- nexa - server-nexa.polito.it

Cloud for Europe

by Diego Giorio

http://www.agid.gov.it/notizie/2015/09/02/due-giorni-approfondimento-confro… L’Agenzia per l’Italia Digitale, che svolge il ruolo di centrale di committenza pre-commerciale per Cloud for Europe, ospita due giornate di approfondimento sui temi del Cloud, al quale parteciperanno aziende, centri di ricerca, università e tutti i soggetti europei, pubblici e privati, interessati a sviluppo e adozione di soluzioni innovative per la realizzazione di piattaforme Cloud. L’agenda delle due giornate: Cloud for Europe: “Results announcement ceremony” – 10:30/15:00, giovedì 10 settembre 2015 Il progetto “Cloud for Europe” verrà presentato grazie al contributo dei committenti e delle aziende fornitrici, durante la mattinata verranno annunciati i risultati e i soggetti aggiudicatari della fase I. Cloud for Europe: “Kick off esecuzione Cloud for Europe” – 15:00/18:00, giovedì 10 settembre 2015 Sessione riservata ai fornitori e alle amministrazioni appaltanti. Cloud for Europe: “Certification workshop” – 09:00-13:00, venerdì 11 settembre 2015 L’intera giornata sarà dedicata ad approfondire il tema della certificazione, della sicurezza, della privacy e del vendor lock-in negli ambienti Cloud. Seluti a tutti D.

Sept. 10, 2015

Re: [nexa] 78° Mecoledì di Nexa - 9 settembre 2015

by Giuseppe Futia

*REMINDER*: vi ricordiamo che domani mercoledì 9 settembre 2015, dalle ore 18 alle ore 20, si svolgerà il 78° Mercoledì di Nexa, con un incontro dal titolo: "*Sicurezza e sorveglianza sulla rete: spunti dal caso Hacking Team*". Ospiti dell'incontro *Fabio Chiusi* (giornalista, fellow Centro Nexa) e *Claudio Agosti* (ricercatore e sviluppatore). Ingresso libero, webcast live all'indirizzo: http://nexa.polito.it/upcoming-events. Maggiori informazioni sono disponibili all'indirizzo: http://nexa.polito.it/mercoledi-78. Cordiali saluti, Giuseppe Il giorno 3 settembre 2015 09:24, Giuseppe Futia <giuseppe.futia(a)polito.it> ha scritto: > Se non visualizzi correttamente questo messaggio clicca qui > <http://nexa.polito.it/mercoledi-78> [image: NEXA] > > 78° Mercoledì di Nexa > Mercoledi 9 settembre 2015, ore 18.00 - 20.00 > > Via Boggio 65/a, Torino (primo piano) > > <http://nexa.polito.it/mercoledi-78>http://nexa.polito.it/mercoledi-78 > Sicurezza e sorveglianza sulla rete: spunti dal caso Hacking Team > > Speakers > Fabio Chiusi (Giornalista, Fellow Centro Nexa), Claudio Agosti > (Ricercatore e sviluppatore) > > Ingresso libero > > This event will be webcast live: <http://nexa.polito.it/upcoming-events> > http://nexa.polito.it/upcoming-events > > Una massiccia intrusione informatica ai danni di *Hacking Team* - azienda > milanese specializzata in software per la sorveglianza - ha reso pubblici > almeno *400 gigabyte di materiale riservato*, dal quale emergerebbero, > tra l’altro, rapporti commerciali con istituzioni di stati non democratici, > da cui potenziali *violazioni di diritti fondamentali* dei loro > cittadini. Tra le numerose implicazioni di questa vicenda, vi è anche il > possibile impatto dell'attacco sui software in corso di utilizzo dai > clienti di Hacking Team, a loro volta a rischio di intrusione. > > Obiettivo del 78° Mercoledì di Nexa sarà quello di ricostruire la vicenda, > anche per tentare di comprendere quali fatti - tra i molti oggetto di > analisi in queste settimane - siano effettivamente comprovati. Più in > generale, si rifletterà sull’*attuale grado di opacità del settore della > sorveglianza*; ma anche sulle modalità e sulle conseguenze, positive e/o > negative, di leaks di tale portata strategica. Ci si chiederà, inoltre, > quali *modelli regolatori* possano garantire trasparenza e tutela dei > diritti umani nei rapporti dell'industria della sorveglianza con i governi, > o con soggetti privati. > > A tale fine, il Centro Nexa ospiterà gli interventi di *Fabio Chiusi*, > giornalista e fellow del Centro Nexa, e di *Claudio Agosti*, ricercatore > e sviluppatore di software per la protezione dei diritti umani digitali, ai > quali seguirà una discussione pubblica. > > BIOGRAFIE - e informazioni supplementari > > [image: [Chiusi - Agosti]] > > FABIO CHIUSI <http://nexa.polito.it/people/fchiusi> è fellow del Centro > Nexa, giornalista freelance (Wired, L'Espresso, Repubblica) e blogger ( > ilNichilista <http://ilnichilista.com/>, Chiusi nella Rete > <http://chiusinellarete-messaggeroveneto.blogautore.repubblica.it/>) che > scrive regolarmente di censura e sorveglianza su Internet, analizzando il > complesso rapporto tra tecnologie digitali, politica e società. Ha > conseguito un "Master of Science" in Filosofia della Scienza presso la > London School of Economics. È autore di *Critica della democrazia > digitale. La politica 2.0 alla prova dei fatti* (Codice Edizioni). > > CLAUDIO AGOSTI è uno sviluppatore di software e un promotore > dell'autodifesa digitale. Dopo un'esperienza professionale nel mondo della > sicurezza dei computer e delle reti, si è dedicato a quella degli utenti > online: molto più sensibili, molto meno prevedibili. Lavora in due > organizzazioni: Il centro studi Hermes e TacticalTech. Da metà degli anni > 90 si è formato come autodidatta. Purtroppo la rete non elargisce titoli da > mettere nelle biografie e non ho mai scritto libri, solo codice, al massimo > articoli tecnologici per tecnologhi e naturalmente qualche piano per > conquistare il mondo (delle libertà digitali). > > Letture consigliate e link utili: > > - Claudio Agosti, *I worked at #HackingTeam, my emails were leaked to > WikiLeaks and I’m ok with that > <https://stories.expost-news.com/i-worked-at-hackingteam-my-emails-were-leak…>*, > expost magazine > - Carlo Blengino, *Qual è il problema? > <http://www.ilpost.it/carloblengino/2015/08/04/il-problema-hackingteam/>*, > Il Post, 4 agosto 2015 > - Fabio Chiusi, *Hacking Team: "I clienti che abusano del nostro > software vengono cancellati" > <http://www.repubblica.it/tecnologia/sicurezza/2015/07/08/news/il_portavoce_…>*, > La Repubblica, 8 luglio 2015 > - Fabio Chiusi, *Dopo l'Hacking Team? "Un mondo con regole chiare e > trasparenti" > <http://www.repubblica.it/tecnologia/sicurezza/2015/07/15/news/intervista_ka…>*, > La Repubblica, 15 luglio 2015 > - Carola Frediani, *“Così Hacking Team e altre aziende vendono > sorveglianza in Colombia” > <http://www.lastampa.it/2015/09/02/tecnologia/hacking-team-e-il-puma-della-c…>*, > La Stampa, 2 settembre 2015 > > > > > Che cosa sono il Centro Nexa e i cicli di incontri “Mercoledì di Nexa” e > “Nexa Lunch Seminar” > > Il Centro Nexa su Internet & Società del Politecnico di Torino > (Dipartimento di Automatica e Informatica) è un centro di ricerca > indipendente e interdisciplinare che studia Internet e il suo effetto sulla > società. Maggiori informazioni all'indirizzo: http://nexa.polito.it/about. > > Durante i “*Mercoledì di Nexa*”, che si tengono *ogni 2° mercoledì del > mese* alle *ore 18 in punto*, il Centro Nexa su Internet e Società apre > le sue porte non solo agli esperti e a tutti coloro i quali lavorano con > Internet, ma anche a semplici appassionati e cittadini. Il ciclo di > incontri intende approfondire, con un linguaggio preciso ma divulgativo, i > temi legati alla Rete: motori di ricerca, Creative Commons, social > networks, open source/software libero, neutralità della rete, libertà di > espressione, privacy, file sharing, big e open data, smart cities e molto > altro. > > Al centro di quasi tutti gli incontri un ospite pronto a dialogare con i > direttori del Centro Nexa, il Prof. Juan Carlos De Martin del Politecnico > di Torino e il Prof. Marco Ricolfi dell'Università di Torino, nonché lo > staff e i Fellows del Centro Nexa. > > Maggiori informazioni sui Mercoledì di Nexa, incluso un elenco di tutti i > “Mercoledì” passati, sono disponibili all'indirizzo: > http://nexa.polito.it/mercoledi. > > Si segnala inoltre che dal maggio 2012 *ogni 4° mercoledì* del mese *dalle > ore 13 alle ore 14* il Centro Nexa organizza anche i "*Nexa Lunch Seminar*". > Una lista di tutti i “Lunch Seminar” passati è disponibile all'indirizzo: > http://nexa.polito.it/lunch-seminars. > > See our events calendar <http://nexa.polito.it/events> if you're curious > about future luncheons, discussions, lectures, and conferences not listed > in this email. Our events are free and open to the public, unless otherwise > noted. > > Maggiori informazioni sui Mercoledì di Nexa e i Nexa Lunch Seminar, sono > disponibili all'indirizzo: <http://nexa.polito.it/events> > http://nexa.polito.it/events. Weekly Events Newsletter. Sign up > <http://nexa.polito.it/mailing-lists> to receive this newsletter if this > email was forwarded to you. To manage your subscription preferences, please click > here <https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa>. > > Connect & get involved: Jobs, internships, and more > <http://nexa.polito.it/get-involved> > > _______________________________________________ > nexa mailing list > nexa(a)server-nexa.polito.it > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa >

Sept. 8, 2015

Internet of Things, antropomorfismo e la gerarchia dei bisogni di Maslow

by Guido Noto La Diega

Ecco qui The Hierarchy of IoT “Thing” Needs <http://techcrunch.com/2015/09/05/the-hierarchy-of-iot-thing-needs/> di Jim Hunter -- *Guido* Dr. Guido Noto La Diega <http://www.law.qmul.ac.uk/staff/notoladiega.html>, Postdoctoral Research Assistant in Cloud Computing Law <http://www.cloudlegal.ccls.qmul.ac.uk/project/researchers/index.html> - Queen Mary Universityof London <http://www.mccrc.eu/Pages/Research-Team.aspx> President of Ital-IoT <http://italiot.altervista.org/about-us/> - Centre of Multidisciplinary Research on the Internet of Things Avvocato <http://www.studioperrino.it/intro/index.asp> (Commercial and IP/IT Lawyer) Cultore della materia in Civil Law and Intellectual Property <http://www.unipa.it/persone/docenti/n/guido.notoladiega> - University of Palermo 67-69 Lincoln's Inn Fields London WC2A 3JB g.notoladiega(a)qmul.ac.uk +44(0)2078823386 @gui_notoladiega https://it.linkedin.com/pub/guido-noto-la-diega-ph-d/6/614/669 This e-mail and any attachment hereto are strictly confidential and are exclusively intended for the person above identified. Without intended recipient’s entitlement, use, copy and dissemination of this e-mail is prohibited. If you have received it in error, please advice us immediately by telephone and return the documents received to the above address, deleting the files. Thank you. Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestaettet. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Danke. Il presente messaggio di posta elettronica ed ogni eventuale allegato contengono informazioni strettamente riservate e sono indirizzati esclusivamente al soggetto sopra indicato. In mancanza di autorizzazione del destinatario, ne sono vietati l’uso, la riproduzione e la divulgazione. Se avete ricevuto questo messaggio per errore, siete pregati di avvisarci immediatamente per telefono e di restituirci i documenti ricevuti all’indirizzo sopra indicato, distruggendo i file. Grazie. LIK DŐR

Sept. 7, 2015

Will Advances in Technology Create a Jobless Future? | MIT Technology Review

by J.C. DE MARTIN

http://www.technologyreview.com/featuredstory/538401/who-will-own-the-robot… (Sent from my wireless device; please excuse brevity and typos (if any))

Sept. 7, 2015

Lessig correrà per le primarie USA- Ha raggiunto la soglia del milione di dollari.

by Fulvio Sarzana

Il Prof Lessig correrà per le primarie negli Stati Uniti, avendo raggiunto, con un giorno di anticipo sulla scadenza fissata per il Labor Day, la soglia del milione di dollari raccolti con il crowfunding. --- Questa e-mail è stata controllata per individuare virus con Avast antivirus. https://www.avast.com/antivirus

Sept. 6, 2015

Master thesis: "Cross-Border Copyfight: European Libraries Re-Thinking the InfoSoc Directive"

by J.C. DE MARTIN

*Cross-Border Copyfight: European Libraries Re-Thinking the InfoSoc Directive* Posted by Papers on June 2, 2015 Author: Karolina Andersdotter http://infojustice.org/archives/34528 Abstract: This master’s thesis focuses on the argumentation of library organisations and European national libraries in their contributions to the European Commission’s public consultation on the review of the EU copyright rules. This study aims to explain how the debate around copyright limitations and exceptions is constructed in library stakeholders’ contributions. The construction is explained through argumentation analysis and a theoretical framework of the relations between structural, instrumental, and discursive power. The main findings are that library stakeholders in general are strongly supportive of a EU copyright reform, arguing that democratic values as well as the EU Single Market would benefit. There are also library stakeholders who argue against legislative change, either suggesting extended collective licences, or arguing that the Member States’ sovereignity is more important than a pan-European copyright legislation. Furthermore, many library stakeholders propose either a general ”fair use” exception in EU copyright law, or adding several specific exceptions, e.g. for text and data mining, e-lending, publicly funded research openly available, and that contracts and technical protection measures cannot override limitations and exceptions. National libraries and library organisations from the Central and Eastern European Member States’ are more supportive of a copyright reform than their Western European counterparts. They do not mention licences as a possible solution. In general, the library stakeholders agree that the interoperability, exchange and cooperation in activities and projects involving several EU Member States suffers from the current copyright legislation. Full Text: Uppsala University Publications: http://uu.diva-portal.org/smash/record.jsf?pid=diva2%3A814857&dswid=-555

Sept. 5, 2015

perché è lecito pubblicare un'immagine shock

by Carlo Melzi d'Eril

Carissimi, mi permetto di segnalare un pezzetto su un tema davvero difficilissimo. Carlo http://www.ilsole24ore.com/art/mondo/2015-09-04/la-foto-bimbo-bodrum-perche… avv. Carlo Melzi d'Eril ACCMS STUDIO LEGALE via Podgora 13 20122 Milano t. +39 02 54107715 f. +39 02 54114827 <mailto:carlo.melzi@accms.it> carlo.melzi(a)accms.it carlo.melzideril(a)cert.ordineavvocatimilano.it …………………………………………………………………………………………………………………… Nota di riservatezza : Il presente messaggio e gli eventuali allegati contengono informazioni strettamente riservate. Esso è riservato esclusivamente al destinatario sopra indicato, il quale è l'unico autorizzato ad usarlo, copiarlo e, sotto la propria responsabilità, diffonderlo. Si segnala, a chiunque ricevesse questo messaggio per errore o comunque ne avesse conoscenza senza averne titolo, che trattenerlo o divulgarlo a persone diverse dal destinatario è proibito. Grazie.

Sept. 5, 2015

Wireless car updates to save billions, transform service experience, IHS predicts

by J.C. DE MARTIN

http://www.autonews.com/article/20150904/OEM06/150909920 (Sent from my wireless device; please excuse brevity and typos (if any))

Sept. 4, 2015

Re: [nexa] EFF: "Finally! DOJ Reverses Course and Requires Warrants for Stingrays!"

by Guido Noto La Diega

Very interesting! The main problem is that when local and state agencies autonomously investigate, this rules do not apply. Also, the policy "applies to all instances in which Department components use cell-site simulators in support of other Federal agencies and/or State and Local law enforcement agencies." This wording makes me think that even when the Department of Justice collaborates with state and local agencies, the policy does not apply inasmuch as the cell-site simulators are used by the latter (and not by the DOJ itself). 2015-09-04 10:01 GMT+01:00 J.C. DE MARTIN <demartin(a)polito.it>: > SEPTEMBER 3, 2015 | BY NATE CARDOZO > > *Finally! DOJ Reverses Course and Requires Warrants for Stingrays!* > > > https://www.eff.org/deeplinks/2015/09/finally-doj-reverses-course-and-will-… > > At long last, the U.S. Department of Justice (DOJ) has announced a slew of > much-needed policy changes regarding the use of cell-site simulators. Most > importantly, starting today all federal law enforcement agencies—and all > state and local agencies working with the federal government—will be > required to obtain a search warrant supported by probable cause before they > are allowed to use cell-site simulators. EFF welcomes these policy changes > as long overdue. > > Colloquially known as “Stingrays” after Harris Corporation’s brand name > for a common model, cell-site simulators masquerade as legitimate cell > phone towers, tricking phones nearby into connecting to them. This allows > agents to learn the unique identifying number for each phone in the area of > the device and to track a phone’s location in real time. But Stingrays can > get a lot more than just identifying numbers and location data—by virtue of > the way they work, all mobile traffic (voice, data, and text) from every > phone in the area could be routed through the Stingray, giving the operator > the option to do anything from recording entire calls and texts, to > selectively denying service to particular phones. > > Until recently, law enforcement’s use of Stingrays has been shrouded in an > inexplicable and indefensible level of secrecy. At the behest of the FBI, > state law enforcement agencies have been bound by non-disclosure agreements > intended to shield from public scrutiny all details about the technical > capabilities and even model numbers of the devices. Law enforcement has > gone to extreme lengths to protect even the most basic information about > them, even dropping charges rather than answering judges’ questions about > them. Although today’s policy changes don’t directly affect the > non-disclosure agreements already in place, the tone of the announcement, > along with a clarification from May, gives us hope that more transparency > is on the way. > > *What today’s changes do:* > > Federal law enforcement agents will be required to obtain a search warrant > supported by probable cause prior to using a cell-site simulator in a law > enforcement context. A search warrant requires a showing by the agent, > under oath, that meets one of the highest standards in federal law. This > incredibly important change is precisely what EFF has been asking for. > Agents will only be allowed to use Stingrays in “pen register” mode, > meaning the devices will collect only the basic location of the phone and > the numbers of incoming and outgoing calls and texts. Agents will not be > allowed to collect the content of your communications -- like your emails > or text messages -- even if the cell-site simulator is capable of such > collection. > Finally, Agencies must delete data on users not targeted in either 24 > hours or 30 days, depending on context. > > *What today’s changes don’t do:* > > The new policy isn’t law and doesn’t provide any remedy to people whose > data is swept up by Stingrays operated without a warrant. Indeed, it won’t > even act to keep evidence collected in violation of the policy out of court > (this is known as suppression). > The policy doesn’t apply to the use of Stingrays outside of the criminal > investigation context. For instance, when federal agents use cell-site > simulators for “national security” purposes, they won’t be required to > obtain a warrant by the terms of this policy. > There are two enumerated exceptions to the warrant requirement in today’s > guidance. The first is the traditional “exigent circumstances” exception, > common to all warrant requirements and not particularly worrisome. But the > second exception listed in today’s policy for undefined “exceptional > circumstances” is potentially problematic. We have no idea what that means, > so we’re waiting to see if and how the exception will be used. > > *What more is needed:* > > While we’re pleasantly surprised by this long-needed first step to bring > Stingrays out of the shadows and into compliance with the Fourth > Amendment’s warrant requirement, more is needed. > > First and foremost, without a statute or court decision giving this > voluntary policy the force of law, there will be no consequences if law > enforcement agents flout its terms and continue using Stingrays as they > have—without warrants. With only this policy shielding us, there’s nothing > keeping warrantless Stingray evidence out of court, and therefore nothing > to deter agents from behaving badly. > > And finally, we need to extend this warrant requirement to all state and > local law enforcement agencies around the country. Some states (such as > Washington) already have such laws in place. It’s time to make the message > clear to cops in all 50 states: if you want to use a Stingray, get a > warrant! > > Files > > doj_cell_site_simulator_policy_9-3-15.pdf > > _______________________________________________ > nexa mailing list > nexa(a)server-nexa.polito.it > https://server-nexa.polito.it/cgi-bin/mailman/listinfo/nexa > > -- *Guido* Dr. Guido Noto La Diega <http://www.law.qmul.ac.uk/staff/notoladiega.html>, Postdoctoral Research Assistant in Cloud Computing Law <http://www.cloudlegal.ccls.qmul.ac.uk/project/researchers/index.html> - Queen Mary Universityof London <http://www.mccrc.eu/Pages/Research-Team.aspx> President of Ital-IoT <http://italiot.altervista.org/about-us/> - Centre of Multidisciplinary Research on the Internet of Things Avvocato <http://www.studioperrino.it/intro/index.asp> (Commercial and IP/IT Lawyer) Cultore della materia in Civil Law and Intellectual Property <http://www.unipa.it/persone/docenti/n/guido.notoladiega> - University of Palermo 67-69 Lincoln's Inn Fields London WC2A 3JB g.notoladiega(a)qmul.ac.uk +44(0)2078823386 @gui_notoladiega https://it.linkedin.com/pub/guido-noto-la-diega-ph-d/6/614/669 This e-mail and any attachment hereto are strictly confidential and are exclusively intended for the person above identified. Without intended recipient’s entitlement, use, copy and dissemination of this e-mail is prohibited. If you have received it in error, please advice us immediately by telephone and return the documents received to the above address, deleting the files. Thank you. Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestaettet. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Danke. Il presente messaggio di posta elettronica ed ogni eventuale allegato contengono informazioni strettamente riservate e sono indirizzati esclusivamente al soggetto sopra indicato. In mancanza di autorizzazione del destinatario, ne sono vietati l’uso, la riproduzione e la divulgazione. Se avete ricevuto questo messaggio per errore, siete pregati di avvisarci immediatamente per telefono e di restituirci i documenti ricevuti all’indirizzo sopra indicato, distruggendo i file. Grazie. LIK DŐR

Sept. 4, 2015

EFF: "Finally! DOJ Reverses Course and Requires Warrants for Stingrays!"

by J.C. DE MARTIN

SEPTEMBER 3, 2015 | BY NATE CARDOZO *Finally! DOJ Reverses Course and Requires Warrants for Stingrays!* https://www.eff.org/deeplinks/2015/09/finally-doj-reverses-course-and-will-… At long last, the U.S. Department of Justice (DOJ) has announced a slew of much-needed policy changes regarding the use of cell-site simulators. Most importantly, starting today all federal law enforcement agencies—and all state and local agencies working with the federal government—will be required to obtain a search warrant supported by probable cause before they are allowed to use cell-site simulators. EFF welcomes these policy changes as long overdue. Colloquially known as “Stingrays” after Harris Corporation’s brand name for a common model, cell-site simulators masquerade as legitimate cell phone towers, tricking phones nearby into connecting to them. This allows agents to learn the unique identifying number for each phone in the area of the device and to track a phone’s location in real time. But Stingrays can get a lot more than just identifying numbers and location data—by virtue of the way they work, all mobile traffic (voice, data, and text) from every phone in the area could be routed through the Stingray, giving the operator the option to do anything from recording entire calls and texts, to selectively denying service to particular phones. Until recently, law enforcement’s use of Stingrays has been shrouded in an inexplicable and indefensible level of secrecy. At the behest of the FBI, state law enforcement agencies have been bound by non-disclosure agreements intended to shield from public scrutiny all details about the technical capabilities and even model numbers of the devices. Law enforcement has gone to extreme lengths to protect even the most basic information about them, even dropping charges rather than answering judges’ questions about them. Although today’s policy changes don’t directly affect the non-disclosure agreements already in place, the tone of the announcement, along with a clarification from May, gives us hope that more transparency is on the way. *What today’s changes do:* Federal law enforcement agents will be required to obtain a search warrant supported by probable cause prior to using a cell-site simulator in a law enforcement context. A search warrant requires a showing by the agent, under oath, that meets one of the highest standards in federal law. This incredibly important change is precisely what EFF has been asking for. Agents will only be allowed to use Stingrays in “pen register” mode, meaning the devices will collect only the basic location of the phone and the numbers of incoming and outgoing calls and texts. Agents will not be allowed to collect the content of your communications -- like your emails or text messages -- even if the cell-site simulator is capable of such collection. Finally, Agencies must delete data on users not targeted in either 24 hours or 30 days, depending on context. *What today’s changes don’t do:* The new policy isn’t law and doesn’t provide any remedy to people whose data is swept up by Stingrays operated without a warrant. Indeed, it won’t even act to keep evidence collected in violation of the policy out of court (this is known as suppression). The policy doesn’t apply to the use of Stingrays outside of the criminal investigation context. For instance, when federal agents use cell-site simulators for “national security” purposes, they won’t be required to obtain a warrant by the terms of this policy. There are two enumerated exceptions to the warrant requirement in today’s guidance. The first is the traditional “exigent circumstances” exception, common to all warrant requirements and not particularly worrisome. But the second exception listed in today’s policy for undefined “exceptional circumstances” is potentially problematic. We have no idea what that means, so we’re waiting to see if and how the exception will be used. *What more is needed:** * While we’re pleasantly surprised by this long-needed first step to bring Stingrays out of the shadows and into compliance with the Fourth Amendment’s warrant requirement, more is needed. First and foremost, without a statute or court decision giving this voluntary policy the force of law, there will be no consequences if law enforcement agents flout its terms and continue using Stingrays as they have—without warrants. With only this policy shielding us, there’s nothing keeping warrantless Stingray evidence out of court, and therefore nothing to deter agents from behaving badly. And finally, we need to extend this warrant requirement to all state and local law enforcement agencies around the country. Some states (such as Washington) already have such laws in place. It’s time to make the message clear to cops in all 50 states: if you want to use a Stingray, get a warrant! Files doj_cell_site_simulator_policy_9-3-15.pdf

Sept. 4, 2015