From Blackberry to Android

Just posted on slaw.ca:

A few months ago, I left my Blackberry in favour of an Android device and I thought I'd share my experience for any lawyers out there who have been drooling over the many devices that have been hitting the market in the past while and may be wondering about making the switch.

I've had my Samsung Galaxy S Vibrant on the Bell Canada network for a few months now and I have to say that I adore it. It's my first Android device and I switched from a Blackberry Bold that was on the Rogers network.

I'm the only person at my firm, other than some IT guys who pilot different devices from time to time, who is not using a Blackberry. One of the conditions of getting it was that I would be "self supporting," which is not a big problem for a geek like me. But the degree of self-support hasn't been that high, though it's difficult to say where the supporting ends and the tinkering/tweaking starts.

In order to get the OK to hook the device up to the firm's network, the device had to use a password/PIN to login, had to securely link to our infrastructure via SSL (at least) and I had to be able to be remotely wiped if I lost it. Check, check and check.

For me, the most important considerations was that it had to work with my firm's existing Microsoft-exchange based e-mail infrastructure. I didn't wan to have to use a Blackberry for e-mail/calendar and my Android for everything else. That was a bit of a challenge, but easily overcome.

I installed Android 2.2 Froyo, which has better exchange support. It wasn't perfect, though. The device came with two different e-mail applications, the stock one and one that's part of Samsung's Social Hub. The stock one wasn't updating my contacts from the Exchange Server and the Social Hub one wasn't updating my calendar. So I had to have them both running to make sure all my bases were covered. And though they purported to have push functionality, mail was delayed a bit. Not by much, but I wanted instant.

So I did some looking around and found Nitrodesk's Touchdown. I installed the 30-day trial two weeks ago and within a week forked out the US$20 to get the license (the only difference between the 30-day trial and the licensed version is you can't change your signature in the trial version). The Exchange integration with Touchdown is head and shoulders above the programs that came with the device. Now, my mail is instant, my contacts are always synched and changes to my calendar are updated almost instantly.

I've also downloaded a program called Office Talk, which gives me access to my firm's Microsoft OCS instant messaging platform and presence notifications. (None of my Blackberry-toting colleagues have access to the firm's IM away from their desks.)

One of the cool features that comes stock on the Galaxy S Vibrant is the Swype keyboard. Since there's no built-in keyboard, users can choose from dozens out there. The Swype keyboard allows you to just drag your finger from letter to letter on the keyboard image, and it knows what you're typing. You don't even need to be very accurate, since it knows when you drag your finger dear the "D" to the "A", then close to "V" and back around near the "E", you're probably typing "Dave." Much easier, at least to me, than trying to poke at small keys. Another keyboard layout that's included allows for voice input that is shockingly accurate.

Once I got my messaging/calendar/contacts arrangement perfectly sorted out, my Android phone is head and shoulders above my old Blackberry. Comparing the screens and the web-browsers is not a fair fight. I can watch a full movie on it without eye strain. The web-browser is a real browser that runs flash. I can stream content without a hiccup. The Google Maps app is awesome and I use the turn-by-turn navigation regularly. (No need for an in-car GPS, particularly since the navigation app now caches mapping info so it works without a wireless signal.)

Some of my clients use Skype to connect far-flung employees, and it works great on the device (no video support yet, but it's coming). There are other really useful apps in the Android market, like Tasker which allows you to customize all of the phone's settings. I've used it to automatically set it to silent mode when when the phone is face-down in meetings. Similarly, it detects when it's in my car-dock and changes to "car mode", which can read incoming e-mails and redirects all calls to the speaker phone. It can even be programmed to change settings when you're in a particular place, like shutting off e-mail downloading when you're at home.

Another great feature for mobile lawyers is that you can turn the device into a mobile WiFi hot-spot. I've found myself in meetings where I needed a document from our document management system, but had no WiFi. Within seconds, I can turn my phone into a WiFi router so I can connect my laptop to my office network and get the document. Piece o' cake.

My kids, of course, love the games. I never had my kids ask if they could use my Blackberry, but they're constantly asking to use my phone to play Angry Birds, Doodle Jump, Fruit Ninja and Raging Thunder 2. (While I'm writing this, my eight-year-old just walked up and asked "Can I play on your phone?")

So, overall, I'd say that RIM no longer has a stranglehold on the enterprise. I could go back to a Blackberry, but I sure don't want to. The only downside is that there's so much innovation and iteration going on that I'm envious of newer Nexus S. And the just-announced Galaxy S II. And the Xoom tablet with Honeycomb.

Social media and the courts

I was honoured to speak on a panel this afternoon with Assistant Privacy Commissioner Chantal Benier and Professor Pierre Trudel at the Canadian Forum for Court Technology put on by the Canadian Centre for Court Technology. The panel was on the topic of the Ethical Implications of Technology. My presentation focused on social media and the courts.

For anyone who may be interested but wasn't there, here is my presentation:

Next generation in CCTV

The New York Times has an interesting piece on developments in CCTV technology. The Digital Window D7 uses a number of compact cameras to piece together a full 180 degree panorama without any distortion. This means that a small camera installation can have a very wide field of view, capturing more than you might think. See "On the Lookout, With a Digital Security Camera".

British Engineers' Report on Privacy and Surveillance

The British Royal Academy of Engineers has published a very interesting report on privacy and technology: Dilemmas of Privacy and Surveillance. It is important that those that design technology have an appreciation of the privacy impact of that technology and this report is an encouraging step in that direction.

1. Executive Summary

This study identifies likely developments in information technology in the near future, considers their impact on the citizen, and makes recommendations on how to optimize their benefits to society. The report focuses on an area where the developments in IT have had a particularly significant impact in our everyday lives - the use of IT in surveillance, data-capture, and identity management. It looks at the threats that these technologies may pose and at the role engineering can play in avoiding and managing these risks. The following is a summary of the central concepts and issues that the report investigates and the judgments the report makes about them.

Technological development: Technologies for the collection, storage, transmission and processing of data are developing rapidly. These technological developments promise many benefits: improved means of storing and analysing medical records and health data could lead to improvements in medical care and in management of public health; electronic logging of journey details can promise improved provision of public transport and more logical pricing for road use; and more details of peoples' everyday behaviour offer the possibility for developing better public policy generally.

However, the development of these technologies also has the potential to impact significantly on privacy. How they develop is to a large extent under the control of society. They can be allowed to develop in a way that means personal data are open to the view of others - either centralised spies or local peeping toms. Or, they can be allowed to develop so that personal data are collected and stored in an organised, controlled and secure manner. There is a choice between a 'Big Brother' world where individual privacy is almost extinct and a world where the data are kept by individual organisations or services, and kept secret and secure. The development of technology should be monitored and managed so that its potential effects are understood and controlled. The possibility of failures of technologies needs to be explored thoroughly, so that failures can be prepared for and, where possible, prevented. Designing for privacy: There is a challenge to engineers to design products and services which can be enjoyed whilst their users' privacy is protected. Just as security features have been incorporated into car design, privacy protecting features should be incorporated into the design of products and services that rely on divulging personal information.

For example: means of charging road users for the journeys they make can be devised in such a way that an individuals' journeys are kept private; ID or 'rights' cards can be designed so that they can be used to verify essential information without giving away superfluous personal information or creating a detailed audit trail of individuals' behaviour; sensitive personal information stored electronically could potentially be protected from theft or misuse by using digital rights management technology. Engineering ingenuity should be exploited to explore new ways of protecting privacy.

Privacy and the law: British and European citizens have a right to privacy that is protected in law. The adequate exercise of that right depends on what is understood by 'privacy'. This notion needs clarification, in order to aid the application of the law, and to protect adequately those whose privacy is under threat. In particular, it is essential that privacy laws keep up with the technological developments which impact on the right to and the expectation of privacy, especially the development of the Internet as a networking space and a repository of personal information. The laws protecting privacy need to be clarified in order to be more effective. As well as making the letter of the law more perspicuous, the spirit must be made more powerful - the penalties for breaches of the Data Protection Act (1998) are close to trivial. The report backs calls for greater penalties for misuse of data - including custodial sentences.

Surveillance: The level of surveillance of public spaces has increased rapidly over recent years, and continues to grow. Moreover, the development of digital surveillance technology means that the nature of surveillance has changed dramatically. Digital surveillance means that there is no barrier to storing all footage indefinitely and ever-improving means of image-searching, in tandem with developments in face and gait-recognition technologies, allows footage to be searched for individual people. This will one day make it possible to 'Google spacetime', to find the location of a specified individual at some particular time and date.

Methods of surveillance need to be explored which can offer the benefits of surveillance whilst being publicly acceptable. This will involve frank discussion of the effectiveness of surveillance. There should also be investigation of the possibility of designing surveillance systems that are successful in reducing crimes whilst reducing collateral intrusion into the lives of law-abiding citizens.

Technology and trust: Trust in the government is essential to democracy. Government use of surveillance and data collection technology, as well as the greater collection and storage of personal data by government, have the potential to decrease the level of democratic trust significantly. The extent of citizens' trust in the government to procure and manage new technologies successfully can be damaged if such projects fail. Essential to generating trust is action by government to consider as wide a range of failure scenarios as possible, so that failures can be prevented where possible, and government can be prepared for them where not. There also need to be new processes and agencies to implement improvements. If a government is seen as implementing technologies wisely, then it will be considered more trustworthy.

Protecting data: Loss or theft of personal data, or significant mistakes in personal data, can have catastrophic effects on an individual. They may find themselves refused credit, refused services, the subject of suspicion, or liable for debts that they did not incur. There is a need for new thinking on how personal data is stored and processed. Trusted third parties could act as data banks, holding data securely, ensuring it is correct and passing it on only when authorised. Citizens could have their rights over the ownership, use and protection of their personal data clarified in a digital charter which would specify just how electronic personal data can be used and how it should be protected.

Equality: Personal data are frequently used to construct profiles and the results used to make judgements about individuals in terms of their creditworthiness, their value to a company and the level of customer service they should receive. Although profiling will reveal significant differences between individuals, the results of profiling should not be used for unjustifiable discrimination against individuals or groups. Profiling should also be executed with care, to avoid individuals being mistakenly classified in a certain group and thus losing rights which are legitimately theirs.

Reciprocity: Reciprocity between subject and controller is essential to ensure that data collection and surveillance technologies are used in a fair way. Reciprocity is the establishment of two-way communication and genuine dialogue, and is key to making surveillance acceptable to citizens. An essential problem with the surveillance of public spaces is that the individual citizen is in no position either to accept or reject surveillance. This heightens the sense that we may be developing a 'Big Brother' society. This should be redressed by allowing citizens access to more information about exactly when, where and why they are being watched, so that they can raise objections to surveillance if it is deemed unnecessary or excessively intrusive.

Recommendations

R1 Systems that involve the collection, checking and processing of personal information should be designed in order to diminish the risk of failure as far as reasonably practicable. Development of such systems should make the best use of engineering expertise in assessing and managing vulnerabilities and risks. Public sector organisations should take the lead in this area, as they collect and process a great deal of sensitive personal data, often on a non-voluntary basis.

R2 Many failures can be foreseen. It is essential to have procedures in place to deal with the consequences of failure in systems used to collect, store or process personal information. These should include processes for aiding and compensating individuals who are affected.

R3 Human rights law already requires that everyone should have their reasonable expectation of privacy respected and protected. Clarification of what counts as a reasonable expectation of privacy is necessary in order to protect this right and a public debate, including the legal, technical and political communities, should be encouraged in order to work towards a consensus on the definition of what is a 'reasonable expectation'. This debate should take into account the effect of an easily searchable Internet when deciding what counts as a reasonable expectation of privacy.

R4 The powers of the Information Commissioner should be extended. Significant penalties - including custodial sentences - should be imposed on individuals or organisations that misuse data. The Information Commissioner should also have the power to perform audits and to direct that audits be performed by approved auditors in order to encourage organisations to always process data in accordance with the Data Protection Act. A public debate should be held on whether the primary control should be on the collection of data, or whether it is the processing and use of data that should be controlled, with penalties for improper use.

R5 Organisations should not seek to identify the individuals with whom they have dealings if all they require is authentication of rightful access to goods or services. Systems that allow automated access to a service such as public transport should be developed to use only the minimal authenticating information necessary. When organisations do desire identification, they should be required to justify why identification, rather than authentication, is needed. In such circumstances, a minimum of identifying information should be expected.

R6 Research into the effectiveness of camera surveillance is necessary, to judge whether its potential intrusion into people's privacy is outweighed by its benefits. Effort should be put into researching ways of monitoring public spaces that minimise the impact on privacy - for example, pursuing engineering research into developing effective means of automated surveillance which ignore law-abiding activities.

R7 Information technology services should be designed to maintain privacy. Research should be pursued into the possibility of 'designing for privacy' and a concern for privacy should be encouraged amongst practising engineers and engineering teachers. Possibilities include designing methods of payment for travel and other goods and services without revealing identity and protecting electronic personal information by using similar methods to those used for protecting copyrighted electronic material.

R8 There is need for clarity on the rights and expectations that individuals have over their personal information. A digital charter outlining an individual's rights and expectations over how their data are managed, shared and protected would deliver that clarity. Access by individuals to their personal data should also be made easier; for example, by automatically providing free copies of credit reports annually. There should be debate on how personal data are protected - how it can be ensured that the data are accurate, secure and private. Companies, or other trusted, third-party organisations, could have the role of data banks - trusted guardians of personal data. Research into innovative business models for such companies should be encouraged.

R9 Commercial organisations that select their customers or vary their offers to individuals on the basis of profiling should be required, on request, to divulge to the data subjects that profiling has been used. Profiling will always be used to differentiate between customers, but unfair or excessively discriminating profiling systems should not be permitted.

R10 Data collection and use systems should be designed so that there is reciprocity between data subjects and owners of the system. This includes transparency about the kinds of data collected and the uses intended for it; and data subjects having the right to receive clear explanations and justifications for data requests. In the case of camera surveillance, there should be debate on and research into ways to allow the public some level of access to the images captured by surveillance cameras.

Thanks to DP thinker for the link.

Live in NJ? You apparently have a right to online privacy

Wired's 27B Stroke 6 is reporting on an interesting decision from New Jersey in which an appeals court has held that internet users have a right to privacy in their "ISP Address" or "screen name". While technologically incorrect, I'll leave it to others to comment on whether it's technically correct. See: WIRED Blogs: 27B Stroke 6: Jerseyites Have Right to Protect "ISP Address".

Phoenix airport rolling out backscatter x-ray tech

Interesting development:

Phoenix airport to test X-ray screening - Yahoo! News:

"PHOENIX - Sky Harbor International Airport here will test a new federal screening system that takes X-rays of passenger's bodies to detect concealed explosives and other weapons.

The technology, called backscatter, has been around for several years but has not been widely used in the U.S. as an anti-terrorism tool because of privacy concerns.

The Transportation Security Administration said it has found a way to refine the machine's images so that the normally graphic pictures can be blurred in certain areas while still being effective in detecting bombs and other threats.

The agency is expected to provide more information about the technology later this month but said one machine will be up and running at Sky Harbor's Terminal 4 by Christmas...."