News for hackers. Stuff that matters.
Re:Today is The Day We Fight Back by mkl on Tuesday February 11, 2014 @05:24AM (#7216849)
(My comment here is about the international version of the site - the USA one is much clearer in its purpose.)

One crucial piece of information I haven't been able to find is what happens to the names and email addresses people enter. How does filling in those boxes amount to taking action?

I am strongly opposed to mass surveillance, but thedaywefightback.org doesn't seem to be communicating successfully how exactly it is going to help. If it is doing something that will truly help (which seems likely, but I can't really tell), that needs to be clear in its message, and it isn't.

Re:Today is The Day We Fight Back by dannyeff on Tuesday February 11, 2014 @07:00AM (#7217164)
Hey mkl,

So they'll be a shorter version of this on the main site soon, but I can spell it out at greater length and more informally here. (I'm EFF's International Director, btw)

The short answer is that you're signing your support for a set of 13 principles on the application of human rights to communications surveillance ( see https://necessaryandproportionate.net/ ), that were worked out last year (pre-Snowden, actually) by a coalition of technologists, privacy activists, and legal scholars.

The long answer: We've been using this language to push the idea in international venues and among key lawmakers in various countries that mass surveillance (as well as a bunch of other practices conducted by the NSA and other spooks, including corruption of crypto standards and backdoors) is a violation of existing human rights standards.

This is important internationally because if the NSA gets away with its current behaviour, it'll establish a norm that such surveillance is okay for any government to conduct. We need to push back against that norm.

To do so, diplomats, policymakers and others need language and arguments to back that up.

The Principles give them that language in a familiar context (and we're working together to provide more detailed arguments and other legal guides). It has found favor among politicians, experts and other influential people I think partly because the smarter ones are genuinely worried that pervasive surveillance really could undermine their own societies -- they recognise what it could do in the wrong hands as much as anyone else.

In providing that leverage, it helps to convey that it's not just a bunch of domain experts that think forbidding mass surveillance is a bad idea, but that an increasingly large number of citizens find it abhorrent. That's what the signatures will do. It really makes a difference in this arena, because so few obscure technical documents have hundreds of thousands of supporters :)

I'd encourage anyone who wants to understand better how we're trying to get all governments, not just the US, to craft better surveillance legislation to read the full text of the principles at https://necessaryandproportionate.net/text You can also ask me questions at [email protected] . It's a long haul project, and we're conducting it alongside legal actions in the US and abroad, shoring up and disseminating crypto tools, and other non-policy defences. But it's pretty amazing to get unanimity with hundreds of privacy groups on some basic principles with which to start building proper, 21st century, surveillance law.

Re:Today is The Day We Fight Back by lifeisstillgood on Tuesday February 11, 2014 @08:39AM (#7217517)
A (unofficial and probably wrong) precis of those 13 Principles:

1. Legality - privacy restrictions must be prescribed by law.

2. Legitimate Aim - What you want to break privacy for must be to support laws.

3. Necessity: We cannot (reasonably) achieve the aim without breaching privacy.

4. Adequacy: Listening to your phone calls must reasonably allow us to achieve the aim.

5. Proportionality: Don't listen to everyone when only some will do.

6. Competent Judicial Authority: Any breach of privacy must be authorised by Independant, capable judges.

7. Due process: Who follow a clear process

8. User notification: and tell you you are being watched (unless that might hurt the Aim)

9. Transparency: We get to see the metadata on their phone tapping

10. Public oversight: and a few of us get to see everything not just the metadata

11. Integrity of communications and systems: backdoors are not allowed, if you are bugging us legally, you dont need a back door

12: Safeguards for international cooperation: No playing arbitrage with different jurisdictions

13: Safeguards against illegitimate access: and secure your stuff.

I hope those help

Re:Today is The Day We Fight Back by ericgj on Tuesday February 11, 2014 @07:06PM (#7221566)
It's a great action - and technically speaking takes us to a new level I think - I look forward to adapting the code for other campaigns I'm involved with. I appreciate the background and your work involved in bringing groups together internationally.

But my question is, with the publication/confirmation yesterday of the basis of the US drone assassination program in NSA cellphone spying (see https://firstlook.org/theintercept/article/2014/02/10/the-ns...), will you be incorporating a demand to reign in the NSA because their surveillance is killing innocent people? I think it is a real opportunity to reach out to many other groups and individuals who are opposed to and organizing against the drones both in the US and abroad.

Re:Today is The Day We Fight Back by tripzilch on Wednesday February 12, 2014 @06:19AM (#7223716)
> The short answer is that you're signing your support for a set of 13 principles on the application of human rights to communications surveillance

Yesterday, I was this close to putting my name+email there, until I thought "wait, what am I even signing for, either this might actually accomplish something important and I really should know what exactly before I can honestly give my support, or it's a rather meaningless gesture carrying just a vague anti-surveillance sentiment" (given the names and people involved I was pretty sure it was the former, but not knowing what I'd feel disingenuous about just adding my name to a list "just, make it better, or something").

Knowing this now, I signed it right away.

Re:Today is The Day We Fight Back by sinak on Tuesday February 11, 2014 @06:17AM (#7217026)
That's a really valid criticism, we're just pushing some changes that we hope address those concerns (will be up in about 10 minutes).

Edit: Changes are up. It's not perfect, but hopefully it addresses some of your concerns.

Re:Today is The Day We Fight Back by insider03 on Tuesday February 11, 2014 @06:22AM (#7217045)
Your point is very good! It needs to be specified how our signatures will help in the fight against mass surveillance. We signed, and now what? Spread the word. But what is next?
Re:Today is The Day We Fight Back by motters on Tuesday February 11, 2014 @07:17AM (#7217215)
I think the solution to this has to be on multiple fronts. It would be a good idea to push for laws which forbid certain kinds of surveillance. In the US the situation with the constitutionality of the NSA activity needs to be clarified. In the UK it would appear that the activities of GCHQ - particularly using DDoS and other "dirty" methods - is against the existing computer misuse laws. Investigating and following up on that would be useful. Probably they will make all of that retroactively legal, but there might be an opportunity to challenge and stop that in parliament.

On the technical front if you're a software engineer you can spend some of your time helping to develop, test and debug the various encrypted communication systems. Often security audits are needed. If you're not a software engineer then find out how to use encryption tools - PGP, XMPP/OTR, Tor, Bitmessage, etc and encourage your friends to use them.