史諾登事件十週年,我們仍在找尋隱私與安全之平衡點

活動背景

史諾登在2013年公開大批美國國安局機密文件,揭露美國政府長期廣泛監控他國及本國政治領袖乃至平民百姓,引發全球關注。他所揭露的文件產生了巨大且持久的影響力,不只是讓全球重新檢視全面監控和資料隱私間的關係,也加速了加密技術的使用。

在網際網路生態系統中,技術社群因史諾登事件開始強化並推動各種加密協定。網際網路工程任務組(IETF)於2014年發布RFC7258,主張「侵入是監控是一種攻擊」。Let’s Encrypt在2015開始發放免費憑證,鼓勵網站採用加密協定。以此為始,各種保護DNS訊務、網路瀏覽紀錄、電子郵件內容隱私的加密技術快速進展,「保護個人隱私」,至少以技術而言,成為對基本網路服務的基本期待。

然而,保護個人隱私的努力從來不缺乏反制力量。除了「監控資本主義」的商業力量,國家政府始終以保護人民安全為名,主張檢視加密內容的權力。即將正式成為法律的英國線上安全法案(Online Safety Bill)要求科技公司,包括社群媒體平臺及端對端加密通訊軟體,監控掃描自家平臺以即時發現並向執法單位通報兒少性虐待內容。另一方面,歐盟也正在考慮制訂類似法案。

誠如最近一篇回顧史諾登事件後10年的IETF 草稿所言,即使是人權也可能互相衝突,保護了一種就只能犧牲另一種。如何在法制、市場、網路集中化等各種壓力下,仍維持隱私與安全之間的平衡,是需要齊聚政府、企業、公民社會和技術社群等利害關係方討論的經典議題。

時間及地點

時間:2023年09月20日(三) , 14:00-16:00

地點:IEAT國際會議中心11樓第一會議室/Webex會議室
****本活動採實體與線上同步進行****

議程

14:00-14:05  活動介紹
14:05-15:45  焦點座談

  • 主持人-熊誦梅 合夥律師(德勤商務法律事務所)
  • 與談人-
    • 李欣穎 執行長 (開放文化基金會)
    • 林昕璇 助理教授(國立成功大學政治學系)
    • 紀博文 副教授(臺灣師範大學資訊工程學系 )
    • 黃禎慶 股長(內政部警政署 刑事警察局科技研發科 )
      (依姓名筆劃順序排列)

15:45-16:00  現場問答

Ten Years After Snowden Revelations: Are we still Looking for Balancing Privacy and Security?

Background

In 2013, Edward Snowden publicly released a vast trove of classified documents from the United States National Security Agency (NSA). These documents exposed long-standing extensive surveillance activities conducted by the U.S. government, encompassing foreign and domestic political leaders, as well as ordinary citizens. This revelation sparked global attention and had a profound and enduring impact. It not only prompted a reevaluation of the relationship between mass surveillance and data privacy worldwide but also accelerated the adoption of encryption technologies.

Within the internet ecosystem, the tech community began to strengthen and promote various encryption protocols following the Snowden revelations. In 2014, the Internet Engineering Task Force (IETF) published RFC 7258, advocating that “intrusion is a form of attack.” Let’s Encrypt began issuing free certificates in 2015, encouraging websites to adopt encryption protocols. Since then, various encryption technologies aimed at safeguarding DNS traffic, internet browsing history, and email content privacy have rapidly advanced. “Protecting individual privacy” has become, at least from a technical perspective, a fundamental expectation for basic internet services.

However, efforts to protect individual privacy have consistently encountered opposing forces. In addition to the influence of “surveillance capitalism” in the business world, national governments have consistently claimed the authority to inspect encrypted content under the pretext of safeguarding national security. The forthcoming Online Safety Bill in the United Kingdom, which is set to become law, requires tech companies, including social media platforms and end-to-end encrypted communication software, to monitor and scan their platforms for immediate detection and reporting of child sexual abuse content to law enforcement. Similarly, the European Union is also contemplating similar legislation.

As stated in a recent IETF draft reflecting on the ten-year anniversary of the Snowden event, even human rights can sometimes conflict, necessitating a trade-off between one right in favor of another. How to maintain a balance between privacy and security amidst various pressures, including legal, market, and internet centralization pressures, is a classic topic that demands engagement and discussion among stakeholders such as governments, businesses, civil society, and the tech community.

Time & Venue

Time: 2023/09/20   02:00-04:00PM

Venue: IEAT International Conference Center Meeting 11F Room 1 (No. 350, Songjiang Road, Zhongshan District, Taipei City)

Agenda

14:00-14:05  Introduce
14:05-15:45  Panel Discussion

  • Moderator
    – Sung-Mei Hsiung, Attorney, Deloitte Legal
  • Panelists:
    -Singing Li, CEO, Open Culture Foundation
    -Hsin-Hsuan Lin, Assistant Professor, The Department of Political Science of National Cheng Kung University
    -Po-Wen Chi,  Associate Professor, Department of Computer Science and Information Engineering, National Taiwan Normal University
    -Chen-Ching Huang, Sub-Division Chief, Technology Crime Prevention Center, Criminal Investigation Bureau

15:45-16:00  Q&A