Deeplinks
At stake in Apple's fight against government orders to break open locked iPhones could be the legal authorization for “virtually limitless” surveillance under the Internet of Things, according to a federal judge's order rejecting a government request in a New York drug case yesterday. Midway through his lengthy opinion, Magistrate Judge James Orenstein made that point clear as he dismantled the staggering government claim that Apple's software licensing arrangement was proof that the company was “sufficiently close” to consumer devices that it could be compelled to unlock them.
EFF joined NYU Law School’s Brennan Center for Justice, ACLU, National Association of Criminal Defense Lawyers, the Libertarian National Committee, and former Congressman Bob Barr in urging the Sixth Circuit Court of Appeals to revisit a recent opinion finding no reasonable expectation of privacy in 10 weeks of continuous, surreptitious video surveillance. The opinion sets a dangerous precedent that law enforcement officers in Kentucky, Ohio, Michigan, and Tennessee don’t need a warrant to film your every move in front of your house.
Yesterday, Diego Dzodan, Facebook's Vice President for Latin America, was arrested at his Sao Paolo home by federal police, escorted to a forensic institute and then held at Pinheiros Provisional Detention Center in the city. His arrest was ordered by Judge Marcel Montalvão, who was been demanding personal data from WhatsApp as part of a drug-related investigation in Brazil's northeastern state of Sergipe. The arrest comes after the judge had begun serving WhatsApp, which is owned by Facebook, a series of fines for withholding information from the court.
Some people just never learn. For decades, porn purveyor Perfect 10 has been fighting a losing battle to deputize service providers to police potentially infringing uses of its works. Indeed, at this point Perfect 10 spends far more time on litigation than creation. But court after court has rejected those efforts. In fact, Perfect 10's main achievement in the courts has been to inadvertently make good copyright law. For example, its litigation led to key decisions ruling that an image search engine was fair use and confirming that rightsholders must follow DMCA Section 512's clear rules for takedown notices.
Threats to free expression are again on the rise all over the world. As a recent TechCrunch piece outlines, these threats are being felt acutely in Southeast Asia, an ethnically, politically, and linguistically diverse region which includes, Brunei, Indonesia, Laos, Malaysia, Myanmar, the Philippines, Singapore, Thailand, Timor-Leste, and Vietnam. Taken as a whole, the region has nearly twice the population of US, with over 600 million inhabitants. Recent statistics estimate there are currently more than 160 million Internet users, and with the rise of affordable cellular data plans, tech infrastructure investment and competition amongst carriers, this number is sure to rise dramatically by 2020.
With a presidential election looming this fall, mass media and social media will be more focused on policy issues over the next several months than likely at any other point until 2020. We’ve put together a questionnaire for the candidates to invite them to explain their own policy platforms. We’ll let you know what they say, and in the meantime encourage others to ask these questions themselves at campaign events, fundraisers, town halls, or informal appearances.
As a tax-exempt non-profit organization, we are forbidden from endorsing or opposing any candidate for office, so to be clear: we think voters can and should make their own choices. But we also think it's important for voters to know where the candidates stand on a variety of issues implicating digital rights, from the TPP to mass surveillance. These might not be the only issues that matter in choosing a candidate, but they are important to consider.
Here are a few questions that EFF is asking:
The European Commission and the U.S. Department of Commerce have finally announced the details of the EU-U.S. Privacy Shield, an agreement designed to ensure that personal data can flow between Europe and the U.S. for commercial purposes while maintaining the privacy rights Europeans have come to love and expect. Lawmakers in the U.S. and abroad were under intense pressure to produce some sort of agreement after the European Court of Justice (CJEU) dissolved the safe harbor agreement related to transatlantic data flows last October, leaving countless international tech firms in a lurch about how to handle data. The court decision and subsequent negotiation could have been a powerful motivator for the U.S. to clean up its surveillance policies.
EFF filed an amicus brief today in support of Apple's fight against a court order compelling the company to create specific software to enable the government to break into an iPhone. The brief is written on behalf of 46 prominent technologists, security researchers, and cryptographers who develop and rely on secure technologies and services that are central to modern life. It explains that the court’s unprecedented order would violate Apple’s First Amendment rights. That’s because the right to free speech prohibits the government from compelling unwilling speakers to speak, and the act of writing and, importantly, signing computer code is a form of protected speech.
Facebook Rightfully Questions Claims That California Inmates Are Banned from Having a Social Media Presence

Up until last spring, Facebook had maintained a semi-secret channel for corrections facilities to file "Inmate Takedown" requests. A prison official could fill out a simple online form, hit submit, and Facebook would begin the account suspension process without ever creating a public record. Since Facebook wouldn’t publish the number of inmate takedown requests it received (and still hasn’t), the entire censorship regime was essentially invisible.
The Kazakhstan government had a third major setback in its attempt to use the U.S. legal system to attack one of its fiercest critics, the independent newspaper Respublika. A federal judge in California rejected Kazakhstan's demand that Facebook turn over information about users associated with Respublika’s account on the social media site. The judge found that Kazakhstan lacked the appropriate judicial authorization to pursue such discovery, rejecting Kazakhstan’s claims that its ongoing Computer Fraud and Abuse Act (CFAA) lawsuit essentially gave it free rein to obtain information about its critics.
Following our previous articles about increasing political censorship of the Internet in Malaysia, things have quickly gone from bad to worse. In fact since July 2015, the Malaysian government has blocked at least ten websites, including online news portals and private blogs, for reporting about the scandal surrounding Malaysian Prime Minister Najib tun Razak over his mysterious private dealings with $700 million in funds.
Today, Verizon reached an agreement with the FCC to acquire affirmative consent before injecting their UIDH tracking header into their customers' web activity on non-Verizon owned sites. This is exactly what we asked them to do in November 2014, and is a huge win for Internet privacy. ISPs are trusted carriers of our communications. They should be supporting individuals' privacy rights, not undermining them.
Senator Mark Warner and Representative Mike McCaul are calling on Congress to create an "Encryption Commission" composed of business, tech, and law enforcement and intelligence agency leaders that will investigate and report on encryption issues. The commission is set to ask questions already answered in the 1990s like whether or not the government should mandate backdoors or otherwise change current law. The answer is no. At the end of the day, the commission shows Congress still hasn't learned that math is not something you can convince to compromise.
At 9:04am GMT today, the Let's Encrypt Certificate Authority issued its millionth certificate. This is an amazing success, coming only 3 months and 5 days since a beta version of the service became publicly available. We're very excited to be building a more secure and fully encrypted future for the World Wide Web.
Last week, EFF filed a brief in support of Apple’s fight against the FBI, in which we argued that forcing Apple to write—and sign—a custom version of iOS would violate the First Amendment rights of Apple and its programmers. That’s because the right to free speech sharply limits the government’s ability to compel unwilling speakers to speak, and writing and signing computer code are forms of protected speech. So by forcing Apple to write and sign an update to undermine the security of iOS, the court is also compelling Apple to speak in violation of the First Amendment. Along with our brief, we published a “deep dive” into our legal arguments, which you should check out before reading further.
One of the United States government's priorities in Internet policy is encapsulated by a term that's recently been making the rounds; the "free flow of information." It appears almost every time U.S. officials describe how they intend to protect the free and open Internet, especially when it comes to international law. The general idea is that bits of online data should not be discriminated against, hindered, or regulated across national boundaries. As a general principle, this sounds positive. It could be a helpful antidote against arbitrary data localization rules that threaten to break up the global Internet, or attempts by governments' to block and censor foreign websites using nationwide filters. At least, that is the claim that officials such as the U.S.
The Open Source Initiative, a nonprofit that certifies open source licenses, has adopted an important principle about standards, DRM, and openness, and just in time, too.
If you are a company that collects customer data, it’s your job to protect it. Your customers expect it. You can’t dodge that responsibility by altering your terms and conditions, especially when finding them is equivalent to playing “Where’s Waldo?” on your website.
This is not only outrageous, but in EFF’s view, also not legally enforceable.
VTech, Hong Kong-based maker of many children’s digital toys, apparently doesn’t see things this way.
Update 2015-05-12: The Let's Encrypt client has now been renamed to Certbot. And Let's Encrypt has now issued over three million certificates!
Yesterday, the Let's Encrypt CA issued its millionth certificate. This is a perfect occasion for us to talk about some plans for the CA and client software through the rest of 2016.
EFF recently received records in response to our Freedom of Information Act lawsuit against the Department of Justice for information on how the US Marshals—and perhaps other agencies—have been flying small, fixed-wing Cessna planes equipped with "dirtboxes”: IMSI catchers that imitate cell towers and are able to capture the locational data of tens of thousands of cell phones during a single flight. The records we received confirm the agencies were using these invasive surveillance tools with little oversight or legal guidance.
Update (April 8, 2016): The encryption bill has been amended. The changes are discussed in a new post.
In Saturday’s edition of the New York Times, Matt Apuzzo reports that the Department of Justice is locked in a “prolonged standoff” with WhatsApp. The government is frustrated by its lack of real-time access to messages protected by the company’s end-to-end encryption. The story may represent a disturbing preview of the next front in the FBI’s war against encryption.
Last spring, Shoshana Walter with the Center for Investigative Reporting filed a routine public records request with the Sacramento County Sheriff’s Department for a story on a rogue firearms instructor. The request was unceremoniously denied, so Walter did exactly what reporters do in that situation: she pushed back. Moments later she received an email that she was never meant to see.
"Okay, now what? She is being a pain. Do we ask Peter what to do with her?" wrote the public servant handling the request.
Have you ever bought music, movies, games, ebooks, or gadgets, only to discover later that the product had been deliberately limited with Digital Rights Management? We want to hear from you!

Please join us in welcoming legislative counsel Ernesto Omar Falcon to EFF!
Ernesto will be working with us to analyze bills in Congress and make sure that digital rights have a voice on the floor in Congress, particularly in copyright, patent, and net neutrality issues. Before coming to EFF, Ernesto spent six years as a staffer for two members of Congress. After that, he served as Vice President of Government Affairs at Public Knowledge, an organization that EFF frequently works with on fair use and open Internet advocacy.
The Senate’s passage Tuesday of a bill to amend the Freedom of Information Act is a good step toward improving government transparency. Congress, however, can and should do more to fix the 50-year-old federal sunshine law.
Coinciding with Sunshine Week, an annual celebration by journalists and transparency advocates seeking greater government openness, the Senate unanimously passed an amended version of The FOIA Improvement Act of 2015 (S. 337), which was sponsored by Senators Patrick Leahy (D-VT.) and John Cornyn (R-TX.).
EFF supports the Senate bill, particularly because it does not enable greater secrecy for national security agencies, unlike a House bill passed in January. However, the Senate bill does not address several of FOIA’s fundamental problems.
The World Wide Web Consortium (W3C) will consider adopting a DRM non-aggression covenant at its Advisory Committee meeting in Boston next week. EFF has attended several of these meetings before as a W3C member, always with the intent to persuade the W3C that supporting DRM is a bad idea for the Web, bad for interoperability, and bad for the organization. By even considering Web standards connected with DRM, the W3C has entered an unusually controversial space. Next week's membership meeting will be accompanied by demonstrations organized in Boston by the Free Software Foundation, and other cities where the W3C has a presence.
In a recent Deeplinks post and in some of our other communications about the Apple case, we've referred to what the government wants Apple to do as creating a "backdoor." Some people have questioned the use of the term, but we think it's appropriate. Here's why.
The government recently declassified a secret letter, written in 2002 laying out the executive branch’s initial legal justifications for the vast expansion of electronic surveillance after September 11, 2001. Like many others, it was written by former DOJ Office of Legal Counsel attorney John Yoo, and it was directed to the then-presiding judge of the Foreign Intelligence Surveillance Court (FISC), Judge Colleen Kollar-Kotelly.
The letter wasn’t a filing with the FISC: instead, in Yoo’s view, it was more of a “heads up”—in the words of the letter, a gesture of goodwill in the interest of “comity” between co-equal branches of government.
The heads up he was giving? The fact that, for over a year prior to this letter, the executive branch had been flagrantly violating federal surveillance laws.
The Ninth Circuit Court of Appeals issued an important ruling last Fall in the long-running “dancing baby” case, affirming that copyright holders must consider whether a use of material is fair before sending a takedown notice under the Digital Millennium Copyright Act. We welcomed that ruling, but the majority decision also set the bar for enforcing that requirement higher than Congress intended.
A Joint Statement from Access Now, the American Civil Liberties Union, and the Electronic Frontier Foundation
Apple is engaged in a high-profile battle against a court order demanding it write, sign, and deploy custom computer code to defeat the security on an iPhone. As civil liberties groups committed to the freedom of thought that underpins a democratic society, this fight is our fight. It is the fight of every person who believes in a future where technology does not come at the cost of privacy or individual security and where there are reasonable safeguards on government power.
Encryption Isn’t Something We Can Negotiate About, No Matter How Politically Convenient That May Seem
Dear President Obama,
During your keynote conversation at SXSW, you called for a concession on security in our digital devices, stating that you don’t believe in “an absolutist view” when it comes to cryptography on phones.
Bassel Khartabil, open source developer, Wikipedian, and free culture advocate, was taken from his friends and family he loves four years ago this week. On March 15, 2012, Bassel was kidnapped from the streets of Damascus by Syrian military intelligence. Since then, we know that he has suffered torture, solitary confinement, arbitrary detention, dangerously overcrowded prison conditions, and even the bombing of his prison’s neighbourhood by Syrian opposition forces.
The House Energy and Commerce Committee recently approved H.R. 2666, the No Rate Regulation of Broadband Internet Access Act. The legislation attempts to codify Federal Communications Commission (FCC) Chairman Wheeler’s pledge not to use the Open Internet Order to regulate broadband rates. This seems like a straightforward task and technically it is a straightforward task. However, some members of Congress want to use this bill to fundamentally undermine the central purpose of the Order itself.
The Venue Reform Bill Won’t Stop Patent Trolls, but It Will Slow Them Down
There’s a new bill in Congress that would finally address the egregious forum shopping that dominates patent litigation. The Venue Equity and Non-Uniformity Elimination Act of 2016 (VENUE Act, S. 2733) would bring a modicum of fairness to a broken patent system.
Traducción de David Bogado.
En la edición sabatina del New York Times del pasado 13 de marzo, el periodista Matt Apuzzo informa que el Departamento de Justicia de Estados Unidos está enfrascado en una "disputa prolongada" con la aplicación WhatsApp. El gobierno estadounidense está frustrado por su falta de acceso en tiempo real a los mensajes protegidos por el cifrado de extremo a extremo que provee la compañía. La historia puede significar un anticipo perturbador del siguiente frente de batalla en la guerra de la Oficina Federal de Investigación (FBI) contra el cifrado.
A crowd upset about the possibility of DRM in Web standards gathered to protest outside the World Wide Web Consortium's Advisory Committee meeting in Cambridge, MA last night. EFF is participating in these W3C meetings as a member, encouraging the group to adopt a non-aggression covenant to protect security researchers, standards implementors and others from the effects of including DRM-related technology in open standards.
Last night's protests, shown below, were organized by the Free Software Foundation and included comments from EFF's International Director Danny O'Brien.
As with other original material on EFF's site, these photos are released under the permissive Creative Commons Attribution license.
A magistrate in Riverside, CA has canceled a hearing that was scheduled for Tuesday afternoon in the Apple v FBI case, at the FBI’s request late Monday. The hearing was part of Apple's challenge to the FBI's demand that the company create a new version of its iOS, which would include a backdoor to allow easier access to a locked iPhone involved in the FBI's investigation into the 2015 San Bernardino shootings.
The FBI told the court that an “outside party” demonstrated a potential method for accessing the data on the phone, and asked for time to test this method and report back. This is good news. For now, the government is backing off its demand that Apple build a tool that will compromise the security of millions, contradicts Apple's own beliefs, and is unsafe and unconstitutional.
Update April 13, 2016: The U.S. Army has confirmed in writing to Chelsea Manning that the packets were withheld due to being too many pages, rather than copyright concerns.
EFF is pleased to announce that the U.S. Army has allowed Chelsea Manning to receive a packet of news articles, EFF blog posts, and a regulatory filing related to prisoner free speech rights that it had previously withheld. Manning is currently imprisoned at the U.S Disciplinary Barracks (USDB) at Ft. Leavenworth for her role in the release of military and diplomatic documents to Wikileaks.
Update [March 25, 2016]: Georgia failed to pass H.B. 93 by the end of the day Thursday, which means the bill is now dead.
H.B. 93 began with good intentions. Georgia legislators saw a need to protect privacy by regulating how law enforcement agencies use automated license plate reader (ALPR) technology and limiting how long police can store location data collected on everyday drivers.
Unfortunately, the version of the bill currently on the fast track to passage is rife with problems that would not only harm the public, but threaten security research and hinder law enforcement’s ability to ensure the integrity of ALPR systems. It could be voted upon by the Georgia Senate on Thursday, the last day for the legislature to pass bills.
EFF, ACLU, and Access Now released a statement in support of Apple and its stance on encryption last week. We called on the President to reject any attempt to force backdoors like the one the FBI was seeking to Apple’s operating system. We asked our communities to help by tweeting at the President.
Over three thousand people have joined us, sending a stream of tweets to the President.
We're excited to announce the formation of a new grassroots network, the Electronic Frontier Alliance. Bringing together community and campus organizations across the U.S., the Alliance will serve as an increasingly vital hub for activism and organizing addressing a spectrum of civil liberties and digital rights issues.
The Alliance will bring together groups pursuing a range of strategies and tactics—from hacker spaces crowdsourcing the open source development of software tools, to student groups hosting teach-ins and documentary screenings. They will be united by five substantive principles:
July 21, 1990: Neil Patrick Harris and Alyssa Milano were on the cover of TV Guide, Pink Floyd performed near the ruins of the Berlin Wall, and First Lady Barbara Bush christened the Nimitz-class aircraft carrier the USS George Washington. But perhaps the most significant touchstone, at least to those of us in the digital civil liberties movement, is that EFF founder John Perry Barlow sent the first-ever EFF email blast to our supporters.
The fallout from the passage of the USA FREEDOM Act continues.
One of EFF’s three cases against the NSA, Smith v. Obama, has been sent back to the trial court by the Ninth Circuit Court of Appeals. The lawsuit was brought by an Idaho neonatal nurse, Anna Smith, who was outraged to discover that the NSA was engaging in bulk collection of telephone records. This same program is challenged in our First Unitarian Church of Los Angeles v. NSA case and has also always been a part of our long-running Jewel v. NSA case.
The Trans-Pacific Partnership (TPP) is taking a beating in the ongoing U.S. presidential election cycle, leaving some observers to wonder if it can survive such a political backlash against trade agreements. But as the leading candidates seem to compete for who can bash U.S. trade policies the hardest, other countries have been pressing forward to ratify the TPP since the deal's signature in February.
A now-vacated hearing over whether to require Apple to undermine the security of its users prompted an ongoing controversy over government access to encrypted devices.
While a federal court in San Bernardino may never rule on the flood of arguments supporting Apple's defense of user security, observers—especially members of Congress—should pay close attention to a few themes that have emerged in the public debate.
In early 2012, after a massive public outcry, Congress abandoned the proposed SOPA bill that would have authorized broad, ex parte site-blocking orders. One of SOPA’s most worrying features was that it would have created new, easy-to-obtain court orders against third parties, such as domain name registrars, ad networks, payment providers, and search engines. Unfortunately, some rightsholders have been trying to convince courts that existing law already allows them to get the same sort of site-blocking orders. They are wrong.
The FBI has successfully accessed data on an iPhone that has been the subject of a legal battle between the Justice Department and Apple, according to a court filing.
EFF is pleased that the Justice Department has retreated from its dangerous and unconstitutional attempt to force Apple to subvert the security of its iOS operating system. However, we are still calling on President Obama not to undermine security and encryption, and you can add your voice to the chorus.
Pages
Deeplinks Topics
- Abortion Reporting
- Analog Hole
- Anonymity
- Anti-Counterfeiting Trade Agreement
- Artificial Intelligence & Machine Learning
- Biometrics
- Bloggers' Rights
- Border Searches
- Broadcast Flag
- Broadcasting Treaty
- CALEA
- Cell Tracking
- Coders' Rights Project
- Computer Fraud And Abuse Act Reform
- Content Blocking
- Copyright Trolls
- Council of Europe
- Cyber Security Legislation
- CyberSLAPP
- Defend Your Right to Repair!
- Development Agenda
- Digital Books
- Digital Radio
- Digital Video
- DMCA
- DMCA Rulemaking
- Do Not Track
- DRM
- E-Voting Rights
- EFF Europe
- Electronic Frontier Alliance
- Encrypting the Web
- Export Controls
- Fair Use and Intellectual Property: Defending the Balance
- FAQs for Lodsys Targets
- File Sharing
- Fixing Copyright? The 2013-2016 Copyright Review Process
- Free Speech
- FTAA
- Genetic Information Privacy
- Government Hacking and Subversion of Digital Security
- Hollywood v. DVD
- How Patents Hinder Innovation (Graphic)
- ICANN
- Innovation
- International
- International Privacy Standards
- Internet Governance Forum
- Know Your Rights
- Law Enforcement Access
- Legislative Solutions for Patent Reform
- Locational Privacy
- Mandatory Data Retention
- Mandatory National IDs and Biometric Databases
- Mass Surveillance Technologies
- Medical Privacy
- Mobile devices
- National Security and Medical Information
- National Security Letters
- Net Neutrality
- No Downtime for Free Speech
- NSA Spying
- OECD
- Offline : Imprisoned Bloggers and Technologists
- Online Behavioral Tracking
- Open Access
- Open Wireless
- Patent Busting Project
- Patent Trolls
- Patents
- PATRIOT Act
- Pen Trap
- Policy Analysis
- Printers
- Privacy
- Public Health Reporting and Hospital Discharge Data
- Reading Accessibility
- Real ID
- Reclaim Invention
- RFID
- Search Engines
- Search Incident to Arrest
- Section 230 of the Communications Decency Act
- Security
- Social Networks
- SOPA/PIPA: Internet Blacklist Legislation
- State-Sponsored Malware
- Student Privacy
- Stupid Patent of the Month
- Surveillance and Human Rights
- Surveillance Drones
- Terms Of (Ab)Use
- Test Your ISP
- The "Six Strikes" Copyright Surveillance Machine
- The Global Network Initiative
- The Law and Medical Privacy
- TPP's Copyright Trap
- Trade Agreements and Digital Rights
- Trans-Pacific Partnership Agreement
- Transparency
- Travel Screening
- TRIPS
- Trusted Computing
- UK Investigatory Powers Bill
- Uncategorized
- Video Games
- Wikileaks
- WIPO