UK Employers May Read Employees' Mail 233
Martin Spamer writes: "The BBC reports that today the UK introduces Controversial new regulations (RIP)
giving employers sweeping powers to monitor their workers' e-mails and Internet activity. Campaigners say the rules, under the new
Regulation of Investigatory Powers Act, are an assault on personal privacy." I guess I just don't see it. If I was gonna bad mouth my boss, I'd use my domain as the e-mail address, and PGP crypt the message. It's not so simple when you're using, say, a corporate laptop on your couch at home on a Saturday night tho.This bill was passed a while ago - but this is the day it takes effect.
Just encrypt e-mail with a proprietary algorithm.. (Score:2)
Luckily for me... (Score:1)
Hot off the press (well nearly) (Score:1)
Actually, it came into force yesterday.
Re:Just encrypt e-mail with a proprietary algorith (Score:1)
sounds like a good one
I don't understand (Score:2)
How is this an assault on PERSONAL PRIVACY? You are sending mail and surfing while on company time and you whine because your employer wants to see how you are using it's resources. If this were the government monitoring it's citizens I could understand, but not a company monitoring it's employees.
Fair enough, though (Score:2)
So I think it's okay to say whatever on your own time, but it seems like an *okay* step to take in work matters, as long as such a law is never evvvvvvver passed for normal home use/personal use.
PGP? (Score:1)
You can't assume privacy in a corporate env. (Score:2)
Employee Mail (Score:3)
Given that, I've never been anywhere that just checked everyone's email. The person they check on has been doing other things that make the employer suspect something is up.
But be warned, there are plenty of applications out now that scan email for keywords whether it be naughty words or things that may be confidential to the company.
Isn't this the same as in the US? (Score:1)
However, I seem to remember the outcome of the Steve Jackson Games case was that the govt. treats e-mail just like postal mail (i.e. court order required), but since the machine that sends/stores e-mail is owned by the company, they have the right to do with the contents as they please. This allows companies to monitor e-mail.
Don't do the crime if you can't do the time. (Score:1)
My Vote's On This Doofus [mikegallay.com]
Re:I don't understand (Score:1)
//rdj
use PGP (Score:1)
"You'll die up there son, just like I did!" - Abe Simpson
What can they be sending? (Score:2)
Has anyone ever noticed it's the technopeasants who send you this stuff (as if they discovered some untapped corner of the internet).
Re:Employee Mail (Score:4)
so is the toilet.. how'd you like a camera there?
//rdj
What's wrong with this? (Score:1)
Just wait until you get home to send those personal emails or download mp3's or look at pr0n or whatever else it is you want to do. That way you'll keep your privacy AND your job.
Re:I don't understand (Score:3)
What about... (Score:3)
If I'm going to piss on anyone (Score:2)
People who trash their employers via company email.
People who trash fellow employees via company email.
Executives who say damning things about their company behaviour around a live mic or in email.
How often this sort of thing finds its way public
I'm not surprised at how many dumb people there are int he world, just disappointed.
--
Their servers, their rules (Score:2)
I personally avoid using work email for anything beyond work correspondence, and while certainly not draconian, I feel that it's a responsibility to my place of employment to minimize the use of email for personal business.
Now, if the rules extended to any email/activity from any account even outside of the company's control, then it becomes a free speech issue. (i.e. use hotmail or other web-based emails if you really want personal email at work).
What if this gets extended... (Score:1)
(Hobbesian = compliant with the social philosophy of Thomas Hobbes [i.e.: paranoia regarding the "inherent wickedness" of people and their tendency to do bad things when out of the scrutiny of authority])
Re:Luckily for me... (Score:1)
Ok, repeat after me. (Score:1)
Now keep saying that until you grok it.
SSH tunnel, anyone? (Score:1)
now if only I could find a free ssh program that supported port forwarding/tunneling for Windows...
Re:Just prepping up for the future... (Score:1)
Actually this is not the full story. (Score:1)
I do that the DP act states that employers should not subject employees to continual monitoring of their private affairs.... this includes emails, telephone calls etc - whether made using employer resources or their own.
Having said that I don't see the problem, I use my works email for *personal* use during the day, but personal use does not include bitching about my boss, distributing porn etc. If you can't be sensible then you probably will lose your job anyway.
Encryption is no protection (Score:2)
> domain as the email address, and PGP crypt the
> message.
Not enough! The RIP requires you to hand over your private keys if asked to by the Home Secretary (or some designated by him, so realistically any policeman) or face imprisonment.
Frankly it amazes me that Jack Straw can't see the contradiction between passing legislation like the Human Rights Act on one hand, and the RIP act on the other.
This is how... (Score:1)
"sex on tv is bad, you might fall off..."
Mail to my wife (Score:2)
After having started on my new job today, I'm afraid I have some bad news to tell you. The work I am doing here is very challenging which might cause me to do some real overworking. The fact that the boss is a really nice guy obviously has something to do with this. I seriously suspect him to have been a sergeant-major at least in Her Majesty's service, as the charisma and leadership of this man is unrivaled by any previous employer I have worked for. It seems as though this is the place where I belong. The job I have been looking for all this time. I must stop now, as I feel it is inappropriate to take more than 10 minutes of breaktime a day.
Sincerely yours,
me
Get a laptop and wireless (Score:1)
Her Majesty's Government doesn't get it (Score:2)
The bottom line is that HMG doesn't get I.T. At all. It's sickening really; we have Smilin' Tony telling us we want to be at the forefront of the e-revolution, and then a sickening bunch of has-beans toadying along behind coming up with crap like the R.I.P. bill and this load of old tosh.
The extent of the problem was highlighted on the BBC Breakfast news when the self-styled e-minister Patricia Hewitt said that although yes, the Government was allowing employer snooping, it was only for "reasonable" uses. To paraphrase the good lady "Employers shouldn't pry. We trust them not to go looking at messages that are private". e-minister *blech*. Bet she wouldn't know a website from a kick in the teeth, let alone exactly what barrel of worms she's just opened. "reasonable use only".... nice. Let's see someone get a legal definition of that one; it'd be like nailing jelly to the wall.
What's worse is that Her Majesty's Opposition is just as technically inept, if not more so. I don't mind so much the boneheadedness (hey; I'd make a crap politician so why should they make good geeks?), but I am fed up to the back teeth with smiling baby-kissers telling me all about how great the technology is and how they know *just* how it needs regulating.... Oh, and then hold 1 week unannounced "review" periods for public consultation, then trumpet their spawns-of-satan legislation as "widely approved of by industry and public".
The thought of actually going out and *asking* people what legislation they need (other than the police, of course, who have predictable knee-jerk reactions hence RIP), and *listening* to them instead of patronisingly telling them what they want could never occur to this bunch of rabid style-over-substance image-is-everything inept sheep. I mean... not towing the party line? showing evidence of independent thought? not being "On-message"? Heaven forbid.
TOh dear did I really type that load of tripe? Ah well, it's off my chest now. Just scroll down a bit will you? There is nothing to see here. I'm going to go and lie down with a cold towel and maybe lay off the coffee for a bit.
hushmail.com for secure web based email (Score:1)
Re:PGP? (Score:1)
Steve
Re:I don't understand (Score:1)
I'm amazed they couldn't already do it. (Score:1)
While annoying, it doesn't seem completely unreasonable. One should hope that nobody could stay in business investing the kind of resources to meaningfully monitor everybody's every move.
At the same time, one would like to think that employees who threaten others, conspire to steal, etc. could be monitored and apprehended.
Privacy in the US and Email (Score:1)
Re:Just encrypt e-mail with a proprietary algorith (Score:2)
Content-Type: exttay/yptocray; arsetchay="us-ascii"
Hi Sue. How's work today. Mine's a real itchbay, so I'm idinghay down at Jim's office, and just kind of uckigfay off instead of trying to fight the ullshitbay that it takes to get anything done around here. My new boss is a a real oronmay, and I'm "this close" to telling him to isskay my ass. I'm going to brush up on my resume tonight, and get the hell out of this itholeshay.
How 'bout an afternoon quickie? I was going to eaksnay out early today anyway.
Re:What about... (Score:3)
Re:Just encrypt e-mail with a proprietary algorith (Score:3)
Irrellevant. It's UK. The RIP bill actually specifies that taking measures to intervene with decryption for monitoring purposes is a crime. If you are asked for your keys you must hand them off.
Re:Luckily for me... (Score:2)
Taco's solution (Score:2)
Except if they were monitoring corporate traffic. Then it wouldn't matter whose domain you were using.
Encryption? Just use traffic analysis ("Hmm... it appears Rob is sending email through his own domain, instead of the company's domain. Why?")
Re:Just encrypt e-mail with a proprietary algorith (Score:2)
> How 'bout an afternoon quickie? I was going to eaksnay out early today anyway.
Well, my usbandhay, whom you refer to as your oronicmay ossbay, is taking the afternoon off, so we can't oitday here this time. How 'bout if I just come to the office, and we'll give the old oomclosetbray a try?
Re:PGP? (Score:2)
You do not walk out of the door. If you do, they can sue you for misconduct and than you should give the key to the police which will lawfully request it as a part of the investigation. If you refuse to do so it is 2 years in jail.
That is what RIP is all about.
Clockwork Orange and 1984 all the way.
Here's what *I* don't get (Score:2)
(Don't bother bringing up "porn == sexual harassment" because that is orthogonal to tracking and mail-opening)
Now, I realize that tracking an employee's worth in actual dollar figures can be difficult, but any manager worth a damn knows if she is getting bang for the buck out of her employees. Telling an employee that he should spend his 15 minute coffee breaks in the break room reading a book as opposed to emailing his wife to complain about his cow-orkers is just micro-management.
--
An abstained vote is a vote for Bush and Gore.
Only if they know how... (Score:2)
£^(*&%%$£&*^^ - Carrier lost...
Who draws the line, and where? (Score:2)
If I receive a personal phone call from my girlfriend, is it fair they listen? Is it fair they inform my wife, if she works in the same company? Or if not? When I take a break and use the corporation toilet, is it fair they videotape everything? Run chemical tests on the urine I pass there to monitor my stress levels? To monitor drug abuse? To screen for markers of inherited diseases or tendencies? If one day they get this mind-reading machine, is it fair to read my mind to detect if I am about to leave? about to be unhappy with the company? think private thoughts on "company time"?
Re:Employee Mail (Score:2)
Heh, so if I use too much TP does that count as pilfering office supplies?
oh please oh please oh please let that one go to court....
But are they registered? (Score:2)
Unless the company is registered with the Data Protection Registrar
AND the employee specifically authorises the company to store their personal data on the monitoring computers
AND the employee specifically authorises the use of that data for monitoring purposes
AND the employee has full rights to know WHAT is stored, at ANY time
AND the employee has full rights to ammend or correct data that is stored, at ANY time
they would be breaking the law to monitor their employees e-mail. I'm not exactly keen on the idea that employers have the right to snoop on employees - whistle-blowers need protection more than corporate executives - but provided the DPA is given sharper teeth to tackle abuse, I think that this might not be such a terrible thing.
(It's only an invasion of privacy if the DPA is essentially rendered worthless for this. You always need checks and balances, and the DPA is the only check your average Joe Bloggs has, right now, to handle computer misuse by corporations.)
separate email account (Score:2)
One for personal.
What then if you read your personal account
on a work computer?
Re:I don't understand (Score:2)
Does it use their resources? Certainly, if someone was having significant amounts of personal mail (as people tend to, with e-mail) arriving at work, then I would expect employers to quietly ask the employee just what was happening.
I'm sure infact, that if employees were getting 5-10 personal letters arriving at work (I'm guessing based off my own e-mail quantities), a similar bill would probably follow shortly afterwards, for personal mail.
If you want to keep it private, don't involve work in it!
Re:Isn't this the same as in the US? (Score:2)
No. Numerous court cases have said the employer has a defacto right to intercept all communications- letters, email, telephone- that use company resources- address, time, facilities.
However, in this tight labor market it is stupid for an employer not ot be upfront about it,
because people do quit when they find out.
Re:I don't understand (Score:2)
I mean, your country and your values are being sold down the crapper to big business and you don't even seem to care. Snooping is wrong NO MATTER WHO DOES IT. If I call my Sister on the phone at work it doesn't give my employer the right to record the conversation. There are laws against recording conversations here (Canada) where the recording party is not present in the converstation. The same should apply to email. If I don't write my boss he shouldn't be able read my mail. HOWEVER, he _should_ be able to read the headers to know _where_ I am sending my mail because indeed it is a work resource and he should know if I am wasting my time. I just have a big problem when people assume that because your company owns the equipment and resources you are suddenly in 1984 where you have no rights to privacy. This is wrong.
-Shieldwolf
Re:Just prepping up for the future... (Score:3)
I fully recognize that civil rights are about government and not business, in fact that's what I'm complaining about (such a myopic view of rights in modern society), so please, no flames about the semantics!
Re:Taco's solution (Score:2)
Re:I don't understand (Score:2)
If someone is in an office, and receives an email from their doctor, giving them information about an appointment, that information should be private, as it is none of the company's business (at least in most cases).
The fact that the company owns and controls the vector that is being used to communicate the appointment is, in my opinion, irrelevant in any reasonable moral context. They may own the laptop, but they have no right to the proprietary information flowing between me and a third party. Because email leaves a trail, it is inherently less secure than paper mail - if I use a company pen to write a letter, they can't snoop on it, even if it's written on their paper, but because with email they can, they do...
A related point is that The RIP bill, as far as I understand it, means that they can do this without informing you of their intention to do it prior to the fact, so someone a little less clued up than your average Slashdot reader may be writing in the belief that it is private.
And what makes you think the library isn't snooping? Or the Cybercafe? Or your ISP? Or your telephone company?
Whichever way I look at this, I don't like it.
Cultural issue (Score:2)
We happen to exchange, say, 3 or 4 mails during the day. which is not that much.
We consider it private and would be quite pissed off if anybody decided to monitor our conversations, even though they remain "soft" because I am here at work and not prepairing tonight festivities.
I admit English accept this rule, because they're so.
But I take this story as a warning not to accept my next job in England because if I am considered as brilliant by my colleagues, I also admit I use the corporate network to coimmunicate a bit while working. It is necessary for me to swap between tasks.
I then should be considered as somebody who's working habits are shocking ?
what about my work, what I am here for ???
If this law was about to pass in a Latin country (France, Italy... even here, in Switzerland) most people would refuse it because I am far from alone in this case.
--
Re:I don't understand (Score:2)
It's the "gimme" generation (Score:4)
Why, how can you possibly not understand this. The computer is theree, therefore I'm entitled to privacy. In fact, I'm entitled to have my employer provide a computer to use for my personal matters during working hours. Not having one just isn't *fair*.
Furthermore, my employer has absolutely no right to question what I do with its property that it provides me. It's not like it has any right to control the use, nor that it amy get sued for my use of company property.
Why do they think I'm here? to do stuff for *them*???
Furthermore, I demand full privacy screens to protect me from them
monitoring me . . .
*********
Given that the employer has absolutely no obligation to allow personal use, there's no privacy issue. Personal use is only permitted on these terms. Don't like them?--demand your money back.
hawk, esq.
Re:I don't understand (Score:3)
Because RIP is not the only new legislation bearing on this matter.
It's going to take a fair bit of fighting in the courts to establish what takes precedence - this aspect of RIP, or either of...
TomV
Re:I don't understand (Score:3)
>giving them information about an appointment, that information should
>be private, as it is none of the company's business (at least in most cases).
1) then don't get it at work.
2) if it's just the time to come, and you go during office hours, it *is*
the company's business.
>The fact that the company owns and controls the vector that is being
>used to communicate the appointment is, in my opinion, irrelevant in
>any reasonable moral context. They may own the laptop, but they have no
>right to the proprietary information flowing between me and a third party.
??? And you get to decide what goes between the "do not look" veil? This
makes industrial espionage just too easy.
And again, you have no "right" to use the company's machines in this
manner anyway.
hawk, esq.
My thoughts. (Score:2)
Someone brought up the point about personal snail-mail at work. Your employer does not have the right to open your mail, so why should they open your email? Well.. here's why, although a bit abstract.
There is, due to long-standing law, as well as the fact that something is in a sealed envelope, a reasonable expectation of privacy when you send mail in the post office. (Recall, if you sendt a post card, with no envelope, there is NO expectation of privacy; anyone can legally read it.)
The internet at-large is basically a *public* network. Yes, it's 'public' in a different sense than we usually use, but the fact that you have no real contorl of where your data goes after it leaves whatever you DO control.... that makes it public. THat, coupled by the fact that you don't know the policies of every network your message will pass through. Sending unencrypted mail ils as good as sending a bloody postcard! Yes, you can be reasonably sure the whole world cant' read it, but anyone who happens upon it legally CAN (the postman, your boss, the guy in the mailroom). This equates to things like: The IT staff, your boss, etc...).
Think about it.
If your boss wanted, he could say 'I want to see ALL snailmail coming into the building. Now.. he *CAN*, I believe, do this. He cannot make you open your mail, but he can see the volume/where the stuff came from. After all, the mail was addressed TO HIS BUSINESS.
Use encryption. Seriously. Otherwise, it's like complaining about people using scanners on your cellphone calls (well, the US *DID* legislate against that, funny enough> Canada didn't.). Canada said 'well.. it's going with standard modulation over public airwaves... what did you expect? No expectation of privacy'. Of course, if it was *encrypted*, there is an expectation of privacy, and a scanner that could decrypt it may be illegal.
This takes me back to the BBS days.. (Score:2)
//MAILR is good clean fun.
Re:Their servers, their rules (Score:2)
I get the impression that many slashdot posters have never lived through a severe recession or depression, where jobs are scarce and getting a job elsewhere is not a practical option. They are going to be in for a shock when their employer unilaterally cuts their pay, and imposes new duties and rules. You don't like it? Quit. There are 100 people waiting in the HR office who would be happy to have your job.
Re:What can they be sending? (Score:2)
I think more often, the companies would use the newly enacted law to fire people who are passing off-colour jokes or sending those annoying joke exe files - espcecially if the exe files have a virus attached to them. At the very minimum, they could use it as leverage to save some money at evalution time (i.e. no raise for you).
Re:Encryption is no protection (Score:2)
However, the Human Rights Act comes from an entirely different tradition, that of continental Europe, where they don't trust the government, and with good reason, given their history. This means that the Human Rights act will probably clash will all sorts of surprising parts of British Law, and I don't think this will be a good thing
An example might be in Scotland, where traffic speed cameras may have to be removed thanks to the Human Rights Act.(the idea is that they can identify the speeding car, but not the driver, so it's stupid to prosecute the driver of a car caught speeding)
I'm not saying that I agree with the RIP bill, because it seems to abuse the most fundamental of British Traditions, that of innocence until proven guilty, but I am wary of the different directions that British Law is being pulled at the moment, on the one hand by Jack Straw and his blatantly idiotic laws (bye bye trial by jury), and on the other by the alien edicts and ethics of European law.
I think it's about time we ignored all these foreign infringments, and realised that British Law should be dealt with within it's own traditions as it always has.
Re:Employee Mail (Score:3)
Good employers know how to treat their workers. It's up to the employee to choose a company that treats him/her right - particularly in this tight job market.
So what? (Score:2)
I myself keep job inquiries in my inbox, just as a warning to any snoopers: mess with me, and I can walk in a heartbeat.
What too many people seem to forget though is the imbalance of power in this situation. Your email is suspectible to snooping by upper managment, but how many of you have the oppurtinity to snoop on their personal doings at work? And before all your submissive lap-dogs whine about "it's not your job to know what they're doing", remember that a great many wokers in the tech sector are stockholders in the companies for which they work. I have just as much desire to see the company succeed as the suit with the inflated salary, and I have a right to know that he isn't wasting my money.
But alas, that's the corporate republic for you. It's feudalism, not democracy.
--
Re:It's been like this in the US forever (Score:2)
Where all the modern fad of calling it a breach of privacy has come from, I dunno.
How much mileage is there in the view that "freedom of speech is fine, but abuse it and lose it"?
~Tim
--
Re:I don't understand (Score:5)
That's right! Nail the bastards! (Score:2)
They are using our phone system to make personal calls--so we should be allowed to listen in!
They are using our parking lot to park their cars--so we should be allowed to search them!
They are using our plumbing to take personal dumps--so we should be allowed to watch!
They are using our lighting to illuminate personal activities--so we should be allowed to monitor!
They are using our air molecules to vibrate with personal spoken messages--so we should be allowed to eavesdrop!
All of these things are "environmental". Presumably there is value to the company to provide them to all employees. If an individual employee is being unproductive, fire him. There's no need to read his mail, search his car or test him for drugs. If the mail system (or parking lot) as a whole is costing more than it provides, de-install it. There's no need to read everyone's mail or search everyone's cars.
Remember during the Olympics and how everyone squawked about how the FBI was reading the email from the kiosks? But the kiosks belong to some company or government--can't they do what they want? I'm using my ISP's bandwidth, does that mean they can cc all my mail to the FBI? No, dammit!
--
An abstained vote is a vote for Bush and Gore.
Hi, there's no protection in the USA (Score:2)
Just thought you'd like to know.
The last place I worked didn't delete ex-employees mail accounts, preferring to harvest and read what people sent them months/years after the employee left.
Re:It's the "gimme" generation (Score:2)
In the UK the employer does have an obligation to provide a phone, free from monitoring, for personal use. This is in recognition that people do need to take care of personal business in working hours.(For Americans who see any employee rights as an affront to the sacred cow of free enterprise, I have never seen a complaint from a business that this is unreasonable)
Email is becoming widespread, but many people do not have access at home, therefore use it at work. In moderation this will have minimal impact on effectiveness, but personal email may contain information that you would wish your employer not to know - that job offer, or that test for a serious disease.
Yes, you should use other methods, regardless of the legal status, but this enshrines the employers right to snoop.
Boss Profile (Score:3)
A while ago our head salesman logged on to check his shares, only to find a porno site had taken its place (temporarily). Those photos were in his cache whether he liked it or not, and our proxy logged the accesses. As it happened we were working in a small office and we all had a good laugh about it.
How would things be in a larger organisation where the monitor may be unable to see (or appreciate) the context? Would it matter if our head salesman was a junior instead?
It's becoming so complicated ! (Score:2)
If I want to say that my boss is a stupid idiot, can't I do that?
If I say that he'll kill me or that I'll kill him for the extra work he is giving me, I'm NOT saying that I or he will died. This is just a way of expressing my frustration.
Such comments are not intended to hurt the feeling of my boss. They are not even directed against my boss. They are expression (=release) of something that I had into me.
Anyway, this is a private conversation between me and someone else and should not be taken out of context.
I beleive I am the right to say what I want if I do not offend publicly someone, if I do not offend the person receiving the email.
Lawyers may say that this is not how things work, but I do not care what lawyers can say.
They should think a bit and realize that there are many more ways to hurt and insult people in a civilized and educated way! People that really want to hurt someone else would use this subtle lawyer-proof way and not a more direct one.
Talking to HR about your incompetent boss (Score:2)
In general, a private channel is often very helpful in intra-organisational disputes.
Stephen
Re:Hi, there's no protection in the USA (Score:2)
We sold our privacy rights to corporate interests and they gave us promises of shiny baubles. And now our government tries to arm-twist nations that have higher privacy rights than we do into "opening the market" and reducing their consumer and employee privacy protections.
Re:I don't understand (Score:2)
No - there's no decision to make - they never look, they have no right to (well, until yesterday I guess).
Industrial espionage 101 :
1. Get confidential documents
2. Photocopy confidential documents
3. Put photocopies in envelope
4. Send letter to competitor
5. Return originals to cupboard
This has been possible for decades. Email didn't rewrite the rules, it just happens to be a vector that *can* be controlled, therefore they pass laws taking away rights that have been taken for granted for generations.
Industrial espionage has always been easy, email didn't rewrite that rulebook.
And again, you have no "right" to use the company's machines in this manner anyway.
Even if that were true (which it isn't unless that happens to be explicit in the terms of your contract or the general terms of employment), once you have sent the message using their equipment, regardless of whether you had the right to or not, they still should not have the right to intercept and read it - they should only be allowed to discipline you for using the company equipment in an unauthorised way. Now, whether the use of the computer was permitted or not, they can still snoop - you have lost privacy in the workplace, which I think is very serious indeed.
Re:It's the "gimme" generation (Score:2)
Umm, no they don't. Kindly point to the relevant piece of legislation - what's that? You can't? I wonder why...
Re:Employee Mail (Score:2)
I guess I can't shit on my chair also.
Is this [pibmug.org] the solution, then?
____________________
Re:My thoughts. (Score:2)
Recorded music/media/whatever, the issue is all about copyright, NOT about privacy at all. They may have a sense of ownership, but that's a completely different beast.
Traditionally, laws regarding mail (and other communications, such as cellular phones) were based around whether or not the parties involved had a reasonable expectation of privacy.
ie: Conversations and eavesdropping. If I'm in the middle of a field whispering to my friend, and you use some sort of listening device to amplify my conversation so you can hear it, you would be doing an illegal act.
If I am in the middle of a field yelling at my friend, loud enough that you can hear it with your plain ears, and you use some sort of device to amplify it a bit and record it.. you are NOT breaking the law. I had no reasonable expectation of privacy if I was yelling.
Same used to be (and still is in Canada) with cellular phones. It's not whether you had an expectation of privacy, but whether you had a *reasonable* expectation of privacy. Yelling loudly and saying 'I thought nobody was around' is not reasonable. Taking steps to make yourself not heard IS reasonable'. As with cellphones.. transmitting over public airwaves in the clear (the airwaves are *all* public), even though you may be ignorant to the physics of it, does not give you a reasonable expectation of privacy (under canadian courts, anyway). You are broadcasting something that can be picked up by any capable radio receiver.
Copyright has nothing to do with privacy. The DMCA (not that I'm defending it) is about copyright. Making it illegal to break a copy protection mechanism is NOT equal to the act of violating a privacy protection mechanism, though both MAY use encryption.
Re:Their servers, their rules (Score:2)
It's NOT just work email! (repeat: NOT) (Score:2)
This bill does not specifically give UK employers more access in terms of monitoring their staffs email.
This bill gives the UK government + police services, access to monitor *ANYBODYS* email, for any reason, even if you are not under suspicion of having committed a crime. It's not even email either - they can demand the ISP feed traffic in general their way.
If it was just work mails I wouldn't really care - it's their bandwidth, but the fact is that the RIP bill is in fact there purely to give the authorities unprecedented power to intercept the communications of the general populace, to demand their decryption keys (or face prison), and other such lovely fluffy things. It's big brother, approved by a government with no clue whatsoever.
If anyone offers me a job in the US, I'll move..
Encryption is no protection from RIP (Score:2)
>mouth my boss, I'd use my domain as the e-mail
>address, and PGP crypt the message.
PGP encrypting it would do you no good, RIP gives the government powers to demand that you hand over your encryption key(s). And if you don't comply, or you've lost the key, or something? 2 years in the slammer.
There's an interesting article about RIP and what people can do to avoid it at http://www.fipr.org/rip/RIPcountermeasures.htm
encryption fails for screen-dump interception (Score:2)
Re:NSA everywhere (Score:2)
Send some plain test mail with certain kinds of threats in them and you'll be hearing from somebody. This trivial to do in the current internet.
Re:I don't understand (Score:2)
Personally? I start work at 8:30 am, finish well after 7pm, five days a week (weekends optional). No-one (with the possible exclusion of you, it seems) honestly believes you can cut that big a chunk out of your life, totally excluding any personal business, especially if you are married with children. Excessive personal time during working hours is usually frowned upon, but arranging doctor's appointments, being contacted by your offspring's school and/or arranging your weekend's entertainments is usually accepted as a small overhead for being in business. Employers may well expect such things to take second place to working practices, and in particular outgoing calls should be in breaks rather than while on duty, but it *should* be deeply suspect if an employer decided to pass over an employee for promotion, based on the twice she has phoned her doctor to arrange a pregnancy test.....
--
Re:I don't understand (Score:2)
Consider this... (Score:2)
HACKING Parliment now Legal? (Score:2)
Re:I don't understand (Score:2)
LK
Your body wastes don't affect the business... (Score:2)
Re:Uh... shells, people. (Score:2)
In most circumstances, your privacy will be safe due to the ineptitude of your cow-orkers. Even if your network administrator is an uber-geek, just find out what he uses to secure his email.
Re:Employee Mail (Score:2)
Re:I don't understand (Score:2)
Re:Consider this... (Score:2)
>you[r] boss to plant hidden microphoens [sic.]
>and cameras in your office?
Actually, a law would need to be passed forbidding this. It is legal today. Consider
the convenience store with the hidden microphone
and camera? How is that workplace different from
"your office?" How would you, as a lawmaker, word
the bill to make a hidden camera legal in one
workplace but not another?
Re:Cultural issue (Score:2)
I want to have the right to contest such practices.
--
Hmmm. (Score:2)
Every account on the LAN had a blank password, which we were not allowed to change. The purpose of this was to allow the boss access to any email account when he pleased. Security on the network just didn't exist.
What was really annoying was that this was an isolated office network. Email access to the outside world was via a separate PC, situated next to the boss. If we needed to access a web-sire or news for support work purposes we had to do it from home.
Whilst I worked there one collegue had some personal mail delivered c/o the office, as he didn't have a permament address in the area. The boss opened this private mail and read it. I should have walked out then - I was already pissed off by the fact that I'd been standing outside in the rain for 45 minutes, waiting for the boss to turn up to open the place.
I only worked there for 2 days (I'd have not come back from lunch on the second day if I hadn't left some possessions in my desk). It was the work place I'd ever worked at.
Re:I don't understand (Score:2)
There's no entitlement to use the company computer. THe simple solution for the company is "absolutely no personal use," at whcih point there is absolutely no objection available to the company reading anything on there.
The next step from here is the company offering limited yuse with conditions. If you don't like those conditions, don't take that limited use.
*nothing* in here suggested that companies could read email on personal accounts, or tap personal phones.
This is really about the company being able to control its assets.
Re:Employee Mail (Score:2)
Re:It's been like this in the US forever (Score:2)
> thinking that people can do whatever they want
> whenever they want and misusing company
> equipment or embezzling time are not
> considerations.
Agreed. I think "freedom of speech" needs to be justified rather than pulled out of the hat every time something goes slightly wrong.
People will want entertainment. Entertainment is not hacking. Entertainment is a zero-quality plain waste of time, IMNSHO.
~Tim
--