Wednesday, November 25, 2009

FW: Blog post anyone?

I volunteered to write a blog post for my employer. This is the transcript so far...

Sent: 25 November 2009 13:45
To: David Kemp
Subject: Re: Blog post anyone?

Hi David,

I’ve passed this one by [the bosses] also... so here’s our combined feedback:

While we probably shouldn't use the Swamp blog for our own political rants (if we do then deciding what we do and don't allow might prove tricky / subjective) I think it's a good thing for us to be blogging about.

Although I said it’s good to have your own opinions, can you make it a little more independent / questioning?

“Someone must have told the current government that it's nearly 2010, as they've been drafting legislation that actually addresses the online world as it is today.”

We have to be a little sensitive to the government being a big client of ours...

If we look across all the digital work the government does, Andrew would say they're probably some of the more progressive of our clients, so maybe hack this statement back.

“And, if that's not enough,” and "stupid plans like these"

Getting a bit too personal...

Does all the make sense?

We’re very keen for you to blog about this, we need to

1) get the tone right....ask questions, get a debate going....”some people might see this as being...” rather than “this is...”

2) be sensitive to the government being a client of ours

From: David Kemp
Sent: 25 November 2009 13:04
Subject: RE: Blog post anyone?

Is this too long?



Someone must have told the current government that it's nearly 2010, as they've been drafting legislation that actually addresses the online world as it is today.

Two of these bills seem particularly important, and everyone who uses a computer connected to another computer should be taking notice.

The first, mentioned by none less than the Queen, is the Digital Economy Bill. This was long awaited as the bill which would give OFTCOM the power to move the UK's creaking broadband into the future. However, there are a few 'additions':

Basically, this bill will enable copy right holders to effectively cut off your internet connection if they believe someone's been using it to share copyrighted works. (It doesn't have to be you, it could be your neighbour's hacker son, your housemate, or even someone running a botnet.)

And, if that's not enough, it also empowers the government to change this law as they feel fit.

There also won't be any costly legal appeal process against getting cut off - of course, you can protest your innocence, but it won't be in a court of law.

This is all despite condemnation of this approach from the European Parliament

There's been a lot of talk about this on the web [eg, Open Rights Group], with some pointing out that Peter Mandelson had this bill drafted after a dinner with David Geffen.

To me, it seems like an online ASBO, but rather than the daily-mail-reading curtain-twitchers complaining, it will be the likes of Sony, Disney, Fox, Microsoft, Adobe...and rather than being banned from swearing in Dewsbury Town Center, you'll be banned from using the internet.

There are a lot of legitimate isuses this bill raises - not least is the fact that tracing internet traffic is very difficult, and proving that traffic originated from a certain IP address is almost impossible. There's also the fact that you can hack WEP and WPA wireless security, so unless you've changed all the passwords and settings on the wireless router your ISP gave you, you're probably at risk of some enterprising person stealing your bandwidth and putting your connection at risk.

It also means that anyone who runs an internet hotspot will have probably to turn it off. If anyone uses it to share copyrighted material then it's the owner of the hotspot how will face prosecution.

To me, this bill seems to be trying to enforce copyright laws that simply don't make sense in an age when making a million copies of a song or film is essentially free. I fully understand that film and record companies need to make money to make films and music, but they also need to adapt to the world in which we live. It seems suprising that an industry that is less than 150 years old is so resistant to change.

Even more worrying than getting my internet cut off is the plans, under The Intercept Modernisation Programme, to require "Communication Service Providers" (such as ISPs and phone companies) to store details of everyone who you contact using their service, and, eventually, the details of the communications. [bbc news reported on this, and LSE have a nice briefing]

I wrote to my MP outlining my opposition to this idea, which fall into roughly three areas: cost, security, and privacy.

There are ongoing costs for storage (and retrieval) of this information, but the cost of writing a system to understand the myriad of ways in which communications take place on the internet is phenominal - you'd have to reverse engineer facebook, google mail, hotmail, yahoo! mail, msn, jabber, aol chat, irc, the comments system on this blog... the list is pretty much endless, and expanding all the time.

With regards to security - so far the government have proved pretty inept at handling personal data, and a hacker would have a field day with this volume and detail of information. Also, the interception itself opens a new possible attack - lookup "man in the middle attack" and you'll get the idea.

The privacy issues are the same as ever. I thought I had the write to conduct my business without the fear of incriminating myself.

What can we do? The biggest hope is that these don't get implemented until after the election - the tories claim to be against the digital economy bill, and we're going to have to face the reality of the broken economy sometime, so hopefully stupid plans like these will be scrapped on the grounds of cost.

You can, however, take more active action - the Open Rights Group are urging people to telephone their MP, and sign the petition (over 20,000 people had at the time of writing).

Despite its foibles, I love the internet, and I certainly think it's worth taking a few moments of time to try to protect.