MasterSearch
June 30, 2020
People Around The World Are Already Being Judged Based On Their #SocialMedia Data— AND THEY DON’T EVEN REALIZE IT.
October 11, 2011
Google Hands Wikileaks Volunteer's Gmail Data to U.S. Government
Google Hands Wikileaks Volunteer's Gmail Data to U.S. Government
Gmail users got a hefty dose of reality today when it was revealed that Google handed over one user's private data to the U.S. government, who requested it without a search warrant.
The contacts list and IP address data of Jacob Appelbaum, a WikiLeaks volunteer and developer for Tor was given to the U.S. government after they requested it using a secret court order enabled by a controversial 1986 law called the Electronic Communications Privacy Act, according to the Wall Street Journal. The law allows the government to demand information from ISPs not only without a warrant, but without ever notifying the user.
Sonic.net, a smaller ISP who was also asked to hand over data related Appelbaum, tried to challenge the order in court, but ultimately lost and was to give up the information. It's not known if Google resisted the request, but both companies did try to ensure that Appelbaum could at least be made aware of the data retrieval.
According to the company's own Transparency Report, Google received 4,601 user data requests from the U.S. government in the second half of 2010, and it complied with 94% of them. Those requests include warrantless inquiries as well as those accompanied by a search warrant.
Some Troubling Implications
The idea of an ISP handing over user data to governments without the aid of a search warrant has some troubling implications for privacy advocates and civil liberties proponents.
In the WikiLeaks case, the line between advocates and participants in the transfer of data can sometimes be blurry. If in its ongoing investigation into WikiLeaks the U.S. Department of Justice is free to ask Google, Twitter or Facebook for private data without users' knowledge, who's to say they can't access private information about people who have merely expressed sympathy for the organization?
Tech companies haven't necessarily rolled over and played dead on the issue. When the DoJ made a similar WikiLeaks-related request of Twitter in December, the company succeeded in having the order unsealed, meaning it was able to notify users about the request.
Google is among a number of tech companies that are asking Congress to rethink the law in light of the unexpected ways in which the Web has evolved in the last several yearsGoogle Hands Wikileaks Volunteer's Gmail Data to U.S. Government
September 06, 2011
Spy vs Spy: Cyber Crime, Surveillance on Rise in Latin America
Written by Southern Pulse
Phone tapping, data theft, and secret recordings have made headlines across Latin America in recent weeks, reflecting the growth of cyber crime and information trafficking in the region, as Southern Pulse explains.
Domestic spying is in the news this month in the Western Hemisphere. A subject that is often not discussed in formal settings has made its way to the front pages of at least a dozen countries in Latin America and the Caribbean over the past few weeks. The news includes phone taps, hacked emails, covert video surveillance and legislative debates over privacy online and offline. A confluence of events around the region and the globe as well as improved spying technology has pushed this trend into the open and could change how the spy vs spy, police vs crime and government vs opposition scenarios play out in several countries.
Certainly, there have been phone taps and secret recordings for decades in Latin America. Perhaps the most famous examples were the “Vlad-videos” in Peru under the administration of President Fujimori and National Intelligence Service chief Montesinos. What makes 2011 different is the surge in surveillance by governments across the political spectrum and the media providing increased coverage of the situation.
The technology and techniques are a mixture of old and new. Phone taps and illegal recordings are old technologies that have become more sophisticated while data mining of social networks is a new field that all governments around the globe are just beginning to understand. Private hacking gangs appear to have surpassed the capabilities of government intelligence agencies in terms of the ability to hack email and computers, creating a new black market for information trafficking.
It’s worth noting that the technology to encrypt data has also become cheaper and easier to use, but has not yet caught on in much of Latin America. However, the increased public nature of government and private sector surveillance should push an increased demand for privacy technologies in the coming year, both by criminal groups and civilians who want greater privacy from the government.
Some examples from recent weeks follow:
A New York Times article described enhanced intelligence cooperation between the U.S. and Mexico that includes phone tapping technologies. The U.S. has assisted in the creation of intelligence fusion cells in Mexico and is providing information to a vetted group of Mexican authorities so that they can conduct operations against criminal organizations.
In Honduras, an investigation revealed that the email servers at the presidential palace had been hacked, giving one or multiple organizations access to email, the president's schedule and budget documents. Foreign government involvement does appear likely at this point. An Israeli firm has been hired by the government to provide increased cybersecurity protection.
Even as officials from the government of former President Uribe are being investigated for phone taps and domestic spying on judges and political opponents, the Colombian government showed off some new surveillance capabilities. Police utilized new online forensic capabilities and arrested a hacker who broke into the account of a journalist. The government, under attack by a local branch of the hacking group Anonymous, has announced they plan to have a new CERT agency online before the end of the year that can counter and investigate attacks.
In Venezuela, phone calls by opposition candidates have been recorded and played on state television as a way of embarrassing those politicians. It appears state intelligence is behind the tapping of the phones. This news comes just months after other sources indicated that Venezuela’s intelligence services, with the assistance of Cuban intelligence and private hacking groups inside Venezuela and Colombia, have hacked into the private email accounts of journalists and politicians and have stolen their messages for at least the past five years.
In Bolivia, the government tapped the phones of indigenous protesters and U.S. embassy officials. President Morales then revealed phone calls made between the two groups as a way of showing a plot against his government. In the process, he showed that his government is tapping the phones of political opponents and foreigners living in the country.
In Argentina, a number of private emails by Kirchner government officials recently appeared on a website “Leakymails.” There are three aspects to this scandal worth considering. First, the content of the emails contains personal information about key political officials. Though most of the emails released are rather boring, one set of emails does appear to link a government-backed candidate to organized crime. Second, the question of how the emails were obtained may point to the state intelligence service or former officials within the intelligence service committing domestic espionage. There are indications outside non-state groups hacking into government officials’ email account. Third, an Argentine judge ordered local ISPs to block the Leakymails websites. This opens a new chapter in web censorship in Argentina and the region and places the question of how private ISPs filter Internet content directly onto the policy agenda.
The government of Brazil fined Google for failing to reveal identifying information about an Internet user. According to Google, Brazil is the top country in the world for making requests to obtain user information or to block search results through legal actions. Part of this is due to Brazil’s speech laws that give public officials broad sway on any issue that could be considered libel or slander.
Similarly, the government of Ecuador is considering passing a law that would require Facebook and Twitter to provide information about anonymous postings based out of that country. Though President Correa has backtracked on his initial request, draft versions of the law suggest an expanded government authority to track the identity of users online.
The governments of Chile and Brazil have said they are starting to monitor social media sites as a way of detecting criminal activity as well as potential social unrest. For Brazil, this operation has included a military unit dedicated to cyberwarfare and cyberdefense. This unit is also receiving training from Israeli and U.S. firms in offensive operations in the cyber-domain, the first Latin American government to admit that publicly. For Chile, the monitoring of social media has made the government a target for the international hacking group Anonymous, which is also attacking government websites as a way of supporting recent protests by student groups. Chile’s domestic cybersecurity units, particularly those within the police, are now forced to increase their capacity to handle the incidents.
The issues reported only hint at some of the issues that remain hidden from public view. Police and intelligence organizations across the region have expanded their capacity for surveillance in recent years and a number of foreign firms from the U.S., Europe and Israel are assisting them in that effort. Meanwhile, criminal groups have banded together with hackers from Eastern Europe and Russia to enhance their technological capabilities to steal government and corporate information.
Back at the regional level, Latin American intelligence agencies are running into the same problem as their developed world counterparts: how do they analyze all the data they collect? The ability to collect and store data is moving more quickly than the ability to process, analyze and utilize it. For Presidents Chavez and Morales, who have very specific political targets for their intelligence collection campaigns, this has not been much of a problem. However, for Mexico, Brazil and Colombia, whose intelligence efforts do focus on organized crime (in spite of some high profile scandals in which they don’t), they cannot keep up with the data in a timely fashion. All three countries are known to have missed arrest opportunities in which they had data about a relevant target but did not filter it out of their mounds of data quickly enough to operationalize it.
Lurking among all of these government-related surveillance and privacy issues is an increase in private sector and corporate espionage in the region. Much less reported, companies have had gigabytes of data stolen by local private hacking groups and foreign governments from Eastern Europe and East Asia. In various surveys, over half of corporations in the region report being victim of cyberattacks and theft of data. These corporations, when they manage to detect the problem, generally do not report the problems to the governments. While it is apparent from the above examples that governments have plenty of surveillance issues on their plate, this private sector surveillance challenge cannot be ignored. The threat that some corporations and criminal groups may surpass local police and intelligence agencies in their surveillance and spying capabilities can be a problem for the future security of these states and the civil rights of their populations.
Reprinted with permission from Southern Pulse. See original article here.
September 14, 2010
H.P.'s Foreign Entanglement - NYTimes.com
H.P.’s Foreign Entanglement
September 13, 2010, 11:30 amThe last month or so has not been very pleasant for Hewlett-Packard.
The company’s recent 10-Q disclosed that the Justice Department and Securities and Exchange Commission have expanded an investigation of possible bribe payments in connection with contracts the company obtained in Russia. Such payments may violate the Foreign Corrupt Practices Act (F.C.P.A.), an area where the federal government has investigated more aggressively over the last few years.
This disclosure comes on top of other recent legal problems at H.P. Joe Nocera’s recent column in The New York Times described H.P.’s directors as “the most inept board in America” for its lawsuit against its former chief executive, Mark V. Hurd. On Aug. 30, the Justice Department announced a $55 million settlement of a civil fraud claim against H.P. for paying “influencer fees” — in other words, kickbacks — in return for favorable recommendations to the federal government to buy the company’s products.
About White Collar Watch
The bribery investigation began in Russia in connection with a contract with a former German subsidiary of H.P. that involved the installation of a computer network in, of all places, Russia’s chief prosecutor’s office. Russian and German prosecutors are looking into the transaction, which took place from 2002 to 2006, and have requested documents from the company.
In its 10-Q, H.P. notes for the first time that the investigation is not limited to that one contract in Russia: “The U.S. enforcement authorities have recently requested information from H.P. relating to certain governmental and quasi-governmental transactions in Russia and in the Commonwealth of Independent States subregion dating back to 2000.”
It is not clear how many contracts or transactions may be involved, but the expanded time frame and geographic scope probably means the inquiry will be an extended one, rather than something H.P. can wrap up quickly. As sometimes happens, once one part of a multinational company is scrutinized for bribery, problems in other areas can pop to the surface.
The recent settlement by Siemens of overseas bribery charges shows how corruption can spread throughout a company. Subsidiaries operating in France, Argentina, Turkey and the Middle East were found to have paid bribes to obtain contracts, and Siemens paid $800 million in criminal fines to the Justice Department and disgorgement to the S.E.C. as part of the settlement.
The F.C.P.A. is part of the federal securities laws, and most cases involve the S.E.C. along with the Justice Department because one part of the act requires corporations to maintain proper books and records, something that is rarely done when a bribe is paid. The Justice Department has become much more aggressive in pursuing foreign bribery cases, including conducting an undercover sting operation that resulted in more than 20 people being arrested on charges of offering bribes to participate in a fictitious security contract with an African nation.
The recent addition of enhanced whistle-blower rewards in the Dodd-Frank Act authorizes the S.E.C. to pay 10 percent of any recovery realized, up to a maximum of 30 percent, to those who provide valuable information related to any type of securities fraud. F.C.P.A. cases are very likely to be among the most common instances for whistle-blowing by corporate employees.
F.C.P.A. charges are also very difficult to defend once the government obtains evidence that payments were made to foreign officials “in obtaining or retaining business” in that country. The act recognizes two defenses to a charge, first the payment was lawful under the laws of the country where it was made, and second the expenses were reasonable for the promoting the product or implementing the contract.
Neither defense has been successfully offered in court to this point. Even worse, according to an article by Kyle Sheahen that will be published shortly in the Wisconsin International Law Journal, “the defenses are virtually useless in practice.”
Even if H.P. is found to have violated the F.C.P.A., that does not mean the company’s ability to win government contracts would be at risk. Professor Mike Koehler, who analyzes these issues on the FCPA Professor blog, noted that the Siemens settlement did not seem to have any real effect on the company’s relationship with the federal government. “One of the unfortunate beauties of engaging in bribery the U.S. government terms ‘unprecedented in scale and geographic scope’ is no slowdown in U.S. government contracts in the immediate aftermath of the enforcement action,” he noted.
The impact from any F.C.P.A. violation may change, however, under a bill under consideration in Congress. The legislation, called the Overseas Contractor Reform Act and passed by the House Oversight and Government Reform Committee in July, requires debarment from future government contracts for any person or company found in violation of the F.C.P.A. The bill states the policy that “no Government contracts or grants should be awarded to individuals or companies who violate the Foreign Corrupt Practices Act.”
Whether the House and Senate will pass the legislation remains to be seen, but corporate integrity is, like mom and apple pie, not easily opposed. While the current aversion to corporate America may be abating, this is the type of reform that may well take hold to put some more bite into the F.C.P.A.
For H.P., a burgeoning foreign bribery investigation is not good news because of the costs and uncertainly it engenders. If the Overseas Contractor Reform Act becomes law, it will make it even more imperative that the company try to avoid any finding of a violation of the F.C.P.A., perhaps through a deferred or non-prosecution agreement that can let it avoid a finding of a violation.
– Peter J. Henning
The Overseas Contractor Reform Act
H.P.'s Foreign Entanglement - NYTimes.com
