Cloud Hosting

Video conferencing company Zoom will not offer end-to-end encryption functionality for free users. Earlier this year, Zoom had falsely advertised that they were providing end-to-end encryption on all of their calls even those with free users. Now that they are going about actually implementing real end-to-end encryption, more caveats have emerged. On their Q1 earnings call, Zoom CEO Eric Yuan commented:

We want to give [end-to-end encryption] to at least the enterprise customer or business customer. Free users, for sure, we dont want to give that. Because we also want to work together, say, with FBI, with local law enforcement in case some people that use Zoom for a bad purpose, right?

In a statement, Zoom clarified that they will still offer end-to-end encryption to organizations such as schools that are technically free users but still count as enterprise customers.

The Drug Enforcement Agency (DEA) has been granted a two week expansion of scope so that they can conduct surveillance on the growing protests across the country. The DOJ approved the request from the DEA last week and the full surveillance force of the DEA will come to bear against protestors in cities around America. This news was revealed by BuzzFeedNews, which released the memorandum that the DOJ used to grant the DEA this power. Protests are protected as First Amendment speech by the US Constitution and the use of an unrelated federal agency to surveill such activities is a gross overstep of federal power that has received pushback even from within the DEA.

US Customs and Border Protection (CBP) flew a Predator Drone over the city of Minneapolis during the ongoing George Floyd protests on May 29th. The use of a surveillance drone normally reserved for active war zones on a domestic target was noticed by journalist Jason Paladino through the use of public aircraft tracking data put out on the ADS-B Exchange. NOther news outlets have used similar aircraft tracking data to verify that military aircraft has been used to conduct surveillance on at least five other protests in the last week. The US House of Representatives Committee on Oversight Reform has opened an inquiry into the matter while the CBP wont say which federal agency requested the surveillance.

A research paper by Two Six Labs published at IEEE 41 has analyzed the risks of a Cambridge Analytica type information leak using Google API data. The G Suite Marketplace of apps allows third party apps to request Google API data from users. While apps in this marketplace are supposed to undergo code review by the Google team to make sure data is properly used and maintained, the researchers found that unverified apps were allowed on the marketplace. Google API data includes calendar, contact, and email information that could lead to an even worse data leak than Cambridge Analytica caused using the Facebook API.

Boies Schiller Flexner LLP has filed a 5 billion USD class action lawsuit against Google for violating privacy and wiretapping laws. The lawsuit alleges that Google continues to track users private internet use even after a user has indicated to Google that they do not wish to be tracked by using the Chrome browsers incognito mode. When someone is in incognito mode, their internet activity is still tracked and stored by Google on the visited websites end via Javascript code (Google Analytics). Google will fight the claim and has stated that they are eager to clarify why their actions arent illegal in court.

Federated analytics is the latest privacy preserving way to do data science without data collection which has traditionally led to databases full of supposedly anonymous data that has proven time and time again to be de-anonymize-able. Federated analytics is borne of federated learning, a method for machine learning that uses and keeps the data in question on the users device. Google has started using federated analytics in their machine learning and AI efforts. For instance, federated analytics is used in the Playing Now functionality that lets a Google user identify what song is playing without having to send an audio recording back to Google servers.

Brazils Senate is rushing through a new law called the Fake News Law which is supposed to protect the country from fake news but will instead impose requirements on messaging and social media platforms that would do away with privacy and freedom of expression. The laws would mandate platforms and apps to verify users identities with identification documents and even to store information on how a chain message is shared. Of course, to be able to track the development of a potentially fake news chain message, apps would have to do away with end-to-end encryption and continuously monitor their users. Apps that dont comply will be suspended. The EFF is speaking up against this poorly thought out law.

Privacy News Online is brought to you by Private Internet Access, the worlds most trusted VPN service. Sign up now!

Caleb Chen is a digital currency and privacy advocate who believes we must #KeepOurNetFree, preferably through decentralization. Caleb holds a Master's in Digital Currency from the University of Nicosia as well as a Bachelor's from the University of Virginia. He feels that the world is moving towards a better tomorrow, bit by bit by Bitcoin.

Read the original post:
Privacy News Online | Weekly Review: June 12th, 2020 - Privacy News Online