• Ephemeral Law takes a look at the court documents in Microsoft’s challenge to the Waledac botnet, which it describes as on the “cutting edge of legal efforts to shut down hacking operations.”

• The Wall Street Journal reports that the US Department of Justice is stepping up its antitrust investigation into technology firms’ “no-poach” policy and salary fixing.

• Eric Goldman reports on a decision of the California Court of Appeals rejecting an argument that a California statute prohibiting eavesdropping precluded admitting Yahoo! chat logs in evidence.

• Why the anti-commons aren’t so tragic, from Patent Docs.

• The MTTLR Blog writes about falsely-convicted victims of DNA forensics errors.

• Wired: a new malware scam threatens BitTorrent with copyright infringement suits.

• Spicy-IP blogs about BioPiracy – the practice of mining the traditional knowledge of indigenous communities for biological and medicinal patents – in Africa.

• Feature from The Register: the Russian Association of Electronic Communications promises to crack down on spam and cybercrime.

• British Election special: the mother of British hacker Gary McKinnon, who was at the heart of a recent UK-US extradition battle, has announced that she will run against Chancellor Jack Straw in the upcoming parliamentary elections, from bbc.co.uk.

Among the companies targeted for criticism are Google, Amazon, McAfee, Yahoo, eBay, Microsoft, Apple and Verizon. These hearings may mark the beginnings of legal changes that could require information and communications technology companies to protect users’ rights overseas. The potential legal ramifications of these changes are unclear at present, though they are the subject of heated debates, as we will see below.

The Senate Hearings

U.S. Senator Dick Durbin of Illinois chaired a hearing before the Judiciary Subcommittee on Human Rights and the Law on Tuesday March 2^nd to review the practices of information technology companies in countries that restrict free access to the internet.

Senator Durbin sent letters to thirty companies requesting information on their business practices in China and other countries that censor the internet. The senator also encouraged companies to join the Global Network Initiative (GNI), a group of corporations, academics, human rights groups, investors and others committed to protecting internet users’ rights to freedom and privacy according to a specific code of conduct. (As of now, only the original three member corporations have joined the GNI, which is discussed further in the section below. ) The GNI submitted a written statement for the hearing, available here, which stresses the need for more communication between companies in the information and communications technology sector in order to identify important human rights issues. The GNI also affirmed its view that there is a strong need for more corporations to join the GNI and commit to its principles.

Testifying at the hearing were Michael Posner (Assistant Secretary of Human Rights, Democracy and Labor at the State Department), Daniel Weitzner (with the National Telecommunications and Information Administration of the Department of Commerce), Nicole Wong (Google’s Vice President and Deputy General Counsel), Rebecca MacKinnon (Visiting Fellow at Princeton University’s Center for Information Technology Policy and a drafter of the Global Network Initiative), and Omid Memarian (an Iranian blogger living in the U.S. since his release from detention by the Iranian security services in 2004).

Mr. Memarian testified about how his website was shut down—not by the Iranian government, but by his American domain and host provider, because of restrictions on transactions with Iran. He discussed how such restrictions and sanctions prevent Iranian dissidents from downloading software (including, for example, Google Chrome) and publishing their opinions. He also made several suggestions about how the U.S. government and American corporations could provide technologies that would help promote internet freedom in Iran, and further argued that a freer Iran would greatly help the security of the region.

Nicole Wong’s testimony reviewed Google’s recent problems with China and affirmed Google’s unwillingness to keep censoring search results for Chinese users. She stated that Google would “reconsider [their] approach” in China if the situation worsened after more monitoring. Beyond restating Google’s decision to stop censoring search results in China, she did not commit to any concrete action. However, she discussed various strategies that governments could use to combat censorship. She also analyzed the issue from an economic perspective, elaborating on the damaging effects of internet restrictions on both the “host” country and on foreign companies.

Rebecca MacKinnon testified about authoritarian regimes’ exploitation of the internet to cement their power and suppress dissent. Ms. MacKinnon discussed and countered the view, popular in the 1990s, that the internet by its nature would elude and eventually defeat authoritarianism. It was then widely believed that no government could truly stop the spread of information over the internet. The internet, the theory went, would be an invaluable and unstoppable weapon in the hands of dissidents.

Contrary to predictions, as China and Iran in particular have demonstrated, authoritarian governments have adapted to and co-opted the internet. Filtering, deletion of content by internet companies, cyber-attacks, politically motivated law enforcement, and device-level controls are the major techniques a government may use to control the spread of potentially threatening information over the internet.

Mr. Posner and Mr. Weitzner made general comments in support of internet users’ liberties and of using business regulation to promote free exchange.

The Corporations’ Response

The point of the hearings, as suggested by Senator Durbin’s letters to the various companies, was to highlight the role corporations can play in either reinforcing or undermining government surveillance and control of the internet. Senator Durbin’s opening remarks discussed how pressure from U.S. companies and the government influenced the Chinese government to back down from its decision to require all computers sold in China to include filtering and information-gathering software. Ms. Mackinnon also discussed ways in which corporations could fight internet censorship, from locating servers outside the territories of authoritarian countries to refusing to comply with informal demands from governments to creating surveillance-circumvention technologies.

However, only three corporations in the sector have committed to the GNI code of conduct: Google, Microsoft, and Yahoo. Whether these companies will adhere to the code of conduct is uncertain, as the New York Times points out.

Additionally, AT&T, Skype, and McAfee have committed to discuss joining GNI.  Facebook and Twitter were invited to send representatives to the hearings but declined. Senator Durbin expressed his disappointment in this unenthusiastic but probably inevitable response.  Without legal pressure, it is unlikely that corporations will take actions against their own self-interest by defying laws in countries where they do business.

Possible Legal Consequences

At this time, enactment of any new legislation is far off. The bulk of lawmakers’ attention is focused on exhorting companies to voluntarily comply with GNI standards.

However, many have made legislative proposals and suggestions. For instance, Rebecca MacKinnon has argued for legal changes allowing targets of state repression to sue U.S. companies who turned over information on them. Additionally, Senator Durbin is working on legislation to compel companies to either defy censorship overseas or face civil or criminal penalties at home, the St. Louis Post-Dispatch and PC Magazine report. He has not stated what actions would trigger these penalties under the hypothetical bill. However, this is not a new idea: some activists have been proposing the Global Online Freedom Act (GOFA) for years, as the Guardian reports, which would make it illegal for a U.S. company to provide information or technology aiding restriction of internet services. Brendan Ballou, who blogs on Harvard Law Professor Jonathan Zittrain’s website, analyzes some aspects and limitations of the GOFA here.

Criminal or civil penalties in the U.S. may simply present U.S. companies with the following calculation: will defying the U.S. law cost them more or less than circumventing internet restrictions in China or Iran? The efficacy of such a bill is questionable. It may present some companies with a difficult choice: they must either violate the law at home, or abroad. Furthermore, many of the technologies that make internet-restriction possible were developed in U.S. and European countries at the behest of their governments, to aid in lawful surveillance in those countries. Nokia Siemens made this point in response to a European Parliament resolution condemning its technological aid to the Iranian government and calling for a ban on surveillance technology exports to certain countries, as Ars Technica reports.  This suggests that the scope of the bill will have to be very clearly defined if it is to differentiate between surveillance carried out in the most repressive countries and surveillance in western democracies.