- cypherpunks-legacy - lists.cpunks.org

Baltimore Digital Commerce Society-- Korhammer on Lava Trading, Oct 2
by Peter Wayner 06 Jul '18

06 Jul '18

[Hey Balto Digital Commerce Attendees. Welcome back from the long summer. Our first talk for the fall is scheduled for October 2n. These guys are building a very cool, cross-exchange tool. It constantly keeps track of the bids and asks on a number of exchanges letting you send your business to where the prices are best. It's fascinating to watch the screen update the quotes in real time. This kind of semi-automated, trading assistance is bound to become more and more prevalent. I think Lava Trading is doing some of the most interesting stuff around. So, come check it out if you can. Please circulate think. -Peter] Baltimore Digital Commerce Society Tuesday October 2, 12:30 Speaker: Richard Korhammer, CEO of Lava Trading (www.lavatrading.com) Topic: Networks as Markets-- Why Exchanges are Becoming Virtual Richard Korhammer is the CEO of LavaTrading, one of the startup companies in New York diving into cross-market arbitrage. Their network links together all of the important market makers in ECNs and keeps track of all bids and offers. Buyers and sellers using the technology automatically get pointers to the best price possible. Traders with large blocks of stock do substantially better because Lava Trading will break up their block to match it with the best price available across all of the markets. This cross-market arbitrage improves liquidity for the market and makes it simpler for traders with large blocks of stock to wade into the marketplace without leaving a wake. In his talk, Korhammer will explore how fast networking and sophisticated servers can supplement and potentially replace the old fashioned stock exchange. Traders won't need to come to one place or one exchange to search for the best price because the network can constantly sort through all buyers and sellers. Korhammer believes that adding intelligence to the network and the servers supporting is more efficient than requiring traders to manually manage an otherwise complicated marketplace. Will these cross-exchange tools supplant the exchange? Will they eventually become the exchange? Will the disintermediation eventually make all trading a transparent event? Location: 11 West Mount Vernon Place, Baltimore, MD Directions: The Engineering Society lies in the shadow of Baltimore's Washington monument in the center of town. From downtown, take Charles St north to the monument. The Society is to the left on Monument Street. From the north, take 83 south to Maryland Avenue exit. Follow Maryland Avenue south until Monument Street. The Society is to the left. Or look at this map: http://maps.yahoo.com/py/maps.py?BFCat=&Pyt=Tmap&newFL=Use+Address+Below&add r=11+Mount+Vernon+Place&csz=Baltimore%2C+MD+21201&country=us&Get%07Map=Get+M ap Cost: $14 for a lunch buffet To reserve your seat: write pcw(a)flyzone.com Questions: pcw(a)flyzone.com --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire'

1 0

Fourth Announcement for ECC 2003
by ECC 2003 06 Jul '18

06 Jul '18

--------------------------------------------------------------------- THE 7TH WORKSHOP ON ELLIPTIC CURVE CRYPTOGRAPHY (ECC 2003) University of Waterloo, Waterloo, Ontario, Canada August 11, 12 & 13 2003 FOURTH ANNOUNCEMENT June 13, 2003 ********************************************************************* ********************************************************************* NOTES: 1) Please make your hotel bookings as soon as possible. The cutoff date for room bookings at the Waterloo Inn is June 29, and the cutoff date for room bookings at the Comfort Inn is July 7. The Waterloo Inn is sold out for the night of August 9. 2) The last lecture at ECC 2003 will end at 3:00 pm on Wednesday (Aug 13). This will give participants sufficient time to catch flights scheduled to leave Toronto after 7:00 pm. There are hourly flights from Toronto to Ottawa for those who wish to attend SAC 2003. 3) If you would like to be removed from this mailing list please reply with a brief note. You will promptly be removed from the list. ********************************************************************* ********************************************************************* ECC 2003 is the seventh in a series of annual workshops dedicated to the study of elliptic curve cryptography and related areas. The main themes of ECC 2003 will be: - The discrete logarithm problem. - Efficient parameter generation and point counting. - Provably secure cryptographic protocols. - Efficient software and hardware implementation. - Side-channel attacks. - Deployment of elliptic curve cryptography. It is hoped that the meeting will continue to encourage and stimulate further research on the security and implementation of elliptic curve cryptosystems and related areas, and encourage collaboration between mathematicians, computer scientists and engineers in the academic, industry and government sectors. Attendees of ECC 2003 might also wish to attend SAC 2003 (Ottawa, Aug 14-15) and CRYPTO 2003 (Santa Barbara, Aug 17-21). The last lecture at ECC 2003 will end at 3:00 pm on Wednesday (Aug 13). This will give participants sufficient time to catch flights scheduled to leave Toronto after 7:00 pm. There are hourly flights from Toronto to Ottawa. SPONSORS: Certicom Corp. MITACS Motorola University of Essen University of Waterloo ORGANIZERS: Gerhard Frey (University of Essen) Darrel Hankerson (Auburn University) Alfred Menezes (University of Waterloo) Christof Paar (Ruhr-Universitat Bochum) Edlyn Teske (University of Waterloo) Scott Vanstone (University of Waterloo) SPEAKERS: Hans Dobbertin (Ruhr-Universitat Bochum, Germany) Florian Hess (University of Bristol, UK) Hugo Krawczyk (Technion, Israel, and IBM Research, USA) Tanja Lange (Ruhr-Universitat Bochum, Germany) Reynald Lercier (Centre d'Electronique de L'Armement, France) Ben Lynn (Stanford University, USA) William Martin (National Security Agency, USA) Christof Paar (Ruhr-Universitat Bochum, Germany) John Proos (University of Waterloo, Canada) Jean-Jacques Quisquater (Universite Catholique de Louvain, Belgium) Pankaj Rohatgi (IBM Research, USA) Victor Shoup (New York University, USA) Jerome A. Solinas (National Security Agency, USA) Edlyn Teske (University of Waterloo, Canada) Nicolas Theriault (University of Toronto, Canada) Eran Tromer (Weizmann Institute of Science, Israel) CONFERENCE PROGRAMME: There will be 15-16 invited lectures (and no contributed talks), with the remaining time used for informal discussions. There will be both survey lectures as well as lectures on latest research developments. All lectures will be held on the campus of the University of Waterloo. Here is a tentative list of lecture titles: Hans Dobbertin To be announced Florian Hess The GHS attack revisited Hugo Krawczyk Design and analysis of authenticated Diffie-Hellman protocols Tanja Lange Efficient arithmetic on (hyper-)elliptic curves over finite fields Reynald Lercier Algorithmic aspects of Mestre's p-adic point counting ideas Ben Lynn Applications of bilinear maps William Martin To be announced Christof Paar Hyperelliptic curve cryptosystems for embedded applications John Proos Security in the presents of decryption failures Jean-Jacques Quisquater 2 or 3 side-channels for ECC Pankaj Rohatgi Power, EM and all that: Is your crypto device really secure? Victor Shoup Standardizing public key encryption algorithms Jerome A. Solinas To be announced Edlyn Teske Weak fields for ECC Nicolas Theriault Index calculus attack for hyperelliptic curves of small genus Eran Tromer Hardware-based implementation of factoring algorithms REGISTRATION: There will be a registration fee this year of $250 Cdn or $170 US or Euros 160 ($150 Cdn or $100 US or Euros 90 for full-time graduate students). PLEASE REGISTER AS SOON AS POSSIBLE AS SPACE IS LIMITED FOR THIS WORKSHOP; REGISTRATION IS ON A FIRST-COME FIRST-SERVE BASIS. We cannot process a registration until all fees are paid in full. The deadline for all fees to be paid and registration completed has been set for the 1st of August, 2003. However, you are encouraged to register earlier than Aug 1 since some hotels have a cutoff date of June 29. To register, complete, in full, the attached REGISTRATION FORM and return it along with your payment to: Mrs. Adrienne Richter, C&O Dept., University of Waterloo, Waterloo, Ontario, Canada N2L 3G1. You can also send your registration form by fax (519-725-5441) or by email (ecc2003(a)math.uwaterloo.ca) Confirmation of your registration will be sent by email when payment is received in full. ------------------------cut from here--------------------------------- ECC 2003 CONFERENCE REGISTRATION FORM Fullname: _________________________________________________________ Affiliation: _________________________________________________________ Address: _________________________________________________________ _________________________________________________________ _________________________________________________________ _________________________________________________________ _________________________________________________________ E-Mail Address: _________________________________________________________ Telephone #: _________________________________________________________ Registration Fee: Please check the appropriate box: [ ] Registration .......$250.00 CAD ..............$________ [ ] Registration .......$170.00 USD ..............$________ [ ] Registration .......Euro 160.00 ..............$________ [ ] Full-time Student ..$150.00 CAD ..............$________ [ ] Full-time Student ..$100.00 USD ..............$________ [ ] Full-time Student ..Euro 90.00 ..............$________ Registration Fee includes Banquet: Attending [ ] Yes [ ] No Vegetarian [ ] Yes [ ] No TOTAL AMOUNT PAYABLE: ............................$________ **Make Cheque/Money Order Payable to: ECC 2003 Credit Card Payments: [ ] Visa [ ] MasterCard Cardholder's Name: ________________________________________________ Card Number: ______________________________________________________ Expiration Date: __________________________________________________ Signature: ________________________________________________________ Additional Information: ___________________________________________ -------------------------cut from here------------------------------- TRAVEL: Kitchener-Waterloo is approximately 100 km/60 miles from Pearson International Airport in Toronto. Ground transportation to Kitchener-Waterloo can be pre-arranged with Airways Transit. TRANSPORTATION TO AND FROM TORONTO AIRPORT PROVIDED BY AIRWAYS TRANSIT It is advisable to book your transportation between the Pearson Airport, Toronto, and Waterloo in advance to receive the advance booking rate of $38 CAD per person, one way, with Airways Transit (open 24 hours a day). Please quote "ECC2003" when making your reservation. Airways is a door-to-door service; they accept cash (Cdn or US funds), MasterCard, Visa and American Express. Upon arrival: Terminal 1: proceed to Ground Transportation Booth, Arrivals Level. Terminal 2: proceed to Airways Transit desk, Arrivals Level, Area E. Terminal 3: proceed to Ground Transportation Booth, Arrivals Level, between Doors B and C. You can make a reservation through their web site: www.airwaystransit.com Or, you can complete the form below and send by mail or fax (519-886-2141) well in advance of your arrival to Airways Transit. They will not fax confirmations: your fax transmission record is confirmation of your reservation. -------------------------cut from here--------------------------------- AIRWAYS TRANSIT ADVANCE BOOKING FORM - ECC 2003 ARRIVAL INFORMATION: ____________________________________________________________ Surname First name ____________________________________________________________ Toronto Arrival Date Airline Flight # ____________________________________________________________ Arrival Time Arriving From ____________________________________________________________ Destination in Kitchener/Waterloo No. in party DEPARTURE INFORMATION: ____________________________________________________________ Surname First name ____________________________________________________________ Toronto Departure Date Airline Flight # ____________________________________________________________ Departure Time Flight # Destination ____________________________________________________________ Pickup From No. in party ____________________________________________________________ Signature Date Send or Fax to: Airways Transit 99A Northland Road Waterloo, Ontario Canada, N2V 1Y8 Fax: (519) 886-2141 Telephone: (519) 886-2121 -----------------------------cut form here-------------------------------- ACCOMMODATIONS: There is a limited block of rooms set aside on a first-come first-serve basis at the Waterloo Inn for the evenings of August 10, 11, 12 and 13, and at the Comfort Inn for the evenings of August 9, 10, 11, 12 and 13. Please note that the Waterloo Inn is sold out for the evening of August 9. COMFORT INN Address: 190 Weber Street North, Waterloo, Ontario, Canada N2J 3H4 Phone: (519) 747-9400 Rate: $80 Cdn plus taxes/night for a single or double room Please quote "ECC 2003" when making your reservation Availability: Evenings of August 9, 10, 11, 12, 13 Cut-off date: July 7, 2003 WATERLOO INN Address: 475 King Street North, Waterloo, Ontario, Canada N2J 2Z5 Phone: (519) 884-0222 Fax: (519) 884-0321 Toll Free: 1-800-361-4708 Website: www.waterlooinn.com Rate: $118 Cdn plus taxes/night for a single or double room Please quote "ECC 2003" when making your reservation Availability: Evenings of August 10, 11, 12, 13 Cut-off date: June 29, 2003 Other hotels close to the University of Waterloo are: UNIVERSITY OF WATERLOO CONFERENCE CENTRE (on-campus accommodation; no air conditioning) Ron Eydt Village, Box 16610, Waterloo, Ontario, Canada N3J 4C1 Phone: 519-884-5400, 519-746-7599 Website: www.conferences.uwaterloo.ca (see "Room Registration") Approx rate: $52 Cdn plus taxes/night DESTINATION INN 547 King Street North, Waterloo, Ontario, Canada N2L 5Z7 Phone: (519) 884-0100 Website: www.destinationinn.com Approx rate: $73 Cdn plus taxes/night BEST WESTERN INN St. Jacobs Country Inn 50 Benjamin Road East, Waterloo, Ontario, Canada N2V 2J9 Phone: (519) 884-9295 Website: www.stjacobscountryinn.com Approx rate: $129 Cdn plus taxes/night THE WATERLOO HOTEL 2 King Street North, Waterloo, Ontario, Canada N2J 2W7 Phone: (519) 885-2626 Website: www.countryinns.org/inn_waterloo.html Approx rate: $120-160 Cdn plus taxes/night HOTEL TO CONFERENCE TRANSPORTATION: A shuttle to/from the campus will be available each day of the conference from the Waterloo Inn and Comfort Inn only. Place and times for pickup and drop-off will be provided in the final announcement. FURTHER INFORMATION: For further information or to return your Registration, please contact: Mrs. Adrienne Richter Department of Combinatorics & Optimization University of Waterloo Waterloo, Ontario, Canada N2L 3G1 e-mail: ecc2003(a)math.uwaterloo.ca Fax: (519) 725-5441 Phone: (519) 888-4027 If you did not receive this announcement by email and would like to be added to the mailing list for the fourth announcement, please send email to ecc2003(a)math.uwaterloo.ca. The announcements are also available from the web site www.cacr.math.uwaterloo.ca --------------------------------------------------------------------- --- end forwarded text -- ----------------- R. A. Hettinga <mailto: rah(a)ibuc.com> The Internet Bearer Underwriting Corporation <http://www.ibuc.com/> 44 Farquhar Street, Boston, MA 02131 USA "... however it may deserve respect for its usefulness and antiquity, [predicting the end of the world] has not been found agreeable to experience." -- Edward Gibbon, 'Decline and Fall of the Roman Empire' --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com

1 0

NSA Gave Other U.S. Agencies Information From Surveillance
by Monty Solomon 06 Jul '18

06 Jul '18

NSA Gave Other U.S. Agencies Information From Surveillance Fruit of Eavesdropping Was Processed and Cross-Checked With Databases By Walter Pincus Washington Post Staff Writer Sunday, January 1, 2006; Page A08 Information captured by the National Security Agency's secret eavesdropping on communications between the United States and overseas has been passed on to other government agencies, which cross-check the information with tips and information collected in other databases, current and former administration officials said. The NSA has turned such information over to the Defense Intelligence Agency (DIA) and to other government entities, said three current and former senior administration officials, although it could not be determined which agencies received what types of information. Information from intercepts -- which typically includes records of telephone or e-mail communications -- would be made available by request to agencies that are allowed to have it, including the FBI, DIA, CIA and Department of Homeland Security, one former official said. At least one of those organizations, the DIA, has used NSA information as the basis for carrying out surveillance of people in the country suspected of posing a threat, according to two sources. A DIA spokesman said the agency does not conduct such domestic surveillance but would not comment further. Spokesmen for the FBI, the CIA and the director of national intelligence, John D. Negroponte, declined to comment on the use of NSA data. ... http://www.washingtonpost.com/wp-dyn/content/article/2005/12/31/AR200512310… 08.html ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] NSA Gave Other U.S. Agencies Information From Surveillance
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

[cryptography] US Appeals Court upholds right not to decrypt a drive
by Steven Bellovin 06 Jul '18

06 Jul '18

http://volokh.com/2012/02/23/eleventh-circuit-finds-fifth-amendment-right-a… --Steve Bellovin, https://www.cs.columbia.edu/~smb _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com http://postbiota.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE

1 0

Re: Simson Garfinkel analyses Skype - Open Society Institute
by Adam Shostack 06 Jul '18

06 Jul '18

>From owner-cryptography+eugen=leitl.org(a)metzdowd.com Thu Jan 27 01:04:39 2005 User-Agent: Mutt/1.4.2i On Mon, Jan 10, 2005 at 08:33:41PM -0800, David Wagner wrote: | In article <41E07994.5060004(a)systemics.com> you write: | >Voice Over Internet Protocol and Skype Security | >Simson L. Garfinkel | >http://www.soros.org/initiatives/information/articles_publications/articles/ security_20050107/OSI_Skype5.pdf | | >Is Skype secure? | | The answer appears to be, "no one knows". The report accurately reports | that because the security mechanisms in Skype are secret, it is impossible | to analyze meaningfully its security. Most of the discussion of the | potential risks and questions seems quite good to me. | | But in one or two places the report says things like "A conversation on | Skype is vastly more private than a traditional analog or ISDN telephone" | and "Skype is more secure than today's VoIP systems". I don't see any | basis for statements like this. Unfortunately, I guess these sorts of | statements have to be viewed as blind guesswork. Those claims probably | should have been omitted from the report, in my opinion -- there is | really no evidence either way. Fortunately, these statements are the | exception and only appear in one or two places in the report. The basis for these statements is what the other systems don't do. My Vonage VOIP phone has exactly zero security. It uses the SIP-TLS port, without encryption. It doesn't encrypt anything. So, its easy to be more secure than that. So, while it may be bad cryptography, it is still better than the alternatives. Unfortunately. Adam --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- Forwarded message from Peter Gutmann <pgut001(a)cs.auckland.ac.nz> -----

1 0

Re: Simson Garfinkel analyses Skype - Open Society Institute
by pgut001＠cs.auckland.ac.nz 06 Jul '18

06 Jul '18

David Wagner <daw(a)cs.berkeley.edu> writes: >>Is Skype secure? > >The answer appears to be, "no one knows". There have been other posts about this in the past, even though they use known algorithms the way they use them is completely homebrew and horribly insecure: Raw, unpadded RSA, no message authentication, no key verification, no replay protection, etc etc etc. It's pretty much a textbook example of the problems covered in the writeup I did on security issues in homebrew VPNs last year. (Having said that, the P2P portion of Skype is quite nice, it's just the security area that's lacking. Since the developers are P2P people, that's somewhat understandable). Peter. --------------------------------------------------------------------- The Cryptography Mailing List Unsubscribe by sending "unsubscribe cryptography" to majordomo(a)metzdowd.com ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07078, 11.61144 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE http://moleculardevices.org http://nanomachines.net [demime 1.01d removed an attachment of type application/pgp-signature]

1 0

Re: [IP] more on USG RFI for "metrics" on the 'terror war'
by Lee Tien 06 Jul '18

06 Jul '18

I'm sure the military folks on the list can suggest better sources. Arreguin-Toft, Ivan. "How the Weak Win Wars: A Theory of Asymmetric Warfare." International Security, vol. 26, no. 1, Summer 2001, pp. 93-128. Paul, T. V. Asymmetric Conflicts: War Initiation by Weaker Powers. Cambridge, MA: Cambridge University Press, 1994. Miles, Franklin B. Asymmetrical Warfare: An Historical Perspective. Carlisle Barracks, PA: Army War College, 1999. See generally http://www.comw.org/rma/fulltext/asymmetric.html Lee At 5:25 PM -0400 10/4/05, David Farber wrote: >Begin forwarded message: > >From: "Robert C. Atkinson" <rca53(a)columbia.edu> >Date: October 4, 2005 4:32:01 PM EDT >To: dave(a)farber.net >Subject: Re: [IP] USG RFI for "metrics" on the 'terror war' > > >Regarding the statement that: > > > >> the continuing belief that a conventional high- tech army >> can defeat a low-tech insurgency (something that has not happened >>in Western >> history to my knowledge)... >> >> > >Things aren't quite that bad: there have been "successes" such as > >- the British and then US "pacification" of North America >(the United States and Canada) and the whole western hemisphere for >that matter) >- the British "pacification" of South Africa, Australia and >New Zealand >- the United States in the Philippine Insurrection at turn >of the 20th century >- British suppression of insurgents in Malaya after WWII? >- British suppression of the Mau Mau in Kenya in the 1950s >- British suppression of the IRA in Northern Ireland > >And in "Western history" Rome's high tech army (for its time) >defeated insurgencies throughout the centuries of the Roman Empire. >There are probably plenty of other examples that historians can >offer. In this day and age, the important thing is to understand >why high tech armies sometimes lose to low-tech insurgencies? My >guess is that the willingness of the high-tech army's "homefront" >to sustain the cost and horror of a long, drawn-out counter- >insurgency (including periodic tactical defeats such as Tet in the >Vietnam) is a very important factor in the longterm success or >failure of the high-tech army. >Thanks > >Bob > > > >David Farber wrote: > > > >> >> >> Begin forwarded message: >> >> From: Richard Forno <rforno(a)infowarrior.org> >> Date: October 4, 2005 2:45:23 PM EDT >> To: Infowarrior List <infowarrior(a)g2-forward.org> >> Cc: Dave Farber <dave(a)farber.net> >> Subject: USG RFI for "metrics" on the 'terror war' >> >> >> >> While I'm all for knowing how to measure one's effectiveness, I >>fear that >> such "metrics" will be nothing more than a rehash of Vietnam-era >>body count >> tallies as the "measure of success" in the 'war' to make juicy and >> positive-sounding quotes for the current iteration of the Five >>O'Clock >> Follies. >> >> This, coupled with the continuing belief that a conventional >>high- tech army >> can defeat a low-tech insurgency (something that has not happened >>in Western >> history to my knowledge) only reinforces my sense that the USG is >>not >> learning from history but rather repeating it. >> >> The fact that a contractor is being asked to develop these >>"metrics" speaks >> volumes, IMHO. You'd think this would be something they'd have >>come up with >> BEFORE launching into the 'war' on terror, right? >> >> -rick >> >> <snip> >> >> >> >> >>> The Contractor shall develop, in conjunction with the Joint >>>Staff, OSD, >>> Combatant and Unified Commands, Services and designated Agencies >>> (stakeholders) a system of metrics to accurately assess US >>>progress in the War >>> on Terrorism, identify critical issues hindering progress and >>> develop and >>> track action plans to resolve the issues identified. In this >>> effort, the >>> contractor shall work as an independent contractor not subject >>>to the >>> supervision and control of the Government. All deliverables >>>become the >>> property of the US Government. >>> >>> >>> >> >> >> Source document: >> http://blogs.washingtonpost.com/earlywarning/files/ >>WarOnTerrorismMetrics.doc >> >> >> >> >> >> ------------------------------------- >> You are subscribed as rca53(a)columbia.edu >> To manage your subscription, go to >> http://v2.listbox.com/member/?listname=ip >> >> Archives at: http://www.interesting-people.org/archives/ >>interesting-people/ >> >> > > > > >------------------------------------- >You are subscribed as tien(a)well.sf.ca.us >To manage your subscription, go to > http://v2.listbox.com/member/?listname=ip > >Archives at: http://www.interesting-people.org/archives/interesting- >people/ > ------------------------------------- You are subscribed as eugen(a)leitl.org To manage your subscription, go to http://v2.listbox.com/member/?listname=ip Archives at: http://www.interesting-people.org/archives/interesting-people/ ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.leitl.org 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0

[IP] more on USG RFI for "metrics" on the 'terror war'
by David Farber 06 Jul '18

06 Jul '18

Begin forwarded message:

1 0

EDRI-gram newsletter - Number 4.23, 6 December 2006
by EDRI-gram newsletter 06 Jul '18

06 Jul '18

============================================================ EDRI-gram biweekly newsletter about digital civil rights in Europe Number 4.23, 6 December 2006 ============================================================ Contents ============================================================ 1. Google accused in Italy over shock video 2. EDPS warns against EU endangering data protection principles 3. French ISPs need to block websites 4. Hungary's President says no to the PNR agreement 5. Google has taken steps to settle the Belgium lawsuit 6. France - Using Social Security number to identify medical records 7. Article 29 Working Party expressed its opinion in the SWIFT case 8. Britain takes another step toward a new Bill of Rights 9. EU Commission wants to push fight against spam 10. France Parliament shifts to open source software 11. Campaign launched in UK to opt out of central medical database 12. Support EDRI-gram 13. Agenda 14. About ============================================================ 1. Google accused in Italy over shock video ============================================================ A recent shock video published at the end of November on YouTube, the free video hosting service now owned by Google, has triggered extensive reactions in Italy. The video was showing a group of four Italian teenagers attacking a 17-year-old disabled boy in a classroom in Turin. The attackers also made a video of their actions that was posted on YouTube. Although Google had deleted the movie as soon as they were informed about it, the Italian Police has opened a criminal proceeding against Google - the Italian subsidiary. The action included a police raid on the Milan offices of Google. Google Italy has confirmed that the videos published by the users go online automatically and there is no editorial preventive filter from their part. They have also claimed that they delete all the videos that are contrary to their policy or have illegal content, but they rely mostly on their community to signal the illegal content. Google's spokeswoman Rachel Whetstone said: "We've been helping Italian police with the investigation and we're happy to cooperate." However, the Milan prosecutors have started a criminal case against two employees of Google Italy, considering they were responsible for not checking the content of that video before it went online. In this case Google was treated as an Internet content provider, and, according to law 62/2001 and art. 57 Penal Code, the webmaster is responsible also for the third party actions and has also journalistic responsibility to avoid "committing illegal acts". It is interesting that the prosecutors did not consider Google as a hosting provider and did not apply the Italian law 39/2002 that implemented the European Directive 2001/31/EC on electronic commerce. According to this law, there isn't a general obligation of preventive surveillance for Internet providers, and only in the case of a decision of an authority, they should remove or make specific content unavailable. EDRi-member ALCEI has pointed out that there are important comments to take into consideration such as " the responsibility of parents and educators, the widespread deterioration of human and social values, the warping of culture and behavior. " At the same time it has highlighted that some people are using this opportunity to control free speech: "They are "blaming" the internet for this awful episode - while it is obvious that the disgusting idea of placing a video online provided a tool for finding and persecuting the perpetrators, who otherwise would have probably remained unidentified and uncontrolled. Political spokesmen (of different parties across the "partisan" spectrum) are demanding or suggesting new laws and regulations, apparently including and obligation to obtain "written approval" by parents for minors to use the internet, but also to increase censorship, filtering and control by providers. " Italy's Minister of Education, Giuseppe Fioroni, considered the prosecutors had correctly applied to the Internet the same legislation regulating what can be published in newspapers or broadcast on television. The outcome of the legal action against Google is not yet certain, but some legal experts in Italy doubt its success. However, the main problem is setting one more nasty precedent for Internet provider - responsibility and control on user content. In one word - censorship. The "Google case" in Italy: one more excuse for censorship and repression (26.11.2006) http://www.alcei.org/?p=25 Not only the Google case (In Italian only, 27.11.2006) http://gandalf.it/nodi/censura.htm Shock video against a disabled teen. A European directive could help Google (In Italian only, 28.11.2006) http://www.interlex.it/regole/abruzzo12.htm Interlex no 353 The Internetfobia strikes again with absurd legislative proposals (In Italian only, 28.11.2006) http://www.interlex.it/numeri/061128.htm (Thanks to EDRI-member ALCEI ) ============================================================ 2. EDPS warns against EU endangering data protection principles ============================================================ The European Data Protection Supervisor (EDPS), Peter Hustinx, has issued a second opinion, following the one issued on 19 December 2005 on the Proposal of the Commission for a Council Framework Decision on the protection of personal data processed in the framework of police and judicial co-operation in criminal matters. The Commission proposal is presently under discussion within the Council of Ministers and although Hustinx appreciates the attention given by the Council to this proposal, he still voices concerns regarding the outcome of the negotiations. The text currently discussed has not included the amendments proposed by the European Parliament in a legislative resolution issued on 27 September 2006 or the EDPS' opinions presented at the Conference of European Data Protection Authorities. The amendments proposed had in view the enhancement of the level of protection afforded by the Framework Decision. In some cases, the provisions of the Commission proposal regarding the protection of citizens' data are even eliminated or very weak. Mr. Hustinx thinks there is a great risk that the level of data protection is even lower than before and warns the officials that they are endangering the data protection principles. Under the circumstances in which the exchange of police and judicial information among Member States becomes more and more significant, a strong legal framework should be in place to protect people's fundamental rights, considers the EDPS. Although he understands the necessity of adopting the Framework Decision as soon as possible, he urges the members of the Council to give some time to the negotiations so that they may allow sufficient protection for the data. "If they succeed in agreeing on a high level of protection for all data, including 'purely' domestic processing, they will at the same time improve trust between EU police and judicial authorities," said Mr.Hustinx talking about the Council members. He also showed concern that the framework might allow processing of data on religion, race or ethnic origin without sufficient protection and also that there was not enough protection for the data obtained by the bodies that are not involved with law enforcement. In this respect, he gave the example of the SWIFT case where bank transaction details were transferred to US. The EDPS proposed a certain consistency of the data protection rules that should apply to all the data exchanged in the police and judicial systems that should not be limited to cross-border exchanges between Member States. One other concern expressed by Mr.Hustinx is related to the right of a person to be informed on the activities related to his (her) personal data. "Some basic rights for data subjects, like the right to be informed, no longer seem to be guaranteed," he stated, considering that making the right to information dependent upon request was not acceptable. The EDPS also believes that the Council should adopt a proposal on processing specific data such as biometric data and DNA-profiles, whether related to the principle of availability or not. A cooperation agreement has been signed between the EDPS's office and the European Ombudsman P Nikiforos Diamandouros with the purpose to inform each other on relevant complaints. A joint statement from both offices said: "Because maladministration includes failure by the EU institutions to comply with their data protection obligations, it is important that we coordinate on cases where our competences partly overlap". Second opinion of the European Data Protection Supervisor on the Proposal for a Council Framework Decision on the protection of personal data processed in the framework of police and judicial co-operation in criminal matters (29.11.2006) http://www.edps.europa.eu/legislation/Opinions_A/06-11-29_2ndOpinion_third_… llar_EN.pdf Ombudsman and Data Protection Supervisor sign Memorandum of Understanding (30.11.2006) http://www.edps.eu.int/Press/EDPS-2006-12-EN_EO_EDPS_MoU.pdf Data protections are being eroded, says European watchdog (30.11.2006) http://www.out-law.com/page-7539 ============================================================ 3. French ISPs need to block websites ============================================================ The Appeal Court in Paris has decided that the French ISPs need to block the access to website AAARGH, considered as revisionist by the court. This decision was made even though the judges admitted that the measures would be imperfect and the site would still be accessible through other means as well. The action was started by a number of French anti-racist groups that have first asked three US-based hosting providers to shut down the website of AAARGH. But one of them refused to shut down the website and therefore the anti-racist NGOs continued their action in the French court. The 2004 French law that implements the EU E-commerce Directive gives the possibility to the plaintiffs, after all the possible measures to convince the hosting company to take down the illegal access have been exhausted, to impose to the ISPs to filter the illegal content. A first decision was taken in June 2005 when a lower court admitted the action against the major 11 French ISPs. The ISPs have asked in the appeal that the site be included on the blacklists used for parental control and have pointed out that the measure might block other legal websites, since an entire IP address is blocked, not just the URL of a website. They presented arguments that filtering methods are also very costly and not efficient. The ISPs have also asked to pursue directly the authors of that website. The Appeal Court rejected the ISPs appeal considering that their arguments were already rejected within the parliamentary debates for this law. The court also stated that the decision, even if imperfect, "has the merit of reducing, as much as possible in the present technical situation, the access of Internet users to an illegal site." The imperfection of the ISPs filtering solution is obvious in this case, as well. The AAARGH website can be accessed via any search engine. Also, even before the legal procedures were over, the authors of the webpage changed the hosting company and domain name and therefore now they freely explain users how they can use anonymising software to get to their website. Decision Court of Appeal Paris - Tiscali, AFA, etc vs. UEJF, J'Accuse, SOS Racisme, etc. (only in French, 24.11.2006) http://www.juriscom.net/jpt/visu.php?ID=866 Case AAARGH: ISP Filtering obligation confirmed in appeal (only in French 24.11.2006) http://www.zdnet.fr/actualites/internet/0,39020774,39365008,00.htm Case AAARGH: Months of procedure for a inefficient filtering (only in French 27.11.2006) http://www.zdnet.fr/actualites/internet/0,39020774,39365037,00.htm ============================================================ 4. Hungary's President says no to the PNR agreement ============================================================ The Hungarian President Laszlo Solyom decided not to sign the national law regarding the promulgation of the EU-US PNR (Passenger Name Records) agreement and sent it back to the Parliament, considering that it can be improved. This is one of the few set-backs of the new EU-US PNR agreement concluded in October 2006, even though there have been numerous critics to the content of the new agreement that makes possible for air companies to send to US authorities the personal data of the passengers that were registered in the booking system. According to the Hungarian President "it is necessary that the Parliament make possible the forwarding of data in the act on promulgation of the international agreement only in case the person in question has explicitly approved of it. The President's opinion is that a regulation of such content would not be contradictory to the international agreement." Therefore Mr. Solyom asked the Parliament to re-discuss the bill and to complete it with a rule that stipulates for the explicit approval of the person in question to forward of his data abroad. According to the presidential press release, Mr. Solyom has had consultations with the data protection ombudsman and the general director of Malev (Hungarian Airlines). Both of them considered that returning the bill did not prevent the operation of overseas flights of the national air company. Adam Foldes , the Data Protection Program Director within the the Hungarian Civil Liberties Union commented on the events: "Even if the Hungarian law on promulgating the PNR agreement includes provisions on asking for the passengersb consent for handling their personal data, it wonbt be very useful. How can anybody regard the consent as freely given when the passengers are not allowed to board or disembark the airplane without providing them. Although the Presidentbs veto is not futile: the current agreement shall expire no later than 31 July 2007. His veto should be a benchmark for the Hungarian Government in the renegotiations. " The Government might not push too much this issue since the U.S. President promised last week that he will ask the Congress to waive the visa obligations of the new EU member states. Dr. Kinga GC6ncz, the Minister of Foreign Affairs was asked by journalists if the Presidentbs action could jeopardise Hungarybs chances in obtaining a visa free status from the U.S. The minister replied she hopes the problem will be solved soon as it might cause problems in the long run. Communique: Today Laszlo Solyom has returned to the Parliament the bill about the promulgation of the agreement on registration of travellers' data concluded between the European Union and the United States of America. (29.11.2006) http://www.keh.hu/keh_en/news/20061129communique.html The Hungarian President of the Republic has vetoed the ratification of the EU-US PNR Agreement (29.11.2006) http://www.tasz.hu/index.php?op=contentlist2&catalog_id=3496 Draft of the Act on PNR Agreement (only in Hungarian, 10.2006) http://www.parlament.hu/irom38/01097/01097.pdf EDRI-gram: New EU-US interim deal on Passenger Name Record (11.10.2006) http://www.edri.org/edrigram/number4.19/pnr ============================================================ 5. Google has taken steps to settle the Belgium lawsuit ============================================================ Google has decided to settle with SOFAM and SCAM, two of the Belgian newspapers groups having sued the company for using excerpts from their articles in the Google News Belgium service. SOFAM, a group representing the rights of photographers and SCAM, a group representing journalists, had joined Copiepresse which had decided to take legal action against Google in February, arguing that Google should have signed agreements with the Belgium newspapers for using snippets of and links to newspaper stories. After the hearing in August 2006, a ruling obliged Goggle to remove the links to the Belgium newspapers sites from its Google News service threatening the company with a 1 million euro fine in case of non-compliance. On 24 November 2006, during the re-hearing asked by Google, the company reached a settlement with SOFAM and SCAM. Jessica Powell, a spokeswoman for Google stated: "We reached an agreement with SOFAM and SCAM that will help us make extensive use of their content," but did not give any details on the agreement nor did she say whether similar agreements would be signed with other plantiffs. She also added : "Google respects copyright law, which we believe lies at the heart of the creative process. As today's agreement demonstrates our approach is to work in partnership with content creators and owners". Although Goggle lawyers argued that the company did not break any copyright law as it it only showed a link, headlines and a few lines from the articles, Copiepress said Google affected the authors of the articles because it gave away archived articles that authors sell. A ruling on the hearing is expected in early January. Google partially settles Belgian copyright case (27.11.2006) http://www.out-law.com/default.aspx?page=7524 Google settles copyright dispute with 2 groups in Belgium (24.11.2006) http://www.iht.com/articles/2006/11/24/business/google.php EDRI-gram: Belgium says no to Google news (27.09.2006) http://www.edri.org/edrigram/number4.18/google_be ============================================================ 6. France - Using Social Security number to identify medical records ============================================================ A new amendment proposed by the French Minister of Health Xavier Betrand is considering using the National Identification Record (NIR) as the identifier of a patient in the health sector. NIR is a unique number of every person in France, included in the national registry of natural persons. Created from data on the civil status of French nationals and residents, the NIR allows indirect identification of a person. It is made of 15 figures, indicating gender, birth year, month and place (municipality or 99 for foreign countries), and registering number of birth in the municipality. The NIR is used by the Social Security Service and by employers in the management of social benefits The Health Minister has suggested an amendment to the draft law on financing the Social security discussed by the French Senate. The text wants to make the NIR as the key to access the personal medical record. The usage of NIR has been limited, along the time, by the French Data protection authority (CNIL) . But now there are voices within the institution that will accept such an extension, with just a couple of weeks before its opinion on this subject will be taken. However, civil right groups have promptly reacted by pointing out that such usage could open a dangerous backdoor in the security of the medical files and will allow the interconnection of the sensitive data. A public appeal has been initiated and opened for signatures on 2 December 2006 by Human Rights League (LDH) and DELIS (Droits Et Libertes face a l'Informatisation de la Societe). The appeal is highlighting the fact that the NIR could be found in various files and this is just the final step before the interconnection. The NIR could be used as a social security number, but also to access the personal medical records and therefore the privacy right could be easily breached. The appeal wants to prove to CNIL that the French citizens, in order to keep the citizens freedom, do not want the extension of the NIR usage in the personal medical records. Appeal - My private life in the public eye, never ! Don't touch my social security number (only in French, 2.12.2006) http://www.pastouchenumerosecu.org/ Press Release of the LDH (Ligue des droits de l'homme) and DELIS (Droits Et Libertes face a l'Informatisation de la Societe) (only in French, 1.12.2006) http://www.pastouchenumerosecu.org/spip.php?article2 The social security number could become the access key to the medical file (only in French, 14.11.2006) http://www.lemonde.fr/web/article/0,1-0%402-3226,36-834271,0.html ============================================================ 7. Article 29 Working Party expressed its opinion in the SWIFT case ============================================================ On 21-22 November 2006, an opinion was adopted by the Privacy Commissioners represented by Article 29 Working Group ruling against the Society for Worldwide Interbank Financial Telecommunication (SWIFT) for having transferred transaction details to the US. The Privacy Commissioners wanted to point out again that fighting terrorism and crime should not lead to limiting citizens' fundamental rights and strongly emphasized the need to observe data protection principles. The Working Group decided that SWIFT, as a corporative company based in Belgium, was subject to Belgian data protection law that implemented the European Directive on data protection. It also decided that the financial institution in EU using SWIFT were in their turn subject to the national data protection laws implementing the EU directive as well. The Commissioners considered that SWIFT was the primary responsible for the processing and mirroring personal data while some responsibility for the processing of their clients' data came to the financial institutions. They also decided that SWIFT had to comply with the EU directive for data protection and that the financial institutions using SWIFT's services had to comply with the national laws on data protection. Among the obligations, SWIFT must notify the processing and provide an adequate level of protection for the data transferred. The financial institutions have the obligation to verify that SWIFT complies with the law and must have the necessary knowledge on the payment systems with their characteristics and risks. The Working Party also thought that, for the purpose of transparency, the financial institutions should advise their clients in cases when the transfer of their data involved certain risks. It was considered that SWIFT was also in breach of the EU Directive by the lack of transparency and efficient control in the data transfer operations and by not observing the proportionality and necessity principles as well as the guarantees for the personal data transfer to a third country. Regarding the transfer of data to the US Treasury, the Working Party considered that ".. the hidden, systematic, massive and long-term transfer of personal data by SWIFT to the UST in a confidential, non-transparent and systematic manner for years without effective legal grounds and without the possibility of independent control by public data protection supervisory authorities constitutes a violation of the fundamental European principles as regards data protection and is not in accordance with Belgian and European law." The Working Party Opinion asks for the immediate cessation of the infringements by SWIFT and the financial institutions and the compliance with the European and national laws on data protection. It also urges the financial institutions to inform their clients on the way their personal data are processed and to advise them about the fact that US authorities might have access to these data. The Commissioners wanted to emphasize again that the terrorism fighting measures must not limit the fundamental rights of citizens considering that: "A key element of the fight against terrorism involves ensuring the preservation of the fundamental rights which are the basis of democratic societies and the very values that those advocating the use of violence seek to destroy." Press Release on the SWIFT Case following the adoption of the Article 29 Working Party opinion on the processing of personal data by the Society for Worldwide Interbank Financial Telecommunication (SWIFT) (23/11.2006) http://ec.europa.eu/justice_home/fsj/privacy/news/docs/PR_Swift_Affair_23_1… 06_en.pdf ============================================================ 8. Britain takes another step toward a new Bill of Rights ============================================================ The London School of Economics has commenced a project to help pave the way for strengthened constitutional rights in Britain. The initiative is to be conducted over the next two years by the School's newly formed Policy Engagement Research Group that was founded earlier this year by Privacy International's Simon Davies and Gus Hosein. The issue of constitutional reform, particularly a Bill of Rights, is on the agenda of the main political parties. This year, Opposition Leader David Cameron has made a commitment to replace the Human Rights Act with a Bill of Rights, while the Liberal Democrats are committed to a written constitution. Currently Britain relies on the Human Rights Act as the basis for protections contained in the European Convention on Human Rights. The UK legal provisions are considered by many to be inadequate. The LSE venture called "Future Britain" will undertake a substantial research effort and a national consultation to foster the debate about how Britain should choose and implement a new Bill of Rights. Its aim is to discover how other nations have considered such questions and then, through broad consultation and outreach, assess these options in the context of a modern Britain to see which may be most appropriate and which are most likely to succeed. The project supporters say its most important contribution will be to create a neutral space for engagement. Future Britain aims to be the vehicle that engages and informs the UK on the issue of constitutional rights reform and might well be viewed as the first structured phase in the long road to entrenching rights in a written British constitution. It will be formally launched in February 2007. In the meantime the LSE will consult with constitutional experts and rights groups to arrive at the project terms of reference. The initiative has the support of both the Conservatives and the Liberal Democrats and will work with a wide range of groups including Justice, Charter 88 and the UCL Constitution Unit. Further information can be obtained through Simon Davies at s.g.davies(a)lse.ac.uk Cameron proposes UK Bill of Rights (26.06.2006) http://politics.guardian.co.uk/conservatives/story/0,,1805902,00.html Attorney General considers written constitution (9.10.2006) http://www.politics.co.uk/news/domestic-policy/constitution/monarchy/britain -should-seriously-consider-written-constitution-$454076.htm Liberal Democrat commitment to Bill of Rights (01.2005) http://www.libdems.org.uk/media/documents/policies/11CivilLiberties.pdf ============================================================ 9. EU Commission wants to push fight against spam ============================================================ The European Commission has criticized the member countries, considering that they should better implement the present legal framework and fight against spam, but also take more seriously into consideration the spyware and malicious software issues. According to the recent figures made public by Sophos, approx. 32% of the world's spam comes from European countries, with France, Spain, Poland and Italy on the top. And this situation occurs when all the EU countries have implemented the 2002 E-privacy Directive that has imposed the opt-in principle on spam. Cooperation in effectively implementing the legal acts is lacking in most of the European Countries. The Commission presented two European best practices in the fight against spam. The Netherlands that has succeeded in cutting the domestic spam by 85% through prosecution by OPTA that has 5 full-time employees for this topic and 570 000 euros invested in equipment. In Finland proper filtering measures have reduced spam from 80% to 30%. These measures together with good online commercial practices in line with the data protection law are among the measures envisaged by the Commission. The Commission has also announced that it will reinforce the cooperation on this topic with third countries, especially with the US and Asian countries. Viviane Reding Commissioner for Information Society and Media added: "I will revisit this issue again next year to see whether additional legislative measures against spam are required." In 2007 the Commission might make changes in the EU legislation in order to increase the user privacy and security. The possible changes include the obligation of the service providers to notify the security breaches and the possibilty for any person with a legitimate interest to take legal action against spam. Communication From the Commission on Fighting spam, spyware and malicious software (15.11.2006) http://europa.eu.int/information_society/policy/ecomm/doc/info_centre/commu… c_reports/spam/com_2006_0688_f_en_acte.pdf Fighting spam, spyware and malicious software: Member States should do better, says Commission (27.11.2006) http://europa.eu.int/rapid/pressReleasesAction.do?reference=IP/06/1629 Commission draws knives on spam (27.11.2006) http://www.euractiv.com/en/infosociety/commission-draws-knives-spam/article… 60056 EU Commission urges states to do more against spam (27.11.2006) http://today.reuters.com/news/articlenews.aspx?type=internetNews&storyID=20… -11-27T174440Z_01_L27872269_RTRUKOC_0_US-EU-SPAM.xml ============================================================ 10. France Parliament shifts to open source software ============================================================ Starting with July 2007, the computers used by the French deputies will be equipped with Linux operation system, Open Office software and Firefox browser. The project, initiated at the request of the General Assembly President, was based on a study made by Atos Origin, a technology services company. The study has shown that the open source software can be adapted to the needs of the Members of the Parliament allowing for serious savings in spite of the costs required by the change. Benoit Sibaud, the president of APRIL (Association pour la Promotion et la Recherche en Informatique Libre) which is supporting open source, stated that switching to open source will give the French Parliament a better control over its IT systems without being dependent on the software supplier, at the same time giving the possibility to use the public money for better purposes. Previous initiatives in this sense belong to the French Ministry of Agriculture where open source software was chosen for servers and to the French gendarmes who adopted Open Office and Firefox. Open source software in the General Assembly (only in French - 22.11.2006) http://www.assemblee-nationale.fr/presse/divisionpresse/m01.asp Free Software for the deputies (only in French - 23.11.2006) http://www.april.org/articles/communiques/20061122-assemblee-nationale.txt French parliament dumping Windows for Linux (27.11.2006) http://news.com.com/2100-7344_3-6138372.html ================================================================== 11. Campaign launched in UK to opt out of central medical database ================================================================== A campaign has been launched in the UK to get people to opt out of a government scheme to upload medical records from family doctors' surgeries into a central health database. TheBigOptOut.org was launched in London on 29 November 2006 with support from NGOs such as Foundation for Information Policy Research (FIPR) and No2ID. An opinion poll published at the meeting shows that 53% of UK citizens do not approve of a central medical records database with no right to opt out; another poll the previous week had showed that 51% of family doctors do not intend to upload data without patient consent. The campaign urges people in England to write to their doctors forbidding the upload of their data. The UK government response has included a letter from the Chief Medical Officer which orders doctors to report dissenters to the government; this letter was condemned by the British Medical Association as telling doctors to breach patient confidentiality. The Big Opt Out http://www.thebigoptout.org Media coverage of campaign launch (27.11.2006) http://www.lightbluetouchpaper.org/2006/11/27/developments-on-health-privac… Row between government and BMA, and latest news (1.12.2006) http://www.lightbluetouchpaper.org/2006/12/01/health-privacy-breaking-news/ (Contribution by EDRI-member Foundation for Information Policy Research - UK) ============================================================ 12. Support EDRI-gram ============================================================ European Digital Rights needs your help in upholding digital rights in the EU. Thanks to your last years donations EDRi has been able to issue 24 editions of EDRi-gram in 2006. To continue with EDRi-gram in 2007 we again ask for your support. If you wish to help us promote digital rights, please consider making a private donation, or interest your organisation in sponsorship. We will gladly send you a confirmation for any amount above 250 euro. KBC Bank Auderghem-Centre, Chaussee de Wavre 1662, 1160 Bruxelles, Belgium Name: European Digital Rights Asbl Bank account nr.: 733-0215021-02 IBAN: BE32 7330 2150 2102 BIC: KREDBEBB ============================================================ 13. Agenda ============================================================ 11-12 December 2006, Paris, France LeWeb3: Third Les Blogs Conference http://www.leweb3.com/leweb3 14 December 2006, Madrid, Spain Conference on the Admissibility of Electronic Evidence in Court in Europe. The final event of the project Admissibility of the Electronic Evidence in Court in Europe (A.E.E.C.) funded by the European Commission and led by the Spanish company Cybex. http://www.cybex.es/AGIS2005/ 27-30 December 2006, Berlin, Germany 23rd Chaos Communication Congress: "Who can you trust?" http://events.ccc.de/congress/2006/Home 17-19 January 2007, Geneva, Switzerland Special Session of the Standing Committee on Copyright and Related Rights (SCCR) : First Session http://www.wipo.int/meetings/en/details.jsp?meeting_id=12043 20 January 2007, Paris, France Big Brother Awards France http://bigbrotherawards.eu.org/ 28 January 2007, Europe-wide Data Protection Day: An initiative of the Council of Europe with the support of the European Commission http://www.coe.int/t/e/legal_affairs/legal_co%2Doperation/data_protection/D… ault%20DP%20Day%2016-10-2006.asp 19-23 February 2007, Geneva, Switzerland Provisional Committee on Proposals Related to a WIPO Development Agenda : Third Session http://www.wipo.int/meetings/en/details.jsp?meeting_id=11926 ============================================================ 14. About ============================================================ EDRI-gram is a biweekly newsletter about digital civil rights in Europe. Currently EDRI has 25 members from 16 European countries. European Digital Rights takes an active interest in developments in the EU accession countries and wants to share knowledge and awareness through the EDRI-grams. All contributions, suggestions for content, corrections or agenda-tips are most welcome. Errors are corrected as soon as possible and visibly on the EDRI website. Except where otherwise noted, this newsletter is licensed under the Creative Commons Attribution 2.0 License. See the full text at http://creativecommons.org/licenses/by/2.0/ Newsletter editor: Bogdan Manolea <edrigram(a)edri.org> Information about EDRI and its members: http://www.edri.org/ - EDRI-gram subscription information subscribe by e-mail To: edri-news-request(a)edri.org Subject: subscribe You will receive an automated e-mail asking to confirm your request. unsubscribe by e-mail To: edri-news-request(a)edri.org Subject: unsubscribe - EDRI-gram in Macedonian EDRI-gram is also available partly in Macedonian, with delay. Translations are provided by Metamorphosis http://www.metamorphosis.org.mk/edrigram-mk.php - EDRI-gram in German EDRI-gram is also available in German, with delay. Translations are provided Andreas Krisch from the EDRI-member VIBE!AT - Austrian Association for Internet Users http://www.unwatched.org/ - Newsletter archive Back issues are available at: http://www.edri.org/edrigram - Help Please ask <edrigram(a)edri.org> if you have any problems with subscribing or unsubscribing. ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://www.ativel.com 8B29F6BE: 099D 78BA 2FD3 B014 B08A 7779 75B0 2443 8B29 F6BE [demime 1.01d removed an attachment of type application/pgp-signature which had a name of signature.asc]

1 0