↓ Twitter is updated more often, so read it! ↓

Regarding the mandated data retention sections of the SAFETY Act of 2009

Sent via e-mail to Senators Specter and Casey, as well as Congressman Altmire, all of Pennsylvania…

Senators and Congressman,

I write in regards to a bill with the short title “Internet Stopping Adults Facilitating the Exploitation of Today’s Youth (SAFETY) Act of 2009”. This bill was introduced with virtually the same text into the House by Mr. Smith of Texas as H.R. 1076 and into the Senate by Mr. Cornyn as S. 436.

While the overall goal of the bill — a reduction in the use of the Internet to facilitate the trafficking of child pornography — is noble, I am concerned that a key section of the bill is overbroad and unenforceable.

The section to which I am referring is Sec. 5, the “RETENTION OF RECORDS BY ELECTRONIC COMMUNICATION SERVICE PROVIDERS.” I include the text of the section here for reference:

Section 2703 of title 18, United States Code, is amended by adding at the end the following: “(h) Retention of Certain Records and Information- A provider of an electronic communication service or remote computing service shall retain for a period of at least two years all records or other information pertaining to the identity of a user of a temporarily assigned network address the service assigns to that user.”

My interpretation leads me to understand that this section would require any person operating an electronic communication or remote computing service to retain at least two years of logs of temporarily-assigned network addresses.

If interpreted as broadly as possible, this law could require every person who owns an Internet router — a very common, inexpensive, often wireless-capable networking device — to retain these logs for two years. These devices have a very limited storage capacity and generally do not have logging facilities enabled by default.

This law would essentially obsolete every home and small business router, as Americans would be compelled by federal law to buy a certainly more expensive router capable of storing an great amount of log files. This device would also have to be capable of backing up these logs to one or more external devices in order to ensure that the owner is protected from device failures. The price of these new routers would be much higher than the current market price of a router and this legislation would open the possibility of lawsuits against router makers when a router fails to log or retain the logs.

While this procedure is standard rigmarole for computer- and technology-savvy Americans, including information technology professionals, it is a difficult and potentially costly one for those who are not so inclined.

A single power outage or accidental or natural disaster could put someone in a position where they have violated federal law, as they acted as an electronic communication and remote computing service provider and did not retain records as federal law requires.

This is, of course, assuming that the federal agents responsible for enforcing this legislation do in fact police it. Instead, this new data retention requirement will go largely unnoticed, unacknowledged, and unenforced. It will become a law used to convict the ignorant, the careless, and the negligent instead convicting those actually responsible for exploiting children.

I can assume that one or more of you has a wireless router in your home. This law would apply to you, as well. You would need to ensure that your wireless router logs all addresses which it assigns, and you would need to ensure that your logs are retained for at least two years. If for some reason something happened and those logs were lost, you would be guilty of violating federal law.

Moreover, the identifying information contained within these logs is easily fabricated and even easier to masquerade. Two of the three major operating systems can masquerade the most commonly used unique network hardware identifier — a MAC address — with a simple command. A trivial program does the trick for the third. Such a simple fact would easily dismiss a MAC address as evidence in a court test of this entire law, not just the section against which I am campaigning.

I understand that these bills have probably been referred to committees for further exploration. I urge you to exercise extreme caution if this bill comes up for vote alone or as a part of a larger piece of legislation. I urge you to see Section 5 stricken in its entirety on the grounds that it is unenforceable and overbroad.

Thank you for your attention to this matter. If you wish to discuss these or other technology-related bills, my phone is always handy and I’m always willing to share my knowledge.

Colin Dean
Volant, PA

CC: Senator Casey, Senator Specter, Congressman Altmire

Blog reader note: Slashdot links to an excellent summary by C|Net’s Declan McCullaugh entitled Bill proposes ISPs, Wi-Fi keep logs for police.

American tax dollars to be used to bail out Bear Stearns

Apparently, federal money is going to be used to bail out Bear Stearns. This ludicrous government charity of a corporation is unconstitutional and a misuse of taxpayer money.

Here’s the letter I sent to PA Senator Robert Casey, Jr., a member of the Senate Banking committee:

Dear Senator Casey,

I heard recently that a decision will be made shortly in the Senate Banking committee whether or not to bail out Bear Stearns, the bank which is facing bankruptcy amid a bout of poor choices and rampant speculation in the mortgage market. The figure required could be as much as $100 per American.

While I am aware that JPMorgan recently merged with a part of Bear Stearns, and was able to reduce its required amount by a billion dollars. This is not enough.

I urge you to vote against this if the money is coming from a federal source. Congress has no right of charity, even corporate charity.

Bear Stearns is bankrupt for a reason: poor decisions. I fail to see how the American taxpayer should pay for a single corporation to stay afloat when it has made poor decisions. There are other methods by which Bear Stearns could come out of its bankruptcy, methods which do not require the involvement of American tax dollars.

Post the Constitution Day pretty much a failure

Perhaps I placed too much faith in the Internet community. Perhaps I placed too much faith in people, hoping that they would read a document that takes no longer than 15 minutes to read—time well-spent, considering most people probably posted ye olde “tl;dr” or some other remark, or simply deleted the post, as the folks on the xkcd forums did. I guess I have a little more clout at Notebook Forums and StrafeRight.

Maybe I’m simply losing faith in America. People would rather spend 15 minutes watching five stupid YouTube videos than read—perhaps for the first time—the document that gives them the rights they so enjoy. No, I didn’t come to this realization now. I’ve known this for years. Post the Constitution Day could pretty much be considered a test of that.

Maybe I didn’t reach the audience I thought would care. I managed 12 diggs, a purple rating on Slashdot Firehose, and a single vote on Newsvine (my vote).

The US election system has become a farce. The media picks the two people who vie for president, because the media is entangled in government.

The only candidate worthy of my vote is Ron Paul. He is the only candidate—from either party—who has repeatedly stated that he promises to follow the Constitution. No other candidate has made such a promise.

That is, unless one considers an oath of office for congress to be a promise. McCain violated that promise Feb. 12 when he voted in favor of S. 2248, the FISA Amendment Act of 2008 (I wrote a letter yesterday to Senators Specter and Casey regarding it). Neither Clinton nor Obama voted, and Huckabee is not a senator (nor is Ron Paul). I can guarantee that, if present, Paul will vote against it when it comes to the House.

I already pointed out that the Democrat candidates didn’t reference the Constitution at all during a debate. McCain regularly violates the Constitution (look at his voting record!). At least Huckabee wants to amend the Constitution in order to push his evangelical agenda.

Maybe I’ll just march on Washington.