Technology Law: gavel beside computer keyboard, mouse, and law book
circuits
Newsletter Site Map Contact us Search this Site Home
 

February 4, 2009

“Where you at? Oh, nevermind . . . “

Does the flood of information ever end?  Do we have to know everything about everyone—in real time?  While location-tracking software is not new (well, not too new, anyway), Google’s expected move into this market only further reinforces Scott McNealy’s eerily prophetic saying, “You have zero privacy anyway.  Get over it.”  But now when you “get over it,” all of your friends will be able to see exactly where you were and when.

Google just launched its Latitude software that lets mobile phone users share their mapped location with their network of contacts—if they so choose.  This is nothing new, per se, given the existence of other companies such as Loopt, BrightKite, and Dopplr (for example), as well as most people’s familiarity with GPS, but Google’s entry into the marketplace provides further evidence that the technology is becoming even more widespread.  Maybe too much so.  But when the 800 pound gorilla talks, everyone listens.

According to the article, Google “hopes it will help people find each other while out and about and keep track of loved ones.”  Those are helpful and noble intentions.  What parents wouldn’t want to know where their teenagers are?  Or be able to direct a lost friend to your precise location?  But hope is a fickle thing.  And what Google hopes for and how Latitude will actually be used are two entirely different things.  We all know what the road to hell is paved with.  Lawyers make their living off of it (more on that in a moment).

Google requires that people expressly sign-up for the service and gives them the opportunity to tailor their preferences as to who they can share their location with, as well as the type of information shared.  While that gives the user some degree of control, it’s probably only a matter of time before a bored 16 year-old in hacks into the system and tracks people. 

Even if this doesn’t occur anytime soon, a disgruntled ex-husband may be able to track his ex-wife who forgot to take him out of her “network.”  While entire companies have sprung-up offering this type of GPS-based (and typically illegal) service, now a person can do so without any special equipment whatsoever.  Just a little bit of software and a forgetful spouse.  It goes without saying that stalking is a very real problem in this digital age and tools that used to be available only to law enforcement are becoming increasingly more common.

The fact that such software is even available is part of the larger privacy debate that will be with us for quite some time.  There are no easy answers in a society that never seems to have enough information about others.  Yet from a litigation perspective, few people may realize that all of this location data is stored by a provider for varying degrees of time and subject to subpoena and disclosure in the proper circumstances. 

Thus, in criminal or civil cases where a person’s time and location is an issue, it provides yet one more tool for lawyers to pursue when representing their clients.  Just ask those divorce attorneys in Massachusetts and elsewhere about getting all of that “E-Z Pass” toll information to discover cheating spouses.  Modern convenience has its costs.

So the age old Perry Mason question, “Where were you on February 4, 2009?” now becomes, “Why were you on the corner of 53rd and 7th Avenue at 3:12 p.m. on February 4, 2009?”  And while it may—may—help lawyers such as myself get to the truth faster in a courtroom, the human part of me (and yes, that still exists) finds it it to be unsettling.  So bad grammar aside, the question, ”Where you at?” now becomes, “Why you there?”  Ah technology . . . .

May 24, 2008

Hitting that “Send Button” at Work

Filed under: e-mail, privacy, security — Tags: , , , , , — admin @ 6:09 pm

According to a new survey by Forrester Research, 41% of large companies (those having at least 20,000 employees) either read or analyze the contents of outbound e-mail.  They’re either paying other employees to read them or presumably using any number of commercially available software programs to analyze them. 

44% of the companies surveyed investigated a confidential data breach involving e-mail in the past year, while 26% said they fired an employee for violating the company’s e-mail policy.  Companies also expressed concern over employees leaking information on message boards, blogs, and other electronic media.

Quite frankly, I’m surprised only 41% of large companies are doing this (although it depends on the industry).  I would have expected it to have been much higher given the daily parade of data and privacy breaches in the news.  After all, it’s large companies that have the financial and human resources to implement widescale e-mail monitoring systems.  Smaller companies may be in a much different situation.

Of course, many employers find it distasteful to engage in this type of monitoring.  It can, if not handled properly, be destructive to employee morale and have lasting effects.  Nevertheless—for better or worse—many employees are slowly coming to grips with their employers’ monitoring efforts.  It’s just becoming a fact of life. 

But the truth is, I’ve had clients whose employees have e-mailed confidential and sensitive company data.  Some workers do it without thinking about it, while others are far more malevolent in their intentions.  This is especially the case when employees leave their companies on bad or poor terms.  So it’s a very real problem for employers that has very real consequences.  Thus, like it or not, monitoring will only continue to increase. 

Bottom Line:  Be careful.  You don’t have any right to privacy when you’re at work.  So don’t think that anything you send—whether to a spouse, boyfriend, girlfriend, doctor, stockbroker, or anyone else—is private.  Even if you have to send it and it can’t wait until you get home, an employer is within its rights to read your e-mail, no matter how private the subject matter.  Of course, what it does with that information is another matter.

May 18, 2008

The Long Arm of the Law

Filed under: crime, international law, privacy, security — Tags: , , , — admin @ 8:21 pm

In today’s world, where fraud is just a mouse click away, it’s nice to know that every so often the good guys win.  Three international hackers were indicted by the Department of Justice (”DOJ”) last week for trying to steal and sell credit card information from customers of Dave & Buster’s, the popular restaurant/entertainment chain.

According to the indictment, the hackers were able to install “packet sniffers” on many of the company’s servers to copy credit card information as it traveled between restaurants and Dave & Buster’s corporate headquarters in Dallas.  The company detected the intrusion and alerted the authorities, but not before 5,000 credit/debit card numbers were stolen and sold to other criminals to make fraudulent purchases.

One of the foreign hackers was arrested in Miami.  No problem there.  The other two, however, were arrested in the Ukraine and in Germany by those countries’ authorities.  It’s certainly not a done deal yet.  The DOJ is seeking the extradition of the other two, but no word yet whether those efforts will be successful. 

While these sorts of arrests are still few and far between given the magnitude of data theft and online fraud, it’s a start.  The DOJ is obviously taking the problem seriously.  Hopefully, other countries will too and the cooperation will continue.  With any luck, if these hackers are extradited, tried, and found guilty, the court will make an example out of them. 

May 12, 2008

No Good Deed . . . .

It’s always refreshing to see companies take affirmative steps to try and protect users from malicious programs that can be inadvertently downloaded onto their computers.  Yahoo and McAfee are joining forces to unveil a new security feature designed to warn Yahoo users about potentially dangerous links to software such as adware, spyware, keystroke loggers, and other malicious programs.  Yahoo users will see a red exclamation point and a warning next to any links that McAfee has identified as containing harmful software.

It’s a good start and is one more weapon in the fight against increasingly sophisticated hi-tech criminals.  However, it’s only a matter of time before this new service becomes the target of lawsuits by companies who are identified as “false positives.”  That is, legitimate companies whose links are mistakenly identified as being malicious.

Remember the “real-time blackhole list (RBL”)?”  This was a Mail Abuse Prevention Service (MAPS) which published lists of ISP addresses which were known to be associated with spammers.  A network could then filter out any questionable e-mail traffic and it would disappear in a metaphorical “black hole” and never reach its destination.

This prompted lawsuits from companies (who called themselves “e-mail marketers”) against RBL providers who claimed that they were being defamed by being erroneously or improperly included on these lists.   (They also included “false light” and restraint-of-trade claims.)  While most suits were dismissed or unsuccessful, they were designed to target and harass RBL providers who devised an otherwise sensible solution to an evergrowing spam problem.

It’s only a matter of time before some disgruntled company sues Yahoo and/or McAfee for being falsely identified to users as a provider of malicious software.  (Due to the Yahoo Terms of Service agreement, users will be unable to successfully sue if some malicious links or sites slip through.)   Still though, despite the threat of lawsuits, Yahoo and McAfee should be commended for trying to develop a solution—however temporary or imperfect—to this problem.  Of course, if any of my clients end up being falsely identified as providers of malicious software, then those companies will hear from me.  Until then, the battle continues.  

   
   
 

Copyright 2006-2008 Daniel A. Batterman

   
Our Philosophy
About Technology Law
Contracts
E-Mail Law
Intellectual Property
Licensing
Open Source Software Law
Outsourcing Law
Privacy Law
Software & IT Development Law
Website Audits
Other Law Practice Areas
Litigation
Articles
Cases & Statutes
About Attorney Batterman
Location
Disclaimers
 


Old City Hall, 45 School Street, 3rd Floor, Boston MA 02108     617.259.1600     DBatterman@BattermanLaw.com