The FTC’s first Start with Security Conference, directed toward startups and developers, will begin at 10 a.m. PDT Wednesday in San Francisco, and will be webcast, an FTC news release said Tuesday. FTC Chairwoman Edith Ramirez and FTC Western Region Regional Director Tom Dahdouh will open the event, followed by panels on how startups can build a culture of security; how to test and review security applications using automated technology; how to respond to hackers; and how to implement security features like sitewide Secure Sockets Layer, Content Security Policy and multifactor authentication, said the event schedule. FTC Chief Technologist Ashkan Soltani will moderate a "fireside chat" with Accel Partner Arun Mathew on investing in security.
EU and U.S. officials reportedly reached agreement on trans-Atlantic data transfers Tuesday after four years of negotiations, a Computer & Communications Industry Association news release said. The agreement on how data can be shared for law enforcement purposes will “not take effect until approved by the European Parliament, which is waiting for the U.S. to pass the Judicial Redress Act,” the release said. Congress now must take the next step toward restoring trust in trans-Atlantic data transfers and pass the Judicial Redress Act, said CCIA Privacy Counsel Bijan Madhani. CCIA Europe Director Christian Borggreen also urged Congress to pass the legislation, saying the long-awaited agreement is “welcomed news” that will “help restore transatlantic trust.”
Microsoft will challenge the U.S. government's and law enforcement’s ability to access data stored outside of the U.S. before the 2nd U.S. Circuit Court of Appeals in New York Wednesday. Microsoft previously lost a challenge to turn over emails stored overseas in Dublin, Ireland (see 1406250084).
People globally entrust the privacies of life to California companies, so Californians should lead in protecting privacy and pass the California Electronic Communications Privacy Act (Cal-ECPA), wrote University of California-Davis Law School professor Anupam Chander in an opinion on the People's Vanguard of Davis website Sunday. Cal-ECPA was discussed on the floor of the California State Assembly Tuesday, ahead of the Interim Study Recess beginning after the assembly is adjourned on Friday, and has received bipartisan support, he said. Last week, the California state associations of police chiefs, state sheriffs, and district attorneys withdrew their earlier opposition to the bill, he said. Cal-ECPA would require state law enforcement “to get a warrant before they can access electronic information about who we are, where we go, who we know, and what we do,” but since it would apply only to California state officials, federal reform is still needed, he said. Meanwhile, University of Maryland law professor Danielle Citron tweeted Tuesday that Cal-ECPA is a “well-crafted bill that balances the need to protect against online predatory behavior and safeguarding privacy.”
Adobe released a security update to address vulnerabilities in Shockwave Player that may have allowed a remote attacker to take control of an affected system, said a U.S. Computer Emergency Readiness Team alert Tuesday.
“Tech companies may be our best hope for resisting government surveillance,” wrote University of Washington law school assistant professor Ryan Calo, who specializes in cyber law and privacy, in an opinion column for Fusion Monday. Apple's and Google’s decisions to make government surveillance harder reflect public opinion, said Calo, who's also an affiliate scholar at the Stanford Law School Center for Internet and Society and Yale Law School Information Society Project. By making end-to-end encryption available on Google's and Yahoo’s email platforms, privacy is becoming accessible to everyone -- not just tech-savvy users, Calo said. “Our data custodians designing against mass surveillance is the most promising development that we’ve seen,” he said. The public can vote for privacy-friendly legislators and challenge surveillance practices in court, but tech companies “may be our best chance out of this surveillance mess,” Calo said.
The American Civil Liberties Union, Amnesty International, Electronic Frontier Foundation, Human Rights Watch, National Association of Criminal Defense Lawyers, Rutherford Institute, Wikipedia and other educational, legal, human rights and media organizations asked a federal court to reject the U.S. government’s motion to dismiss Wikimedia Foundation v. National Security Administration, a lawsuit against the NSA, Justice Department and their directors over the government’s mass surveillance programs of all international text-based communications, a news release said Friday. “Government officials argue that any harm to the organizations from the government’s spying program is speculative.” The groups argued in their opposition to the defendant’s motion to dismiss at U.S. District Court in Maryland that the “NSA’s program involves copying and sifting through the contents of international internet traffic,” or “Upstream surveillance,” a program that involves copying Internet traffic -- including emails, chat, Web browsing and other communications -- as the data traverses the fiber backbone of the Internet, EFF Staff Attorney Andrew Crocker wrote in a blog post Thursday. “Upstream surveillance sweeps in readers’ online interactions with libraries and bookstores, including sensitive information like readers’ choice of reading material, which is protected by the First Amendment,” Crocker said. “As the Supreme Court has explained, the constitutional guarantee of free speech also includes protections for the things that go along with free speech: publishing and receiving information anonymously and associating privately.”
Amazon Web Services agreed to buy multiscreen content delivery software provider Elemental Technologies, AWS said in a news release Friday. Elemental has more than 700 media franchise customers using its over-the-top video software, including CNN Go, ESPN ScoreCenter and HBO Go, said AWS. The transaction is expected to close in Q4, AWS said, and allows Elemental to continue to operate under its existing brand.
ICANN Chairman Steve Crocker clarified the board’s position on the Cross Community Working Group on Enhancing ICANN Accountability’s (CCWG-Accountability) second draft proposal, after a heated conversation Wednesday (see 1509030025). “We are in agreement on key concepts set forward in the CCWG’s proposal,” he wrote. He cited accord on things like fundamental bylaws; specific requirements for empowering the community into the bylaws adoption process; internal review panel enhancements; board and director removal; ICANN’s mission and core values; strengthening requirements for empowering the community in the budget, operational and strategic planning process; incorporating the affirmation of commitments reviews into ICANN bylaws; and allowing the community to enforce the accountability mechanisms in the bylaws, in a blog post Thursday. “Where the current proposal still warrants much detail” is what mechanisms should be used to deliver community enforceability, Crocker said. The board has suggestions on how these could be operationalized, he said. “It is critical that we work together to build enhanced accountability for ICANN and continue to refine and flesh out details of the impressive work already done by the community and complete the IANA Stewardship Transition.”
The IANA Coordination Group’s (ICG) proposal to transition stewardship of Internet Assigned Numbers Authority functions from the U.S. government to the global multistakeholder community meets the principles set forth by NTIA and presents a workable proposal for the continued stability of the IANA functions, the Internet Society (ISOC) commented Thursday to ICG. The comment deadline is Tuesday. The complexity of the proposal, its implementation and its dependency on the ICANN accountability proposal is of concern to the ISOC, CEO Kathryn Brown wrote in a blog post Thursday. ISOC welcomes NTIA’s decision to extend the transition until next September to “allow the global Internet community to continue its hard work on addressing these outstanding issues,” Brown said. “We encourage the communities to continue deliberating how these implementation details can be addressed in a timely manner and how, in addressing them, all the communities can remain equally involved.”