Farhad Manjoo

Hacking democracy

Computerized vote-counting machines are sweeping the country. But they can be hacked -- and right now there's no way to be sure they haven't been.

  • more
    • All Share Services

Hacking democracy

During the past five months, Bev Harris has e-mailed to news organizations a series of reports that detail alarming problems in the high-tech voting machinery currently sweeping its way through American democracy. But almost no one is paying attention.

Harris is a literary publicist and writer whose investigations into the secret world of voting equipment firms have led some to call her the Erin Brockovich of elections. Harris has discovered, for example, that Diebold, the company that supplied touch-screen voting machines to Georgia during the 2002 election, made its system’s sensitive software files available on a public Internet site. She has reported on the certification process for machines coming onto the market — revealing that the software code running the equipment is seldom thoroughly reviewed and can often be changed with mysteriously installed “patches” just prior to an election. And in perhaps her most eyebrow-raising coup, she found that Sen. Chuck Hagel, a Nebraska Republican, used to run the company that built most of the machines that count votes in his state — and that he still owns a stake in the firm.

Harris hasn’t been alone in making such discoveries. A small group of writers, technologists and activists is working hard to convince elections officials all over the country that their rush to upgrade aging punch-card machines with seemingly more reliable touch-screen systems is dangerous. But so far neither the general public nor elections officials appear too worried.

It’s not hard to see why: If you look at some of the conspiracy theory rhetoric on the Web spawned by the work of Harris and others, it becomes all too easy to dismiss the whole campaign as sour grapes. There is no smoking-gun evidence to support the conclusion that Hagel’s landslide Senate victory in 2002 benefited from voter fraud. The same is true for several unexpected Republican victories in Georgia last year — during which the entire state used touch-screen machines for the first time.

But Harris herself is no conspiracy nut. Her facts check out. Nor is she an ideologue. Her stories on voting machines are based not on her politics but on serious, in-depth investigative reporting. Since October, she’s spoken to dozens of people in the voting world, from elections officials to “systems certifiers” to engineers whom she calls whistle-blowers. She’s detailed some of her findings on her Web site, but she says they aren’t the whole story — which she’ll tell in a book, “Black Box Voting,” to be published in May.

The facts Harris and others lay out ought to give many election officials pause. Touch-screen voting machines aren’t especially reliable; there are documented cases in which they have frozen, broken down and tabulated incorrectly during actual, binding elections. They’re also not immune to hacks. Though voting companies will confidently tell you about their myriad security policies, the fact is that these machines run software, and software can be tampered with: An election result could be changed without anyone being the wiser. And perhaps worst of all, the machines and the companies that make them are shrouded in secrecy. What really happens in a touch-screen machine when you select your candidate? In most cases, everything probably goes as it should — but there is no way to know for sure.

Indeed, the conspiracy theories, regardless of their validity, nevertheless highlight the main problem with electronic machines. Because they leave no paper trail — the vote count is registered only electronically in the machine — the results that the new machines deliver are open to dispute by people who have cause to be suspicious. For instance, Charlie Matulka, Hagel’s Democratic opponent in Nebraska last year, believes that he might have won the race — though the official count put him at about 15 percent of the vote.

Bev Harris doesn’t believe that anything went wrong in Nebraska, but that’s not the point. She wonders how you can prove that everything went well when what goes on inside a voting machine isn’t accessible by the public.

The same problems are in play with respect to the Georgia elections. “I don’t think that there was anything wrong, but I can’t show that there wasn’t,” says David Dill, a computer scientist at Stanford University. Dill is trying to get Santa Clara County, the home of California’s Silicon Valley, to reject electronic machines that don’t produce a paper trail. “And it always frustrates me when I read a conspiracy theory and I can’t find some way to dismiss it — it bothers me that I can’t show people that they’re full of it.”

Harris first became interested in elections last fall, when she read an article that detailed some problems with electronic voting systems — specifically that the machines store their data in a way that isn’t readily “auditable” and that they are made by companies that tend to be secretive about their processes and investors.

“Something just clicked,” Harris says of reading that article, “and in this climate of a year of corporate shenanigans, I said, ‘I’ll just do a quick search to see who controls some of these companies.’”

Harris, who runs a P.R. firm in Seattle that does work for “unknown authors that need some publicity,” had always hankered to do investigative journalism. She once publicized a book for Jack Anderson, the Pulitzer Prize-winning Washington Post reporter, and his stories of investigative reporting had intrigued her.

She began by looking into Election Systems & Software, the world’s largest election supply company, based in Omaha, Neb. Harris quickly found that ES&S was owned, in part, by a merchant banking holding company called the McCarthy Group and that the firm’s chairman, Michael McCarthy, was Chuck Hagel’s campaign treasurer. After searching news archives, Harris found that during Hagel’s first campaign, in 1996, the Nebraska media reported that he had been president of ES&S — which at the time was called American Information Systems — between 1992 and 1995. But the articles suggested that Hagel was no longer affiliated with the voting equipment company. Harris saw election records that showed Hagel still holding between $1 million and $5 million worth of stock in McCarthy, which owned about 25 percent of ES&S.

Harris had stumbled on what seemed to be a striking conflict of interest — a U.S. senator owned a share in a company that built all the vote-counting machines in his state. She put up the relevant documents on her site, “and immediately I knew I’d hit a sore spot,” she says, “because right away I got a threat letter from ES&S.”

The letter from ES&S’s attorneys demanded that Harris take down her article. “While you claim that your article is all based upon verifiable facts, even if true, which ES&S disputes, you should be aware that such ‘facts,’ or the implications therefrom, when presented in a false fashion, constitute defamation or defamation by implication as well as the privacy tort of false light,” the attorneys said.

It’s not clear what ES&S meant to convey by such a letter, but Harris didn’t take down her article. “What I would certainly do if they launched a lawsuit is, we’d have a field day with discovery,” she jokes now. ES&S did not return Salon’s phone calls for comment.

Harris thought it odd that McCarthy’s underlying assets, including the voting company, were not disclosed in Hagel’s election filings, and she tipped off the Hill, a newspaper that covers Congress. Late in January, the paper reported that Hagel’s omission might have constituted a Senate ethics “disclosure issue.”

Did Nebraskans know of Hagel’s affiliation with the voting company? Lou Ann Linehan, Hagel’s chief of staff, says that the senator has been upfront with all of his business dealings. Although he owns a share in McCarthy, and McCarthy owns a share in ES&S, Linehan says there is “absolutely no affiliation” between the senator and the voting company. Hagel’s indirect ownership of ES&S is tiny, his staff points out — he owns “less than 2 percent” of McCarthy, and McCarthy owns only about a quarter of ES&S. Linehan denied there was any ethical problem with the way Hagel disclosed his McCarthy holdings. Members of Hagel’s staff pointed to a letter to the Hill by William Canfield, a Senate ethics expert, that said that “Sen. Hagel has fully met his obligation, under the statute and the committee’s guidance, in publicly disclosing this particular investment.”

Linehan said there’s nothing irregular about a person who used to run a voting-machine firm running for office. “Maybe if you’re not from Nebraska and you’re not familiar with the whole situation” you would have questions, she says. “But does it look questionable if there’s a senator who is a farmer and now he votes on ag issues? Everybody comes from somewhere.”

Nebraska was considered a “safe state” for Republicans in 2002. Most political commentators believed Hagel’s opponents — Phil Chase, an independent, John Graziano, a Libertarian, and Charlie Matulka, the Democratic candidate — did not stand a chance. And according to the official count, Hagel trounced the opposition. He won about 400,000 votes — Matulka, in second place, won just over 70,000.

Matulka believes that Hagel’s landslide doesn’t indicate a victory but something underhanded with the vote. “Why in the world would anybody with the election company want to run for office? It’s like the fox in the henhouse — they said they didn’t do it, but they got feathers in the mouth.” Matulka can’t show any feathers, however: There appears to be not a shred of evidence to suggest that Hagel didn’t honestly win his landslide, and the only thing Matulka has going for him is his hunch.

Then again, there’s nothing to disprove what Matulka says, either. And that’s the problem.

Many of the counties in Nebraska in 2002 used optical-scan ballots, in which votes cast on a paper ballot are counted in a machine; but several big counties, constituting a large part of the Nebraska electorate, used touch-screen machines. Matulka says that the lack of paper ballots that can be counted manually makes him suspicious. “What’s so wrong with manually counting the votes?” he asks. “They’ve done away with the damn paper trail.”

Linehan sees nothing wrong with the way the vote was conducted. “Nebraska is a very special place,” she says, “and when you go to vote in Nebraska, the people at the polls know who you are. Sen. Hagel won by 83 percent of the vote, and there’s no doubt he won by an overwhelming majority. And you get poll workers there who would — if something was wrong, people would know what’s going on.”

According to elections firms and election officials, the software and hardware in voting machines is thoroughly inspected and tested before the systems are certified and put on the market for sale to county election directors. Doug Lewis, who heads the Election Center — a nonprofit management division of the National Association of State Election Directors, which handles part of the voting-machine certification process — said that “the likelihood of doing something to [a machine] without detection is very, very small.”

Lewis says that if you have “malicious code in the system” — such as a simplistic virus, perhaps, designed to change a vote cast for one candidate into one for his opponent — the code will be caught in the testing phase of the certification process: “It will not compile right. The testing itself would discover this.” Moreover, Lewis says, the testing labs simulate actual voting on each type of machine. The test, which is 163 hours long, “puts tens of thousands of votes into the system, and we know what the outcome is supposed to be.”

Lewis says that no voting system ever designed has been perfect. If it’s “created by man, it can be destroyed by man,” he says. But he believes that several rounds of testing make the machines about as good as we can get them.

Harris finds that hard to believe. In the course of her research, she’s uncovered what she says is evidence to suggest that the testing phase of the certification process is flawed. One person she holds up as an example is Dan Spillane, an engineer who worked on the software at a company that made electronic voting machines. Spillane says that national testing labs “are very much like Arthur Andersen in the Enron case”: They don’t do a very good job. The company Spillane worked for — he prefers not to have the name published — would pass systems “with problems that we knew about internally, problems with severity level 1, the highest” on to the testing labs, and the labs would certify the equipment. (Spillane was fired from the company, and he says he plans to sue the firm for wrongful termination.)

Lewis’ claim that malicious software “won’t compile” is also suspect. Malicious software abounds on computers; on every platform, in every application, from Microsoft Word to e-mail, are bad bits of code. There’s no technical reason why one renegade coder at a voting company couldn’t slip some pro-Republican or pro-Democratic code into his firm’s systems. Computer scientists fear that malicious code can be written so as to evade detection during the testing process, going live only on Election Day.

And for each security procedure that a company might put in place to defeat such efforts, hackers will come up with more sophisticated methods to get around them, says Stanford’s David Dill. Recently, worried about the possibility that paperless electronic voting machines will become the national standard, Dill decided to see what others in his field — people who know about computers and the limits of their security — could do to let election officials know of the danger.

“Almost any computer scientist I would walk up to would agree with me,” says Dill. So he put up a statement of his beliefs regarding electronic voting, and he invited other computer scientists to sign on to it. The statement reads:

“Computerized voting equipment is inherently subject to programming error, equipment malfunction, and malicious tampering. It is therefore crucial that voting equipment provide a voter-verifiable audit trail, by which we mean a permanent record of each vote that can be checked for accuracy by the voter before the vote is submitted, and is difficult or impossible to alter after it has been checked. Many of the electronic voting machines being purchased do not satisfy this requirement. Voting machines should not be purchased or used unless they provide a voter-verifiable audit trail; when such machines are already in use, they should be replaced or modified to provide a voter-verifiable audit trail. Providing a voter-verifiable audit trail should be one of the essential requirements for certification of new voting systems.”

The response to Dill’s petition was remarkable. In a few weeks, he’d garnered more than 100 signatories, including some of the biggest names in computer security.

Dill recently learned that Santa Clara County is considering purchasing electronic machines that don’t print out an audit trail, and he’s become an outspoken local advocate against them. He says he’s somewhat surprised that election officials haven’t taken his and other technologists’ concerns more seriously. “I must admit to a certain amount of frustration showing up at these county meetings and hearing that everyone’s getting their information from the vendor,” he says. “And basically I think that once you get out into the real world, nobody knows who these computer scientists are.”

Still, Dill says, his group does “seem to be changing the equation” in Santa Clara, and he thinks that if the county goes the way he’d like — forcing voting firms to put an audit trail into the machine — other parts of the country may be more inclined to follow.

Harris has also been popularizing Dill’s cause, because she fears that if paperless electronic machines aren’t stopped, dire consequences will follow. I asked Harris if she wonders whether she could be too late — whether there’s already been an election in which an electronic machine has produced the wrong result.

“I have worries about Georgia,” Harris said. In 2002, the entire state of Georgia used touch-screen machines provided by Diebold. Harris has found an FTP site run by Diebold that allowed anyone with access to the Internet to peruse what might have been important software files concerning the machines used in the state. It’s unclear what files were on that site, but Harris wonders whether the programs, which could have been tampered with, were actually loaded onto the voting machines. More recently, Harris found that in an effort to fix a problem that was causing 5 percent of the machines in Georgia to freeze up, Diebold administered a software “patch” to all 22,000 machines in the state shortly before the November election. The patch — which changes the code on the machine — was certified “by phone,” according to a Georgia election official quoted by Harris.

Joseph Richardson, a spokesman for Diebold, denied that a patch had been applied to the Georgia machines: “We have analyzed that situation and have no indication of that happening at all.” In regard to the FTP site, he said, “Our review of this matter indicates there is no merit to the insinuations of security breaches in the Diebold Election Systems solutions. The old Global Election Systems site has been taken down because it contained old, out-of-date material. For 144 years, Diebold has been synonymous with security, and we take security very seriously in all of our products and services.” (Georgia elections officials did not respond to phone calls for comment.)

Republicans enjoyed great success in Georgia last year. Defying pre-race polls, voters chose Sonny Perdue, the state’s first Republican governor in 135 years, and, for the Senate, the Republican Saxby Chambliss over the incumbent Democrat Max Cleland. After the race, many pundits wondered what had caused the GOP sweep: Was it the president’s nonstop campaigning? Had the Democrats dropped the ball on homeland security?

There’s every reason to believe that an explanation can be found among those conventional theories. The problem with the widespread use of electronic voting machines, though, is that there’s nothing to stop people from thinking that something else, something altogether baser than pure politics, got in the way.

The thinking man’s action hero

Using paper clips, chewing gum, chocolate and down-home ingenuity, MacGyver always saved the day. Let's bring him back -- and give him a girl!

  • more
    • All Share Services

The thinking man's action hero

It isn’t necessary to explain how, in the pilot episode of “MacGyver,” our mulleted, Midwestern hero gets himself trapped inside a top-secret research bunker overflowing with sulfuric acid. Suffice it to say, he needs to find a way out, and probably soon (because government agents are fixing to fire a missile at the bunker to prevent the acid from spilling into a nearby aquifer). Plus, he has to save the people he has found inside (among them a gun-wielding climate scientist who wants destroy the bunker in an effort to set back research into an ozone-layer-ruining weapon of mass destruction). Fortunately, MacGyver has a few chocolate bars, a scrap of sodium metal, a cold capsule, a pair of binoculars and cigarettes.

He uses the chocolate to plug up the leaking tank of acid — sulfuric acid reacts with sugar to form a kind of glue. The sodium, scraped into the shell of the cold capsule and splashed into a sealed bottle of water, makes for a handy time-delay bomb, which proves useful for blowing through a wall that blocks the group’s escape. The smoke from the cigarettes illuminates the bunker’s laser-beam security system that he has to get through to move through the bunker (no secret underground research lab is complete without lasers); MacGyver uses the binocular lens to aim the laser at its own control unit, shutting down the security system.

But how does he get out of the bunker? Oh, that’s the easy part: MacGyver finds a switch that controls the lights in an above-ground control tower. He flashes the lights on and off to send an SOS message in Morse code. The guys in the tower, realizing Mac’s in the bunker, alive, call off the missile — and for the first of 139 times during the show’s seven-year run from 1985 to 1992, MacGyver saves the day.

This first episode is nearly perfect. It neatly telegraphs MacGyver’s soul: A laid-back fellow oozing can-do heartland ingenuity, MacGyver is handsome but dorky, charming but self-effacing, a friend to orphans and children with disabilities, tolerant of people from foreign lands, and though he has every opportunity for indiscretion, he’s always a gentleman around women. MacGyver, played by the affable Richard Dean Anderson, works as a secret agent for a vaguely defined defense contractor whose intentions are always of the best sort. His gigs are of the usual action-hero variety — find stolen missiles, escape assassins, rescue civilians, humiliate dictators. But his near chastity, along with his staunch opposition to guns and capacity to solve every problem through the judicious application of chemistry and physics, sets him apart from other action stars. MacGyver is the thinking man’s hero.

Though, actually, when you go back to watch his adventures two decades after they first aired, you discover Mac’s target audience probably consisted mainly of boys, not men. I started watching the 139-episode DVD boxed set a few weeks ago, shortly after gadget blogs gleefully reported that Lee David Zlotoff, the series’ creator, said he was thinking of making a “MacGyver” movie. This jogged in me memories of boyhood, especially of how, after watching each MacGyver trick, I’d feel a bit invincible: I was small, but I was clever. Like MacGyver, I could take them.

But to adult eyes “MacGyver” is often too goofy by half. It’s not just that his tricks are improbable. At times — like when he interprets a deaf friend’s dreams to find clues to an impending missile theft — they seem to violate the show’s premise, that science beats brawn. In these instances, MacGyver doesn’t use science; he uses magic.

Then there are the children he befriends and the liberal orthodoxies he defends — tendencies that bump the show’s preachiness dial. Mac’s always popping up in foreign countries — Afghanistan, Myanmar — and running into kids and peasants who are oppressed by unsmiling overlords. In just about every second episode, he’s teaching kids about the dangers of guns, a position that, we learn in one episode, he came to as a boy, when a friend of his was killed by a gun. The antigun thing is a little specious, though: MacGyver’s got nothing but nothing but love for explosives, painful booby traps, fire extinguishers rigged up as projectiles, and enormous boulders that he sets up to fall on villains. The real reason he doesn’t use guns is obvious — he’d be able to shoot his way out of most traps, and that would be too easy.

I don’t mean to get down on “MacGyver.” There’s something in its flaws worthy of re-viewing, a particular moment in America preserved on TV. MacGyver is meant to exemplify a certain noble strain of American power. He doesn’t take the easy way out, and when in a jam, he uses what he finds around him to ingenious effect. If you strain you see a greater American story here too — that his ingenuity is frequently too good to be true, and leads to pat, uncomplicated endings that call for no greater reflection.

There’s also something striking about “MacGyver’s” moment in TV. Watch this show as a yardstick to measure how far we’ve come. Even the simplest dramas today — I’m looking at you, “CSI” — are complex and multilayered next to “MacGyver,” which underlines and explains everything, gums up all dialogue with exposition and introduces new, throwaway characters in each episode. There’s much hand-holding here: Even in foreign countries, everyone speaks English, every villain is one-dimensionally evil, and every tender moment is helped along by a swelling score.

But that’s why I hope someone makes a “MacGyver” movie. Mac needs a makeover. Lift him up to big-budget action standards — give him a story line that can span a couple of hours; give him a girl to love, but who may also cross him; give him a more complex mission (maybe to find out who’s putting all the salmonella in our salads?); and give the whole package fast, Paul Greengrass-style editing. Also, make sure one of his crazy solutions involves Mentos — people online go crazy for tricks with Mentos. Do all that and we might yet have a lasting American hero.

* * * * *

Read more of Salon’s Re-Viewed, offering a fresh look at great TV shows available on DVD.

Continue Reading Close

Goodbye to Machinist

Yo, I'm out.

  • more
    • All Share Services

Goodbye to Machinist

Today much of the tech world is sad that the iPhone 3G’s launch is going so miserably. But I’m sad that it’s my last day at Salon.

I’ve accepted a job at Slate, where, starting next week, I’ll be writing a twice-weekly technology column. Machinist will go on a break for a week, after which a guest blogger will bring you the latest tech dish.

I joined Salon in 2002, and since then I’ve written about, among other things, Smart Cars, robotic vacuum cleaners, muffin toasters, voting machines, architecture and 9/11, Tower Seven, Bill Clinton, Terri Schiavo, Florida’s elections, “The Wisdom of Crowds,” Malcolm Gladwell, Linux, Daniel Levitin, the copyright industries, Lawrence Lessig, The New York Times, Martha Stewart, a mnemonic to remember the Solar System’s planets, Google, garlic, stem cells, Comcast, Apple, Speedo, taxes, Social Security, Antonin Scalia, Barack Obama, the robots’ plan to take over the Earth, Howard Stern, Stringer Bell, Current TV, campaign finance reform, MoveOn, Howard Dean, Nintendo, Total Information Awareness, Java, Alice Waters, “The West Wing,” Robert F. Kennedy, Jr., the Washington Post, Judy Miller, and Hurricane Katrina.

I’m pretty sure there’s no other news outlet on the planet which would have given me such latitude, and I thank everyone here at Salon for that. I also want to thank all the readers who’ve read my work, not to mention praised me, hounded me, kept me up late at night swearing at the screen. Don’t ever change.

Continue Reading Close

“True Enough” at Google, and in San Francisco

A YouTubey presentation of my book.

  • more
    • All Share Services

As I mentioned in the comments yesterday, I’m getting ready to depart this space; I’ll have a fuller explanation tomorrow, sometime before or after I get in line to buy the new iPhone.

In the meantime, I thought I’d add a note about one of the more fun events related to my book’s release — the opportunity I had, in May, to speak at Google’s headquarters in Mountain View.

It was thrilling not only for the splendor of the place — even their commodes are computerized — and the welcoming attitude of my hosts at the Authors@ program (the company buys your books and hands them out to employees for free), but also because Googlers seemed to intuitively grasp my argument and posed many penetrating questions.

Google records these things and posts them up on YouTube, so if you’re looking for something to watch while eating a sandwich at your desk, have at it:

Another thing on the book: I’ll be reading and signing at Book Passage in the San Francisco Ferry Building next week — 6 p.m. on Thursday, July 17.

If you’d like to talk about facts, rumors, conspiracy theories, and spin in the digital age, do stop by.

Continue Reading Close

The iPhone 3G reviews are in: It’s pretty good

But battery life suffers, and the GPS isn't as great as you hoped.

  • more
    • All Share Services

Walt Mossberg (WSJ), David Pogue (NYT) and Edward Baig (USA Today) have been using the new iPhone 3G for a couple of weeks now, and today they all dish on their experiences.

They were all fans of the first model, and they’re pretty happy about the new model’s new features. The reviewers say the phone’s 3G network access leads to a much zippier Internet experience, that its audio quality has been dramatically improved, and that it cozies up to Microsoft’s corporate e-mail system.

But there are some drawbacks, too: Mossberg finds the battery life lacking, and Pogue says that that the phone’s GPS antenna is too puny to be of much use.

Here’s Mossberg on the battery life:

More important, in daily use, I found the battery indicator on the new 3G model slipping below 20 percent by early afternoon or midafternoon on some days, and it entirely ran out of juice on one day. I overcame this problem by learning to use Wi-Fi instead of 3G whenever possible, turning down the screen brightness and even turning off 3G altogether, which the phone permits.

The iPhone 3G’s battery life is comparable to, or better than, that of some other 3G competitors. But they have replaceable batteries. The iPhone doesn’t.

And Pogue on GPS:

Unfortunately, there’s not much you can do with the G.P.S. According to Apple, the iPhone’s G.P.S. antenna is much too small to emulate the turn-by-turn navigation of a G.P.S. unit for a vehicle, for example.

Instead, all it can do at this point is track your position as you drive along, representing you as a blue dot sliding along the roads of the map. Even then, the metal of a car or the buildings of Manhattan are often enough to block the iPhone’s view of the sky, leaving it just as confused as you are.

None of the reviewers were provided with applications that third-party developers are creating for the iPhone (these will go on sale at Apple’s online App Store). Mossberg, though, writes that he tried out some of these apps on an older phone, and was pleased with the results:

I tested a game that used the phone’s motion sensors to control the action, and I tested several programs from America Online (TWX), including AOL Instant Messenger; AOL Radio, which streams music from the Internet; and AOL’s Truveo video search engine. All worked very well.

These apps will also work on old iPhones as well as on the iPod Touch.

The iPhone 3G goes on sale Friday at 8 a.m. But some enterprising folks have gotten a hold of them already — check out the Boy Genius Report blog’s unboxing photos.

I talked about how to get an iPhone in my video for Current TV this week:

Continue Reading Close

Scary! YouTube ordered to hand your viewing history to Viacom

But there's a silver lining to one of the most bone-headed legal decisions in recent times.

  • more
    • All Share Services

Update: This post has been updated with comments from Viacom.

In the fall of 1987, a freelance reporter named Michael Dolan learned that judge Robert Bork kept an account at Potomac Video, a D.C. rental shop. This was at the height of the contentious and ultimately failed Senate confirmation hearings for Bork’s nomination to the Supreme Court — so naturally, Dolan thought there was a story here, and he went to work on getting a peek at Bork’s video rental history.

It wasn’t hard work. Dolan popped into Potomac Video one afternoon and asked if he could look at Bork’s movie file. “There sure are a lot of them,” the assistant manager replied. “Is it OK if I make a Xerox copy?”

That was OK with Dolan; weeks later, he published Bork’s rental history in the D.C. alt-weekly the Washington City Paper.

Bork’s taste in movies was itself unremarkable (“First off, despite what all you pervs were hoping, there’s not an X in the bunch, and hardly an R,” Dolan wrote). But the publication sparked outrage from groups on the right and the left — including the ACLU and People for the American Way, which had vehemently opposed Bork’s nomination.

In 1988, Congress, spurred by the fear that the press might now easily unearth all politicians’ movie habits, passed the Video Privacy Protection Act, which remains one of the strongest privacy laws in the nation. The law prohibits stores from disclosing video histories unless ordered to do so by a court — and even then, customers must be given “the opportunity to appear and contest the claim” of any party seeking to learn what you watched.

I tell you all this as a historical wind-up to yesterday’s shocking news: In the ongoing copyright battle between Viacom and Google, a judge ordered Google’s subsidiary YouTube to hand over an enormous trove of data identifying who watched what and when on the video-sharing site.

Viacom’s lawyers argued that they needed this data to prove that “infringing” videos — e.g., clips of “The Daily Show” and “The Colbert Report” — were more popular than non-infringing user-generated videos. Presumably, if it proves this, Viacom might prevail in its argument that YouTube’s bread-and-butter was illegal videos, and thus owes some of its success — and billions of dollars — to media companies.

The database in question is astonishingly broad: Viacom asked for 12 terabytes of logs (approximately 12,000 GB) that detail each instance in which someone pressed Play on a YouTube video, plus the YouTube username of the viewer who watched it, the date and time at which the user pressed Play, and the IP address of the viewer’s computer. The database covers videos seen both on YouTube as well as those embedded on other pages: If you’ve never visited YouTube but have clicked on a YouTube video from your daily newspaper’s Web site, you’re in the database.

Google objected to Viacom’s request on the grounds that producing the database would be expensive, time-consuming, and would invade YouTube users’ privacy. The judge — Louis Stanton of the Southern District of New York — Judge Stanton dismissed all Google’s arguments. The company’s “privacy concerns are speculative,” he wrote. (PDF here.)

Such pat reasoning should give you a general sense of the depth of bone-headedness in Stanton’s ruling. As Kurt Opsahl of the Electronic Frontier Foundation points out, the Robert Bork-inspired Video Privacy Protection Act applies not just to video cassettes but to “audio visual material” in general. Clearly it should apply here, and clearly, millions of YouTube users ought to have been given a chance to fight this invasion of our privacy.

But the real villain here isn’t Judge Stanton — it’s Viacom. I’ve previously raked the company over the coals for suing, rather than enjoying the fruits of, YouTube’s success (for instance last year, when it sacrificed potentially millions in ad dollars by pulling down the popular MTV clip of Britney Spears’ poor performance at the Video Music Awards).

But now Viacom’s sinking lower: Not content to fight just Google, the company looks to be manning the deck against us all. Sure, Judge Stanton might call this “speculative,” but think on it a bit: If Viacom’s willing to take on Google, what qualms will it have in suing you or me, recording industry-style, now that it knows what we did on YouTube? (Update: Viacom says it can’t use this data to sue you.)

All’s not lost. Google might manage to reverse this decision on appeal, and Viacom, gauging the outrage, could decide to withdraw or limit its request.

But our real hope here is legislative or regulatory action. Indeed, optimistic sorts might see a silver lining here.

As privacy scholar Jeffrey Rosen has written, “The politics of privacy tends to be largely reactive, fired by heartstring-tugging anecdotes that capture the public imagination.” Just as the airing of Robert Bork’s video history was the kick-start Congress needed to fix a clear privacy hole born out of then-new technology, this ruling might backfire on copyright holders, pushing lawmakers, finally, to curb the privacy-invading reach of copyright fights.

What we watch on YouTube is every bit as personal as what one rents from a store like Potomac Video. Indeed, it might be more private, and more salacious — imagine the fun you’d have if you were looking for unsavory data about a future Supreme Court nominee in 12 terabytes of YouTube logs!

In his floor speech in favor of the Video Privacy Protection Act, Vermont Sen. Pat Leahy argued that new database technologies capable of tracking private behavior called for new privacy regulations. That was two decades ago — and it remains true, still.

——

Update: A representative for Viacom e-mailed me to say that I’m overreacting. “We have no ability (and absolutely no desire) to use this data to sue end-users,” he argued, pointing out that all discovery documents in the case are bound by this confidentiality agreement.

Under this agreement, no one at Viacom will get to see these YouTube logs — only Viacom’s outside lawyers and experts, as well as court personnel, will have access to the data. The agreement also restricts the data to this case alone, which would seem to prevent the company from using the logs to sue users individually.

Michael Fricklas, Viacom’s counsel, told the New York Times, “I can unequivocally state that we will not use any of this information to enforce rights against end users.” He added that the company is looking into ways to “anonymize” the logs “to enhance the security of information that will be produced.”

Continue Reading Close

Page 1 of 143 in Farhad Manjoo