November 2012 - Listan

EDRi ber Malmström att stoppa oreglerad blockering
by Linus Nordberg 12 Nov '12

12 Nov '12

Hej listan! Vi bloggar idag om EDRi:s brev till Cecilia Malmström: https://dfri.se/blog/edri-brev-till-malmstrom/ Frågan är, vill vi ha reglering av hur filtrering skall utföras? Jag är kluven men tycker att nuvarande ordning med ogenomskinliga beslut om en hemlig lista behöver ändras.

6 10

OpenID
by Elof Ofel 12 Nov '12

12 Nov '12

Ni frågade efter nya projekt som DFRI skulle kunna engagera sig i... Jag har inte fördjupat mig ALLS i följande, utan hasplar bara ur mig det som ett potentiellt förslag: I brist på bra single-sign-on-lösningar verkar det som att allt fler företag/siter börjar använda Facebook som single-sign-on-lösning. Jag har ingen aning om hur bra/dåligt detta är, men det känns måttligt bra med tanke på all den info om den inloggande personen som antagligen görs tillgänglig till den frågande parten. Om Facebook-single-sign-on är ont och dåligt kanske DFRI på något sätt kan motverka detta genom att promota OpenID? (se http://openid.net/ och http://en.wikipedia.org/wiki/OpenID) /Elof

2 1

Lagen om trafikdatalagring
by Andreas Jonsson 08 Nov '12

08 Nov '12

Hej Listan! Okej, PTS har nu kommit ut med föreskrifterna för om skyddsåtgärder i samband med lagring och annan behandling av uppgifter för brottsbekämpande ändamål. Tråkigt nog är det fortfarande extremt låga krav. Det var det här vi skickade in ett remissvar på tidigare i år. Givetvis gjorde inte PTS en cut & paste, vilket hade varit bra för dem, men några grejer vi argumenterade för kom med: " Den lagringsskyldige ska säkerställa att personal som har haft tillgång till lagrade uppgifter inte ges tillgång till behandlingshistoriken." "Behandlingshistoriken ska användas för att genomföra regelbunden och systematisk uppföljning och kontroll. Detta ska ske innan uppgifterna utplånas enligt 6 kap. 16 d § lagen (2003:389) om elektronisk kommunikation. Därefter ska behandlingshistoriken utplånas." "7 § Lagrade uppgifter och behandlingshistorik enligt 6 § ska säkerhetskopieras tillräckligt ofta för att säkerställa att uppgifterna skyddas mot oavsiktlig eller otillåten förstöring och oavsiktlig förlust eller ändring. Säkerhetskopiorna ska förvaras fysiskt åtskilda från och omfattas av samma skydd som de lagrade uppgifterna. Säkerhetskopiorna ska utplånas samtidigt som de lagrade uppgifterna." Nytt är att säkerhetskopiorna ska omfattas av samma skydd som de lagrade uppgifterna. Remissammanställning osv: http://www.pts.se/sv/Dokument/Remisser/2012/Remiss-av-forslag-till-PTS-fore… URL till föreskrifterna: http://www.pts.se/sv/Dokument/Foreskrifter/Tele/PTSFS-20124---foreskrifter-… Guldstjärna från andreas går till landskorna energi: "När det gäller 7 § så saknas enligt Landskrona Energi en beskrivning över hur lagrade uppgifter ska förstöras. Filer finns dels i arbetsminnen, på hårddiskar och på olika typer av backup system. En raderad fil kan med hjälp av speciella verktyg återskapas på ett relativt enkelt sätt. För att säkerställa att uppgifterna verkligen förstörs bedöms att man fysiskt måste förstöra hela lagringsmediet." /andreas

2 2

Brussels Principles on Lawful Access
by Dan Blah 07 Nov '12

07 Nov '12

http://necessaryandproportionate.net/

1 0

"utmost transparency" och vårt informationsunderläge i EU
by Erik Josefsson 02 Nov '12

02 Nov '12

Hejsan, vi var nåra som träffades igår och lunchade på det övergripande temat transparens och informtionsunderläge. Jag känner fortfarande såhär: http://blog.okfn.org/2012/06/27/taking-utmost-transparency-to-the-next-leve… Jag tror att informtionsunderläget går att bygga bort. //Erik Taking "utmost transparency" to the next level -- at4am for all! June 27, 2012 in Free Culture <http://blog.okfn.org/category/free-culture/>, Legal <http://blog.okfn.org/category/legal/>, Open Government Data <http://blog.okfn.org/category/open-government-data/>, WG EU Open Data <http://blog.okfn.org/category/working-groups/wg-eu-open-data/>, WG Open Government Data <http://blog.okfn.org/category/working-groups/wg-open-government-data/> <http://blog.okfn.org/files/2012/06/epfsug_at4am_invitation_banner_640_100_p…> /What? When?? Where??? How?!?!/ were the questions that got me started some 10 years ago now, on my free software journey that's taken me to the heart of the European Parliament. As a young Swedish musician, politically innocent and ignorant as the next, I got worked up together with a bunch of newborn stallmanites unleashing ourselves on the internet determined to kill the software patents directive <http://en.wikipedia.org/wiki/Software_patents_directive>. There was a lot of code. I remember Xavi rewrote the EU's co-decision procedure algorithm in java <http://web.archive.org/web/20030212001905/http://patents.caliu.info/codecis…> to be able to understand it, and that our content management system said 'Cannot parse this Directive' instead of returning 404. The tracking of MEPs was managed by Knecht <http://wiki.ffii.org/KnechtSubjEn>, an email driven content management program written in lisp (insert awe comment here), and I cannot remember the number of different perl scripts that were playing around with voting results <http://eupat.ffii.org/papri/eubsa-swpat0202/plen0309/vote/analysis.html>. It all ended happily (we won), and I still say "Can I have a B-item please!" whenever I get to go for drink with Miernik <http://www.linkedin.com/in/miernik> or Jonas <http://wiki.ffii.org/OpenLtr050307En>. You might think things would be different when you're on the inside. I have been working in the European Parliament since the last elections <http://en.wikipedia.org/wiki/Erik_Josefsson_%28activist%29>, but it turns out at least three of the questions are still the same -- /What? When?? Where???/ One administrative response from the institution is to serve the MEPs and their staff with iPads and intranet pages. Users of iPads and intranet are happy. But I am not. I have decided with a bunch of old stubborn stallmanites to try to use free software in the European Parliament as far as humanly possible. And we do. And it is (partially) possible. We put up a sign at FOSDEM <https://fosdem.org/> in February last year calling for help <http://epfsug.eu/blog-entry/ep-needs-your-help-come-janson> and now we are 2 patrons, 13 members and 29 supporters. You can find info on how to become a supporter or a member (or even patron) of European Parliament Free Software Users Group (EPFSUG) here <http://epfsug.eu/become-a-member-or-a-supporter>. Another administrative answer by the institution to the questions above has been to build an Automatic Tool for AMendments, at4am <http://vimeo.com/17598642>. If ever I can nominate anybody to the Nobel Peace Prize, it would be the at4am developers team who have made this brilliant application possible. They have succeeded in making independent and competing committees in the European Parliament cooperate to provide information on their internal workings that can be parsed into a unified way of tabling amendments. It's huge. Imagine a world without git (or anything like it) and then there is git -- that is how epic this application is. More than 150k amendments has been tabled since its launch. I'd say that the same number of tears and curses have been saved. Now, to close this already long, bushy and wild blog post with the reason for it in the first place: The at4am team has decided to share the code with the world <https://joinup.ec.europa.eu/news/european-parliament-share-amendment-web-to…>, and on Wednesday 11 July we're going to talk about which license would be best to use <http://epfsug.eu/content/at4am-all>. The event is kindly hosted by MEP Marie-Christine Vergiat <https://fr.wikipedia.org/wiki/Marie-Christine_Vergiat>, and Carlo Piana <http://law.piana.eu/it/intro> and Karsten Gerloff <http://fsfe.org/about/gerloff/gerloff.en.html> from Free Software Foundation Europe (FSFE) are going to speak. Please come! A follow up meeting should of course focus on how to get the data out of the EP intranet and which licence would then be the best to use. Why? Because the question /"How?!?!"/ actually has an answer already. Rule 103 of the Rules of Procedure of the European Parliament <http://www.europarl.europa.eu/sides/getDoc.do?pubRef=-//EP//TEXT+RULES-EP+2…> reads as follows: *Transparency of Parliament's activities* 1. Parliament shall ensure that its activities are conducted with the utmost transparency, in accordance with the second paragraph of Article 1 of the Treaty on European Union, Article 15 of the Treaty on the Functioning of the European Union and Article 42 of the Charter of Fundamental Rights of the European Union. That's a pretty serious standard. Come join to give it meaning! Let's figure out how to make utmost transparency work in practice.

1 0