The Linkielist

Linking ideas with the world

The Linkielist

Germany’s blanket data retention law is illegal, EU top court says

Germany’s general data retention law violates EU law, Europe’s top court ruled on Tuesday, dealing a blow to member states banking on blanket data collection to fight crime and safeguard national security.

The law may only be applied in circumstances where there is a serious threat to national security defined under very strict terms, the Court of Justice of the European Union (CJEU) said.

The ruling comes after major attacks by Islamist militants in France, Belgium and Britain in recent years.

Governments argue that access to data, especially that collected by telecoms operators, can help prevent such incidents, while operators and civil rights activists oppose such access.

The latest case was triggered after Deutsche Telekom (DTEGn.DE) unit Telekom Deutschland and internet service provider SpaceNet AG challenged Germany’s data retention law arguing it breached EU rules.

The German court subsequently sought the advice of the CJEU which said such data retention can only be allowed under very strict conditions.

“The Court of Justice confirms that EU law precludes the general and indiscriminate retention of traffic and location data, except in the case of a serious threat to national security,” the judges said.

“However, in order to combat serious crime, the member states may, in strict compliance with the principle of proportionality, provide for, inter alia, the targeted or expedited retention of such data and the general and indiscriminate retention of IP addresses,” they said.

Source: Germany’s blanket data retention law is illegal, EU top court says | Reuters

Excellent work by the court – targeted investigation has been proven to be much more effective than blanket surveillance. Other than that blanket surveillance turns your country into an Orwellian nightmare.

DHS built huge database from cellphones, computers seized at border, searchable without a warrant, kept for 15 years

U.S. government officials are adding data from as many as 10,000 electronic devices each year to a massive database they’ve compiled from cellphones, iPads and computers seized from travelers at the country’s airports, seaports and border crossings, leaders of Customs and Border Protection told congressional staff in a briefing this summer.

The rapid expansion of the database and the ability of 2,700 CBP officers to access it without a warrant — two details not previously known about the database — have raised alarms in Congress about what use the government has made of the information, much of which is captured from people not suspected of any crime. CBP officials told congressional staff the data is maintained for 15 years.

[…]

Agents from the FBI and Immigration and Customs Enforcement, another Department of Homeland Security agency, have run facial recognition searches on millions of Americans’ driver’s license photos. They have tapped private databases of people’s financial and utility records to learn where they live. And they have gleaned location data from license-plate reader databases that can be used to track where people drive.

[…]

the revelation that thousands of agents have access to a searchable database without public oversight is a new development in what privacy advocates and some lawmakers warn could be an infringement of Americans’ Fourth Amendment rights against unreasonable searches and seizures.

[…]

CBP officials declined, however, to answer questions about how many Americans’ phone records are in the database, how many searches have been run or how long the practice has gone on, saying it has made no additional statistics available “due to law enforcement sensitivities and national security implications.”

[…]

CBP conducted roughly 37,000 searches of travelers’ devices in the 12 months ending in October 2021, according to agency data, and more than 179 million people traveled that year through U.S. ports of entry. The agency has not given a precise number of how many of those devices had their contents uploaded to the database for long-term review.

[…]

The CBP directive gives officers the authority to look and scroll through any traveler’s device using what’s known as a “basic search,” and any traveler who refuses to unlock their phone for this process can have it confiscated for up to five days.

In a 2018 filing, a CBP official said an officer could access any device, including in cases where they have no suspicion the traveler has done anything wrong, and look at anything that “would ordinarily be visible by scrolling through the phone manually,” including contact lists, calendar entries, messages, photos and videos.

If officers have a “reasonable suspicion” that the traveler is breaking the law or poses a “national security concern,” they can run an “advanced search,” connecting the phone to a device that copies its contents. That data is then stored in the Automated Targeting System database, which CBP officials can search at any time.

Faiza Patel, the senior director of the Liberty and National Security Program at the Brennan Center for Justice, a New York think tank, said the threshold for such searches is so low that the authorities could end up grabbing data from “a lot of people in addition to potential ‘bad guys,’” with some “targeted because they look a certain way or have a certain religion.”

[…]

The CBP directive on device searches was issued several years after a federal appeals court ruled that a forensic copying of a suspect’s hard drive had been “essentially a computer strip search” and said officials’ concerns about crime did “not justify unfettered crime-fighting searches or an unregulated assault on citizens’ private information.”

The Wyden aide also said that the CBP database does not require officers to record the purpose of their search, a common technical safeguard against data-access misuse. CBP officials said all searches are tracked for later audit.

[…]

CBP officials give travelers a printed document saying that the searches are “mandatory,” but the document does not mention that data can be retained for 15 years and that thousands of officials will have access to it.

Officers are also not required to give the document to travelers before the search, meaning that some travelers may not fully understand their rights to refuse the search until after they’ve handed over their phones, the Wyden aide said.

CBP officials did not say which technology they used to capture data from phones and laptops, but federal documents show the agency has previously used forensic tools, made by companies such as Cellebrite and Grayshift, to access devices and extract their contents.

[…]

Source: DHS built huge database from cellphones, computers seized at border – The Washington Post

California signs social media terms of service disclosure law

[…] AB 587 requires social media companies to post their terms of service online, as well as submit a twice-yearly report to the state attorney general. The report must include details about whether the platform defines and moderates several categories of content, including “hate speech or racism,” “extremism or radicalization,” “disinformation or misinformation,” harassment, and “foreign political interference.” It must also offer details about automated content moderation, how many times people viewed content that was flagged for removal, and how the flagged content was handled. It’s one of several recent California plans to regulate social media, also including AB 2273, which is intended to tighten regulations for children’s social media use.

[…]

Courts haven’t necessarily concluded that the First Amendment blocks social media transparency rules. But the rules still raise red flags. Depending on how they’re defined, they could require companies to disclose unpublished rules that help bad actors game the system. And the bill singles out specific categories of “awful but lawful” content — like racism and misinformation — that’s harmful but often constitutionally protected, potentially putting a thumb on the speech scale.

[…]

Source: California Governor Gavin Newsom signs social media transparency law – The Verge

This is important because not only on social media but also on email or marketplace sites, individuals are at the mercy of the system. If you have no idea what the rules are of the system (and notice – this law has no mention of forcing a platform to publish their recourse rules) then you enter a Kafka-esque experience if you are booted. You don’t know the reason or if the reason is arbitrary or you are being targetted. This is a start on transparency and fairness. Considering much of our lives is lived on social media nowadays and a huge amount of trade is done online, you can’t trust a corporation to play fair, especially if you don’t know their rulebook.

S.Korea fines Google, Meta billions of won for privacy violations

[…] In a statement, the Personal Information Protection Commission said it fined Google 69.2 billion won ($50 million) and Meta 30.8 billion won ($22 million).

The privacy panel said the firms did not clearly inform service users and obtain their prior consent when collecting and analysing behavioural information to infer their interests or use them for customised advertisements.

[…]

Source: S.Korea fines Google, Meta billions of won for privacy violations | Reuters

Cory Doctorow Launches New Fight against Copyrights, Creative Chokepoints, and Big Tech’s ‘Chokepoint Capitalism’

“Creators aren’t getting paid,” says Cory Doctorow. “That’s because powerful corporations have figured out how to create chokepoints — that let them snatch up more of the value generated by creative work before it reaches creative workers.”

But he’s doing something about it.

Doctorow’s teamed up with Melbourne-based law professor Rebecca Giblin, the director of Australia’s Intellectual Property Research Institute, for a new book that first “pulls aside the veil on the tricks Big Tech and Big Content use…” But more importantly, it also presents specific ideas for “how we can recapture creative labor markets to make them fairer and more sustainable.” Their announcement describes the book as “A Big Tech/Big Content disassembly manual,” saying it’s “built around shovel-ready ideas for shattering the chokepoints that squeeze creators and audiences — technical, commercial and legal blueprints for artists, fans, arts organizations, technologists, and governments to fundamentally restructure the broken markets for creative labor.”

Or, as they explain later, “Our main focus is action.” Lawrence Lessig says the authors “offer a range of powerful strategies for fighting back.” Anil Dash described it as “a credible, actionable vision for a better, more collaborative future where artists get their fair due.” And Douglas Rushkoff called the book “an infuriating yet inspiring call to collective action.”

The book is titled “Chokepoint Capitalism: How Big Tech and Big Content Captured Creative Labor Markets and How We’ll Win Them Back.” And at one point their Kickstarter page lays down a thought-provoking central question about ownership. “For 40 years, every question about creators rights had the same answer: moar copyright. How’s that worked out for artists?” And then it features a quote from Wikipedia co-founder Jimmy Wales. “Copyright can’t unrig a rigged market — for that you need worker power, antitrust, and solidarity.”

A Kickstarter campaign to raise $10,000 has already raised $72,171 — in its first five days — from over 1,800 backers. That’s partly because, underscoring one of the book’s points, their Kickstarter campaign is offering “an audiobook Amazon won’t sell.” While Amazon will sell you a hardcover or Kindle edition of the book…. Audible has a hard and fast rule: if you’re a publisher or writer who wants to sell your audiobook on Audible, you have to let it be wrapped in “Digital Rights Management,” aka DRM: digital locks that permanently bind your work to the Audible platform. If a reader decides to leave Audible, DRM stops them taking the books they’ve already bought with them…. Every time Audible sells a book, DRM gives it a little bit more power to shake down authors and publishers. Amazon uses that stolen margin to eliminate competition and lock-in more users, ultimately giving it even more power over the people who actually make and produce books.
The announcement says their book “is about traps like the one Audible lays for writers and readers. We show how Big Tech and Big Content erect chokepoints between creators and audiences, allowing them to lock in artists and producers, eliminate competition, and extract far more than their fair share of revenues from creative labour. No way are we going to let Audible put its locks on our audiobook.

“So we’re kickstarting it instead.”

The announcement notes that Cory Doctorow himself has written dozens of books, “and he won’t allow digital locks on any of them.” And then in 2020, “Cory had an idea: what if he used Kickstarter to pre-sell his next audiobook? It was the most successful audiobook crowdfunding campaign in history.”

So now Cory’s working instead with independent audiobook studio Skyboat Media “to make great editions, which are sold everywhere except Audible (and Apple, which only carries Audible books): Libro.fm, Downpour, Google Play and his own storefront. Cory’s first kickstarter didn’t just smash all audiobook crowdfunding records — it showed publishers and other writers that there were tons of people who cared enough about writers getting paid fairly that they were willing to walk away from Amazon’s golden cage. Now we want to send that message again — this time with a book that takes you behind the curtain to unveil the Machiavellian tactics Amazon and the other big tech and content powerhouses use to lock in users, creators and suppliers, eliminate competition, and extract more than their fair share….

Chokepoint Capitalism is not just a rollicking read, and a delightful listen: it also does good.

Your willingness to break out of the one-click default of buying from the Audible monopoly in support of projects like this sends a clear message to writers, publishers, and policymakers that you have had enough of the unfair treatment of creative workers, and you are demanding change.
Rewards include ebooks, audiobooks, hardcover copies, and even the donation of a copy to your local library. You can also pledge money without claiming a reward, or pledge $1 as a show of support for “a cryptographically signed email thanking you for backing the project. Think of it as a grift-free NFT.”

Craig Newmark says the book documents “the extent to which competition’s been lost throughout the creative industries, and how this pattern threatens every other worker. There is still time to do something about it, but the time to act is now.”

Source: Cory Doctorow Launches New Fight against Copyrights, Creative Chokepoints, and Big Tech’s ‘Chokepoint Capitalism’ – Slashdot

A Dad Took Photos of His Naked Toddler for the Doctor. Google Flagged Him as a Criminal, destroyed his digital life with no recourse

It was a Friday night in February 2021. His wife called an advice nurse at their health care provider to schedule an emergency consultation for the next morning, by video because it was a Saturday and there was a pandemic going on. The nurse said to send photos so the doctor could review them in advance.

Mark’s wife grabbed her husband’s phone and texted a few high-quality close-ups of their son’s groin area to her iPhone so she could upload them to the health care provider’s messaging system. In one, Mark’s hand was visible, helping to better display the swelling. Mark and his wife gave no thought to the tech giants that made this quick capture and exchange of digital data possible, or what those giants might think of the images.

[…]

the episode left Mark with a much larger problem, one that would cost him more than a decade of contacts, emails and photos, and make him the target of a police investigation. Mark, who asked to be identified only by his first name for fear of potential reputational harm, had been caught in an algorithmic net designed to snare people exchanging child sexual abuse material.

[…]

“There could be tens, hundreds, thousands more of these,” he said.

Given the toxic nature of the accusations, Callas speculated that most people wrongfully flagged would not publicize what had happened.

“I knew that these companies were watching and that privacy is not what we would hope it to be,” Mark said. “But I haven’t done anything wrong.”

Police agreed. Google did not.

[…]

Two days after taking the photos of his son, Mark’s phone made a blooping notification noise: His account had been disabled because of “harmful content” that was “a severe violation of Google’s policies and might be illegal.” A “learn more” link led to a list of possible reasons, including “child sexual abuse and exploitation.”

Mark was confused at first but then remembered his son’s infection. “Oh, God, Google probably thinks that was child porn,” he thought.

[…]

He filled out a form requesting a review of Google’s decision, explaining his son’s infection. At the same time, he discovered the domino effect of Google’s rejection. Not only did he lose emails, contact information for friends and former colleagues, and documentation of his son’s first years of life, his Google Fi account shut down, meaning he had to get a new phone number with another carrier. Without access to his old phone number and email address, he couldn’t get the security codes he needed to sign in to other internet accounts, locking him out of much of his digital life.

[…]

A few days after Mark filed the appeal, Google responded that it would not reinstate the account, with no further explanation.

Mark didn’t know it, but Google’s review team had also flagged a video he made and the San Francisco Police Department had already started to investigate him.

[…]

Cassio was in the middle of buying a house, and signing countless digital documents, when his Gmail account was disabled. He asked his mortgage broker to switch his email address, which made the broker suspicious until Cassio’s real estate agent vouched for him.

[…]

In December, Mark received a manila envelope in the mail from the San Francisco Police Department. It contained a letter informing him that he had been investigated as well as copies of the search warrants served on Google and his internet service provider. An investigator, whose contact information was provided, had asked for everything in Mark’s Google account: his internet searches, his location history, his messages and any document, photo and video he’d stored with the company.

The search, related to “child exploitation videos,” had taken place in February, within a week of his taking the photos of his son.

Mark called the investigator, Nicholas Hillard, who said the case was closed. Hillard had tried to get in touch with Mark, but his phone number and email address hadn’t worked.

“I determined that the incident did not meet the elements of a crime and that no crime occurred,” Hillard wrote in his report. Police had access to all the information Google had on Mark and decided it did not constitute child abuse or exploitation.

Mark asked if Hillard could tell Google that he was innocent so he could get his account back.

“You have to talk to Google,” Hillard said, according to Mark. “There’s nothing I can do.”

Mark appealed his case to Google again, providing the police report, but to no avail. After getting a notice two months ago that his account was being permanently deleted, Mark spoke with a lawyer about suing Google and how much it might cost.

“I decided it was probably not worth $7,000,” he said.

[…]

False positives, when people are erroneously flagged, are inevitable given the billions of images being scanned. While most people would probably consider that trade-off worthwhile, given the benefit of identifying abused children, Klonick said companies need a “robust process” for clearing and reinstating innocent people who are mistakenly flagged.

“This would be problematic if it were just a case of content moderation and censorship,” Klonick said. “But this is doubly dangerous in that it also results in someone being reported to law enforcement.”

It could have been worse, she said, with a parent potentially losing custody of a child. “You could imagine how this might escalate,” Klonick said.

Cassio was also investigated by police. A detective from the Houston Police department called this past fall, asking him to come into the station.

After Cassio showed the detective his communications with the pediatrician, he was quickly cleared. But he, too, was unable to get his decade-old Google account back, despite being a paying user of Google’s web services.

[…]

Source: A Dad Took Photos of His Naked Toddler for the Doctor. Google Flagged Him as a Criminal.

Oracle facing class action over ‘brokering’ personal data of 5 billion people

Oracle is the subject of a class-action suit alleging the software giant created a network containing personal information of hundreds of millions of people and sold the data to third parties.

The case [PDF] is being brought by Johnny Ryan, formerly a policy officer at Brave, maker of the privacy-centric browser, and now part of the Irish Council for Civil Liberties (ICCL), who was behind several challenges to Google, Amazon, and Microsoft’s online advertising businesses.

The ICCL claims Oracle has amassed detailed dossiers on 5 billion people which generates $42.4 billion in annual revenue.

The allegations appear to be based, in part, on an Oracle presentation from 2016 in which Oracle CTO and founder Larry Ellison described how data was collected so businesses could predict purchasing patterns among consumers.

Ellison said at the time [1:15 onward]: “It is a combination of real-time looking at all of their social activity, real-time looking at where they are including, micro-locations – and this is scaring the lawyers [who] are shaking their heads and putting their hands over their eyes – knowing how much time you spend in a specific aisle of a specific store and what is in that aisle of a store. As we collect information about consumers and you combine that with their demographic profile, and their past purchasing behavior, we can do a pretty good job of predicting what they’re going to buy next.”

The ICCL claims Oracle’s dossiers about people include names, home addresses, emails, purchases online and in the real world, physical movements in the real world, income, interests and political views, and a detailed account of online activity.

[…]

 

Source: Oracle facing class action over ‘brokering’ personal data • The Register

Meta fined $402 million in EU over Instagram’s privacy settings for children

Meta has been fined €405 million ($402 million) by the Irish Data Protection Commission for its handling of children’s privacy settings on Instagram, which violated Europe’s General Data Protection Regulation (GDPR). As Politico reports, it’s the second-largest fine to come out of Europe’s GDPR laws, and the third (and largest) fine levied against Meta by the regulator.

A spokesperson for the DPC confirmed the fine, and said additional details about the decision would be available next week. The fine stems from the photo sharing app’s privacy settings on accounts run by children. The DPC had been investigating Instagram over children’s use of business accounts, which made personal data like email addresses and phone numbers publicly visible. The investigation also covered Instagram’s policy of defaulting all new accounts, including teens, to be publicly viewable.

[…]

Source: Meta faces $402 million EU fine over Instagram’s privacy settings for children | Engadget

Major VPN services shut down in India over anti-privacy law

[…]

New rules from India’s Computer Emergency Response Team

India’s Computer Emergency Response Team (CERT) has said that new rules will apply to VPN providers from September 25. These will require services to collect customer names, email addresses, and IP addresses. The data must be retained for at least five years, and handed over to CERT on demand.

This would breach the privacy standards of major VPN services, and be physically impossible for services like NordVPN, which keep no logs as a matter of policy. The company is registered in Panama specifically because there are no data-retention laws there, and no international intelligence sharing.

Major VPN services shut down Indian servers

The Wall Street Journal reports that major VPN services have shut down their Indian servers.

Major global providers of virtual private networks, which let internet users shield their identities online, are shutting down their servers in India to protest new government rules they say threaten their customers’ privacy […]

Such rules are “typically introduced by authoritarian governments in order to gain more control over their citizens,” said a spokeswoman for Nord Security, provider of NordVPN, which has stopped operating its servers in India. “If democracies follow the same path, it has the potential to affect people’s privacy as well as their freedom of speech,” she said […]

Other VPN services that have stopped operating servers in India in recent months are some of the world’s best known. They include U.S.-based Private Internet Access and IPVanish, Canada-based TunnelBear, British Virgin Islands-based ExpressVPN, and Lithuania-based Surfshark.

ExpressVPN said it “refuses to participate in the Indian government’s attempts to limit internet freedom.”

The government’s move “severely undermines the online privacy of Indian residents,” Private Internet Access said.

Customers in India will be able to connect to VPN servers in other countries. This is the same approach taken in Russia and China, where operating servers within those countries would require VPN companies to comply with similar legislation.

[…]

Source: Major VPN services shut down in India over anti-privacy law

FTC Sues Broker Kochava Over Geolocation Data Sales, giving away the data for free for 61m devices

[…] Commissioners voted 4-1 this week to bring a suit against Kochava, Inc., which calls itself the “industry leader for mobile app attribution” and sells mobile geo-location data on hundreds of millions of people. The suit accuses the company of violating the FTC Act, and the agency warns that the company’s business practices could easily be used to unmask the locations of vulnerable individuals—including visitors to reproductive health clinics, homeless and domestic violence shelters, places of worship, and addiction recovery centers.

Kochava, which is based in Idaho, sells “customized data feeds” that can be used to identify and track specific phone users, the FTC said in the suit. Kochava collects this data through a variety of means, then repackages it in large datasets to sell to marketers. The datasets include Mobile Advertising IDs, or MAIDs—the unique identifiers for mobile devices used in targeted advertising—as well as timestamped latitude and longitude coordinates for each device (i.e., the approximate location of the user). The data is ostensibly anonymized, but there are well-known ways to de-anonymize it. The suit claims that Kochava is aware of this, as it has allegedly suggested using its data “to map individual devices to households.”

Subscribing to Kochava’s feeds typically requires a hefty fee, but the FTC says that, until at least June, Kochava also granted interested users free access to a sample of the data. This “free sample” apparently included the location data of about 61 million mobile devices. Authorities say that there were “only minimal steps and no restrictions on usage” of this freely offered information.

[…]

Source: FTC Sues Broker Kochava Over Geolocation Data Sales

South Korea to pardon Samsung’s Lee, other corporate giants

Samsung’s de-facto leader secured a pardon Friday of his conviction for bribing a former president in a corruption scandal that toppled a previous South Korean government, an act of leniency that underscored the tech company’s huge influence in the nation.

Lee Jae-yong’s pardon is partially symbolic since he was released on parole a year ago after serving 18 months of a prison term that would have ended in July, and critics say the billionaire has remained in control of Samsung even while behind bars. Still, the pardon will allow the heir to the electronics juggernaut to fully resume his management duties and could make it easier for the company to pursue investments and mergers.

The Justice Ministry said President Yoon Suk Yeol, who as a prosecutor investigated the corruption scandal involving Lee, will issue the pardon Monday, a national holiday when some 1,700 people are set to receive clemency, including other top business leaders.

Lee, 54, was convicted in 2017 of bribing former President Park Geun-hye and her close confidante to win government support for a merger between two Samsung affiliates that tightened Lee’s control over the corporate empire. Park and the confidante were also convicted in the scandal, which enraged South Koreans, who staged massive protests for months demanding an end to the shady ties between business and politics. The demonstrations eventually led to Park’s ouster from office.

[…]

Lee still faces a separate trial on charges of stock price manipulation and auditing violations related to the 2015 merger.

Among others set to be pardoned is Lotte Group Chairman Shin Dong-bin, who received a suspended prison term in 2018 on similar charges of bribing Park, whom then-President Moon Jae-in pardoned in December. Chang Sae-joo, chairman of Dongkuk Steel Mill, and former STX Group Chairman Kang Duk-soo will also receive clemency.

A coalition of civic groups, including People’s Solidarity for Participatory Democracy, issued a statement criticizing the move to pardon the business leaders, accusing Yoon of cozying up to “chaebol,” referring to the family-owned conglomerates that dominate the country’s economy.

“President Yoon Suk Yeol’s sell-out (to business) sends a signal to chaebol chiefs that they are free to commit all the crimes they want,” the groups said, accusing Yoon of damaging the rule of law.

Former President Park was convicted of a broad range of corruption crimes, including colluding with her longtime confidante, Choi Soon-sil, to take millions of dollars in bribes and extortion from Samsung and other major companies while she was in office.

She faced a prison term of more than two decades before Moon pardoned her in December, citing a need to promote unity in the politically divided nation. Choi remains in jail. Chang, of Dongkuk Steel Mill, was released on parole in 2018 with about six months left on a 3 1/2-year prison term on charges that he embezzled millions of dollars in corporate funds and used some of it to gamble in Las Vegas.

[…]

Han, the justice minster, said that the government did not consider the pardons of any convicted politicians or government employees this time, saying that the focus was on the economy

[…]

Source: South Korea to pardon Samsung’s Lee, other corporate giants | AP News

One rule for the rich, the law for the rest

Australia fines Google $42.5 million over misleading location settings

Google is being ordered to pay A$60 million ($42.5 million) in penalties to Australia’s competition and national consumer law regulator regarding the collection and use of location data on Android phones.

The financial slap on the wrist relates to a period between January 2017 and December 2018 and follows court action by the Australian Competition and Consumer Commission (ACCC).

According to the regulators, Google misled consumers through the “Location History” setting. Some users were told, according to the ACCC, that the setting “was the only Google account setting that affected whether Google collected, kept and used personally identifiable data about their location.”

It was not. Another setting titled “Web & App Activity” also permitted data to be collected by Google. And it allowed the collection of “personally identifiable location data when it was turned on, and that setting was turned on by default,” the ACCC said.

The “misleading representations,” according to the ACCC, breach Australian consumer law and could have been viewed by the users of 1.3 million Google accounts in Australia. The figure is, however, a best estimate. We’re sure Google doesn’t collect telemetry showing where Android users navigate to either.

Privacy issues aside, the data could also be used by Google to target ads to consumers who thought they’d said no to collection.

Google “took remedial steps” and addressed the issues by December 20, 2018, but the damage was done and the ACCC instituted proceedings in October 2019. In April 2021, the Federal Court found that Google LLC (the US entity) and Google Australia Pty Ltd had breached Australian consumer law.

[…]

Google has come under fire from other quarters regarding the obtaining of customer location data without proper consent. A group of US states sued the search giant earlier this year over “dark patterns” in the user interface to get hold of location information. Then there was the whole creepy Street View Wi-Fi harvesting debacle.

[…]

Source: Australia fines Google over misleading location settings • The Register

Ring surveillance camera footage exploited for “funny clip” show

[…]Ring Nation, a new twist on the popular clip show genre, from MGM Television, Live PD producer Big Fish Entertainment and Ring.

The series, which will launch on September 26, will feature viral videos shared by people from their video doorbells and smart home cameras.

It’s a television take on a genre that has been increasingly going viral on social media.

The series will feature clips such as neighbors saving neighbors, marriage proposals, military reunions and silly animals.

[…]

Source: Wanda Sykes To Host Syndicated Viral Video Show Featuring Ring – Deadline

How this is not a really scary way to try to normalise the constant and low visibility surveillance enacted by these cameras is a puzzle to me. Making it funny that you’re being spied upon from the doors in the streets.

e-HallPass Monitors How Long Kids Are in the Bathroom Is Now in 1,000 American Schools, normalises surveillance

e-HallPass, a digital system that students have to use to request to leave their classroom and which takes note of how long they’ve been away, including to visit the bathroom, has spread into at least a thousand schools around the United States.

The system has some resemblance to the sort of worker monitoring carried out by Amazon, which tracks how long its staff go to the toilet for, and is used to penalize workers for “time off task.” It also highlights how automated tools have led to increased surveillance of students in schools, and employees in places of work.

“This product is just the latest in a growing number of student surveillance tools—designed to allow school administrators to monitor and control student behavior at scale, on and off campus,”

[…]

increased scrutiny offered by surveillance tools “has been shown to be disproportionately targeted against minorities, recent immigrants, LGBTQ kids,” and other marginalized groups.

[…]

Eduspire, the company that makes e-HallPass, told trade publication EdSurge in March that 1,000 schools use the system. Brian Tvenstrup, president of Eduspire, told the outlet that the company’s biggest obstacle to selling the product “is when a school isn’t culturally ready to make these kinds of changes yet.”

[…]

Admins can then access data collected through the software, and view a live dashboard showing details on all passes. e-HallPass can also stop meet-ups of certain students and limit the amount of passes going to certain locations, the website adds, explicitly mentioning  “vandalism and TikTok challenges.” Many of the schools Motherboard identified appear to use e-HallPass specifically on Chromebooks, according to student user guides and similar documents hosted on the schools’ websites, though it also advertises that it can be used to track students on their personal cell phones.

EdSurge reported that some people had taken to Change.org with a petition to remove the “creepy” system from a specific school. Motherboard found over a dozen similar petitions online, including one regarding Independence High School signed nearly 700 times which appears to have been written by a group of students.

[…]

 

Source: A Tool That Monitors How Long Kids Are in the Bathroom Is Now in 1,000 American Schools

Some Epson Printers Programmed to Eventually Self-Brick

[…] Haven recently took to Twitter to share a frustrating experience with their wife’s “very expensive @EpsonAmerica printer” which, seemingly out of the blue, displayed a warning message stating that “it had reached the end of its service life.” It then simply stopped working, requiring either a servicing to bring it back from the dead, or a full-on replacement.

So what was the issue with the printer? A dead motor? A faulty circuit board? Nope. The error message was related to porous pads inside the printer that collect and contain excess ink. These wear out over time, leading to potential risks of property damage from ink spills, or potentially even damage to the printer itself. Usually, other components in the printer wear out before these pads do, or consumers upgrade to a better model after a few years, but some high-volume users may end up receiving this error message while the rest of the printer seems perfectly fine and usable.

According to the Fight to Repair Substack, the self-bricking issue affects the Epson L130, L220, L310, L360, and L365 models, but could affect other models as well, and dates back at least five years. There’s already videos on YouTube showing other Epson users manually replacing these ink pads to bring their printers back to life. The company does provide a Windows-only Ink Pad reset utility that will extend the life of the printer for a short period of time, but it can only be used once, and afterwards, the hardware will either need to be officially serviced, or completely replaced.

A few years ago, Epson released its EcoTank line of printers, which were specifically designed to address the extremely high cost of replacing the ink cartridges for color inkjet printers. The printers featured large ink reservoirs which could be easily refilled with cheaper bottles of ink, and although Epson’s EcoTank printers were more expensive as a result, in the long run they would be cheaper to operate, especially for those printing a lot of color imagery. But that assumes they actually keep working for the long run. Videos of users manually replacing their Epson printers’ ink pads seem to indicate that the company could redesign the hardware to make this part easily user-serviceable, which would extend the life of the hardware considerably. But as it stands, the company’s solution runs the risk of contributing to an ever-growing e-waste problem and forcing consumers to shell out for new hardware long before they really need to.

[…]

As it stands now, there are undoubtedly many users getting an error message like this that simply replace their printers entirely, when they’d certainly be happy to instead pay for a $15 maintenance kit that quickly gets them running again, keeping more devices out of recycling facilities or garbage dumps.

Source: Some Epson Printers Programmed to Eventually Self-Brick

Apple tells suppliers to use ‘Taiwan, China’ on labels

Apple, which celebrates its self-professed commitment to free expression and human rights, has reportedly told its suppliers in Taiwan to label their components so they describe Taiwan as a province of the People’s Republic of China (PRC).

According to Japanese financial publication Nikkei, Apple on Friday warned its suppliers that China has ramped up enforcement of a long-standing import rule “that Taiwanese-made parts and components must be labeled as being made either in ‘Taiwan, China’ or ‘Chinese Taipei.'”

[…]

While China and the US have allowed the status of Taiwan to remain ambiguous to avoid open warfare, the uneasy peace frequently gets tested, as was the case this week when Nancy Pelosi, the Democratic Speaker of the House of Representatives, visited Taiwan after being warned away by the Chinese government.

Pelosi’s visit infuriated the CCP, which responded by holding threatening military exercises and announcing countermeasures, including the suspension of military, legal, and economic cooperative efforts between China and the US. CCP authorities also sanctioned Pelosi and her family. China’s decision to enforce its import labeling rules to designate Taiwan as its own province presumably follows from this fit of pique.

Apple has prospered by relying on Chinese companies as part of its supply chain. But its dependence upon China for sales and product assembly has left the corporation unwilling to challenge egregious abuses, though it argues otherwise.

In September, 2020, Apple issued a document [PDF] titled “Our Commitment to Human Rights.” It states, “At Apple and throughout our supply chain, we prohibit harassment, discrimination, violence, and retaliation of any kind—and we have zero tolerance for violations motivated by any form of prejudice or bigotry.”

Apple has shown a bit more tolerance for China’s mass detention of Muslim Uyghurs.

In December, 2020, the Tech Transparency Project reported that Apple’s suppliers depend upon forced labor. And in May 2021, a report by The Information accused seven of Apple’s suppliers of relying on forced labor in China’s Xinjiang region.

When US lawmakers proposed a law to hold companies accountable for allowing suppliers to use forced labor, Apple lobbied against the bill which was nonetheless signed into law by President Biden toward the end of last year. Apple also lobbied the SEC, unsuccessfully, to block a shareholder proposal to require the company to disclose more details about supply chain labor practices.

[…]

Ismail pointed to Apple’s censorship of Taiwan’s flag emoji on iOS devices sold in Hong Kong and Macao.

“During the Umbrella movement in Hong Kong, [Apple] removed an app used by protesters for safety purposes,” he said. “It gave very strict directives to its employees about their involvement in the movement, and abusively and heavily restricted their freedom of expression.”

[…]

Source: Apple tells suppliers to use ‘Taiwan, China’ on labels • The Register

Roomba Maker iRobot sells out to Amazon for $1.7 Billion cash – now your vacuum will be spying on you too

Amazon.com Inc. AMZN -1.73% is buying Roomba maker iRobot Corp. IRBT +19.23% for $1.7 billion, giving the online retailer another connected-home product that deepens its ties to consumers’ homes.

Amazon agreed to pay $61 a share for iRobot in an all-cash deal. The price, which includes a small amount of debt, represents a 22% premium to iRobot’s closing price of $49.99 on Thursday.

iRobot shares rose 19% to $59.54 in recent trading. They are off 9.7% year to date. Amazon shares fell 0.8% to $141.41.

iRobot introduced its Roomba vacuum in 2002 and has sold more than 40 million units since. The wireless, smart-vacuum learns and maps spaces to clean dust and messes. It is a staple of Amazon’s Prime Day shopping bonanza, having been a featured product for eight straight years.

iRobot in May had projected reaching sales of $1.6 billion to $1.7 billion this year. It withdrew that guidance on Friday in light of the deal and other challenges.

Roomba would join other Amazon-owned products like the Alexa virtual assistant speaker and Ring video doorbell that together give the retailer more ways to power smart homes.

[…]

Source: Amazon Buying Roomba Maker iRobot for $1.7 Billion – WSJ

Visa, Mastercard Cancel Ad Pornhub Payments Amid Lawsuit – suspicion is enough apparently

Visa and Mastercard, two of the world’s largest payment processors, said Thursday that they will suspend payments for ad purchases on Pornhub. The move comes on the heels of a judge allowing a lawsuit to proceed that accuses Visa of knowingly facilitating the spread of child pornography, also known as child sexual abuse material (CSAM).

A federal judge denied Visa’s motion to dismiss last week, allowing the case to move forward against the payment processor for alleged involvement in a “criminal agreement” to profit off the videos. In a statement released Thursday, Visa CEO Alfred Kelly said that, while the company strongly disagreed with the court’s ruling it had created “new uncertainty” around the role of TrafficJunky, MindGeek’s advertising arm. (MindGeek is Pornhub’s parent company). Citing that uncertainty, Kelly said Visa would suspend any relationship with TraficJunky until further notice. That means customers will no longer be able to use Visa cards to purchase advertising on MindGeek sites, which includes Pornhub, for the duration of the suspension. Visa’s decision came just two days after Bill Ackman, an influential hedge fund manager, called on the credit card company to pressure Pornhub to remove CSAM content.

[…]

In a statement sent to Gizmodo, a MindGeek said that none of its platforms, including Pornhub, have ever tolerates CSAM or other illicit material.

“Despite today’s suspension of payment acceptance for our advertising platform, we are extremely confident in our policies and the fact that we have instituted trust and safety measures that far surpass those of any other major platform on the internet,” the company’s statement reads.

MindGeek went on to describe the recent allegation accusing the company of knowingly allowing and monetizing off CSAM material on its platform as “reckless,” and “false.”

[…]

“At this point in the lawsuit, the court has not yet ruled on the veracity of any allegations, and is required to assume all of the plaintiff’s allegations are true and accurate. When the court can actually consider the facts, we are confident the plaintiff’s claims will be dismissed for lack of merit.”

[…]

Source: Visa, Mastercard Suspend Ad Pornhub Payments Amid Lawsuit

EU Digital Markets App (DMA) approved for new rules for fair competition online

[…] New rules for gatekeepers

The DMA defines new rules for large online platforms (“gatekeepers”). They now have to:

  • ensure that unsubscribing from core platform services is just as easy as subscribing
  • ensure that the basic functionalities of instant messaging services are interoperable, i.e. enable users to exchange messages, send voice messages or files across messaging apps
  • give business users access to their marketing or advertising performance data on the platform
  • inform the European Commission of their acquisitions and mergers

But they can no longer:

  • rank their own products or services higher than those of others (self-preferencing)
  • pre-install certain apps or software, or prevent users from easily un-installing these apps or software
  • require the most important software (e.g. web browsers) to be installed by default when installing an operating system
  • prevent developers from using third-party payment platforms for app sales
  • reuse private data collected during a service for the purposes of another service

If a large online platform is identified as a gatekeeper, it will have to comply with the rules of the DMA within six months.

If a gatekeeper violates the rules laid down in the DMA, it risks a fine of up to 10% of its total worldwide turnover. For a repeat offence, a fine of up to 20% of its worldwide turnover may be imposed.

If a gatekeeper systematically fails to comply with the DMA, i.e. it violates the rules at least three times in eight years, the European Commission can open a market investigation and, if necessary, impose behavioural or structural remedies.

[…]

Source: DMA: Council gives final approval to new rules for fair competition online – Consilium

AMTD Digital / $HKD massive pump and dump squeeze, Reddit shocked but figuring out who dun it

HKD, a spinoff IPO with 51 employees within the space of a few days had a stock price explosion up to around $2555 per stock from around $75 starting on 28th July. No buy button was disabled (as was the case with Gamestop / $GME) and within a few days the rug was pulled on 3rd of August leading to a (current) value of around $1000. This is around the time of the very confusing $GME stock dividend split (splividend) which has caused chaos with brokers not issuing the split shares or dividend to clients with $GME stock. Redditors were caught completely flat footed by this, but the media has been blaming Reddit with headlines like the following

Newly minted meme stock darling AMTD slides after eye-popping surge – Reuters

AMTD Digital stock, HKD, is up more than 14,000% since its IPO. Is it a new meme stock? – USA Today

How a little-known stock soared 21,000% to overtake Costco – (CNN Business)The Reddit retail army is back.

As for Redditors, they are looking for the culprits

HKD, a Chinese ticker ($2m/month “revenue”, no history, and no products), fresh IPO’d on July 15th, same week as $GME’s record date. Only during GME’s Splividend volume suppression did HKD arbitrarily grow from $1B to $.15 TRILLION in market cap. Wut doin Ken? Buying Like-Kind FTD Settlement?

AMTD Digital $HKD the 25th Largest Company in the world in 2 weeks. Larger than Pfizer, Coca Cola, Bank of America, Shell or McDonald and you never heard of it. Meet their gifted managment team and comprehensive webpage.

If you’re wondering why HKD is up 4500% in two weeks, it’s because the Rothschilds are involved

They are trying to frame HKD as the next GME, claiming WSB is behind it. Smells very much like mayo.

Even CNN says that WSB pushed up HKD. Really? I feel like all of us knew about this stock only when it was too late.

Here is proof WSB did not have anything to do with HKD. Look at which line does up first. Do your research media

r/wallstreetbets - Here is proof WSB did not have anything to do with HKD. Look at which line does up first. Do your research media

Redditors are affronted that this stock is being treated differently from $GME – a stock that was being short squeezed for no reason apart from monetary gains for huge institutional investors such as Ken Griffin and Citadel and many more.

13 & Change to $2,555.30 per share. No systemic risk to market. No one freaked out at RobinHood or any other brokers, or clearing firms, or HedgeFunds… no buy button taken away to “Protect clients from risk!”. This tweet is 1,000% correct. What’s up?! 💎🙌🦍

They are also trying to figure out what it actually is that HKD actually does

You asked what HKD actually does? Ok, but this is gonna be painful…

TLDR: They took over an insurer in HK (Hong Kong) when China took over. They also bought up a couple insurers in Singapore. They may offer some fintech services and possibly a small media platform for some SE Asia internet celebs. Their “SpiderNet” is, according to them, their most profitable system. It appears to just be a business network that you have to pay to be a part of. It all sounds like a corporate crime syndicate straight out of a comic book.

They mention a “controlling shareholder” a few times, which I assume is AMTD Idea Group, a holding company. They’ve been investigated for some very fradulastic crap, which I will be writing up next. (https://hindenburgresearch.com/ebang/)

HKD, AMTD, WTF? The stock you haven’t heard of that’s up 30,000% in 2 weeks

This stock just IPO’d, is based in a foreign country, and has run 30,000% in two weeks on very low volume. Translation: Please do not read this and conclude, “Wow, what a great stock that I should definitely buy!” — That is absolutely NOT what we’re saying here

the website’s explanation of SpiderNet is extremely vague.

What can be gleaned from the website is:

  • AMTD provides investment banking and asset management services to clients on an international basis
  • AMTD Digital raised $125M in its New York IPO — the largest listing by a Chinese company in 2022
  • It owns the SpiderNet platform

That’s really all the website explains. After digging through a few press releases, we were able to determine that the SpiderNet platform intends to provide capital and technology to digital startups, as well as provide networking services to other digital startups. In turn, SpiderNet collects a fee from its members, which is where it gets almost all of its revenue.

In short: AMTD Digital is a Hong Kong based fintech play which essentially provides loans and services to startups in exchange for fees.

WhatsApp boss says no to AI filters policing encrypted chat

Will Cathcart, who has been at parent company Meta for more than 12 years and head of WhatsApp since 2019, told the BBC that the popular communications service wouldn’t downgrade or bypass its end-to-end encryption (EE2E) just for British snoops, saying it would be “foolish” to do so and that WhatsApp needs to offer a consistent set of standards around the globe.

“If we had to lower security for the world, to accommodate the requirement in one country, that … would be very foolish for us to accept, making our product less desirable to 98 percent of our users because of the requirements from 2 percent,” Cathcart told the broadcaster. “What’s being proposed is that we – either directly or indirectly through software – read everyone’s messages. I don’t think people want that.”

Strong EE2E ensures that only the intended sender and receiver of a message can read it, and not even the provider of the communications channel nor anyone eavesdropping on the encrypted chatter. The UK government is proposing that app builders add an automated AI-powered scanner in the pipeline – ideally in the client app – to detect and report illegal content, in this case child sex abuse material (CSAM).

[…]

Source: WhatsApp boss says no to AI filters policing encrypted chat • The Register

They always trot out sex abuse and children when they want to impair your freedoms.

Samsung adds ‘repair mode’ to smartphone

When activated, repair mode prevents a range of behaviors – from casual snooping to outright lifting of personal data – by blocking access to photos, messages, and account information.

The mode provides technicians with the access they require to make a fix, including the apps a user employs. But repairers won’t see user data in apps, so content like photos, texts and emails remains secure.

When users enable repair mode their device reboots. To exit, the user reboots again after logging in their normal way and turning the setting off.

Samsung said it is rolling out repair mode via software update, initially on the Galaxy S21 series within South Korea, with more models, and perhaps locations, getting the functionality over time.

Samsung has not explained how the feature works. Android devices already offer the chance to establish accounts for different users, so perhaps Samsung has created a role for repair technicians and made that easier to access.

Most repair technicians won’t want to view or steal a customer’s personal data – but it does happen.

Apple was forced to pay millions last year after two iPhone repair contractors allegedly stole and posted a woman’s nudes to the internet. That fiasco was in no way an isolated incident. In 2019 a Genius Bar employee allegedly texted himself explicit images taken from an iPhone he repaired and was subsequently fired.

[…]

Source: Samsung adds ‘repair mode’ to South Korean smartphone • The Register

Indonesian Government Blocks Steam, Epic, Ubisoft, Nintendo and more for 270 million people

Over the weekend, the Indonesian government began the task of blocking any website or service that had failed to register as part of new “internet control” laws. That ended up being a lot, including everything from Steam to the Epic Games Store to Nintendo Online to EA and Ubisoft’s platforms.

Indonesia’s Ministry of Communication and Information Technology (Kominfo) took the steps after the introduction of strict new laws, which the government says is part of a crackdown on anything appearing online that is “deemed unlawful,” and which would require any online service platform or provider hosting any such “unlawful” content to remove it within 24 hours (or four if it is deemed to be “urgent”).

In order to abide by those laws, international companies operating in Indonesia needed to have signed up by the weekend, and unsurprisingly given the sweeping powers at play, many have chosen not to, at least for now. As a response, non-participating services have been blocked to Indonesian IPs, which means alongside wider, more mainstream companies like PayPal and Yahoo, a host of gaming platforms have also been cut off.

While PayPal was temporarily reinstated (in order to allow customers to get their money off the platform), the gaming stores and platforms have remained dark since the weekend (the new law’s registration deadline passed on July 27).

As Global Voices sums up, these laws have been opposed both within and outside of Indonesia since they were first announced:

The mandatory registration of private electronic systems operators (ESOs) is stipulated in the Ministerial Regulation 5 (MR5) issued in December 2020. Its amended version, Ministerial Regulation 10 (MR10), was released in May 2021.

Both MR5 and MR10 have been consistently opposed by the media, civil society groups, and human rights advocates for containing provisions that pose a threat to freedom of expression.

Human Rights Watch have said of the laws:

MR5 is deeply problematic, granting government authorities overly broad powers to regulate online content, access user data, and penalize companies that fail to comply…Ministerial Regulation 5 is a human rights disaster that will devastate freedom of expression in Indonesia, and should not be used in its current form.

While this isn’t a market that’s normally in the headlines, this is important news, because with its large population (at 270 million it’s the fourth most-populous nation on Earth) Indonesia is a huge market for online services. As The Diplomat points out, “Indonesia remains one of the largest internet markets in the world, with the third-largest population of Facebook users and also comes in the top 10 for users of YouTube, TikTok, Twitter, Instagram, and WhatsApp.”

None of the services currently affected are banned; they’re technically just restricted until either they sign up to Kominfo or the law is modified (or repealed). Some of the companies that have signed up include Google, Roblox and Riot Games (League of Legends, Valorant). And while direct access to services like Steam are currently not available, Indonesian gamers are already reportedly getting around this by using a VPN.

Source: Indonesian Government Blocks Steam, Epic, Ubisoft & Nintendo

Twitter warns of ‘record highs’ in account data requests

Twitter has published its 20th transparency report, and the details still aren’t reassuring to those concerned about abuses of personal info. The social network saw “record highs” in the number of account data requests during the July-December 2021 reporting period, with 47,572 legal demands on 198,931 accounts. The media in particular faced much more pressure. Government demands for data from verified news outlets and journalists surged 103 percent compared to the last report, with 349 accounts under scrutiny.

The largest slice of requests targeting the news industry came from India (114), followed by Turkey (78) and Russia (55). Governments succeeded in withholding 17 tweets.

As in the past, US demands represented a disproportionately large chunk of the overall volume. The country accounted for 20 percent of all worldwide account info requests, and those requests covered 39 percent of all specified accounts. Russia is still the second-largest requester with 18 percent of volume, even if its demands dipped 20 percent during the six-month timeframe.

The company said it was still denying or limiting access to info when possible. It denied 31 percent of US data requests, and either narrowed or shut down 60 percent of global demands. Twitter also opposed 29 civil attempts to identify anonymous US users, citing First Amendment reasons. It sued in two of those cases, and has so far had success with one of those suits. There hasn’t been much success in reporting on national security-related requests in the US, however, and Twitter is still hoping to win an appeal that would let it share more details.

[…]

Source: Twitter warns of ‘record highs’ in account data requests | Engadget

Russia fines Google $374M over Ukraine invasion portrayal

A Russian court fined Google $374 million on Monday for its failure to remove prohibited content, according to the country’s internet watchdog Roskomnadzor.

The Tagansky District Court of Moscow took exception to YouTube content it claimed contained “fakes about the course of a special military operation in Ukraine” and discredited Russia’s armed forces. The court also claimed some material promoted extremism and/or terrorism. Google also stands convicted an “indifferent attitude to the life and health of minors” that the court feels are worthy of protest by Russian citizens.

The court also alleged Google systemically violated Russian law.

As punishment, Google users will receive warnings of the company’s alleged misdeeds, and won’t be permitted to buy ads tied to Google Search results or on YouTube.

[…]

Source: Russia fines Google $374M over Ukraine invasion portrayal • The Register

Wouldn’t it be nice if they fined Putin for making the video’s a possibility