Electronic Frontier Foundation celebrates 25 years of defending online privacy

09 chief privacy officer
Credit: CSO staff

While cops and firefighters are often ready to retire after 25 years on the job protecting citizens, this privacy watchdog organization has a full agenda for the future as it celebrates its 25th anniversary today

The Electronic Frontier Foundation is the digital world's top watchdog when it comes to privacy and free expression.

But while cops and firefighters are often ready to retire after 25 years on the job, protecting citizens, the EFF has a full agenda as it celebrates its 25th anniversary today.

The EFF was founded in 1990, when the Web still had just one webpage. Its first major case was one in which the U.S. Secret Service, hunting a stolen document, raided a company's computers, computers that were also used to run an online bulletin board, and read and deleted those users' messages.

The company, Steve Jackson Games, and some of the users of that bulletin board, thought that the government overstepped its warrant.

The situation inspired former Lotus president Mitch Kapor, Sun Microsystems employee John Gilmore and John Perry Barlow, cattle rancher and Greatful Dead lyricist to form the EFF and represent Steve Jackson Games and their users against the U.S. Secret Service.

In 1993, in a landmark judgment, the courts ruled that law enforcement authorities can't seize electronic mail without a specific warrant.

It was just a warm-up.

In 1995, EFF took on the case of Daniel Bernstein, a math grad student at Berkeley, who wanted to publish an encryption algorithm he developed.

Back then, encryption was considered a national secret, regulated the same way as military weapons.

In order to publish his algorithm, the law at the time required Bernstein to register as an arms dealer and apply for an export license.

In 1999, the courts ruled in his favor, deciding that computer code was, in fact, constitutionally-protected speech.

cindy cohn Wikipedia

Cindy Cohn

One of the lawyers on that landmark case was Cindy Cohn, who is now the executive director of the EFF.

And times have changed.

"There are now more people working on making security tools easier and more widespread than ever before," she said. "In the non-profit sector, and in the for-profit sector, whether you're looking at the enterprise level or the individual level, we're seeing more security development and smarter security development now than in the entire 25 years that the EFF has existed."

Cybersecurity experts are applauding the EFF for its work.

"By advocating for privacy rights, and combating invasive legislation, the EFF has bolstered the security of enterprises’ most valuable resource -- its employees," said Kunal Rupani, principal product manager at security firm Accellion.

Kunal Rupani, principal product manager at security firm Accellion

The EFF is also protecting the privacy rights of companies, as well, said Paul Henry, security consultant at Blancco Technology Group.

"When the EFF is behind you, businesses have a fighting chance to protect their assets," he said, pointing to the EFF's recent reaction to the way the authorities shut down the Megaupload file sharing site and prevented legitimate users from being able to get their files back. "That's pretty brave and fearless."

In that case, the EFF argued that customers of cloud computing services shouldn't lose property rights to their data by simply hosting their data with an outside provider.

+ ALSO ON CSO: EFF Inspects Encryption Tool for Adium, Pidgin IM Clients +

"It speaks perfectly to how enterprise businesses benefit from the EFF’s activities," Henry said. "I respect them tremendously."

"I -- and Malwarebytes -- are very pleased to see groups like the EFF standing up to protect the digital privacy rights and overall freedom of individuals in cyberspace," said Josh Cannell, a security expert at Malwarebytes.

And it's not just on the legal front that the organization has made a difference, he said. They've also worked on technology infrastructure projects.

"The EFF has also launched projects like Sovereign Keys that help protect and improve the usage and implementation of encryption protocols," he said.

The EFF has also been a big supporter of the Pretty Good Privacy encryption software and the Fido alliance for stronger and simpler authentication, said Phillip Dunkelberger, CEO at Nok Nok Labs. He was a co-founder and CEO at PGP Corp.

"Many of the things that they have suggested are now considered best practices globally," he said.

Some privacy advocates hope to see the EFF expand its mission.

"Over the past 25 years the EFF has been very active in lobbying against governments violating privacy rights," said John Pescatore, director of emerging trends at SANS Institute. "But it has been mostly silent about similar abuses by search engines, advertisers, and e-commerce companies."

He said he'd like to see the EFF take on more battles against corporate privacy abusers, as well.

"But all in all they have been a positive force in fighting imbalances of power in the digital world," he said.

And the EFF has had some impact on the way corporations view customer privacy, said Matt Cullina, CEO at IDT 911, LLC.

"The EFF acts as an industry watchdog holding those who haven’t implemented robust privacy practices, accountable, making a clear line in the sand of those that do data privacy right from those that do it wrong," he said.

A never-ending battle

Meanwhile, some battles are never really over.

For example, right now, the EFF is fighting a plan by the Bureau of Industry and Security, an agency within the U.S. Department of Commerce, to impose wide-ranging export restrictions on software used for penetration testing, network monitoring, and other security purposes.

Meanwhile, law enforcement officials are making the rounds at conferences and Senate hearings, asking for some mechanism that would allow them to look at encrypted communications and files.

"The battle is not over," Cohn said. "It's an ongoing thing. It'll never be completely over. New technologies always gives us new challenges."

For example, the EFF is now working on helping create and deploy technologies that will expand and improve the use of encryption on the web.

1 2 Page 1
Insider: These ransomware situations can result in colossal outcomes
View Comments
Join the discussion
Be the first to comment on this article. Our Commenting Policies