Paris Hilton has been caught using a caller I.D. spoofing service to hack into someone else's voicemail, according to spoofing company SpoofCard.

OK, its official, Hacking, Phreaking, and related activities are now, officially, lame. This is no longer the domain of detached, nihilistic, techno-futurist intellectuals who are pushing the edge of the envelope while blasting KMFDM. This is the domain of daddy's money poplettes and myspace chix0rs who are all like OMFG while blasting Britney Spears. Its over. Fuck it. Find a new hobby.

27B Stroke 6: HPVA is the new pop?

The point of terrorism is to cause terror, sometimes to further a political goal and sometimes out of sheer hatred. The people terrorists kill are not the targets; they are collateral damage. And blowing up planes, trains, markets or buses is not the goal; those are just tactics.

The real targets of terrorism are the rest of us: the billions of us who are not killed but are terrorized because of the killing. The real point of terrorism is not the act itself, but our reaction to the act.

And we're doing exactly what the terrorists want.

Refuse to be Terrorized - Wired News

While it's a nice idea, this extension, in it's current form, really doesn't do anything to protect people's privacy.

Acidus was talking about making something like this.

Boing Boing: TrackMeNot: Firefox extension randomizes your search history

The RIAA strategy is an example of a new legal phenomenon that I have dubbed "spamigation" -- bulk litigation that's only become practical due to the economies of scale of the computer era....

The RIAA uses systems to gather lists of alleged infringers, and bulk-sues them. It has set a price that seems to be profitable for it, while being low enough that it is not profitable for the accused to mount a defence, as they do not get the economies of scale involved.

[IP] more on who is to blame -- riaa

noteworthy wrote:
My chief complaint was that NYT was making an apples-oranges comparison; there are legal precedents regarding the caller's expectation of privacy with regard to a common carrier, but those precedents do not apply to enhanced services.

What precedents draw a distinction with regard to basic vs. enhanced services?

With respect to the 4th Amendment, in the beginning there was mail. You had an expectation of privacy for the contents of envelopes, but not for the things written on them, nor for the contents of post cards. The court extended this framework to telephone services by drawing the peculiar conclusion that dialed number information is not enveloped because the phone company must process it to route your call, but call content is enveloped. This is convenient, but somewhat disingenuous.

Unfortunately, Internet packets are a lot more like postcards than envelopes. As far as I know, no court has ever decided whether the 4th amendment applies to Internet communications. Chances are it probably doesn't. The reason its never come up is that Congress created a statutory framework for dealing with these things that few have challenged: The Electronic Communications Privacy Act. The ECPA is weaker then the 4th amendment would be. Its really concerned with protecting information in transit, but once that communication is received, and stored, it becomes very weakly protected. The routing information is, also, very weakly protected.

In the past, our most private articles were in our homes, where they were strongly protected by the 4th amendment. Increasingly, our most private articles are stored on website and ISP servers, where they are almost totally unprotected, or they are kept on our laptops, which we carry through international border checkpoints on a regular basis.

This is how the idea of personal privacy dies.... The court system is either unwilling or unable to adapt their protections as technology advances, holding on to an anachronistic idea of how privacy is defined that ignores the complexities of the modern world, and allowing Congress to insert statutes into the vaccum that are written by law enforcement and fueled by the fear of terrorism.

Cryptography will become the new 4th amendment, and ironically the only people who'll really be hurt by it in the long run are the Law Enforcement interests who claimed the need to access this information in the first place!

Decius wrote:

As time goes on from the search, the risks associated with holding on to that information far exceed the value of storing it.

Is that really true? Or is it the time-series compilation of queries that increases the risk?

Obviously the more data you have the greater the impact of a disclosure, but the longer you hold onto the data the more likely a disclosure is to occur, and the lower the value of the data in terms of system management, prediction of interests for marketing reasons, etc...

I'd be concerned that too much government intervention could stifle innovation.

Requirements that street worthy automobiles be a certain size and have certain safety characteristics also stifle innovation. There is a balance here as in all things. As the idea of personal privacy is a core tenent of our social contact I think it ought to weigh heavily in the innovation versus regulation question.

RE: Enter Search Term Here, Forever

Terrorist whacko Osama bin Laden was so obsessed with crack-addled songbird Whitney Houston that he contemplated taking out her hubby, Roxbury homey Bobby Brown.

Well, its August 22nd, Apocalypse Day, and so far this is the scariest thing to have happened.

BostonHerald.com - Osama to Whitney: I will always love you

noteworthy wrote:
NYT says Google et al are wrong to store usage data.

The storing and sharing of [search] data is a violation of users’ privacy rights.

OK, so what's their reasoning?

When people talk on the phone, they assume that the words they utter will disappear when the call is over. They certainly do not expect that their phone company is recording and storing the words, to mine for commercial purposes or to sell to other companies. People have the same expectation about the Internet searches they do: when the search is over, the words they used will disappear.

They confuse the telecom provider's role as a common carrier and basic service provider with Google's role as an information service and enhanced service provider.

Don't you agree with them? I don't think search engines should store usage data indefinately. As time goes on from the search, the risks associated with holding on to that information far exceed the value of storing it. Unfortunately, all of the risk is bourne by the searcher and all of the value is borne by the holder. This sort of imbalance is an area where it makes sense for the government to intervene.

I'm not sure I folllow how your distinction between a common carrier and an enhanced service provider is relevent to this discussion. I would say that the phone numbers you dial have approximately the same privacy implications as search terms. Search terms are a bit worse but its the same ball park. Telephone users do not expect their dialed numbers to be stored indefinately, and yet federal data retention laws already require phone companies to keep some of that data around for a longer period of time then they naturally would. I wasn't aware of this until they present data retention drama started. Perhaps this fact could support more data retention by search engines. I think its an example of how far down the slope we're already slid.

Edward Markey, Democrat of Massachusetts, has introduced a bill to prohibit Internet companies from warehousing personal data, including search queries. It is a good start, but it still gives companies too much leeway to keep data. The bill should be strengthened and passed.

This seems rather heavy handed and ill-conceived. Obviously you'd need a user-consent exception to such a rule. Then search providers would force you to log in and accept a terms of service agreement. And then your semi-anonymous cookie is replaced with a login ID; is that better?

Take a look at the bill. I could drive a truck through the "any legitimate business purpose" loophole. This would, as a matter of fact, have no impact on search engine data retention. This is an anti data retention proposal, meant as an answer to some of Congress's attempt to turn the Internet into a surveillance system by requiring ISPs to retain data long after they would have usually thrown it away. The question of whether web sites should be included in that requirement has been raised. Passing this law would be a hard no, but I expect its purpose is really more symbolic then serious.

A solution to this problem is, however, desparately needed. People simply don't understand the risks. Their understanding will get better and better as time goes on, and search engines will find themselves addressing it eventually. Unforutnately, all that risk exists today and will exist until enough people understand it that they react.

Privoxy and Tor are not the right answer. Legislation would be preferable to arms. Crafting an appropriate law would be easy. Maybe the search engines could offer an alternative to stave off the need for this.

RE: Enter Search Term Here, Forever

Every time Bruce Schneier smiles, an amateur cryptographer dies.

Everybody Loves Eric Raymond - Bruce Schneier Facts

Tabjab is a powerful way to keep track of the interpersonal debts that often arise between friends, roommates, and coworkers. You can use Tabjab to send out bills for dinner debts, bar tabs, rent, utilities, entertainment, or any other expense that people share. These bills are delivered via email, and they are easy to consolidate when it comes time to pay.

My roommate and I have been working on this website since late last year. We've been keeping it under wraps but we decided this weekend to formally make it available. When your friends or roommates owe you money you can input it into Tabjab. Tabjab will keep track of it, send emails out, and calculate reciprical debts. Check it out and let us know what you think!

My new project: TabJab

Even legal experts who agreed with a federal judge’s conclusion on Thursday that a National Security Agency surveillance program is unlawful were distancing themselves from the decision’s reasoning and rhetoric yesterday.

They said the opinion overlooked important precedents, failed to engage the government’s major arguments, used circular reasoning, substituted passion for analysis and did not even offer the best reasons for its own conclusions.

Experts Fault Reasoning in Surveillance Decision - New York Times