#1 Source for Leaks Around the World!

Archive for February 2nd, 2013|Daily archive page

Get Justice for Aaron Swartz: Tell Congress to Fix CFAA

In Aaron Swartz, News on February 2, 2013 at 11:20 PM

http://act.demandprogress.org/letter/reddit_cfaa/

A NOTE FROM AARON’S PARTNER, TAREN:

On January 11, 2013, facing decades in prison on trumped up charges, my partner, Aaron Swartz, made the tragic choice to take his own life. He was only 26.

Aaron’s supposed crime? He was accused of checking out too many articles (4.8 million), too fast, from an online academic library called JTSOR, to which he had authorized access. He never used or distributed the articles and later returned them. For that, he faced 35 years behind bars and endured two years of relentless persecution.

The outdated Computer Fraud and Abuse Act (CFAA) made this tragedy possible by giving absurdly broad powers to corporations and prosecutors to criminalize an array of online activity. That includes breaching a website’s terms of service–that long fine print you “agree to” but never read.

All of us who knew and loved Aaron never want to see anyone suffer this kind of abuse of power again. So, we’re urgently calling on Congress to reform the CFAA. Please join us by adding your name at right.

Aaron was an innovator, entrepeneur, and social justice advocate who co-authored RSS 1.0 (the web’s format for sharing and distributing content) at the age of 14, co-founded the social news website Reddit, and led the fight to stop SOPA and PIPA–the internet censorship bills.

His fight to stop SOPA and PIPA started with a petition just like this one, so we know this can work. In fact, there’s already been a strong, bipartisan reaction to Aaron’s death and legislation is in the works to reform the CFAA right now. But it won’t happen without a big public push.

We can’t get Aaron back, but can you help us honor his memory by signing this petition and sharing it with everyone you know?  Just add your name at the link below to demand CFAA reform:

http://act.demandprogress.org/letter/reddit_cfaa/

Related Link: WH Petition: Reform CFAA to Reflect Realities of Computing and Networks in 2013

“Aaron’s Law” Proposes Reining in Federal Anti-Hacking Statute

In Aaron Swartz, News on February 2, 2013 at 11:14 PM

02/01/2013

The suicide last month of coder and internet activist Aaron Swartz prompted an outcry about the manner in which a U.S. attorney used anti-hacking legislation to launch a heavy-handed prosecution for what many considered a minor infraction.

Federal prosecutors in Boston defended their actions, saying they were only upholding the Computer Fraud and Abuse Act, under which Swartz was charged.

But two lawmakers are proposing long-overdue changes to the law that would help prevent prosecutors from overreaching in their use of the law, as has occurred in a number of cases in recent years.

The amendments, referred to as Aaron’s Law by Rep. Zoe Lofgren (D-Calif.) and Sen. Ron Wyden (D-Oregon), exclude breaches of terms of service and user agreements from the law and also limits the scope of the definition of unauthorized access to make a clear distinction between criminal hacking activity and simply acts that exceed authorized access on a minor level.

Under the amendments, which the two lawmakers refined after seeking input from members of the Reddit community and others, defines unauthorized access as “circumventing one or more technological measures that exclude or prevent unauthorized individuals from obtaining or altering” information on a protected computer.

The amendment makes it clear that the act of circumventing would not include a user simply changing his MAC or IP address to gain access.

“Taken together, the changes in this draft should prevent the kind of abusive prosecution directed at Aaron Swartz and would help protect other Internet users from outsized liability for everyday activity,” Lofgren, or someone in her office, wrote on Reddit announcing the changes.

Wyden spokesman Tom Caiazza characterized the proposed bill as the “first steps toward pulling back the law from the abusive place it is now.”

The 26-year-old Swartz was found dead on Jan. 11 this year of an apparent suicide. Swartz suffered from depression, but his death has been attributed in part to the increasing money pressures he faced over his upcoming trial, which was scheduled for April, and his fear of spending time in prison.

Swartz, who helped develop the RSS standard and was a cofounder of the advocacy group Demand Progress, was indicted after he allegedly gained entry to a closet at MIT and connected a laptop to the university’s network in order to download millions of academic papers that were distributed by the JSTOR subscription service. Swartz was accused of repeatedly spoofing the MAC address of his computer after MIT blocked his MAC address.

Although Swartz later handed over a hard drive that contained the documents, and JSTOR did not pursue a complaint, the Justice Department pushed forward with prosecuting Swartz, with U.S. Attorney Carmen Ortiz insisting that “stealing is stealing.”

Rep. Darrell Issa (R-Calif.), chairman of the House Oversight and Government Reform committee, and ranking minority leader Elijah Cummings (D-Maryland) recently sent the Justice Department a letter asking what motivated the prosecution in light of JSTOR’s decision not to pursue a complaint and also asked why prosecutors felt the need to pile on more charges against Swartz after he was initially charged. They wrote in their letter that it appeared that prosecutors intentionally bulked up the felony counts against Swartz in order to increase the amount of time in prison he would face.

On July 14, 2011, federal prosecutors charged Swartz with four felony counts, including wire fraud, computer fraud, theft of information from a computer and recklessly damaging a computer. Then on Sept. 12, 2012, prosecutors filed a superseding indictment with thirteen felony counts.

“It appears that prosecutors increased the felony counts by providing specific dates for each action, turning each marked date into its own felony charge, and significantly increasing Mr. Swartz’s maximum criminal exposure to up to 50 years imprisonment and $1 million in fines,” the lawmakers wrote in their letter.

Swartz, who did some coding for Wired and was at one time employed by Wired’s parent company, was reportedly offered a plea agreement that would have had him serving 7-8 months in prison if he pleaded guilty to 13 felony counts. Prosecutors threatened that if the case went to trial they would seek a prison sentence of 7-8 years. Swartz reportedly turned down the plea because he did not want to spend any time in prison or carry the burden of a felony conviction, which would have restricted his choices in life.

His family has blamed his suicide in part on the overzealous prosecution by the Justice Department.

Swartz is not the only person who got caught up in a zealous prosecution under the CFAA

Missouri mother Lori Drew was indicted in 2008 under the law for violating MySpace’s terms of service when she and others created a fake account that was used to harass and bully a teenage girl who subsequently killed herself. Drew was convicted of lesser misdemeanor charges by a jury who didn’t think prosecutors had proved the felony charges, but even that conviction didn’t stand up. A judge later vacated the judgment on grounds that the CFAA was “constitutionally vague” for the purpose that prosecutors were trying to use it and noted that if Drew’s conviction stood, it would set a dangerous precedent to charge anyone who violated a terms of service agreement online.

And last year Andrew Auernheimer, aka weev, was found guilty of one count of identity fraud and one count of conspiracy to access a computer without authorization after he and a friend discovered a hole in AT&T’s website that allowed anyone to obtain the e-mail address and ICC-ID of iPad users. They discovered that the site would leak e-mail addresses to anyone who provided it with a ICC-ID. So the two wrote a script – which they dubbed the “iPad 3G Account Slurper” — to mimic the behavior of numerous iPads contacting the web site in order to harvest the e-mail addresses of iPad users to prove that the vulnerability placed the privacy of users at risk.

Lofgren, in her post to Reddit, indicated that she thinks more changes need to be made to the law than what she and Wyden are proposing.

“As our discussions have continued, it is clear that many believe a thorough revision of the CFAA and substantial reform of copyright laws are necessary. I agree,” the post reads. “’Aaron’s Law’ is not this complete overhaul, but is a first step down the road to comprehensive reform. If we succeed in getting this draft bill enacted into law, it will be in honor of Aaron Swartz, and should be seen as a beginning of a concerted effort to bring reform to these broader issues.”

She urged the public to apply vocal support to help get the changes made.

“The chances of success – whether for “Aaron’s Law” or other proposals – will depend greatly on the degree of positive public engagement and support to change the law,” the post reads. “As SOPA showed, when the Internet speaks, lawmakers listen. I think with enough constructive support we can have an opportunity to pass ‘Aaron’s Law.’”

Demand Progress, the group that Swartz cofounded, has set up a page online to make it easy for constituents to contact their lawmakers urging support of the amendments.

Via WIRED

White House Petition: Remove United States District Attorney Carmen Ortiz From Office for Overreach in the Case of Aaron Swartz

In Aaron Swartz, News on February 2, 2013 at 10:43 PM

 

We Petition the Obama Administration to:

Remove United States District Attorney Carmen Ortiz from office for overreach in the case of Aaron Swartz.

It is too late to do anything for Aaron Swartz, but the who used the powers granted to them by their office to hound him into a position where he was facing a ruinous trial, life in prison and the ignominy and shame of being a convicted felon; for an alleged crime that the supposed victims did not wish to prosecute.

A prosecutor who does not understand proportionality and who regularly uses the threat of unjust and overreaching charges to extort plea bargains from defendants regardless of their guilt is a danger to the life and liberty of anyone who might cross her path.

Sign the Petition Here

Related Link: White Houes Petition: Fire Assistant U.S. Attorney Steve Heymann

Galloway to Cameron: “Has the PM Read Frankenstein, and Did He Read It To the End?”

In News on February 2, 2013 at 10:07 PM

02/01/2013

DoD Current & Future Drone Activities Map

In News on February 2, 2013 at 9:56 PM

The following map depicts the approximate locations of current and planned Department of Defense unmanned aircraft systems (UAS) activities inside the U.S.  The locations, service branches, and types of UAS flown were obtained from several publicly released DoD presentations.  If you are aware of other DoD drone activities in the U.S. not listed below, please let us know.

Via PublicIntelligence

%d bloggers like this: