Last month, we announced that Phorm, the company whose technology delivers targetted ads based on where you visit on the web, were planning to hold a public meeting to face their critics. Details of the meeting have now been announced.
When: Tuesday, 15 April, 1830 - 2030
Where: The Lecture Theatre, Brunei Gallery, School of Oriental & [...]

Read the rest of "Phorm: public meeting announced for next Tuesday"

Richard Clayton has now published his technical analysis of Phorm. There’s a good introduction to it on his Light Blue Touchpaper blog.
Phorm explained the process by which an initial web request is redirected three times (using HTTP 307 responses) within their system so that they can inspect cookies to determine if the user has opted [...]

Read the rest of "Phorm analysis out"

On Wednesday, at their invitation, I went to Phorm’s offices in Central London. I was accompanied by ORG Advisory Council member (and Foundation for Information Policy Research Treasurer) Richard Clayton. We were there, on Phorm’s invitation, to find out how the systems that they are selling to BT, Virgin and TalkTalk actually work. Over the [...]

Read the rest of "ORG and FIPR meet with Phorm"

It’s difficult to tell which of today’s developments the UK’s major ISPs should be more worried about - the fact that Sir Tim Berners-Lee has publicly stated that he would change his ISP if it started employing systems, like Phorm, which could track his activity on the internet, or the news that UK digital rights [...]

Read the rest of "Phorm update"

Update: An interim Privacy Impact Assessment (PIA) has now been published by Phorm. You can read it here [pdf]. The PIA, produced by 80/20 Thinking Ltd, predicts the media and public backlash against Phorm, and leaves several questions unanswered, including “Can an external attacker gain access to the required information to re-link [an] individual [with [...]

Read the rest of "The Phorm storm"

Trustguide reports on our views, beliefs and needs regarding trust, security and privacy in relation to new technologies. We like it very much - It should be required reading for politicians! Over the last 15 months HP and BT, in conjunction with the DTI, hosted workshops across the UK on a broad range of [...]

Read the rest of "Trustguide and ID Cards"

Scrambling for Safety 8 is taking place on the 14th August at University College, London, where the focus will be on the Home Office’s access to keys and communications data code of practice consultations.
Those unable to make the main event are invited to the Jeremy Bentham pub on University St., WC1, to join attendees and [...]

Read the rest of "Next ORG networking event - 14th August"

We have seen attempts to add more legislation to voice over IP in America so I guess it was only a matter of time.
“The Guardian has learned that police and security agencies have been lobbying ministers and senior officials, expressing fears about the potential for voice-over-internet-protocol technologies to hide a caller’s identity. Their aim? To [...]

Read the rest of "Tapping VoIP"

The Regulation of Investigatory Powers Act Part III gives law enforcement the power to serve notices requiring that encrypted material be “put into an intelligible form” (or as everyone else would say, decrypted). Under some circumstances the notices can require that encryption keys are handed over. At present Part III is not in force, but [...]

Read the rest of "Public meeting on RIPA consultations"

The Times has an emotive piece on the implementation of Part III of RIPA, the Regulation of Investigatory Powers Act, which demands that people hand over their cryptographic keys.  
The internet has transformed life for billions, making the once time-consuming swift and the once complex straightforward. Unfortunately the beneficiaries include paedophiles who now have a [...]

Read the rest of "Cryptography and fallacy"