Showing posts with label uk. Show all posts
Showing posts with label uk. Show all posts

Monday, January 10, 2011

Welcome to 2011!

Happy new year, gentle readers, slightly belatedly, and for Pangloss it's all new indeed: new job, new title (Professor of E-Governance), new workplace (Strathclyde Law School) and new abode (back in Auld Reekie). All of this makes me very happy if in the short term, slightly, dishevelled, abandoned, hyper and well, fill in the adjective of your own choice :)

Please note AGAIN my new email address is lilian.edwards@strath.ac.uk and my snail address should you conceivably need it is

School of Law

Faculty of Humanities and Social Sciences

Graham Hills Building, Level 7 (GH 7.13)

50 George Street

Glasgow G1 1QE


If any of you can remember the achingly long time ago before the festive season, the burst pipes (oh so don't ask) and the Snowpocalypse, you may remember we were a little exercised about Wikileaks. The nice people at Practical Law Company (PLC) asked me to write a briefing on what issues might be involved for the UK legal system, and you too can read it for free here. Basically I think the key issues are:

- were criminal offences committed of DDOS by UK residents? (almost certainly yes)
- is merely downloading a tool which can be used to help commit DDOS a crime? (yes, though proof of intent may be tricky)
- can IP addresses of attackers be captured & UK ISPs be asked to help identify such persons (yup)
- can ISPs in UK conceivably be asked to block Wikileaks sites or domain names? (A. probably not, unless by some back door means such as invoking copyright laws under s 97A of the CDPA, or by some hitherto latent common law power which would need at least a High Court application in England & Wales or Court of Session in Scotland, and still be pretty uncertain).

The last point, though it seems farfetched, is a topical one given the ill judged comments by Ed Vaizey just before Christmas suggesting that all online "adult sexual materials" sites should be blocked "at source" by UK ISPs , with only adults then allowed to opt back in. Beyond the obvious difficulties of definition of such sites, over blocking, under blocking, the herculean task of assembling such a list, most of which will be overseas, evasion, ULL-jumping, VPNs, proxy servers, the fact that kids are better than adults at hacking this, etc ad nauseam, the simple fact is that such blocking solutions don't work and don't scale on practical terms unless you're willing to devote the resources and the Stalinist control of a country like China to such a pursuit. Just look at Australia for the trouble it has caused there in a smaller country with far fewer ISPs and far more history of state censorship than here.

I'm all for thinking of the children, really (actually, to be honest, as a child's rights lawyer on the side I also wonder if anyone has paid attention to the emergent minor child's right to autonomy, see Gillick, see future possible ECHR applications..?) but right now this seems like an expensive, embarrassing, largely pointless red herring to go down. IF parents want to stop kids accessing porn, there are many good products out there to allow them to do it at home eg |Net Nanny and its ilk. The Daily Mail will like it though :-)

But more than ALL that, what worries me is the huge possibility for scope creep here. As I have noted often, often before, once you have one scheme for blocking huge amounts of URLS without transparency or accountability in place, what is the temptation to start adding other URLs to it you don't like? High , in my cynical opinion. (And whatever the government means by blocking sites "at source" this will have to involve an Internet Watch Foundation style blocklist - because every single adult site closed down by its host service in UK will simply shift to a host abroad in under 24 hours. Indeed the Telegraph story seems to clearly indicate an IWF type list would be used : "Ministers now want companies to use the same technology to stop children accessing adult images".)

So on a brighter more positive start to the new year, here's a few events I plan to be at, be running , be speaking at, and so forth:

Workshop on Free and Open Communication on theInternet (FOCI), to be held February 24-25, 2011 at Georgia Tech in Atlanta,Georgia (invited expert speaker)

BILETA, Manchester Metropolitan University, 11th-12th April

3rd Web Science Conference, Koblenz, Germany - June 15-17

GikII in Gothenberg, Sweden!! GikII goes Scandinavian hardcore:) , contact Matthias Klang for info - 27-28 June

SCL Policy Forum, London, Herbert Smiths, September 15-16th - I'm curating this one on a theme of the new shape of European regulation as the DPD, ECD and other major instruments head for reform.

Wednesday, February 17, 2010

Filtering round up: French filtering, Ireland backs off, UK sidesteps?

Bit of a round up here on some interesting stories of last few weeks on aspects of filtering that I've been accumulating.

Increasingly, stories as to filtering out illegal content such as child porn; blocking infringing downloads of copyright material by deep packet inspection and disconnection; and filtering to fight the "war on terror" are converging. For all of these, the same issues come up again and again: privacy; proof, transparency and other aspects of due process; and scope creep. These 3 stories illustrate this well. For my own recent take on the issue of Net filtering, as I said before, see my Internet pornograohy chapter on SSRN, which suggests the need for a Free Speech Impact Assessment before non transparent stateNet filtering schemes are introduced, for whatever purpose.

Filtering of illegal content in France

Thanks to @clarinette on Twitter (whose real name I am not absolutely sure of!!) for pointing me to another important European move towards non transparent Internet filtering - this time in France. From La Quadrature de Net:

Paris, February 11th, 2010 - During the debate over the French security bill (LOPPSI), the government opposed all the amendments seeking to minimize the risks attached to filtering Internet sites. The refusal to make this measure experimental and temporary shows that the executive could not care less about its effectivity to tackle online child pornography or about its disastrous consequences. This measure will allow the French government to take control of the Internet, as the door is now open to the extension of Net filtering.

The refusal to enact Net filtering as an experimental measure is a proof of the ill-intended objective of the government. Making Net filtering a temporary measure would have shown that it is uneffective to fight child pornography.

As the recent move1 of the German government shows, only measures tackling the problem at its roots (by deleting the incriminated content from the servers; by attacking financial flows) and the reinforcement of the means of police investigators can combat child pornography.

Moreover, whereas the effectivity of the Net filtering provision cannot be proven, the French government refuses to take into account the fact that over-blocking - i.e the "collateral censorship" of perfectly lawful websites - is inevitable2. Net filtering can now be extended to other areas, as President Sarkozy promised to the pro-HADOPI ("Three-Strikes" law) industries3."

LQN are never exactly ones to mince their words:-) so the strong nature of this statement should perhas be taken with some care - but Pangloss intends to go investigate this story further.

Ireland, Eirecom, disconnection and DP

Meanwhile in a surprising twist, Eirecom have apparently pulled out of the negotiated settlement they reached in January 2009 to disconnect subscribers "repeatedly" using P2P for (alleged) illicit downloading. This was the result of the Irish court case brought against them by various parts of the music industry for hosting illegal downloads, and appeared to open up a route to "voluntary" notice and disconnection schemes on the part of the ISP industry; a worrying trend both for advocates of free speech, privacy, due process, ISP immunity and net neutrality.

Now however according to the Times:

As part of the agreement, Irma said it would use piracy-tracking software to trace IP addresses, which can identify the location of an internet user, and pass this information to Eircom. The company would then use the details to identify its customer, and take action.

But the office of the Data Protection Commissioner (DPC) has indicated that using customers’ IP addresses to cut off their internet connection as a punishment for illegal downloading does not constitute “fair use” of personal information. Irma and Eircom have asked the High Court to rule on whether these data-protection concerns mean the 2009 settlement cannot be enforced.

This is very, very interesting. A court case on this might settle a number of outstanding DP legal issues: whether IP addresses are "always" personal data (on which see also a recent EU study demonstarting the disharmny across Europe on this) and if not, when; what the scope of the exemmptions for preventing and investigating crime are; and what"fair" means in the whole context of the DP principles, purpose limitation and notice for processing.

Not only that but as the Times indicate, the human rights issues which have been repeatedly aired in debate around "three strikes" generally, would also come into play as well, as the straight DP law. Is use of a customer's personal data to cut them off from the Internet a proportionate response to a minor civil infringement? Does it breach a fundamantal right of freedom of expression or association? Does it breach due process? This could be the DP case of the decade. Pangloss is geekily excited. If anyone out there is involved in this case, do let me know.

UK cops don't terrorise the IWF?

Finally , as widely reported, the UK Home Office has introduced a website hotline for the public to report suspected terrorist or hate speech sites. Reports are then vetted by ACPO, the Association of Chief Police Officers, who it appears can then take action, not only by investigating in normal way, but also by asking the relevant host site to take down. The official press release notes : "If a website meets the threshold for illegal content, officers can exercise powers under section 3 of the Terrorism Act 2006 to take it down." Indeed on serving such a notice, the host only has 2 days to take down or loss immunity under the UK ECD Regs.

As TJ McIntyre also notes, this is a rather significant development, not just in itself but for sidestepping use of the Internet Watch Foundation (IWF). There have been persistent rumours since and before then-Home Sec Jacqui Smith's famous speech in Jan 2008, that theUK government was attempting to pressurise the IWF into adding reports of hate speech/terror to its block- or black-list; and that the IWF was as strongly resisting this, hate speech being a somewhat more ambiguous and controversial matter than adjudicating on child sexual imagery.

It seems then that the IWF has held fast and the Home Office have backed off and created their own scheme, which embraces only take down in the UK, not access blocking to sites abroad (?). Whether this is ideal remains to be seen. The IWF, at least until recently had the services of esteemed law prof Ian Walden as well as a lot of accumulated experience, and may have been a better informal legal tribunal, than a bunch of chief constables, to decide on the illegality of sites under terror legislation. Who knows. On the other hand , adding alleged terror URLs to an invisible, encrypted, non public blocklist defeats every concept of transparency and public debate regarding restrictions on freedom of political speech, and Pangloss is glad to see it avoided.

Pangloss's view remains that such difficult non-objective issues are best decided by the body long set up to deal with questions of hazy legal interpretation: namely, the courts. The definition of "terrorist" material for the urposes of s 3 of the 2006 Act is as follows (s 3(7)):

"(a) something that is likely to be understood, by any one or more of the persons to whom it has or may become available, as a direct or indirect encouragement or other inducement to the commission, preparation or instigation of acts of terrorism or Convention offences; or

(b) information which—

(i) is likely to be useful to any one or more of those persons in the commission or preparation of such acts; and

(ii) is in a form or context in which it is likely to be understood by any one or more of those persons as being wholly or mainly for the purpose of being so useful."

Well I hope that clears everything up :-) Still confused? Try s 3(8)).
"(8) The reference in subsection (7) to something that is likely to be understood as an indirect encouragement to the commission or preparation of acts of terrorism or Convention offences includes anything which is likely to be understood as—

(a) the glorification of the commission or preparation (whether in the past, in the future or generally) of such acts or such offences; and

(b) a suggestion that what is being glorified is being glorified as conduct that should be emulated in existing circumstances."

Er give me that last line again?

As with previous contested IWF rulings, the same questions come up again: what is the appeal from a take down notice under s 3 to the regular courts? What notice if any is given to the site owner and the public of therfact of and reasons for take down? What safeguards are there for freedom of speech? None of these are mentioned in ss 1-4 of the 2006 Act. Nor does there seem to be a general provision in the Act for Part 1 or the whole of the 2006 Act for appeals or review. Since the police are a public body however, one imagines that judicial review might be competent. EDIT However I am helpfully informed that ACPO is a company limited by giuarantee and regards itself as not a public body at least for the purpose of FOI requests. Clarity on this would be very desirable. And as noted above record keeping of take down for terror reasons seems to be poor due to voluntary compliance by ISPs.

Finally why introduce these powers if they are to be circumvented anyway? The Register reported on 12 November 2009 that so far no notices had been issued under s 3 anyway, because the UK ISPs involved had agreed to take down voluntarily, and no record has been kept of how many sites this involved. Furthermore if a site is taken down in the UK it won't be hard to resurrect it in a foreign country, where most extremist sites will be based anyway: El Reg reports that one site the police allegedly have their eye on, al-Fateh, a Hamas anti-Jewish kids site, is in fact hosted in Russia. One imagines this will continue to increase pressure on the IWF to expand the block list despite the latest moves.


Friday, October 09, 2009

New UK Internet Libel case coming?

Thanks for the heads up from @loveandgarbage (c/o Twitter) for the following news from David Osler, author of Dave's Part, who is facing libel action from Tower Hamlets Tory activist Johanna Kaschke, following a post on this blog in 2007. She is also (says Dave) suing two other Labour Party members, Alex Hilton and John Gray, over related issues.

"The uncontested facts here are that Ms Kaschke, as a student and member of the centre-left SPD in her native Germany in the 1970s, helped to organised a benefit concert for Rote Hilfe, an organisation officially designated left-extremist, designed to raise funds for the legal fees of Baader-Meinhof Gang suspects; that she was herself subsequently arrested on suspicion of terrorism; and that she spent several months on remand, after which she was released and compensated for unfair imprisonment.

It is further uncontested that Ms Kaschke nominated herself as Labour candidate for Bethnal Green & Bow in 2007; that she received just one vote; that shortly thereafter she defected to George Galloway's Respect party; shortly after that, she joined an as-yet-unspecified Communist Party; and that shortly after that, she became a Conservative. She was, in other words, a member of four political parties in 12 months.

Interestingly, the jury will be asked to rule on whether or not it is libellous to call somebody 'one cherry short of a Schwarzwalderkirschtorte'. Not my words, but those of a reader, left in the comments box. If I lose on that point, the consequences for internet freedom of speech are clearly considerable."
Remarkable, and not just for the linguistics (German cookery experts are invited to elucidate me on the exact translation).

Sites such as the BBC , Yahoo! etc have of course long worried about the liability implications of comment sections on "live" blogs whether moderated or unmoderated. It seems well settled that a host site owner can be liable for publishing the defamatory remarks of commenters. It is equally well settled however that under both Defamation Act 1996 s 1 and the EC E-Commerce Directive Arts 14 and 5, defences are open to hosts in respect of content posted by another.

The interesting point here is I think about the quality of the quoted comment. The English courts have so far, rather admirably, taken a fairly robust attitude towards too quickly attributing the quality of libel to remarks made in the typical hasty cut and thrusts of Internet babble. Most notably in Sheffield Wednesday v Hargreaves [2007] EWHC 2375: particularly
  1. It seems to me that some of the postings which concern the Claimants border on the trivial, and I do not think that it would be right to make an order for the disclosure of the identities of users who have posted messages which are barely defamatory or little more than abusive or likely to be understood as jokes. That, it seems to me, would be disproportionate and unjustifiably intrusive. The postings which in my judgment fall into this category are those numbered 4 ("xdanielx"), which is only capable of being argued to be defamatory by devising a frankly implausible meaning, 7 ("Foot04"), which is barely if at all defamatory of the Second Claimant, 8 ("southy") and 14 ("cbrbob"), both which in my view are plainly intended as jokes and would have been unlikely to be taken seriously, let alone understood in the senses for which Mr Eardley argued, and 10 and 11 ("paulrs") which I regard as no more than saloon-bar moanings about the way in which the club is managed, rather than a serious indictment of grave mismanagement. In my view the same is true of 6 ("Auckland Owl") and 12 ("danksy"), which add to the mix a smidgeon of personal abuse of a kind which I would have thought most unlikely to be taken seriously. I take a similar view of the posting numbered 2 ("DJ Mortimer"), which is no more than mildly abusive and is fairly plainly comment.
  2. The postings which I regard as more serious are those which may reasonably be understood to allege greed, selfishness, untrustworthiness and dishonest behaviour on the part of the Claimants. In the case of those postings, the Claimants' entitlement to take action to protect their right to reputation outweighs, in my judgment, the right of the authors to maintain their anonymity and their right to express themselves freely,
Thuis was of course however an action for discloure of the identity of the commenters by Norwhich Pharmacal orders , not an actual action on liability.

But see also Smith v ADFN , misreported as Adven in Edwards and Waelde 3rd ed, oh dear.

Here Eady J took possibly the firmest imaginable stance in discouraging libel actions re mere "vulgar abuse " (eg a description of plaintiff in comments as "a destructuive twerp")

  1. The question on which I need to focus next is whether there has been persistence with regard to claims that can properly be characterised as "totally without merit". If so, I could come to the corresponding conclusion that his present application to lift the stays would to that extent also be totally without merit. I have rehearsed above a number of examples where claims have been made in respect of postings which are so obviously, in their context, either mere vulgar abuse or fair comment (sometimes both). There are also examples of a converse and corresponding interest in the subject-matter, for various reasons, such as to give rise to occasions of qualified privilege.
  1. I referred to common themes in the postings, such as that of "bullying" other users and making "threatening demands" for money. That is classic fair comment territory and, in the light of the modern authorities, it is inconceivable that a jury would find any of those who expressed such a view "malicious" – let alone all of them. Opinions may be expressed in exaggerated and strident terms; the only requirement is that they be honestly held. It is fanciful to suppose that any of these people did not believe what they were saying. Even if they reached their conclusions in haste, or on incomplete information, or irrationally, the defence would still avail them. It would be wasteful to let proceedings go forward merely on the footing of a series of formulaic assertions to the effect that the individual concerned did not honestly believe what he was saying. There is accordingly no realistic prospect of any such claims achieving the only legitimate goal of vindicating reputation.
  2. I would not suggest for a moment that blogging cannot ever form the basis of a legitimate libel claim. I am focusing only on these particular circumstances. It does seem to me appropriate to characterise these claims as totally without merit. I will therefore make an extended civil restraint order, which means that Mr Smith cannot launch any further libel proceedings arising out of the Langbar matter based upon bulletin board blogs without obtaining my written permission."

These remarks are technically obiter in relation to Osler's case as the issue in Smith was the maintenance of injunctions rather than a finding of libel. However in relation to the comment post in particular, in short, I do not think Mr Osler has much to worry about :-)