Showing posts with label authorities. Show all posts
Showing posts with label authorities. Show all posts

Campaigners hit by decryption law

Monday, November 26, 2007

Hard drive, Eyewire
The police want to get at encrypted files
Animal rights activists are thought to be the first Britons to be asked to hand over to the police keys to data encrypted on their computers.

The request for the keys is being made under the controversial Regulation of Investigatory Powers Act (RIPA).

Police analysing machines seized during raids on activists' homes carried out in May have asked for the keys.

The activists could face jail if they do not comply and snub a further formal request to hand over the keys.

Case law

In early November about 30 animal rights activists are understood to have received letters from the Crown Prosecution Service in Hampshire inviting them to provide passwords that will decrypt material held on seized computers.

The letter is the first stage of a process set out under RIPA which governs how the authorities handle requests to examine encrypted material.

Once a request has been issued the authorities can then issue what is known as a Section 49 notice demanding that a person turn the data into an "intelligible" form or, under Section 51 hand over keys.

Although much of RIPA came into force many years ago, the part governing the handing over of keys only passed in to law on 1 October 2007. This is why the CPS is only now asking for access to files on the seized machines.

Alongside a S49 notice, the authorities can also issue a Section 54 notice that prevents a person revealing that they are subject to this part of RIPA.

Policeman in hi-vis jacket, BBC
The PCs were seized in raids carried out in May 2007

The activist, who wished to remain anonymous, said that even if others disagreed with animal rights activists the use of the law had grave implications for personal privacy.

"Even if they hate our guts my personal view is that this is a matter where there's great issues of public interest that should be being talked about," they said.

The CPS declined to comment on the issuing of the letters and a spokesman said it could not comment on ongoing cases.

If those receiving the letters do not comply with the request or a formal S49 notice they can be imprisoned for up to two years.

Legal row

The section of RIPA that deals with decryption requests was controversial when it was drawn up and debated. Peers, academics and cryptographers called the proposals "flawed" when invited to comment on them by the Home Office.

Commentators pointed out that sSection III, which is aimed at serious criminals, such as paedophiles and terrorists, is flawed because those involved would much rather serve a few years for refusing to hand over keys than provide them and potentially incriminate themselves.

Others were simply likely to say that they had forgotten the complicated passphrase they used when encrypting material. Under certain circumstances RIPA allows this to be a plausible defence.

It is very likely, said David Harris, a barrister and technology lawyer, that activists will devise systems that legally circumvented the law.

Mr Harris foresees a time when activist groups prepared encrypted files that people could download to let them plausibly deny they have a key to unlock such data if it is found on their PC.

"These may become prevalent as a result of this case," he said.

Mr Harris said many people know of products readily available on the web, such as Truecrypt, that hid data and supplied a key to some of it while leaving the rest undetectable to the police.

In the event that there was doubt that a suspect did not possess a key, he said, it was up to the prosecution to demonstrate beyond a reasonable doubt that they could know the passphrase.

"They have quite a hurdle to overcome," he addedRussian revival Taking cover Day in pictures

Source from: news.bbc.co.uk

Campaigners hit by decryption law

Tuesday, November 20, 2007

Hard drive, Eyewire
The police want to get at encrypted files
Animal rights activists are thought to be the first Britons to be asked to hand over to the police keys to data encrypted on their computers.

The request for the keys is being made under the controversial Regulation of Investigatory Powers Act (RIPA).

Police analysing machines seized during raids on activist's homes carried out in May have asked for the keys.

The activists could face jail if they do not comply and snub a further formal request to hand over the keys.

Case law

In early November about 30 animal rights activists are understood to have received letters from the Crown Prosecution Service in Hampshire inviting them to provide passwords that will decrypt material held on seized computers.

The letter is the first stage of a process set out under RIPA which governs how the authorities handle requests to examine encrypted material.

Once a request has been issued the authorities can then issue what is known as a Section 49 notice demanding that a person turn the data into an "intelligible" form or, under Section 51 hand over keys.

Although much of RIPA came into force many years ago, the part governing the handing over of keys only passed in to law on 1 October 2007. This is why the CPS is only now asking for access to files on the seized machines.

Alongside a S49 notice, the authorities can also issue a Section 54 notice that prevents a person revealing that they are subject to this part of RIPA.

Policeman in hi-vis jacket, BBC
The PCs were seized in raids carried out in May 2007

The activist, who wished to remain anonymous, said that even if others disagreed with animal rights activists the use of the law had grave implications for personal privacy.

"Even if they hate our guts my personal view is that this is a matter where there's great issues of public interest that should be being talked about," they said.

The CPS declined to comment on the issuing of the letters and a spokesman said it could not comment on ongoing cases.

If those receiving the letters do not comply with the request or a formal S49 notice they can be imprisoned for up to two years.

Legal row

The section of RIPA that deals with decryption requests was controversial when it was drawn up and debated. Peers, academics and cryptographers called the proposals "flawed" when invited to comment on them by the Home Office.

Commentators pointed out that sSection III, which is aimed at serious criminals, such as paedophiles and terrorists, is flawed because those involved would much rather serve a few years for refusing to hand over keys than provide them and potentially incriminate themselves.

Others were simply likely to say that they had forgotten the complicated passphrase they used when encrypting material. Under certain circumstances RIPA allows this to be a plausible defence.

It is very likely, said David Harris, a barrister and technology lawyer, that activists will devise systems that legally circumvented the law.

Mr Harris foresees a time when activist groups prepared encrypted files that people could download to let them plausibly deny they have a key to unlock such data if it is found on their PC.

"These may become prevalent as a result of this case," he said.

Mr Harris said many people know of products readily available on the web, such as Truecrypt, that hid data and supplied a key to some of it while leaving the rest undetectable to the police.

In the event that there was doubt that a suspect did not possess a key, he said, it was up to the prosecution to demonstrate beyond a reasonable doubt that they could know the passphrase.

"They have quite a hurdle to overcome," he addedBurma quandary Children of conflict Nick Bryant's blog

Source from: news.bbc.co.uk

US rebukes Yahoo over China case

Tuesday, November 6, 2007

Computer screen in Beijing
Yahoo helped the Chinese authorities identify a journalist now in jail
A US congressional panel has criticised internet firm Yahoo for not giving full details to a probe into the jailing of a reporter by Chinese authorities.

Yahoo had been "at best inexcusably negligent" and at worst "deceptive" in evidence given to the House foreign affairs committee last year, it said.

Yahoo's Michael Callahan originally told congress he did not know why China wanted the reporter's details.

Shi Tao was jailed after Yahoo helped China officials identify him.

Chief executive Jerry Yang said his firm had always been open with Congress and that he personally was very concerned by human rights issues.

Yahoo has previously said it had to comply with Chinese laws to operate in the country.

'State secrets'

Tom Lantos, chairman of the House committee, issued a stinging rebuke to the US-based internet giant at Tuesday's hearing.

This was inexcusably negligent behaviour at best, and deliberately deceptive behaviour at worst

At issue is whether Michael Callahan, Yahoo's executive vice-president and general counsel, gave false information to the panel during an investigation in February 2006.

Mr Callahan said then that he did not know why the Chinese authorities wanted to trace Shi Tao - who was jailed for 10 years - but it has since emerged that other Yahoo employees had a document stating it was to do with revealing "state secrets".

Mr Callahan wrote a letter to Congress last week to apologise and stating that the pertinent information only came to his attention months after he gave testimony.

Chinese computer users
Chinese computer users are barred from accessing some websites

Mr Lantos said any big company operating in China should have been aware of the authorities' repression of free speech, and questioned how Mr Callahan could not have known of the document.

"Yahoo claims that this is just one big misunderstanding," Mr Lantos said.

"Let me be clear - this was no misunderstanding. This was inexcusably negligent behaviour at best, and deliberately deceptive behaviour at worst."

Mr Callahan responded that there had been "confusion" over the information Yahoo had about the demand made by Chinese authorities.

He apologised for not letting the House committee know when the additional information came to his attention.

Blocked content

Last month, the House committee backed legislation which would prevent internet companies such as Yahoo from co-operating with authorities in China and elsewhere.

Under the legislation, companies would also have to reveal terms and phrases they filtered in certain countries.

The bill, introduced by Republican representative Chris Smith, still needs approval from the House Energy and Commerce Committee.

The Chinese government enforces strict laws on internet use, blocking content it considers a threat, including references to the Tiananmen Square massacre and notable dissidents.French flavour Day in pictures Q&A

Source from: news.bbc.co.uk