Thursday 24 December 2015

Facebook rebranded its Internet.org app as Free Basics in September
Facebook's effort to provide Indians with free access to a limited number of internet services has run into trouble.
India's telecoms regulator has asked the mobile network that partnered with the US firm to put their Free Basics offer on hold.
Data fees are relatively expensive in India, and the initiative aims to prevent this being a deterrent.
But critics of the Free Basics service say it runs contrary to net neutrality principles.
They suggest data providers should not favour some online services over others by offering cheaper or faster access.
A spokesman for Reliance Communications - the mobile network that had supported the scheme - confirmed it would comply with the Telecom Regulatory Authority of India's demand.
"As directed by TRAI, the commercial launch of Free Basics has been kept in abeyance, until they consider all details and convey a specific approval," a spokesman told
Facebook has paid for large adverts in the local press to defend Free Basics

He added that the watchdog had only explained its decision by saying it wanted to "examine the details and intrinsics" of the offer, but had not provided further detail.
However, the Times of India quoted a source who confirmed the decision was indeed related to the net neutrality controversy.
"The question has arisen whether a telecom operator should be allowed to have differential pricing for different kinds of content," they said.
"Unless that question is answered, it will not be appropriate for us to continue to make that happen."
Facebook said that it would continue to lobby for its scheme.
"We are committed to Free Basics and to working with Reliance and the relevant authorities to help people in India get connected," a spokeswoman said.

'Millions more online'

Facebook launched Internet.org as a partnership with several mobile operators in emerging economies in 2013 as a means to "introduce people to the benefits of the internet".
Net neutrality has proved to be a hot topic in India this year

The associated app, which provides access to selected services, was renamed as Free Basics earlier this year.
Content includes pages from selected local news and weather forecast providers, the BBC, Wikipedia and various health services.
It is offered in 36 countries and Facebook says it believes more than 15 million people have been brought online who would otherwise not be using the net.
Reliance began offering the scheme in February and then extended it to all its subscribers in November, but it has faced criticism.
Local start-ups complained they risked being disadvantaged because they were not included, and in April several larger groups that had initially signed up to the scheme - including the media conglomerate Times Group and the travel booking site Cleartrip - pulled their services, citing concerns about it failing to provide a "fair, level playing field".

Net neutrality hearing

Facebook attempted to address such concerns by saying it would allow more services to join, but the firm's founder Mark Zuckerberg warned it was "not sustainable to offer the whole internet for free".
Part of the attraction for the mobile networks was their expectation that users would see the benefits of the internet and want to pay for fuller access.
Mark Zuckerberg hosted a visit by India's Prime Minister Narendra Modi to his firm's headquarters in September

In recent weeks Facebook has stepped up its campaign by paying for billboard adverts and full-page ads in newspapers.
In addition, it has texted users and shown a notice when locals sign into its platform urging them to contact TRAI and tell it they support the Free Basics initiative.
The regulator is set to hold a hearing into net neutrality in January.

Monday 21 December 2015

Apple waited until the last moment to file its response to the draft surveillance law
Apple has raised concerns about the UK's draft Investigatory Powers Bill.
The proposed law aims to overhaul rules governing the way the authorities can access people's communications.
The US-based firm has passed on its thoughts to a parliamentary committee scrutinising the legislation.
It focuses on three issues: encryption, the possibility of having to hack its own products, and the precedent it would set by agreeing to comply with UK-issued warrants.
The Home Secretary Theresa May said last month that the proposed powers were needed to fight crime and terror.
Monday was the final deadline for written evidence to be received by the committee scrutinising the draft legislation. It is expected to report in February 2016.

Blocking a backdoor

Apple's submission to the committee runs to eight pages.
The first issue raised is encryption.

Apple's chief executive Tim Cook has previously voiced opposition to the idea of installing backdoors in its systems 
Apple designs some of its products - including iMessage - using a technique called end-to-end encryption.
This means only the sender and recipient of a message can see it in an unscrambled form. The company itself cannot decrypt the contents.
This is something that law enforcement agencies have complained about.
Apple says that ensuring the security and privacy of customer's information against a range of malicious actors - such as criminals and hackers - is a priority.
Current legislation demands that companies take reasonable steps to provide the contents of communications on production of a warrant, but that has not been interpreted as requiring firms to redesign their systems to make it possible.
The government had briefed at the time that the bill was published that the legislation did not constitute any change to existing legislation.
But Apple appears to be concerned that the bill's language could still be interpreted more expansively and force the creation of a so-called "backdoor" to provide the authorities with access.
Apple argues that the existence of such a backdoor would risk creating a weakness that others then might exploit, making users' data less secure.
"A key left under the doormat would not just be there for the good guys. The bad guys would find it too," the company says.
It notes it still provides metadata - data about a communication - when requested, but not the actual content.

Overseas warrants

A second area of concern relates to the issue of "extra-territoriality".
Existing British legislation - and the bill - maintain that companies need to comply with warrants for information wherever they are based and wherever the data resides.
The government argues this is vital when criminals and terrorists often use communications platforms based in other countries.
US companies have long resisted extra-territoriality on the basis that if they accept they are obliged under UK law, then they fear other countries - they often point to Russia and China - will simply demand the same right, and that such assertions may conflict with the privacy laws of the countries in which the data is held.
There have been discussions - led by former British Ambassador to Washington Sir Nigel Sheinwald - to try to come to some form of agreement between the US, UK governments and Silicon Valley to overcome some of the concerns and facilitate better sharing of data.

Hacked customers

A third concern from Apple relates to the provisions of the bill relating to "equipment interference".
This refers to a range of techniques used by police and intelligence agencies, which extend from hacking into devices remotely to interfering with the hardware itself.
This is one way around the spread of encryption and is one of the areas of activity - along with bulk data collection - that the UK state has been doing for some time but is aiming to be more transparent about.
Apple does not want to be forced to hack devices belonging to its customers


Apple's concerns relate to the possibility that it could be ordered to hack products belonging to its customers and to do so in secret.
"The bill as it stands seems to threaten to extend responsibility for hacking from government to the private sector," the company's submission states.

Stretched laws

Aspects of these issues have been voiced by Apple and other companies before.
But one of the key concerns about the new legislation is that it contains ambiguities.
Previous laws, such as the 1984 Telecoms Act, were stretched and expanded in secret to carry out acts that the public knew little about.
The stated aim of the current bill is to improve transparency and accountability.
Apple may well be hoping that it can force the government to clarify what is really intended and possible.

Iranian hackers 'targeted' New York dam

The US power network has regularly been hit by foreign hackers, reported AP
Iranian hackers penetrated the computers controlling a dam near New York, reveals the Wall Street Journal.
The 2013 attack did no damage but revealed information about how computers running the flood control system worked, said the paper.
Hackers working for nation states regularly hit national infrastructure targets, said a separate AP report.
About 12 times in the last decade hackers have won high-level access to power networks, it said.

Detailed plans

Extensive information about the Bowman Avenue dam in Rye, New York state was taken by the hackers, experts familiar with the incident told the newspaper.
An investigation pointed to Iran as the likely source of the attack and alerted US authorities to the significant cyber warfare capabilities of that nation, said the report The same group of hackers that attacked Bowman Avenue was also implicated in separate attacks on three US financial firms, it added.
The US power network has also come under regular attack by "sophisticated foreign hackers" said AP in an extensive investigation.
Many times security researchers had found evidence that hackers had won access to these sensitive systems. So far, all the attacks seemed intent on gathering detailed information, including engineering drawings, about networks and facilities.
One extensive campaign gave hackers access to 82 separate plants spread across the US and Canada. Comments in the code found when the attacks were detected suggested Iranian hackers were behind this attack. Information about this series of attacks led the FBI to issue a warning to power industry that it was being targeted.
The knowledge accumulated by the attackers has not been used to shut down the power plants or change the way they work, wrote AP reporters Garance Burke and Jonathan Fahey.
However, the knowledge could be used to cause damage if diplomatic relations between Iran and the US changed for the worse, former US Air Force cyber security expert Robert Lee told the agency.
Hackers could get at the power plants and other parts of national infrastructure because many of the systems were set up long before the need to protect them against remote attacks became apparent.

Friday 18 December 2015

A health clinic that mistakenly revealed the identity of HIV-positive patients in a group email has been fined £250 by the UK's data watchdog.
The Bloomsbury Patient Network provides information and support for people who are HIV-positive.
But twice in 2014, staff emailed up to 200 members at a time without obscuring other patients' email addresses.
The Information Commissioner's Office (ICO) said it had levied a fine that would not cause "financial hardship".

Data breach

In February 2014, a member of staff at the Bloomsbury Patient Network emailed up to 200 patients who were HIV-positive.
The email addresses were entered into the "To" field, meaning they were visible to everybody who received the email.
Instead, email addresses should have been entered into the "BCC" field, which would have obscured them from other recipients.
In May 2014, the same member of staff repeated the error.

Serious error

56 of the email addresses contained names

 

The ICO said 56 of the 200 email addresses contained the full or partial real names of patients.
It also noted that the Bloomsbury Patient Network (BPN) had received five complaints.
Considering the subject matter of the email message, it ruled that was a serious breach of data protection laws.
But the amount of the fine was mitigated by the "significant impact on BPN's reputation as a result of this security breach".
The BPN has not commented.

Continuing investigation

Another HIV support group, 56 Dean Street, in London, made the same mistake with an email sent in September 2015.
It exposed the names and email addresses of 780 people when a newsletter was issued.
The ICO told the BBC its investigation into that incident was continuing.
Fines for breaches of data protection can reach £500,000.
"No matter how big or small an organisation is, when dealing with sensitive information, policy, procedure, training, and supervision must be in place to reduce the probability of human error occurring," said Shaun Griffin, executive director of external affairs for Terrence Higgins Trust, an HIV charity which was not implicated in the ICO ruling.
"Incidences such as these are rare, and should not put anybody off getting a test for HIV. Nearly one in six people with HIV does not realise they have it," he said.

Police in London have warned that an armed gang is using the dating app Grindr to rob unsuspecting men.
Two victims were attacked in separate incidents by four men carrying knives, after going to meet dates they had chatted to online.
"The victims thankfully did not suffer serious physical injuries but have been left very shaken by these incidents," said Det Con Sheree Yates from Croydon Police.
Police are still hunting for the gang.

Two million people

Grindr is a dating app that lets men find nearby suitors based on location data.
The company says two million people around the world use the app every day.
Croydon Police said it was doing everything it could to find and arrest the gang members.
It also issued safety tips for men using apps like Grindr.

Safety tips for online dating

  • Always meet in a public place with lots of people around
  • Don't share personal details until you trust the person with whom you are communicating
  • If you decide to meet in person, let someone know where you are going and when you're likely to return
  • Plan your journey to and from the date in advance. If using a mini-cab, always pre-book
  • Drink responsibly and never leave your drink unattended
  • Ensure your mobile phone is fully charged and working
  • If at any time you feel uncomfortable, leave the date - you are not obliged to stay
Source: Croydon Police

"We are keen to identify the suspects as soon as possible and are appealing to anyone with any information to contact the police," said Det Con Yates.
"I would urge everyone who uses online dating apps and sites to take steps to help them to stay safe whilst meeting strangers."
A spokesperson for Grindr said: "Grindr has always encouraged users to treat the platform as they would any other social interaction in their lives, with a measure of caution and an awareness of their own safety."
"There are many ways to verify and take steps to protect yourself, from meeting in more public spaces to getting phone numbers and speaking beforehand. We take these matters very seriously and cooperate with local law enforcement at all turns where we can."

Driverless car rules perplexing, says Google

Google has criticised the Department of Motor Vehicles (DMV) in California for insisting driverless cars must have a fully licensed driver behind the wheel.
On Wednesday, the DMV published draft regulations which outline how the technology could be used on the roads.
The regulations say truly driverless cars would be "initially excluded" from operation.
Google's director of self-driving cars, Chris Urmson, said the move was "perplexing".
"This maintains the same old status quo and falls short on allowing this technology to reach its full potential, while excluding those who need to get around but cannot drive," he wrote in his blog.
"We've heard countless stories from people who need a fully self-driving car today. People with health conditions ranging from vision problems to multiple sclerosis to autism to epilepsy who are frustrated with their dependence on others for even simple errands."

Safety record

Google argues that driverless cars are much safer than manually driven cars, because they eliminate the human error that causes a majority of collisions.
The technology has inspired a web game by Made With Monster Love which demonstrates the effectiveness of computer control over human intervention.

Web game Error-Prone demonstrates how human error can cause collisions 
Google said its vehicles had been involved in only 16 minor incidents during six years of testing, with human drivers in other cars usually to blame.
"We've seen in our own testing that drivers can't be trusted to dip in and out of the task of driving when the car is encouraging them to sit back and relax," said Mr Urmson.
However, the technology is still being improved and in November, one of Google's cars was pulled over for driving too cautiously.

Fully automatic

Some of the driverless cars Google has been testing in California do not have any manual controls such as steering wheels or pedals.
The DMV's draft regulations would prevent residents from riding in those vehicles until their safety could be assessed in "subsequent regulatory packages".
"The draft regulations are designed to address complex questions related to vehicle safety, certification, operator responsibilities, licensing and registration, privacy, and cybersecurity," the DMV said.
A public consultation on the draft will take place in the new year.
Ford is also testing driverless cars
On Tuesday, car giant Ford announced it had obtained a permit to start testing driverless cars in California.
Its vehicles retain manual controls for humans to take over, as required in the draft regulations.

Thursday 17 December 2015

Brazil judge lifts WhatsApp suspension

The service began working again after a suspension was lifted
A judge in Brazil has ordered that a suspension of the popular messaging application WhatsApp be lifted.
Judge Xavier de Souza said the service should be re-instated immediately.
A court had ordered the service be suspended for 48 hours on Thursday for failing to comply with a court order to provide investigators with information relating to a criminal court case.
Judge Souza said it was "not reasonable that millions of users be affected by the inertia of the company".

'Extreme ruling'

Brazilians had complained bitterly on social media about the suspension of WhatsApp, which is a hugely popular app used by many to communicate with family, friends and colleagues both inside of Brazil and abroad.
Ninety-three per cent of the country's internet population use WhatsApp, according to the TechCrunch website, with many young and poor Brazilians taking advantage of its free text message and internet telephone service.
Within hours of the suspension being coming into force, the hashtag #Nessas48HorasEuVou (#Inthese48hoursIwill) began trending on Twitter, with Brazilians joking about all the things they would do during the suspension.
Brazilians have been joking on Twitter about what their lives are like without WhatsApp      

Impact of the WhatsApp ban - Paula K, a Brazilian living in London

In a country where mobile providers charge a fortune for a monthly plan - not to mention the high cost of making international calls - the use of WhatsApp for both texts and internet calls allows expats like me to keep a direct line with family, friends or even colleagues back home.
It's worth remembering that Brazil already has a high cost of living - services and products often cost the same price as they do in the UK - but people often only earn about a third of the wage they would here.
One of my friends who works for one of the major mobile providers in Brazil said it was advising people to download alternative apps such as Viber and/or create a group on Messenger to keep the communication flowing.

The suspension also caused anger at Facebook, which owns WhatsApp.
"I am stunned that our efforts to protect people's data would result in such an extreme decision by a single judge to punish every person in Brazil who uses WhatsApp," Mr Zuckerberg wrote in a post on Facebook.
The suspension was ordered after WhatsApp failed to comply with a court order.

Brazilians were delighted when the popular app started working again on their phones          

The court which ordered the suspension gave little detail, apart from saying that the order related to a criminal case.
But Brazilian media said WhatsApp had been asked to provide details of communication by a suspected gang member who is alleged to have used WhatsApp to organise illegal activity.
Separately from the court case, Brazilian phone companies have urged the government to restrict the use of free voice-over-internet services offered through WhatsApp.
The phone companies argue that the rise of WhatsApp has damaged their businesses.
Meanwhile other messaging services said they had benefited from the temporary absence of WhatsApp.
One such company, Telegram, said on Twitter that more than 1.5 million Brazilian users had joined up since the court order was handed down.