Another Assault on Privacy

This time by a major cellular telephone company: Verizon.

…it has emerged that Verizon Wireless has been silently tracking around 100 million mobile customers using a supercookie that can’t be opted out of.

This is an especially nefarious invasion: the “cookie” lets Verizon track your movements on the Web—every page. And they then peddle that information to any advertiser willing to pay up.

Indeed, “supercookie” is a bit of a misnomer. Cookies store stuff on your computer that Web sites that you visit use when you revisit them. Often, it’s useful and beneficial information: how you like that Web site presented, for instance, or login information (beneficial only if it’s a convenience to read an article, and not giving access to your financial or other personal information to that site), and so on.

This thing, instead, enters the stream of information being exchanged between your browser and the Web site and

injects a new HTTP header every time you visit a website. Not just Verizon websites—any web resource that is accessed via Verizon’s network (i.e. everything). This header, called X-UIDH, contains a unique identifier that’s tied to your Verizon account. Your web browser (or any other app on your phone that uses HTTP) always receives this header with your unique ID—there’s nothing you can do to stop it.

Three things make this even worse than it sounds.

  • they didn’t tell you about it
  • you can’t block it or even opt out
  • not only Verizon can use the resulting information—any third party can access it

Verizon says it’s only on their cellular network, only using your Web accesses via your cell phone. So far.

It’s unconscionable that a major company would pull such a stunt; although it’s sadly common. It’s unlikely that Verizon will stop this invasion. It’s necessary, then, to get onto your newly elected and minted Congressman and…encourage…him or her to look into this and to legislate to protect our privacy.

In Which the IRS Gets Away with It

Judge Reggie Walton, of the DC District Court, dismissed all counts brought by the conservative non-profit, True the Vote, against the IRS for the IRS’ harassment of the organization when it tried to register as a 501(c)(3). The IRS had, on receiving that application

IRS was subjecting [True the Vote founder Catherine Engelbrecht] to multiple rounds of abusive inquiries, with requests to provide every Facebook and Twitter entry I’d every posted, questions about my political aspirations, and demands to know the names of every group I’d ever made presentations to, the content of what I’d said, and where I intended to speak for the coming year.

Under the law defining a c3 organization, none of this information is relevant to the IRS’ application investigation. Indeed, Walton’s ruling explicitly makes no reference to the legitimacy of Engelbrecht’s charges.

Walton dismissed the counts because the IRS—eventually, but before this lawsuit was resolved—registered True the Vote as the c3 for which it had applied.

Unless an actual, ongoing controversy exists in this case, this Court is without power to decide it….

Because

The defendants’ grant of tax-exempt status to the plaintiff, and the defendants’ suspension of the alleged IRS targeting scheme during the tax-exempt application process, including remedial steps to address the alleged conduct, coupled with the reduced “concern about the recurrence of objectionable behavior” government actors….

Never mind that this is a purely voluntary “suspension,” subject to removal at IRS whim, conservative speech remains chilled, other attacks against other conservative entities remain (think Wisconsin), and so on. The present assault has stopped, so there’s nothing for a good judge to decide.

Let me see if my understanding of this is correct. If I stop beating my wife, wholly voluntarily and on my own initiative, I’m home free? My wife has no recourse? Never mind that I’ve only voluntarily suspended the beatings, never mind that my wife remains intimidated and vulnerable, I’ve got nothing to worry about from any court?

Walton’s ruling can be seen here.

A Number of Misunderstandings

Los Angeles passed an ordinance requiring hotel operators to give up data in their guest registers to the police, even when they don’t have a warrant.

The ordinance, approved by the city in 2006, requires hotels to collect and maintain guest information such as name and address, the number of people in the guest’s party, vehicle information, arrival and checkout dates, room number, and method of payment. Hotel operators who fail to comply with it face as many as six months behind bars and a $1,000 fine.

A motel operator demurred, and at this point, the 9th Circuit agrees: they struck the ordinance as unconstitutional under the 4th Amendment.

There are a couple of fundamental misunderstandings, though. One is in the 9th‘s ruling, paraphrased by Joe Palazzolo at the above link:

[H]otels have an interest in keeping guest records private, even if the guests themselves have no such privacy rights because they willingly give their information to a third party.

Guests do have a legitimate expectation of privacy regarding “their information,” though. They’re not giving their information to “a” third party; they’re giving it to a particular third party as a necessary thing so that the particular third party can provide the contracted service. Moreover, much of the information that is given over is not necessary for the transaction to occur; it’s mandated by a different third party—a government entity, for the government’s convenience.

A second misunderstanding is in the argument offered by LA’s lawyers.

These laws expressly help police investigate crimes such as prostitution and gambling, capture dangerous fugitives and even authorize federal law enforcement to examine these registers, an authorization which can be vital in the immediate aftermath of a homeland terrorist attack[.]

Say that’s all true. Get a warrant. Time hardly seems of the essence in these hypotheticals, even with the apocalyptically offered “homeland terrorist attack:” the cops are unlikely to be near the hotel or motel when an attack goes in. If time really is of the essence, come armed with a warrant in the first place; they’re disappointingly easy to get.

A third misunderstanding is in Judge Richard Tallman’s dissent, again summarized by Palazzolo.

[T]he hoteliers challenging the ordinance failed to show that police were applying the statute in an unconstitutional way.

The hoteliers had no requirement to do so. The law must be constitutional in the first place; its application by the police is wholly irrelevant after its unconstitutionality is shown.

The matter now is before the Supreme Court, and we’ll learn later who’s right. Legally, anyway.

Even the Brits

This is an amazing development for the authors of the Magna Carta. That charter, recall, codified for the first time in Anglo-American history, limits to government’s (king’s at the time) right to intrude into a man’s private affairs and possessions except under some severely constrained conditions: due process of law.

This is that amazement:

Registered gun owners in the United Kingdom are now subject to unannounced visits to their homes under new guidance that allows police to inspect firearms storage without a warrant.

The new policy from the British Home Office went into effect Oct 15, permitting police and constabularies to conduct surprise home visits to legitimate gun owners.

Why else, it turns out, have a gun registry, except to identify those honest citizens in the best position to resist excessive government—like the barons and others who resisted King John’s excesses? Like those later colonial Americans who resisted King George III’s excesses?

And this is where our own gun control lobby and the Progressives in our own government are headed.