tech

  • Surveillance for corporate profit

    Automatic Number Plate Recognition (ANPR) surveillance seems to be on the rise since your ‘umble scribe first reported on its use by B&NES for access control to the council’s rubbish tips recycling centres some years ago.

    It’s now being used by parking management companies to catch drivers who overstay their welcome in private car parks, as shown by the example below spotted in central Bristol today outside the snappily named Double Tree by Hilton hotel on Redcliffe Way.

    Sign warning of use of ANPR to control car park use
    Somebody’s watching you…
    The hotel car park in question is ‘managed’ by Smart Parking, whose website boasts the company is ‘Reinventing the Parking Experience’. The manner in which Smart Parking is ‘reinventing’ parking (minus the experience. Ed.) can best be described by your correspondent as ‘Orwellian‘.

    The adjective Orwellian is no exaggeration if one peruses the company’s marketing brochure to glean how ANPR is used. It states:

    Smart Parking’s automatic number plate recognition (ANPR) / license plate recognition (LPR) parking system is a simple, efficient and cost-effective way of off-street car park management.
    Cameras placed at entry and exit points take a timed photo of the number plate of each vehicle entering and exiting the premises. Customers then simply pay and walk, using their license place as identification. We can also configure sites to have validated parking which can include permit only, staff only, free limited time parking and definable grace periods, to name a few.
    As with our other solutions, SmartANPR/LPR work with the SmartCloud platform to deliver occupancy, stay rates and enforcement efficiency reporting for car park management and future planning.

    Note the American English usage of license.

    Of course, for any users who outstay their welcome, the company wants to make a profit with its penalty charges (note to any passing journalists, despite your constantly referring to these charges in your copy as ‘fines‘, they are in fact invoices; only the judicial authorities can impose fines. 😀 Ed.) and so needs to obtain details of the vehicle’s keeper from the DVLA. The DVLA is more than willing to divulge this information for a fee, as confirmed by the answer to a Freedom of Information Act request from 2012.

    The law allows the DVLA to disclose vehicle keeper information to those who can demonstrate a reasonable cause for requiring it. Reasonable cause is not defined in legislation but the Government’s policy is that it should relate to the vehicle or its use, following incidents where there may be liability on the part of the driver.

    The DVLA also charges a fee for the disclosure of this information, as the response further clarifies:

    The fees levied by the DVLA for Fee Paying Enquiries are set to recover the costs of processing requests and ensure that the cost is borne by the requester and not passed onto the taxpayer.

    Even so, the agency has fallen foul of the Information Commissioner’s Office for “not using the correct lawful basis to disclose vehicle keeper information“, as The Guardian reported a few months ago.

    Your correspondent feels an urge to submit another FoI request for the DVLA to enquire about the amount of money received by the agency for this service, but has more than a suspicion such a request would be refused on the grounds of commercial confidentiality.

  • LibreOffice 7.4 released

    The release was announced today of LibreOffice 7.4 Community, the latest version of the free and open source office suite. It is available immediately for download for Linux, MacOS (Apple Silicon and Intel processors) and Windows.

    LibreOffice 7.4 banner

    The new release comes packed with many new features and improvements.

    GENERAL
    • Support for WebP images and EMZ/WMZ files
    • Help pages for the ScriptForge scripting library
    • Search field for the Extension Manager
    • Performance and compatibility improvements
    Writer (Word processor)
    • Better change tracking in the footnote area
    • Edited lists show original numbers in change tracking
    • New typographic settings for hyphenation
    Calc (spreadsheets)
    • Support for 16,384 columns in spreadsheets
    • Extra functions in drop-down AutoSum widget
    • New menu item to search for sheet names
    Impress (Presentations)
    • New support for document themes

    The new features are summarised in the following video.

    LibreOffice 7.4 provides a large number of improvements and new features targeted at users sharing documents with MS Office or migrating from MS Office: such users should check regularly for new LibreOffice releases since the development progress is so fast, that each new version offers dramatic improvements compared with its predecessor.

    LibreOffice provides the highest level of compatibility within the office suite market segment, with native support for the OpenDocument Format (ODF) – beating proprietary formats for security and robustness – to superior support for MS Office files, to filters for a large number of legacy document formats, thus returning ownership and control to users.

    LibreOffice for Business

    For business deployments, TDF strongly recommends approaching the LibreOffice Enterprise family of applications from its partners – for desktop, mobile and cloud – with a large number of dedicated value-added features and other benefits such as SLAs; see the dedicated business page for details.

  • Happy 25th birthday, GNOME

    GNOME's 25th anniversary banner

    Yesterday the GNOME Foundation announced the happy news that the project had reached the venerable age of 25 years old, with special thanks to its founders, Miguel de Icaza and Federico Mena Quintero, plus its contributors and supporters over the last quarter of a century.

    As is fairly common within the technology world, the GNOME name is an acronym for GNU Network Object Model Environment.

    In its lifetime,GNOME has the default desktop environment of many major Linux distributions, including Debian, Endless OS, Fedora Linux, Red Hat Enterprise Linux, SUSE Linux Enterprise, Ubuntu and Tails; it is also fulfils the same role for Solaris, a Unix operating system.

    GNOME42 desktop environment

    What began as a two-person project has certainly grown and flourished over the years, attracting support from not only volunteers but major players in the free and open source world such as Red Hat. Furthermore, there’s a new, special commemorative website to visit too: https://happybirthdaygnome.org/.

    Many happy returns!

  • DuckDuckGo blocks Microsoft trackers

    French IT news site Le Monde Informatique reports that DuckDuckGo has decided to block Microsoft’s trackers in its mobile browser applications and browser plug-ins in an effort to extend its approach to privacy protection. It had already been criticised at the start of the year on the matter.

    Screenshot of DuckDuckGo search engine

    Protecting internet users from tracking and protecting their anonymity is not simple. DuckDuckGo is part of this move and was very upset to find out that as part of its agreement with the Bing search engine, Microsoft had given the green light for user tracking. This is no longer the case since from that date onwards DuckDuckGo’s CEO, Gabriel Weinberg, has stated that blocking the loading of scripts on websites by the browser was extended to Microsoft’s scripts in DuckDuckGo browser applications for iOS and Android and browser extensions (Chrome, Firefox, Safari, Edge and Opera) and that beta applications will follow next month.

    DuckDuckGo is attempting to block tracking scripts from search engines and sites such as Facebook, as well as other types of tracking scripts or software. It uses what it calls third-party tracking loading protection to prevent these third-party scripts or cookies from being loaded into the browser. If they did, they could track movements on the web and build a profile of the user, their preferences, etc. If other browsers and browser plug-ins also enable users to protect their privacy, DuckDuckGo has made privacy its priority.

    Delayed neutralising

    Mr Weinburg’s decision was taken after the discovery at the start of the year by security researcher Zach Edwards that DuckDuckGo was blocking trackers from Google and Facebook, but was allowing some of Microsoft’s trackers via Linkedin and Bing. The discovery was then reported by BleepingComputer. “Previously, we were limited in how we could apply our third-party tracker download protection to Microsoft tracking scripts due to policy requirements related to our use of Bing as the source of our private search results,” Weinberg explained, adding that, “We’re glad that’s no longer the case. We didn’t have and don’t have similar restrictions with any other company.”

    DuckDuckGo still has an advertising relationship with Microsoft, which it will maintain. Clicking through on advertisements on DuckDuckGo is anonymous and Microsoft has undertaken not to profile DuckDuckGo users. If Microsoft continues to save the user’s link, it will not associate them with a profile. On an updated support page, DuckDuckGo has provided a summary of everything which its its browser authorises and does not authorise, as well as providing details of web tracking protection.

  • Fedora Project wants to ban CC0 licence for software

    The CC0 Creative Commons licence exempts work form copyright claims, but does not exclude patent claims; and this presents a problem for free and open source software, as German IT news site heise reports.

    Fedora logoThe Fedora Project would like to remove the Creative Commons Zero (CC0) licence from the list of permitted software licences, as Richard Fontata from the Fedora Legal Documentation Team wrote in a post to the Fedora mailing list. The reason for the change is that the Fedora Project has agreed that software under a licence which does not exclude patent claims cannot be regarded as free and open source software (FOSS).

    Public Domain logoThe Creative Commons Zero (CC0 1.0) licence is the most liberal Creative Commons licence. It places works in the public domain, with the copyright holder waiving all copyright and related rights worldwide insofar as this is legally possible. However, the patent or trade mark rights of any party are specifically not affected by CC0, so it is thus possible to place works subject to patent rights under CC0.

    Patents against open source

    In the 2000s various companies, including Microsoft, have attempted to asset patent claims against Linux and open source software. The Open Invention Network (OIN), whose members mutually waive all patent claims against one another, came into existence as a response to these moves.

    Furthermore, in the open source world, there is the risk that companies could release code which is protected by that company’s own patents. If other developers use this code, they are unwittingly exposed to the risk of patent lawsuits. There is therefore widespread agreement in the FOSS world that open source licences must explicitly exclude the possibility of patent claims by the author*.

    In its permitted licences list the Fedora Project distinguishes between licences for software, content, documentation and fonts. CC0, which was previously listed as a permitted licence for software and content, will in future only be allowed for content. According to Fontana, it still has to be clarified whether any program packages will be affected by this change.

    *= for intellectual property purposes software is regarded as a work of literature.

  • Dorries goes to war – again and again and…

    In the beginning was World War One (1914-18), then World War 2 (1939-45).

    There have been various conflicts since 1945, but none has qualified being counted as a World War (note capitalisation) and their number has remained stuck firmly on two.

    Until today.

    Step forward one Nadine Vanessa Dorries, inexplicably elevated way beyond her subterranean ignorance threshold to serve as Secretary of State for Digital, Culture, Media and Sport, concerning whose appointment former Tory Party chairman Chris Patten is on record as saying: “And nobody should ever see the words ‘Nadine Dorries’ and ‘culture secretary’ in the same sentence”.

    Following yesterday’s humiliating by-election defeats in Tiverton & Honiton and Wakefield, Nadine fearlessly took to social media as cheerleader in chief for the Cult of the Boris, tweeting the following.

    Tweet reads This gov will remain relentlessly focused and continue to deliver for people during a post pandemic mid-war, global cost of living challenge which no Prime Minister or gov has faced the likes of since WW11

    World War 11?

    That’s nine more than are acknowledged by the generally accepted historical record.

    Whether Nadine was tweeting under the influence of digital dyslexia, innumeracy or something psychoactive has yet to come to light, but remember that part of Nadine’s brief is matters digital and the above tweet shows she cannot even use a mobile phone app – an iPhone Twitter client – competently, which bodes ill for this country.

  • Good riddance, Internet Explorer

    Internet Explorer logoTwo days ago (and not before time. Ed.) Microsoft ended support for Internet Explorer (IE) 11, the final version release of its web browser first introduced in 1994.

    Over the years, Microsoft has been steering Windows users away from IE and towards Edge, its newer browser which is based upon the free and open source Chromium browser.

    However, for those that still use sites and or pages that exploit the standards-ignoring qualities of IE, Edge does have an IE compatibility mode.

    IE’s inability to adhere to standards had in the past created lots of extra work for web developers who had to code work-arounds for IE just to get their pages to work in what was then the world’s most popular browser. It was the world’s largest browser mainly due to Microsoft bundling IE with its Windows operating system and integrating it deeply into the structure of the OS. This led to lots of angry comments in the code of webpages and style sheets, frequently employing intemperate language.

    Media – and social media – reactions to and reports of the news have been mixed. Business Matters on the BBC World Service got all misty-eyed and nostalgic earlier in the week. However, my favourite response to date is from the Twitter user known as beConjuror, drawing attention to the ‘not responding‘ feature of many of Microsoft’s fine products.

    Tweet reads Internet Explorer is NOT responding
  • Prying Google is not your friend

    The Irish Council for Civil Liberties (ICCL) is pointing its finger at Google for spying on users, French IT news website Le Monde Informatique reports. A real-time bidding (RTB) system which is actively used by the company enables it to follow and share what everyone is looking at or doing online and note down this activity’s location. RTB is the technology underpinning all online advertising and it relies on sharing of personal information without user consent, according to the ICCL.

    Google’s troubles are far from over. Widely singled out for its actions in terms of the use of personal data, the company is now in the spotlight for its tracking and advertising targeting activity. A report (PDF) published by the ICCL on 16 May accuses the search giant of an unprecedented data breach. The report sheds light on the RTB system, which works in the background on websites and in applications. “It tracks what you are looking at, no matter how private or sensitive, and it records where you go. Every day it broadcasts this data about you to a host of companies continuously, enabling them to profile you,” the report states.

    The ICCL report claims it presents the scale of this data breach for the first time.

    This data breach takes place throughout the world. The RTB system “tracks and shares what users are viewing online with their location in real time 294 bn. times in the USA and 197 bn. times in Europe each day”, it states. On average a person in the USA has their online activity and location tracked 747 times a day by those using RTB. In Europe, RTB exposes personal data 376 times a day. In Germany alone, Google sends 19.6 million broadcasts about German Internet users’ online behaviour every minute that they are online. “Europeans and U.S. Internet users’ private data is sent to firms across the globe, including to Russia and China, without any means of controlling what is then done with the data”. It is a high-earning business generating more than $117 bn. in the USA and Europe in 2021.

    Maps of Europe and USA showing billions of daily Google RTB broadcasts

    Advertising is an indispensable condition of this system as the majority of advertising on websites and in applications is placed there using RTB. Advertisers spend $100 bn. annually in the USA and Europe. The RTB market’s estimated value was $91 bn. in the USA in 2021 and €23 bn. in Europe in 2019. It therefore highlights that Americans’ online activity and their locations is exposed 57% more frequently than that of users in Europe.

    Google is one of the five largest users of this real-time bidding system. No fewer than 4,698 US companies are authorised by Google to receive RTB data on people, whilst in Europe the number drops to 1,058 companies. More specifically, the data collected by Google, like what people are looking at online or doing with an application and their ‘hyperlocal‘ geographical location is broadcast 42 bn. times per day in Europe and 31 bn. times daily in the USA.

    The ICCL is working to end the RTB data breach in Europe and has litigation ongoing in three European courts, as follows:

  • More Bristol borkage

    Yesterday’s trip into Bristol’s Quarter of Mammon (aka the city’s central shopping district consisting of the dire post-war Broadmead centre, Galleries and Carboot Cabot Circus. Ed.) yielded another example of borked technology to add to the collection begun last week on my visit to the City Museum & Art Gallery (posts passim).

    Corporate graffiti, better known as advertising is all-pervasive and intrusive, but there’s no way I’d stand on my heads in the rain to read this bullshit. 😀

    advertisement displayed upside-down in Carboot Circdus
  • Research reveals websites collecting information without consent

    online spying imageToday’s Journal du Geek reports that some unscrupulous websites do not clutter up their webpages with a Submit button when visitors are filling in a form.

    If you have already filled in a web form before changing your mind, your data has doubtless been sucked up by an unscrupulous website. In a recent study carried out by researchers from 3 European universities, which will be presented at the Usenix Security conference in August, we learn that some platforms are capable of spying on every character typed on a keyboard.

    By analysing 2.8 mn. webpages on the world’s 100,000 most visited websites, the research’s assessment is definitive: in the case of a web form filled completed in Europe, nearly 2,000 of them are capable of collecting the user’s email address before that user has clicked the Send button. One of the joint authors Güne Acar of Radboud University in Nijmegen states: “We were very surprised by the results. We thought we might find a few hundred sites where your email address is collected before you send it, but the result far exceeded our expectations”.

    However, the situation in Europe remains better than that in the United States. Whereas the old continent recorded “only” 1844 cases of abusive data sucking, the same request, when sent from the United States triggered 60% more instances, for a total of 2,950 cases, a difference which can be explained in particular by the presence in Europe of the GDPR , which since 2018 has obliged platforms to obtain users’ consent before collecting data..

    How do websites record one’s data without consent?

    For all practical purposes the majority of sites collecting data before submission forwards email addresses (encrypted or unencrypted) to third party sites are generally specialist advertising campanies, which collected the data to serve up personalised advertising (aka corporate graffiti. Ed.). In some less frequent instances a key logger is used to enable the keystrokes made to be directly recorded.

    In Europe, the matter is even more sensitive since a good number of major sites, including Facebook owners Meta and TikTok were amongst the sites tested.

Posts navigation