRISM-related revelations, this briefing note analyzes the impact of US surveillance programmes on European citizens’ rights. The note explores the scope of surveillance that can be carried out under the US FISA Amendments Act 2008, and related practices of the US authorities which have very strong implications for EU data sovereignty and the protection of European citizens’ rights. PE 474.405 EN This document was requested by the European Parliament's Committee on Civil Liberties, Justice and Home Affairs. AUTHORS Mr Caspar BOWDEN (Independent Privacy Researcher) Introduction by Prof. Didier BIGO (King’s College London / Director of the Centre d’Etudes sur les Conflits, Liberté et Sécurité – CCLS, Paris, France). Copy-Editing: Dr. Amandine SCHERRER (Centre d’Etudes sur les Conflits, Liberté et Sécurité – CCLS, Paris, France) Bibliographical assistance: Wendy Grossman RESPONSIBLE ADMINISTRATOR Mr Alessandro DAVOLI Policy Department Citizens' Rights and Constitutional Affairs European Parliament B-1047 Brussels E-mail: [email protected] LINGUISTIC VERSIONS Original: EN ABOUT THE EDITOR To contact the Policy Department or to subscribe to its monthly newsletter please write to: [email protected] Manuscript completed in September 2013. Source: European Parliament © European Union, 2013. This document is available on the Internet at: http://www.europarl.europa.eu/studies DISCLAIMER The opinions expressed in this document are the sole responsibility of the author and do not necessarily represent the official position of the European Parliament.
    [Show full text]
  • The Cloud Conspiracy 2008-2014
    The Cloud Conspiracy 2008-2014 Caspar Bowden independent advocate for privacy rights (Tor Board, Qubes-OS Policy Adviser, Chief Privacy Adviser - Microsoft 2002-2011, Director of FIPR 1998-2002) th 31C3 Hamburg – 27 December 2014 Preliminaries ● 2002-2011 Chief Privacy Adviser Microsoft – advising 40 “National Technology Officers” – not compliance, not US privacy ● I did not know about PRISM at Microsoft – deduced from open-sources – never had a security clearance ● Microsoft made me “redundant” in 2011, two months after I warned them about FISA – now 100% FLOSS advocate This is not about Cloud as storage parallel processing power as a commodity 2008 FISA Amendment Act §1881a (Sec.702) foreign intelligence information intentionally targets only non-US persons outside US authorization for 1 year “minimize” access on US persons after collection provide all facilities/information to accomplish in secret THIS MEANS IF YOU ARE NOT AMERICAN, YOU CANNOT TRUST U.S. SOFTWARE SERVICES !! contempt of FISC for non-compliance providers have complete immunity from civil lawsuits “in a manner consistent with the 4th Amendment” What is “foreign intelligence information” ? (1) information that relates to, and if concerning a United States person is necessary to, the ability of the United States to protect against - (A) actual or potential attack or other grave hostile acts of a foreign power or an agent of a foreign power; (B) sabotage, international terrorism, or the international proliferation of weapons of mass destruction by a foreign power or an agent of a foreign power; or (C) clandestine intelligence activities by an intelligence service or network of a foreign power or by an agent of a foreign power; or (2) information with respect to a foreign power or foreign territory that relates to, and if concerning a United States person is necessary to - (A) the national defense or the security of the United States; or (B) the conduct of the foreign affairs of the United States.
    [Show full text]