Articles by Jim Harper

Jim HarperJim is the Director of Information Policy Studies at The Cato Institute, the Editor of Web-based privacy think-tank Privacilla.org, and the Webmaster of WashingtonWatch.com. Prior to becoming a policy analyst, Jim served as counsel to committees in both the House and Senate.


As promised in his welcome write-up of my book, Tim Lee has also picked a nit with it. Unsurprisingly, he homed in on an issue that others are likely to find difficult: terminology.

In researching the book, I found no end to the variety of uses given to words like “identification,” “authorization,” and especially “authentication.” I generally avoided the latter because it is so confusing.

So why don’t I review, and perhaps improve on, my treatment of terms in the book. I think Tim has gotten some of his thinking wrong in his comment. Because he does so after reading my book, the error is mine. I did not convey my thinking well enough to fully explain or persuade on the first shot.

Continue reading →

Waaaaaay back in October 2004, I blogged about the Markle Task Force and the aid it has given to the architects of the surveillance state.

I have complained directly to the members of the Task Force that I know, but I have a persistent sense that most members are unaware, in denial, or indifferent to the role of the group in promoting such things as the U.S. national ID card.

In my opinion, the Markle Task Force dropped the ball completely on privacy and civil liberties. It angers me to hear them pay lip service to these values. They should choke on the words.

This morning, Markle issued its final report. I’ve only skimmed it so far. It’s a lot of gobbledegook, but I know some of it is meant to minimize information sharing among agencies, which is good. The report urges the national security bureaucracy to rationalize information sharing. Well and good.

I’m glad this is their final report. (No link because I don’t want to enhance its search-engine stature – you can find it.) But now it is not just likely – it is guaranteed – that they will abandon their product to the wolves. As before, Markle work will be used to justify what the surveillance-industrial complex wants to do, disregarding countervailing national interests like privacy and civil liberties. On those, we’ll get none of the good stuff and all of the bad.

This morning, I went over to the event at Brookings where members of the Markle Task Force introduced today’s report. I handed out a one-pager that documents the responsibility of the Task Force for our national ID.

I gave one to Jim Barksdale of Netscape fame, a co-chair of the Task Force. He seemed pleased to get something interesting to read. I hope he’s unpleased to read what I think of his little tea-dance with government power.

I hate it when people who are successful in business or singing or acting think they can do public policy. They come to Yosemite and they feed the bears and they think it’s real cute. Then, when the bears are ripping the tops off of cars, they wonder why. I hear Jim Barksdale is a good guy. He should be embarassed.

Annnnyway, my Markle handout (after the jump).

Continue reading →

Score one for David Levine’s argument that complimentary goods would allow producers of expressive works to profit without copyright, part of his broader response to the infamous “King Kong question.”

Yesterday, I got Tool’s new CD 10,000 Days.

Instead of a jewel case, it comes in a sort of book with stereoscopic lenses built into it. As you ROCK to the first new album from them in years, you look through the lenses at these interesting and bizarre pictures that so typify the Tool aesthetic.

Meaning: You downloading wussies, sitting in your dorm rooms listening to the Tool song that you downloaded, you have no idea what the total Tool experience is like. You can’t download the Tool experience. Smoke all you want of the skank-weed you bought from that hustler and listen to your downloaded Tool. You don’t rock out to Tool the way I rock out to Tool. If you want to do that, you have to buy the CD. Downloader.

Ahem. Sorry. A little over-excited about the new Tool CD.

But you get the point. Consciously or not, Tool has linked its digital good to a tangible one and helped to lock in sales.

The album is good. I mean, . . . it’s Tool!

It’s not schizophrenia. It’s principle. RFID is cool for tracking stuff, and it’s uncool for tracking people.

Do consumers have power to control RFID? Yes. Will RFID be everywhere? No. Yet more evidence comes from a couple of articles in a recent Information Week.

In one story, InfoWeek reports “Most retailers can’t find a business case for item-level tagging.” Meaning, they’re not going to do it – not in the near term anyway.

What about the pharmaceutical sector, where RFID is being pushed by government regulators?: “Just two years ago, adoption of radio-frequency identification technology by the pharmaceutical industry looked like it was on a fast track. . . . [P]harma’s use of RFID today remains limited to a handful of test projects.”

The upshot? RFID will be adopted where it’s useful, and not adopted where it’s not. Economics, not technology, will determine how it’s used. And economic forces will channel RFID to uses consistent with consumers’ interests.

Here’s the second and final in my series of World Cup technology stories.

On the way back from Germany, we had an extended layover in Reykjavik, due to “technical reasons.” Oh, thank goodness. Wouldn’t want a delay due to sociological reasons.

The time for the Round of 16 game between Portugal and Holland was drawing near, and many of the soccer fans in the airport wanted to see the game. The staff of the airline and airport were pretty much ignoring requests for access to a television. But there was a WiFi node in the airport.

So we set off looking for a way to follow the game.

A buddy of mine went to the BBC site that streams radio, while I went looking for video, assuming that some hacker out there would have put together a way to get bootleg television feeds.

The BBC was looking quite satisfactory until game-time rolled around, when it switched over to an announcement that “contractual restrictions” prevent streaming of game content outside the UK. I’m aware that people spoof their IP addresses to avoid that restriction and had considered doing that, but I was looking for bigger game.

Sure enough, the second click on my search for streamed World Cup video brought me to a site that explained how it was done. Within a few minutes, I had download TVU Player and found the China TV feed (with play-by-play in Chinese), and then the ESPN feed. With much satisfaction (and occasional breaks for buffering), we watched Portugal go ahead 1-0 as we waited for and boarded the flight back to the U.S.

SO, here’s a clever little tool, made in China, that allowed me to watch the media I wanted to watch where I wanted to watch it. OR, here’s a piracy device that allowed me to evade and circumvent the contractual restrictions that FIFA has placed on broadcast of its intellectual property.

Which is it? Entertainment or theft? (I looked at the advertising placards that lined the field. Does that change your opinion?)

Vacation? What vacation? There’s WiFi in my Frankfurt rental apartment! I’m here attending the opening round of the World Cup, Adam’s most-loved sport, and tickets to the games have RFID chips embedded in them.

Last week, the Department of Homeland Security’s Data Privacy and Integrity Advisory Committee met in San Francisco. The most interesting thing about the meeting to me was leaving without showing ID at the airport. But one of the items of highest interest at the meeting was a draft report put forward by a subcommittee of the DPIAC suggesting that RFID should be disfavored for human tracking.

It was subject to some exaggerated reporting, and some RFID industry folks went into a bit of a tizzy. Penny-wise-and-pound-foolishly, they seem to believe that they should preserve the multi-million-chip market for RFID in identification cards, even though doing so frustrates and delays the development of a market for RFID on the packaging of consumer goods, which easily could reach tens or hundreds of billions of tags.

In a near analogy to tagging identification documents, the World Cup has issued a couple million tickets with RFID chips embedded in them. Getting RFID readers into German stadiums makes it likely that club teams will use RFID chips in their tickets henceforth. Kudos to the wily Phillips Corporation for using its World Cup sponsorship to create an installed base of RFID-using venues.

So let’s look at how mighty RFID adds value to the soccer ticket – and what part of any value goes to fans, organizers, or RFID manufacturers and integrators (after the jump).

Continue reading →

On a flight last night, I got to pore over the most recent issues of InformationWeek. It has the right mix of technology, business, policy, innovation, and gadgetry for a person with my mix of knowledge, interests, and time.

I came across a refreshing article on open source. I think I liked it so well because it was pretty much devoid of interpretation. Nothing about open source’s meaning or consequences – just neutral reporting about who’s doing open source and why. How businesses are using it, encouraging it, or shunning it.

The money quote for me came from a sidebar:

The reason [Chase Phillips] contributes code “boils down to a passion or belief that Mozilla provides freedom to people to control their own computers,” he says. “I believe in different layers of freedom, technological freedom.”

I’m not a coder, but the people featured in the article remind me of me when I was a gear-head in high school. There were Ford guys and Chevy guys – and a few Dodge guys (freaks). Maybe these analogize to the major operating systems. (The former car guy in me wants to beat me up right now.)

We spent our leisure time tricking out our cars and helping each other trick out cars. My car wasn’t all that great – I didn’t have enough money to do it right – and I haven’t even owned a car for 10 years, but I still enjoy the car culture in this country, from the lowriders in San Jose and SoCal to NASCAR’s roots in bootlegging.

It’s all a challenge to auto manufacturers who would just as happily stamp out identical cars and control the revenue stream from parts and repair. But they don’t, and we’re better off because people can still get under the hood.

(N.B., The distinction between cars and computers is collapsing. Hackers will decide whether car culture stays or goes.)

While I’m on InformationWeek, let me recommend the columns of Editor-in-Chief Rob Preston. Recent gems: Rob mentions John Locke in a piece on broadband regulation/”‘net neutrality.” And here’s Rob’s poke in the eye to CNN anti-progress blowhard Lou Dobbs.

That’s good times, people.

The data retention issue is joined. “Data retention” is the idea of requiring companies to hold on to data about their customers in case the authorities later find it would be useful to them.

I don’t think enough can be said about what a perversion of law enforcement in the United States this would be. Because the Fourth Amendment inconveniently requires the government to have reasonable grounds to investigate people, Congress and the Department of Justice are considering outsourcing the task by requiring the corporate sector to conduct mass surveillance.

In a series of articles, Declan McCullagh of C|Net News lays out the latest. A project of law enforcement that has already taken root in the supposed privacy haven of Europe, data retention is a major increment toward a Big Brother state.

There will be plenty to say if this goes forward, but a few things are worth highlighting:

  • There is no sound distinction between collecting “traffic data” and collecting “content.” Indeed, traffic data – records of phone calls, connections to the Internet, and so on – can be very revealing information. Once ISPs are required to collect and keep one, they are bound to end up required to collect and keep the rest.
  • There is no intellectual distinction between retaining data for a short time and retaining data for a long time (and the cost of doing so will drop). The government’s original demand – a brief window into Americans’ data, “for further review” – will expand along the time dimension, ineluctably, and we will not be able to bargain with Internet service providers for privacy protections that deep-six past embarassments and pecadilloes.
  • Information is not just “there” for the taking. Some in law enforcement may believe that information, once produced, should be available to them. Not true. Information has qualities equivalent to property. We constantly hoard it, share it, hide it, and broadcast it in the course of directing our lives. A government mandate that prevents this takes power from all of us. And does so in direct contravention of founding principles.

The data retention issue reminds me of an instance several years ago when a FINCen official said to me that they only wanted information-parity with the private sector – unaware, apparently, that the law for good reason places a specific disability on the government in this area.

Ben Charny reports that federal officials leaned on ICANN to reject the .xxx domain the other week.

One reason why it’s so easy to reject things like the U.N.‘s demand for a piece of “Internet governance” is because their aims are so transparently political. ICANN remains technically under U.S. government authority, but the government hasn’t exercised that authority much. Perhaps until now.

If true: bad thing.

(HT: Free2Innovate)

. . . When it’s online!

Google is the dominant search engine. Everybody knows that. As such, it’s an important bottleneck. If you can’t get your stuff out on Google, you’ll have a hard time getting your stuff out. Right?

Rumors are swirling that Google News has declined to treat certain news sources as news sources because of allegedly “hateful” content. Are sites critical of Islam being “disappeared” from Google News? If it’s true, that’s a bad thing. I don’t agree with hatred of Islam, but I want the fullest airing of people’s views on those issues.

So, if it’s true, something should be done. But what? Sue? Seek public-utility-style regulation for search, as is being done with broadband?

Or maybe what needs to be done is already being done.

I just said that rumors are swirling. How much of a bottleneck can Google be when its alleged censoriousness is broadcast by popular blogger Instapundit? This has probably already given more ‘ink’ to these marginal sites than being ranked on Google would.

Take a look again at the NewsBusters site I linked to above where I said “Rumors are swirling“. The discussion includes lots of people swearing off Google, arguing about Google’s search algorithms, comparing Google searches to Yahoo! searches, and yapping about other, dumber stuff.

In other words, based on the rumor that Google is treating certain sites badly, the people that disagree with that are talking about it, changing their search habits, and encouraging others to do so. In precise proportion to the importance of this issue to people in society, Google is losing business. This is what we call a self-correcting market. Google’s market power is feeble. Consumers are in the driver’s seat.

(N.B. Haters of Islam are but a small part of the overall market. If Google chooses not to make those sites available and the majority of consumers accept that, that is by definition what serves the greatest number in the best way. Opponents of that freedom should be clear that they want consumers not to get what they want. They want to force disagreeable speech on an unwelcoming public using government power. Now that would be a bad thing.)