Categories
Business ofcom piracy Regs surveillance & privacy

Ed Richards confirms #DEAct copyright infringement notices scheme will not be operational for many months #deappg

The Culture Media and Sport Committee held an evidence session on the work of Ofcom today. The Committee briefly touched on the DEA and Louise Bagshawe, the Conservative MP and author, questioned Ofcom’s CEO Ed Richards about the implementation schedule of the Act.

Mr Richards stated that that the Copyright Infringement Notification scheme will not be operational for many months from now and that it may well take another 12 months before the first CIRs are sent out. He further explained that:

  • As members are aware, Ofcom completed its work on the Obligations Code and submitted it to Government months ago.
  • The Code is currently being subjected to a scrutiny process across Government departments and will be submitted to the EU Commission once it has cleared this process.
  • Following the JR, the Government will have to reissue the Sharing of Costs Order to accommodate the High Court’s decision that ISPs cannot be asked to pay set up costs.
  • Ofcom will submit its report on the web blocking powers under the DEA in the course of this month

Ed Richards also briefly touched on Ofcom’s content regulation role. He explained that this power is not yet redundant but potentially on ‘on borrowed time’, given the ease of accessing content on the internet. He stated that this is something that Parliament needs to work out over the next years and that the new Communications Act will be an opportunity to implement changes.

I assume this is Ed Richards side stepping the complicated issue of web filtering.

Readers may be aware that Ms Bagshawe is a former author and in favour of rightsholder’s interest. In her statements on online copyright issues she frequently refers to her conversations with the BPI.

I am indebted to ISPA for the detail of this report. For those interested the Judicial Review judgement can be found here with cost sharing covered in paragraphs 184 – 200.

Categories
Apps Business mobile connectivity security

Big endorsement from RIM re consumerisation of the workplace “problem” #iOS #Android

RIM has announced plans to extend its BlackBerry Enterprise Solution to the support of non RIM devices. This means that Android and Apple phones and tablets will be able to be incorporated in the RIM device management and security environment.

This is a timely announcement and follows a piece1 that I wrote a few weeks ago regarding the problem of consumerisation of the workplace.  RIM also says that it is responding to requests from its enterprise customers and that its target market is enterprises and government organisations.

There is a huge market outside these sectors. RIM has highlighted the problem but by focusing on big business is leaving the door open for others to play in the small and medium sized enterprise space.

It is interesting that RIM does not mention Microsoft in its press release. Presumably it sees Windows as a totally separate/mutually exclusive  environment.  I wouldn’t bet on that.

1 I’m not of course saying that the RIM announcement is in response to my article – we are clearly just thinking along the same lines:)

PS the RIM PR seems to have disappeared from their website for some reason. I happen to still have the copy which I have, for your delight and delectation, replicated below:

Categories
Cloud End User online safety scams

Phishing – direct mail style

Just received my first ever phishing attempt via direct mail! With a second class stamp on it:) The only means of contact are a  ymail address and two Chinese telephone numbers, one of which is a fax line.

The funny thing is if I had received this letter ten years ago I might not have been so certain it was a scam but because it is such a common feature of email spam nowadays I know to just bin it. I wonder what he return on investment is – we are talking an envelope, a sheet of A4 paper, some ink and a stamp. It’s a lot more expensive to do it this way than to send out millions of emails.

I’m not going to reveal anymore details though. The writer has asked me to keep this totally confidential:)

PS the header photo was taken at dawn on the breakwater at Peel in the Isle of Man. Regular readers will know that I am the Mayor of Peel breakwater.

Categories
Business piracy Regs surveillance & privacy

Top EU judge says web blocking to prevent copyright infringement infringes fundamental human rights #deappg #deact @edvaizey

The Court of Justice of the European Union yesterday issued a press release stating that “According to Advocate General Cruz Villalón, a measure ordering an internet service provider to install a system for filtering and blocking electronic communications in order to protect intellectual property rights in principle infringes fundamental rights.”

In other words web blocking to try and prevent unlawful P2P downloading is wrong.

“Advocate General Cruz Villalón considers that the installation of that filtering and blocking system is a restriction on the right to respect for the privacy of communications and the right to protection of personal data, both of which are rights protected under the Charter of Fundamental Rights. By the same token, the deployment of such a system would restrict freedom of information, which is also protected by the Charter of Fundamental Rights.”

This is an independent legal opinion and not a court judgement but I understand that the court normally adheres to the Advocate General’s line. This particular opinion is issued in relation to the Scarlet Sabam case which involves copyright infringement. In my mind this should also extend to other areas where calls have been made to introduce web blocking such as porn.

It will be interesting to see the reaction to this opinion in the UK. Communications minister Ed Vaizey has been in the press recently with his controversial initiative to see whether ISPs and RightsHolders would be able to find an acceptable way of blocking access to sites promoting P2P file sharing and copyright infringement.

Categories
Business piracy Regs surveillance & privacy

Don’t block me #DEAct #DEAPPG

It’s a while since I covered the Digital Economy Act, its ramifications and repercussions but last week saw the court hearings take place for the BT/TalkTalk Judicial Review. I was somewhat mistaken in the belief that we might also hear the output of the JR last week but this is not so. The judge needs to go away and deliberate in the way learned people deliberate (this is either hand on chin looking thoughtfully into the distance or chin on chest looking down at interlocked fingers).

The media is already saying that the DEAct implementation is going to be subject to long delays – it already is – we have been waiting for the publication of the Code of Practice for months now. What has been going on in the meantime is further lobbying by Rights Holders to try and get ISPs to block access to websites that promote or support copyright infringement.

Initially this was seen as strange because the DEAct already provides for this to be looked at in the event that the three strikes mechanisms isn’t seen to be working. Cake and eat it springs to mind.

With hindsight it looks as if this was an insurance policy on the part of the RHs in case the DEAct was thrown out in court or subject to delays.

Ed Vaizey has already met with ISPs and RHs in round table meetings to digital content and piracy, the second time being on 23 February 2011. No agreements were made and I believe this is a very long way off. A further meeting is being held next week.

Blocking is likely to be expensive, ineffective, have unintended consequences (eg innocent websites being blocked), seen as censorship, stifle the open growth of the internet ecology and require huge involvement of the judiciary – I certainly would not be happy with ISPs or Rights Holders taking ownership of choosing which sites to block.

Come on guys. Lets try and see a bit of sense here.

Categories
Business piracy Regs

#DEAPPG meeting to discuss IP review & what have the Spanish been doing now!

In November the Prime Minister David Cameron announced an independent review of how the Intellectual Property framework supports growth and innovation. Chaired by Professor Ian Hargreaves the review will report in April 2011 with evidence due by March 4th. The Hargreaves review aims to identify barriers to growth within the regulatory framework protecting IP in the UK.

With this review in mind the Digital Economy All Party Political Group (DEAPPG) met at the House of Commons last night for a panel debate chaired by Lord Lucas. The panel was

  • Martin Weatherall MP (background in the Rights Holders industry)
  • Jeff Lynne (Coalition for the Digital Economy)
  • Saskia Walzel (Consumer Focus and the evening’s sponsor)
  • Simon Indelicate (recording artist)

A few points stuck in the mind.

Categories
Business piracy Regs surveillance & privacy

@edvaizey answers to @tom_watson questions – take note @Marthalanefox #DEAct #deappg

portcullisYou have to be particularly interested in a topic to read Hansard, the report of parliamentary proceedings. Twitter has made it a lot easier, albeit hit and miss – you typically have to catch the tweet in the stream as it happens.

This week Ed Vaizey gave some answers to questions put by ISPA Internet Hero Tom Watson MP. Specifically Mr Vaizey said that the impact assessment on the DEAct suggested that the additional costs that would have to be applied to consumers broadband lines would have a relatively small but permanent effect of reducing demand for broadband connection by between 10,000-40,000. All assuming that the ISPs would pass on the full costs to their customers.

There are a few observations to make here.

Firstly the obvious one is that this goes against another government policy of trying to promote digital inclusion. Might the government now want to subsidise 10,000 – 40,000 broadband connections to offset the fact that they will not now be able to afford broadband. I wonder whether Martha Lane Fox, the government’s own Digital Inclusion Champion has any comments to make here?

The second point concerns the numbers used in the Impact Assessment itself. There is very little confidence within the ISP industry that the government got this right.

The Impact Assessment assumes that the total annual cost to all ISPs is between £30m and £50m. TalkTalk and BT have been suggesting that the annualized costs to their companies along are considerably higher than the total assumed for the whole industry.

The Impact Assessment clearly needs reviewing. Broadband expansion has been largely down to big cost reductions by ISPs in a very competitive market place. There is a clear relationship between broadband penetration and cost of the service. It has long since got to the point where consumer ISPs especially have had to expand their value proposition away from pure internet access because in itself this service had become unprofitable.

It would not surprise me to see a new Impact Assessment based on real costs showing a massively higher number of people that would be excluded from the broadband market.
I guess we will have to wait until after the Judicial Review to see what happens. In the meantime, c’mon Martha get your boxing gloves on. There is a fight going on here.

Link to Hansard – includes some other DEAct related questions from Tom Watson.

Categories
Business online safety

mother knows best? – mumsnet withdraws support for Claire Perry porn blocking initiative #deappg

At the tender age of 49 I still call my mum for a chat and ask her advice on things. Usually regarding how to cook Welsh Cakes etc. Well I note today  that mumsnet, the “by parents for parents” family site seems to have withdrawn its support for the “Claire Perry porn blocking” campaign.

I can’t add much to the Malcolm Hutty post over at LINX on this subject. He also supplies some useful links.

Whilst I am not denigrating Mrs Perry’s desire to protect children mumsnet has displayed some realistic common sense and now understands the issues associated with web blocking.

The original campaign page at mumsnet is no longer available but it was still visible in the Google cache. Click on the header to see more.

Categories
End User net neutrality phones piracy

BBC iPlayer on iPad and Android – high quality – blessing or bandwidthbuster & what about the TV license? :)

iPlayer running on iPad and Adnroid HTC Desire HD

The twitterstream was full of references to the new iPlayer App for iPad and Android this morning so I naturally dived in and downloaded. I have to say the experience is top quality on both. The colours are great and the TV is very watchable on both size screens.

What really came into my mind though was not the fact that I now had a new app on my devices but the fact that this was yet another driver for bandwidth use and also the question of the TV license.

Cisco internet growth forecast

The chart on the right is Cisco’s growth forecast for internet bandwidth use – a 4x growth between 2009 and 2014. Much of this as you can see is driven by video. The Y axis legend is in ExaBytes/Month!

A one of the World’s best content provider the BBC really is one of the drivers of this (Ok YouTube et al are also contributors) and making iPlayer easier to access on more and more devices adds to the proliferation. Of course this also adds to the pressures on ISP networks and fuels the NetNeutrality debate butthat is not for this post. Grown up ISPs will manage their way through.

The debate about the TV License fee is however another issue. The BBC has said that it is not going after non license payers watching using iPlayer online:

“Well, the number of homes that currently have no television licence, but that do have broadband subscription is currently estimated to be infinitesimally small. The chances are if you want to watch BBC TV programmes via catch-up over the web, you are also watching some BBC programmes at other times, live or time-shifted, via a TV set, and will already have a TV licence. ”

This situation will possibly change quite quickly over the next few years.

You only need a license if you are watching live TV which the BBC is now promoting using the iPlayer App. My question is whether the BBC is able to identify online users? The chances are they will only have an IP address to go at which is going to raise the same issues as we currently see with the Digital Economy Act and the RightsHolder industries (of which the BBC is a member). Unless that is the BBC has some spyware embedded in its iPlayer App that somehow records data on who is using it – via  iTunes username perhaps?!

The other notweworthy point is that apps like this are also fuelling the demand for newer faster smart phones. The iPlayer App for Android needs a fast processor to run Flash. It will inevitably evolve towards more and more HD content which will use more and more bandwdth and need faster and faster processors etc etc etc.

We do live in interesting times. BBC statement on iPlayer here.  BBC position on TV License for online streaming here. Header photo (click to see more) is of iPlayer App running on both iPad and HTC Desire HD (Android).

More TV related stuff:

Sony 4K Ultra HD TV

TV detector vans – the truth

Boring TV & better things to do.

Categories
Business ofcom piracy surveillance & privacy

#ACSLaw court judgement #MediaCAT #DEAct #DEAPPG

ACSLaw

ACS Law hit notoriety for bullying broadband users into paying a fine in lieu of being taken to court for alleged “online copyright infringement”. Victims had no idea what their rights were and apparently frequently paid up rather than going through the expensive courts process.

It was reported yesterday that ACS Law had ceased trading – in order to avoid the potenial fines likely to arise out of the court action. Today they were apparently represented in court by a new barrister.

Reports from the court via twitter stream state:

  • ACS Law has not been allowed to discontinue 27 cases it tried to drop last month.
  • The judge today said letters to alleged filesharers “materially overstates the untested merits” of proving MediaCAT copyright infringement.
  • Also Judge: “Media CAT and #ACSLaw have very real interest in avoiding public scrutiny ” because of revenue from from “wholesale letter writing”
Categories
Business Cloud gaming online safety Regs

Today is Safer Internet Day #MMORPG #UKCCIS

Safer Internet Day

Today is Safer Internet Day. This year’s topic is ”It’s more than a game, it’s your life” and the aim of the initiative is to promote safer and more responsible use of online technology and mobile phones, especially amongst children. The website reports some interesting statistics:

  • Gamers spend on average 8 hours weekly playing online.
  • Young people sleep 2 to 3 hours less per night than 10 years ago.
  • In January 2010, 18 million accounts were registered on Second Life.
  • Facebook reports more than 500 million active users.
  • Users spend 700 billion minutes on Facebook each month.
  • 13 million players of World of Warcraft (WoW), the world’s largest MMORPG (Massively Multiplayer Online Role-Playing Game).
  • MMORPGs generated $1.5 billion in subscription revenues worldwide in 2008, forecast to reach $2.5 billion by 2012.
  • Up to 250,000 players are simultaneously online on WoW.
  • Transactions and sales of virtual goods in virtual worlds were estimated at $18 billion in 2009.

Its is amazing but I can identify with many of these bullet points. My kids spend far more than 8 hours online playing MMORPGs (it is a truly great acronym). All my kids are on Facebook even though two of them are below the recommended age limit. I vet their friends lists and have the logon details of the youngest who is not allowed to post photos. All his spare cash goes on online games – and we are talking £40 a pop here which is truly irritating as a parent (thats about fifteen pints of beer in real money! 🙂 ).

Parents need to jointly develop a survival strategy here. It only takes one to let the side down and let their kids have free rein to spoil it for the lot of us.

Note in connection with Safer Internet Day, Eurostat, the statistical office of the European Union, published the results of two complementary surveys that indicate that only 21% of UK individuals who live in a household with dependent children use parental control filtering software. This is higher than the EU average of 14% but considerable lower than the results of the EU Kids Online survey that was published a couple of weeks ago and reported that 54% of UK parents (28% across the EU) use parental controls or other means of blocking or filtering some types of websites.

The UK Council for Child Internet Safety (UKCCIS) has published a “Good practice guidance for the moderation of interactive services for children” which you might want to take a look at.

Publicising Safer Internet Use is very important and I suggest more needs to be done to educate parents on what they might be able to do to help themselves. This is particularly important in the light of the fact that politicians are constantly trying to take control of the internet “for our own good“.

PS one fact that coaught my attention in the EU report was that in the EU2 in 2010, almost one third of individuals (31%) who used the internet in the 12 months prior to the survey reported that they caught a virus or other computer infection resulting in loss of information or time during this period.

PPS thanks to ISPA for drawing my attention to these data.

And finally – I have to say were are entering a truly great era for acronyms – MMORPG!!!!!

Categories
Cloud Engineer security

Cyber Security: A Never-ending Unwinnable War

USAF General William Lord in cyber security briefing
header photo Gen William T. Lord courtesy of USAF

The words Hague cyber warfare Treaty appeared fleetingly in my twitter stream this morning.

This really intrigued me. It brought visions of uniformed generals sat around a table at the United Nations signing fancy bits of paper. Over their shoulders were clouds filled with botnet armies – millions of compromised computers waiting for the command to strike, glaring ferociously at their opposite numbers.

There is a wonderful wealth of information out there on cyber warfare and security. For example according to Lt. Gen. William T. Lord, the US Air Force chief information officer, cyberattackers have shifted their tactics from trying to breach firewalls to penetrating applications and said the service has serious application vulnerabilities. “We have over 19,000 (information technology) applications in the Air Force,” he said, noting that Electronic Systems Center’s IT Center of Excellence at Maxwell Air Force Base-Gunter Annex, Ala., examined about 200 of them. “All of them had over 50 vulnerabilities.”

The incredible pace of introduction of new technologies is a serious problem to the military which likes to take years to develop and test anything it buys. It used to be that the army would be first to get advanced technologies that would one day filter down to peaceful applications. These days it is the other way round. The army must presumably end up using applications that have had little or no security testing but are considered worth the risk (I’m not speaking from personal knowledge or experience here).

The United Nations has in fact been giving this some due consideration – it would be negligent of them not to, fair play. Last week the UN published a document updating its position re disarmament and cyber warfare was covered in pages 12 – 20 (out of 42).

In the document the UN discusses possible solutions:

  1. The security of confidential as well as less significant information and networks
    A. Security updates should be applied to all systems
    B. A comprehensive disaster recovery planning should take place, which includes provisions
    for extended outages.
  2. The creation of an international treaty which includes:
    A. A concrete definition of cyber warfare which is ratified by all signatories
    B. A limitation on the usage of cyber weapons
  3. The establishment of an annual international platform, in which experts in the computer and
    cyber field from different countries may foster dialog with one another regarding the issue of
    providing measures to regulate cyber warfare
  4. Increased effort in raising awareness about the cyber warfare and the threats it poses for the
    world in its entirety

Most of this, treaty apart, is obvious stuff and to be honest suggests that the UN doesn’t really know what to do about it. Does anyone?  I would be hugely surprised if many government really signed up to it.  After all why would a government (naming no names) want to deny itself the ability to attack Iran’s nuclear programme using bloodless electronic means?

In any case nobody would trust anyone else not to develop cyber warfare tools – it would be nigh on impossible to police. This is unfortunately in my view a battle war that is being fought but that nobody can win. I bet the proposed annual international conference would be a very interesting one to attend though maybe not as interesting as the meetings that they don’t tell us about.

We’re all doooomed!

Categories
Apps End User Regs security surveillance & privacy

how to get round your school’s web filter #deappg #DEAct

Somewhat a contentious title for a post? Provocative? It is topical though with all the discussion in the media regarding the government’s review on whether web blocking really works or is cost effective (re Digital Economy Act), and also MP Claire Perry calling on ISPs to implement filtering to stop kids reaching online porn.

I just did a Goole search on “bypassing school proxy”. It came up with 847,000 results including a link to “answers.yahoo.com”. I followed one of the links and found a ton of advice on how to get around a school’s filter system. These ad-funded sites are very youth orientated. One of the posts had 198 discussion comments!

My(oft repeated)  point is that blocking ain’t going to work and anyone that naively thinks that most kids will not know how to go about circumventing a block on websites, whatever their flavour, needs to spend some time in a playground.

PS the answers.yahoo.com discussion had been deleted but most of these sites do not have the integrity or the corporate image to uphold. All most of the 847,000 sites (pages) are interested in is your money.

DEAct

Categories
Business security

Peter Robbins to leave the IWF

Peter Robbins, OBE today resigned his position as Chief Executive of the Internet Watch Foundation (IWF). He is staying on until July to give the IWF time to find a successor.

He is quoted as saying:

“It has been an absolute honour and privilege to lead the IWF since 2002 through a period of unprecedented change. I have been exceptionally fortunate to have worked with dedicated staff and very talented Board Members over the years. I must place on record my gratitude for the exceptional support afforded me by extremely professional individuals, organisations and institutions in the UK and abroad as together we have built enduring partnerships from across the public and private sectors to enable the IWF to thrive.”

I don’t know him personally but many people have a great deal of respect for him and his work.  Running the IWF is not an easy job.

A lot has been written on this blog re the IWF – you can just do a search. This post gives an overview of the job that it does. At this time I don’t know whether Peter is just retiring, has somewhere else to go to or just feels his time has run its course at the organisation.

Categories
End User online safety scams security

Phishing by”Microsoft” engineers

I’m getting reports of increased levels of phishing attempts on broadband customers. People get a call from someone purporting to either work for Microsoft or on their behalf. The flavour of the calls go something like this:

  • “We are working on a password security breach”
  • “We are working with Microsoft and your ISP to increase your broadband speeds
  • “We have identified a problem with one of your servers and can fix it for £250”

By and large they want you to click on a link and then of course “you’ve been had”. Unfortunately as in many aspects of life on the internet the only real way to avoid being had is by being internet savvy. There is no quick fix.

Categories
Business online safety piracy Regs surveillance & privacy

Swedish ISP Bahnhof provides anonymity to customers by default – #deappg #deact #Wikileaks

Swedish ISP, Banhof, is offering a service that provides its customers with total anonymity on the internet.

We have the privilege to be able to offer a solution for those who want to remain anonymous on the net. When you go online with our partner, all traffic to and from the Internet to go through their servers through an encrypted “tunnel”, which means that nobody can see what you are doing.

Bahnhof, which apparently now hosts the Wikileaks website, does not keep logs of customer activites and would not be able to provide this information to anyone requesting it for the purposes of litigation (*eg Rights Holders in pursuit of copyright infringers – a hot topic at the moment with regard to the Digital Economy Act).

This raises quite an interesting point.

Categories
Business piracy Regs

Scarlet, SABAM and the proportionality or otherwise of website blocking #DEAPPG

Some of you will have been following the progress of the Scarlet/Sabam case that is currently being dealt with by the European Court of Justice (ECJ). Scarlet, a Belgian ISP (now owned by Belgacom but a small independent at the time the case was started in 2007) was ordered by a national court to implement technical measures to block all P2P traffic that infringes rights held by the Belgian Society of Authors, Composers and Publishers (SABAM).

The court’s decision was subsequently referred to the ECJ who has to clarify whether the requirement to implement traffic-filtering mechanisms is consistent with EU legislation and whether a proportionality test has to be applied if this is the case.

Following upon the submission of written evidence to the court, the ECJ held a hearing on Thursday 13 January that included representations from the European Commission and Member States. The judge will deliver his opinion on 14th April

The outcome of this case will potentially have great bearing on a number of regulatory themes currently trending in the UK – not least being the Digital Economy Act and the recent discussions on porn blocking.

We do need to note that the report was produced by EuroISPA and should therefore be careful in reading into it any assessment as to the likely outcome of the hearing. It looks ok to me 🙂 .

In a nutshell ISPs and a number of EU states considered the technical blocking order to be disproportionate. The report also suggests that in the light of strong arguments to the contrary the judge did not appear to be convinced in respect of filtering measures believed by SABAM to be technically possible.

The report:

Categories
Business security UC voip

#ITSPA winter workshop tomorrow – life beyond POTS and #VoIP #security Gigaset Magrathea

If you can you should make it to the Internet Telephony Service Providers’ Association (ITSPA)Winter Workshop being held tomorrow at The King’s Fund, 11-13 Cavendish Square. Sponsored by Gigaset and Magrathea two main topics are being discussed:

  1. Life beyond POTS and
  2. VoIP security

Both are interesting areas. The first looks at whether we really have moved beyond just using the telephone for simple voice conversations. The second addresses the wave of VoIP fraud that has been going on in 2010, directed in the main at unsecured open source PBXs. We will be discussing an ITSPA developed position paper on the subject which will include advice on best practice for securing your VoIP service.

The event is between 2 and 5 pm tomorrow with drinks afterwards. If you want to come please contact the ITSPA secretariat at [email protected] or 020 7340 8733. I am moderating both panel sessions.

Categories
Business Cloud internet piracy Regs security

The Futility of Blocking Websites #deappg #wikileaks #censor

Mirrors, and the sheer hopelessness today of blocking websites.

A retweet by Guardian Technology Editor Charles Arthur caught my attention this morning:

RT @AustinHeap “#Wikileaks is averaging 13.9 new mirror sites per hour, or one new mirror every 4′ #censor” So that shutdown went well, eh?

Unless you have no access to media, and in which case you won’t be reading this post, you will have noticed the ongoing wikileaks furore. This is not a post about that subject. Wikileaks’ website is, however, coming under heavy Denial Of Service attack by persons unknown, and the response of its wide community of supporters is to mirror the site to provide alternative access to the content. According to the Wikileaks mirrors website (also blocked but available via IP address) as of 21.55 GMT last night there were 1005 such mirrors.

This does two things. Firstly it shows the futility of trying to block websites (prevention of inadvertent access aka IWF excepted). Secondly it shows the resilience of the internet, a network designed by the US Government to survive nuclear attack. Whilst the source of the DoS attack is probably a matter of conjecture, for those persons who question of the US Government’s approach to law and order it is somewhat ironic that it is this very built resilience is preventing the site from being taken down, or at least keeping the information live.

There are lessons here when we start to consider whether blocking should be applied in other areas such as sites promoting copyright infringement…

Categories
Business ofcom piracy Regs surveillance & privacy

#DEAct event at House of Commons #deappg

I attended the DEAct workshop at the House of Commons on Tuesday afternoon.  Held in the Jubilee room off the Great  Hall of Westminster, this put together once more rights holders and everyone else in a session that had been organised by Eric Joyce MP in order to be able to put together a summary of the two positions for MPs to take away with them over the holidays.

There is an immediately an observation here in saying “rights holders and everyone else”. It is more than just the ISP community that is objecting to the Digital Economy Act. Consumer and human rights groups are also also in opposition to the Act.

In a sense this meeting was just a rehash of all that has been said before. It was held, however, because with the ongoing Judicial Review and the Parliamentary inquiry (that should have been held before the Act was passed) do present real opportunities to make changes.

The two positions can be summarised quite easily:

  1. Rights Holders are appealing for fairness in that unlawful copyright infringement is taking away revenues and is effectivley stealing – they equate copying a file to taking a CD from a store without paying.  Whilst there are philosophical arguments around this most people agree with them and sympathise.
  2. RHs see the implementation of the (delayed and as yet unpublished) Ofcom  Code of Practice as a means to give the population a wake up call – a jolt to remind them that it is “wrong to steal” and point them in the direction  of legal means of acquiring the copyrighted material.

Those opposed to the Act say:

  1. The process defined in the Act is fundamentally flawed in that it assumes that the broadband account holder is responsible for the copyright infringement – something that would be very difficult to get past a court of law
  2. Those accused of infringing are being asked to prove their innocence which goes against all our democratic principles of fair play – the Code also does not allow for an appeal until too far into the process and then not before a judge

There are many other issues such as who pays and the practicalities of disconnection and website filtering as technical measures but in a sense these are almost side plays to the fairness and human rights aspects.

The reality here is that someone is going to be hurt whatever happens and the judgement that must be made relates to the fairness of who gets hurt.  Is it fair to open up Mrs Abercrombie next door to the possibilites of fundamental injustices versus is it fair to let the rights holders industries suffer and decline.

The fact is that Mrs Abercrombie will get hurt. There is also a very real scenario where the country will go to all the efforts prescribed by the Digital Economy Act and also incur the huge costs with a result that will have zero impact on levels of online copyright infringement. This Act is all about stick and no carrot.

What is certainly clear is that with the evolution of the internet and the world wibe web the world society is going through a huge change. Much of this is for the better but as in all situations of change it is not to everyone’s liking.  When Hargreaves invented the Spinning Jenny it put many home weavers out of business but did not kill off the weaving industry. It just changed it. Like my analogy or not this is where the creative industries are at now. The biggest problem for them I fear is that it is not obvious how their business model is going to evolve.

In carrying out their inquiry into the DEAct the government should not only recognise this but also that sticks don’t work and they should concentrate more on the carrots.

PS as a postscript I am given to believe that the issue of public intermediaries (ie libraries, universities etc) caught under the act is going to be treated sympathetically. It would be very bad press for this not to be the case at a time of cost cutting. It unfortunately potentially also open up big holes in the effectiveness of the Act. We can only wait and see here.

Categories
End User net neutrality online safety Regs

MP Claire Perry calls for opt in system to regulate child access to internet porn @claire4devizes

The protection of children whilst using the internet is a highly emotive subject. There can be few who think it a bad idea. I have 4 kids who are heavy internet users. I don’t want them to come to any harm.

New MP for Devizes, Claire Perry, last week called for a change in regulations to require all UK-based Internet Service Providers to restrict universal access to pornographic content by implementing an opt-in system that requires verification that a user is over 18 for access to such material.

From a philosophical standpoint the fundamental principles of what Claire Perry wants are 90% ok – the 10% that are not ok being the right to privacy of people who might want to legally surf online porn but are not inclined to want to reveal their identity in order to do so. The problems come from the practicality of what is being asked for.

Website filtering is governed typically by the inclusion of a blacklist somewhere in the ISP network. User requests to access websites are compared with the blacklist and if the site is proscribed then access is denied. In the same way if an opt in is required it would happen at this stage. Parental controls usually involve a password being used to allow or deny the access.

Categories
Business dns Regs scams security

Nominet and the pseudo-judicial roles of ISPs

I met with the Police Central eCrime Unit last year as part on an ISPA group that wanted to understand the issues that police have in fighting internet related crime and to see whether there is anything that we could do to help.

The police’s biggest problem is the speed that things can happen at over the internet versus the amount of time it takes the judicial system to crank their mechanical organisational cogs. PCEU staff can, for example, be following a suspect criminal, either physically or electronically, and sometimes have very little time to pounce. A gang might be planning a fraud using online resources – facebook pages, gmail, skype etc. Access via a service provider to look at these resources takes a court order (RIPA) which takes time to organise and by the time it has been effected the crooks are often long gone.

If the police did not require judicial consent to access these data then the whole process could be speeded up and more criminals prevented from harming us. The problem is that even if it was clear to everyone concerned that providing the police with what they ask for was the right thing to do the act of doing so puts the ISP in breach of data protection laws. If the suspect criminal happens to be innocent (or otherwise) this potentially leaves the ISP open to legal action. We can’t have ISPs being asked to perform the role of the judiciary because they don’t have the same legal protection or training.

Now enter Nominet stage right. I have coincidentally just written about Nominet after attending the .uk registrar’s recent 25th birthday party. Nominet is proposing to change its

Categories
Apps Business net neutrality piracy Regs

ISPA Conference coming up on Wednesday 1st December

It’s one of the busiest times of year for people in the internet game. Customers you put on now have the greatest effect on next year’s bottom line because they will be with you for the full 12 months.

It has also never been a busier time to be in this industry. What with the world of technology moving into the clouds and blind political wizards waving dangerous wands from ivory towers high above those same clouds.

2011 promises to be a watershed for ISPs. We should find out whether we really will be saddled with the Digital Economy Act and other leaden weights such as the Intercept Modernisation Program (Big Brother is watching you). New business models will have to come to the fore – potentially the only way to get “superfast “ broadband to the “Final Third”. Net neutrality will become a hot topic for discussion as carriers try and find ways of keeping afloat amid the wave of content flooding homes and businesses around the land.

This almost feels like an end of year speech but it isn’t. It is an advert for the Annual ISPA Conference. If you are in a line of business associated with the internet this is one worth taking the time out to attend. It is a meeting point for everyone in the business and very definately worth coming.

Check out the details here.

Categories
Business ofcom piracy Regs surveillance & privacy

#DEAct costs will run into £hundreds of millions – is this a good investment?

Last night I participated in a meeting at the British Library chaired by Eric Joyce MP  discussing the effect of the Digital Economy Act on Public Intermediaries, ie libraries, educational establishments, local authorities etc.

The initial rollout of the DEAct is as we know targeted at the 5 ISPs with over 400,000 subscribers. There is however no guarantee that this position will not change once the implementation phase is over especially if it is seen that customers rush to the apparent high ground of smaller ISPs. The concern amongst the above referenced institutions is that it will encumber them with enormous costs.

To bring things into perspective the University of London has 135,000 students. It won’t take a huge lowering of the 400,000 threshold to bring them into scope. Also the definition of who comes into scope is somewhat vague. The University might be described as both ISP (it provides a service and allocates IP addresses), a subscriber (it takes services off another ISP – JANET) and a Communications provider. The latter would leave them out of scope but the first two brings them in.

Ofcom has yet to publish the updated version of the DEAct Code of Practice and we are therefore still in the dark. Ofcom also declined to attend last night’s meeting. The regulator is late delivering the CoP.

The big philosophical problem is that the Act was constructed with the basic assumption of a simple relationship between ISP and consumer. One sells broadband services that the other buys. In the case of the University a notification letter suggesting that their IP address has been identified as “the culprit” in copyright infringement could point to any of their 135,000 students and even then might be wrong.

With the highly mobile nature of a student it would be nigh on impossible for the university to introduce the same tracking systems that serve ISPs and thus be able to maintain records of who might have been the infringer. It has been estimated that the introduction of mitigation measures such as filtering would result in an annual cost of £8m (excl staff) notwithstanding the fact that these measures would probably involve P2P blocking – Universities are big users of P2P for legitimate purposes. My own guesstimate of implementation costs for the University of London alone would be in the region of £500k up front plus a recurring annual maintenance and support charge.

One 94 Group university has estimated that even excluding any IT staffing time, the cost of the appeal process for a single university could be as high as £40,000 pa, at a rate of one notification per 400 students. At a national level that would equate to £32 million per annum.

The same problems apply to other Public Intermediaries. The complexities of narrowing down the location and offending PC to a specific user present a challenge disproportionate to the notional benefit. This is at a time when the Government is cutting down funding available to such institutions. This must surely weigh heavily against the inclusion of Public Intermediaries within the scope of the Act. It is at the very least a political contradiction.

Note the estimated Government figures for costs to industry of implementing the DEAct are as follows:

  • Cost (upfront) to ISPs (annualised): £8m per year
  • Costs (ongoing) to ISPs: £8-25m per year
  • Annual average costs to mobile operators: £19m per year
  • Annual costs of sending CIRs: £3m per year

The BT/TalkTalk submission as part of the request for Judicial Review suggested that the real costs were more in the region of £100m pa excluding the potential costs of implementing website blocking and other technical measures.

Assuming that the threshold will be lowered the total cost of implementing the Act could run into hundreds of millions of pounds a year, 75% of which, as it stands, would have to be paid for by the Rights Holders.

Hmm.

Categories
Business piracy Regs surveillance & privacy

Government response to TalkTalk petition says infringers won’t be disconnected #DEAct

Just for reference the Andrew Heaney of TalkTalk petition against the Digital Economy Act has had a response from the government.

It is clear that online copyright infringement inflicts considerable damage on the UK’s creative economy including music, TV and film, games, sports and software. Industry estimates place this harm at £400m pa.

The Digital Economy Act includes a number of measures to tackle the problem and we expect these to be successful in significantly reducing online copyright infringement. However this is an area of rapid technological change and developing consumer behaviour. The Act therefore includes a reserve power to introduce further “technical” measures if the initial measures do not succeed. These technical measures would limit or restrict an infringers’ access to the internet. They do not include disconnection.”

I’m not sure the technical measures were ever specified but at least this, together with the inquiry discussed in the previous post, is evidence that he huge furore following the passing of the act is starting to show some effect. Long way to go though.

Categories
Business piracy Regs surveillance & privacy

BT and TalkTalk granted Judicial Review on Digital Economy Act & DCMS launch inquiry #DEAct

BT and TalkTalk were today granted a Judicial Review of the Digital Economy Act at the High Court. A judge will now scrutinise whether the act is legal and justifiable on privacy and mere conduit grounds.

Also announced today by the Culture, Media & Sport Select Committee is an inquiry into protecting copyright online and the effectiveness of the DEAct. The call for evidence has asked for comments on a number of questions including:

• Whether the new framework has captured the right balance between supporting creative work online and the rights of subscribers and ISPs.
• Whether the notification process is fair and proportionate.
• The extent to which the associated costs might hinder the operation of the Act.
• At what point, if at all, consideration should be given to introducing the additional technical measures allowed for under the Act.
• Intellectual Property and barriers to new internet-based business models, including information access, the costs of obtaining permissions from existing rights-holders, and “fair use.”

This is good news. I am afraid we have to ask ourselves why this was not gone into during the initial parliamentary process running up to the passing of the Act.

The deadline for response is Wednesday, January 5.

Categories
Business piracy Regs

Freedom of the internet

Last Thursday the Minister of Communications, Ed Vaizey, chaired a round table on music licensing and the internet.

Present were the largest consumer ISPs, ISPA, Google and Yahoo together with senior figures from the Internet, music, film and sports sectors. Issues discussed included the development of the Digital Economy Act, the complexity of music licensing (scalability, costs for both ISPs & rights holders) and whether ISPs could do more with respect to sites that promoted illegal downloading (e.g. search engine rankings, blocking).
 
The Minister encouraged participants to further discuss and work on these issues and encouraged ISPs and rights holder to explore the possibility of bundled music deals as this would be the easiest way to satisfy consumer demand and provide an alternative to pirated music downloads. It is likely that a follow-up meeting will take place in the new year to update the Minister on the process that may have been made by this time.

Categories
Engineer security

Cyberwarfare and network security

Cyberwarfare has been in the news this week with the discussions around defence spending cuts. This is hugely topical and hugely important.

The debate of course hinges specifically around national defence. We don’t want the Trident missile system being hacked. Warfare doesn’t just extend to weapons though.

France is currently grinding to a halt due to their seasonal batch of strikes – oo lalaa, whose turn is it this time lads?!

Categories
Business piracy Regs

Irish Judge denies Rights Holders 3 strikes injunction against ISP UPC

THE HIGH COURT COMMERCIAL
[2009 No. 5472 P]
BETWEEN
EMI RECORDS (IRELAND) LIMITED, SONY MUSIC ENTERTAINMENT IRELAND LIMITED, UNIVERSAL MUSIC IRELAND LIMITED, WARNER MUSIC IRELAND LIMITED AND WEA INTERNATIONAL INCORPORATED
PLAINTIFFS
AND
UPC COMMUNICATIONS IRELAND LIMITED
DEFENDANT
JUDGMENT of Mr. Justice Charleton delivered on the 11th day of October, 2010

I’ve never read a High Court Judgement in detail before, be it British or Irish. This one is about an injunction sought by the above referenced rights holders requiring Irish ISP UPC to implement a three strikes policy against alleged file sharers.

The judge goes into 78 pages of detailed analysis of the problem, technical measures that may be available and the law in respect of this issue.

This is a guy firmly in the camp of the Rights Holder industry. I’m not going to comment on the individual arguments he makes and whether they are in my judgement right or wrong. He has probably spent weeks researching it all and summing up. In fact as I’ve mentioned before to some extent I sympathise with the RHs plight.

The problem again comes down to the old innocent until proven guilty human right that we have all been brought up to respect. I could find no discussion in the document regarding the issue of proof of guilt of the broadband subscriber.  He just assumes that the probability is that a family home PC has been used for the infringement.

Instead the judge concentrates on the proof that the ISPs network was being used. Moreover on page 38 he dismisses a UPC response that the individuals alleged to be file sharing “may or may not be our customers” as “not an honest answer”. Saying this he clearly does not understand the proof issue.

Fortunately Mr. Justice Charleton was unable to offer injunctive relief to the plaintiffs on this occasion because the law did not allow for it. The only thing he could offer under the law was to order a take down of any copyrighted material hosted by the ISP. This of course is not how the file sharing system works.

The judgement is worth a read if you have the time. My copy was provided via EuroISPA. I couldn’t find a link to it online so here it is. I will take it down if required.

Categories
Business internet piracy Regs surveillance & privacy

Website blocking is not a good idea – petition

As part of the Digital Economy Act the goverment is potentially going to ask the ISP industry to block access to websites that perpetrate or encourage Copyright infringement.

There are two points to make here:

The first, which is one that has been repeatedly made, relates to the inefficacy of the methods used to block access to websites. It is very easy for people to get around a blocking system.