Privacy reconsidered


Published on

Brian Alseth's presentation to Information Privacy Law spring 2011 at Seattle Univeristy

Published in: Technology, News & Politics
  • Be the first to comment

  • Be the first to like this

No Downloads
Total views
On SlideShare
From Embeds
Number of Embeds
Embeds 0
No embeds

No notes for slide

Privacy reconsidered

  1. 1. Privacy Reconsidered: The Ethic of Privacy and Why Anonymous Matters<br />Brian J. Alseth, Esq. <br />Technology and Liberty Director <br />ACLU of Washington<br />
  2. 2. What is privacy?<br />
  3. 3. There are knowable unknowables and then there are unknowable unknowables, and then there is the internet<br />Majority of Americans state they are very concerned about their privacy and what online companies are doing with their data<br />Facebook has over 600 million users and has overtaken Google as the top visited site.<br />Zuckerberg’s Law – Sharing will grow exponentially whereby people will share twice as much this year as last, and next year will see people sharing twice the amount of content as this year, etc. (track’s with Moore’s law).<br />Top 100 websites include mostly user generated content<br />Youtube – 24 hours of new content is posted to youtube every minute of every day.<br />
  4. 4. Industry’s Response<br />
  5. 5. So once again, what is privacy?<br />We say one thing . . .<br />But we each have a different threat model<br />
  6. 6. Behold!<br />DATA<br />The Power<br />of<br />
  7. 7. Firesheep<br />
  8. 8. MOORE’S LAW<br />Charts: Zoomer Magazine, Computer Measurement Group<br />
  9. 9. The Future of Moore’s Law<br />Today: $349.99 In 20 years: $0.04<br />
  10. 10.
  11. 11. Government and Court Records<br />Customer and Commercial Records<br />Elections<br />The story of your life…in data<br />Consumer and Online Records<br />And so much more…<br />
  12. 12. Government Records<br />Court Records<br />Census<br />Voterfiles<br />Secretary of State Filings<br />
  13. 13. ELECTION DATA<br />Voterfile<br />Party Data<br />
  14. 14. Where is my web data going?<br />
  15. 15. Data Brokers<br />Data from all sources is interrelated and is compiled, analyzed and sold by Data Brokers – The used car dealers of data<br />InfoUsa<br />Hoovers<br />Experion<br />Dunn and Bradstreet <br />Reed Elsevier -(Choicepoint, Lexis)<br />CACI<br />
  16. 16. Facial-Recognition<br />
  17. 17. Video Analytics<br />
  18. 18. DNA<br />
  19. 19. Technologies<br />Combined<br />
  20. 20. “Ring of Steel”<br /><ul><li>Link thousands of police, private cameras
  21. 21. Combine with license plate readers, central monitoring, Face recognition
  22. 22. Access-control gates</li></li></ul><li>TIA Lives<br /> <br />
  23. 23. Cracked Magazine<br />
  24. 24. THE HAXORZ ARE REAL?!? OH NOES!!! <br />
  25. 25. Identity Theft & Data Security<br />Over 600 million records containing private info lost in security breaches since January 2005<br />ID Theft is allegedly more profitable to organized crime than drugs.<br />Cost per valid CC# on carder sites: $.04<br />
  26. 26. Apps, ATMS and Google, oh my.<br />
  27. 27. So, Privacy is Dead, Right?<br />
  28. 28. Would You Define Privacy Already?<br />
  29. 29. Public and Private are relative terms, like hot and cold, wet and dry. One defines the other and neither exists alone. <br />Every revolution in communication technology has resulted in IRL revolution once the public is given the means to speak without fear of reprisal; to speak anonymously.<br />Since Brandeis and the Kodak, however, each new bit of technology also brings with it a measure of privacy fear.<br />
  30. 30. Fear isn’t everything though.<br />Not all 600 Million Facebook users are crazy. <br />
  31. 31. Privacy fears can lead to lead to censorship of that which should be public<br />Self regulation and market regulation of privacy leads to industry being the sole regulator and protector of privacy. <br />Germans hate Google Street View, so Google now blurs German houses in street view to continue to do business in Germany.<br />Google has censored Chinese search traffic and the Aurora Attacks arose out of a Chinese Politburo Member Googling his name and finding unflattering things.<br />In the US, Google obscures a number of public buildings including the Vice President’s mansion. <br />If Google can be pressured to pixelate images of public buildings, what next?<br />Why do we trust Google?<br />, <br />
  32. 32. Why is the private private and the Public Public?<br />Because some things are just creepy, right? <br />Define “Creepy” Policy Shouldn’t be based on an undefined emotion<br />Scandinavian countries publish salaries.<br />U.S. publishes mugshots.<br />
  33. 33. Absolute Privacy, Trust and Duty<br />What is absolute privacy?<br />Only that which you keep in your head. (Cat’s third name, PD).<br />For all other knowledge exchanges, the individual provides information based on some trust/value calculus.<br />No matter how small the reveal, the provider has certain expectations as to how the recipient will receive and use the information. These expectations are privacy.<br />What if you could share and speak anonymously?<br />TL:DR – knowledge = duty = privacy + Anon tease<br />
  34. 34. Privacy as an Ethic – The Duty of Knowing<br />
  35. 35. First, The Ethic of Publicness<br />That which is public must be:<br /> Generous<br /> Transparent<br /> Authentic<br />We must demand publicness from those who protect our privacy.<br />Publicness is a potential tool and a weapon.<br />Wikileaks didn’t bring about the apocalypse, and the work of the people should be done before the people. <br />
  36. 36. The Ethic of Privacy<br />Don’t Steal Information<br />Protect Information<br />Context Matters (threat model (g-chat v. Obama’s Blackberry, culture, etc.)<br />Give Credit<br />Be Transparent about use of information<br />Give Access<br />Don’t Use Information Against the Individual<br />Where information is collected, a return value must be provided. (free services for data – google, facebook, OKCupid). <br />
  37. 37. That’s why we have laws and stuff, right?<br />No expectation of privacy or warrant needed for information we turn over to third parties. <br />Electronic Communications Privacy Act (ECPA) of 1986<br />Feudal age of data regulation – Assorted state and local statutes<br />Law enforcement officials have claimed that records of online activities are not protected.<br />What result for data in the cloud? E-book, iPad, phone GPS tracking?<br />
  38. 38. What Must Be Done?<br />Update ECPA and enact comprehensive technology specific privacy laws<br />
  39. 39. Technology Did Not Kill Privacy . . .<br />But Privacy by Policy Alone Might<br />
  40. 40. If Not Privacy By Policy, then What?<br /> - Dr. Ann Cavoukian<br />Information & Privacy Commissioner of Ontario<br />
  41. 41. 7 Foundational Principles of Privacy by Design<br />1. Proactive not Reactive; Preventative not Remedial <br />2. Privacy as the Default <br />3. Privacy Embedded into Design <br />4. Full Functionality – Positive-Sum, not Zero-Sum <br />5. End-to-End Lifecycle Protection <br />6. Visibility and Transparency <br />7. Respect for User Privacy <br />
  42. 42. Clever Transition to Anonymous Portion<br />
  43. 43. Anonymous Speech<br />This country is founded on the freedom of speech which includes a right to speak anonymously. Publius<br />When an oppressive regime shuts down open channels of communication only anonymous speech can continue to safely question the <br />Anonymous speech requires no trust relationship, allowing people to freely speak their minds without fear of persecution or shame<br />No trust and no duty, however, also allows people to divorce themselves from responsibility for their speech - None of us are as cruel as all of us<br />
  44. 44. The Anonymous Internet<br />What happens when people have the ability to use the internet as an anonymous forum to interact with strangers?<br />Sadly, ChatRoulette answered this question all too clearly<br />
  45. 45. 4Chan – The Soul of The Internet<br />What is 4Chan?<br />Anonymous Image Board<br />No Archives<br />The likely source of everything amazing and horrible you’ve seen on the internet.<br />
  46. 46. Lolcats, Image macros and Chanspeak<br />
  47. 47. Rule 34 and memes<br />Anonymous allows the community to take hold of something and make it something new.<br />Original content barely exists<br />
  48. 48. Anonymous allows the community to take hold of something and make it something new.<br />Original content barely exists<br />
  49. 49. Anonymous also brings out the worst<br />Anonymous will test the limits of the first amendment.<br />
  50. 50. The Other Side of Online Anonymous Speech<br />The Tor Project<br />Navy built to provide anonymous channels<br />State department funds efforts to train foreign dissidents of oppressive regimes to use Tor to communicate anonymously. <br />Used by journalists, military, students, dissidents and anyone and everyone else.<br />Also forms the backbone of the secure wikileaks document submission process<br />Wikileaks<br />Provides anonymous means for those in possession of secrets to release them.<br />Secrets are power. Wikileaks seeks to return that power to the people.<br />
  51. 51. Anonymous & Hackers in the Middle East<br />
  52. 52. Anonymous in the Middle East<br />After Egypt and other regimes shut down the internet, a volunteer militia of volunteer hackers and other interested parties set to work restoring communications and attacking the government <br />Anon_Ops – <br />developed makeshift comms 1-pager<br />Faxbombedwikileaks Egypt docs to Egypt.<br />LOIC lasers pointed at Government Targets<br />Others<br />Voice to tweet invented and deployed<br />Ad Hoc networks and other support<br />
  53. 53. Anonymous the Collective <br />Roots in 4Chan<br />Although clans exist, and leaders necessarily emerge Anonymous is nebulous and without leadership.<br />Longstanding fight with Scientology<br />Things changed about a year ago with Wikileaks<br />Operation Payback<br />Gawker<br />HB Gary<br />Scott Walker the Furry?<br />Anonymous is the internet<br />The internet is feeling threatened.<br />
  54. 54. Anonymous Speech is Threatened<br />The right to connect is fundamental<br />Anonymous is frightening<br />Fear again leads to censorship and curtailing of rights<br />New Digital ID systems threaten online anonymous speech as one would essentially log in to use an ISP<br />Blogs, newspapers, and even 4Chan have been ordered to divulge identifying information about anonymous posters which chills speech. <br />No one entity should have the power to shut down the internet.<br />We are all anonymous and we all need our protection.<br />
  55. 55. Contact info:<br />Brian J. Alseth<br />Technology and Liberty Director<br />ACLU of Washington<br /><br />206-624-2184<br />@balseth<br />