|
<HTML> <head><TITLE>PRIVACY Forum Archive Document - (priv.09.23) </TITLE></head> <body bgcolor="#ffffff" text="#000000" link="#0000ff" vlink="#660099" alink="#ff0000"> <table border=0 cellpadding=0 cellspacing=0 width=100%> <tr> <td width=15%> <center> <table border=0 cellspacing=0 cellpadding=0 width=100%> <tr> <td> <table border=1 cellspacing=0 cellpadding=0> <tr> <td bgcolor="#ffffcc"> <center> <font face="Arial, Helvetica, sans-serif"> <a href="http://www.pfir.org"><b>PFIR</b></a> <b>Perspective</b> </font> </center> </td> </tr> <tr> <td bgcolor="#ccffff"> <img src="/ipissues1.jpg" border=0> <center> <font size=-1 face="Arial, Helvetica, sans-serif"> <b>"CRIME or FAIR USE?"</b> </font> </center> <table border=0 cellspacing=0 cellpadding=2 width=100%> <tr> <td bgcolor="#ffffff"> <table border=1 width=100%> <tr> <td> <table border=0 cellpadding=0 cellspacing=0 width=100%> <tr> <td> <a href="/pfir-p.ram"><img src="/spkr1.gif" border=0></a> </td> <td> <center> <font size=-1> <a href="/pfir-p.ram">Listen<br>RealAudio</a> </font> </center> </td> </tr> </table> </td> <td> <table border=0 cellpadding=1 cellspacing=0 width=100%> <tr> <td> <a href="/pfir-p.mp3"><img src="/spkr1.gif" border=0></a> </td> <td> <center> <font size=-1> <a href="/pfir-p.mp3">Listen<br>MP3</a> </font> </center> </td> </tr> </table> </td> </tr> </table> </td> </tr> </table> </td> </tr> </table> </td> </tr> </table> </center> </td> <td align=center> <table border=1 cellpadding=0 cellspacing=0> <tr> <td bgcolor="#ffffcc"> <table border=0 cellpadding=0 cellspacing=4> <tr> <td> <center> <font face="Arial, Helvetica, sans-serif"> "<a href="/reality">REALITY RESET</a>" </font> </td> <td> <table border=1 cellpadding=1 cellspacing=2 width=100%> <tr> <td bgcolor="#ffffff"> Today: <a href="/reality/2001-03-27">"Spraying the TV Screen"</a> </td> </tr> </table> </center> </td> </tr> </table> </td> </tr> </table> <p> <font size=+2><b>PRIVACY Forum Archive Document</b></font> <A href="/privacy"><h3>PRIVACY Forum Home Page</h3></A> <font size=-1 face="Arial, Helvetica, sans-serif"> <A href="http://www.pfir.org"><b>PFIR - "People For Internet Responsibility" Home Page</b></A> </font> <p> <font size=-1 face="Arial, Helvetica, sans-serif"> <A href="http://www.vortex.com"><b>Vortex Technology Home Page</b></A> </font> <p> <font size=-1 face="Arial, Helvetica, sans-serif"> <A href="/privmedia"><b>Radio, Television, and Press Contact Information</b></A> </font> <p> </td> </tr> </table> <hr> <PRE> PRIVACY Forum Digest Friday, 3 November 2000 Volume 09 : Issue 23 (<A HREF="http://www.vortex.com/privacy/priv.09.23">http://www.vortex.com/privacy/priv.09.23</A>) Moderated by Lauren Weinstein (<A HREF="mailto:lauren@vortex.com">lauren@vortex.com</A>) Vortex Technology, Woodland Hills, CA, U.S.A. <A HREF="http://www.vortex.com">http://www.vortex.com</A> ===== PRIVACY FORUM ===== ------------------------------------------------------------------- The PRIVACY Forum is supported in part by the ACM (Association for Computing Machinery) Committee on Computers and Public Policy, Cable & Wireless USA, Cisco Systems, Inc., and Telos Systems. - - - These organizations do not operate or control the PRIVACY Forum in any manner, and their support does not imply agreement on their part with nor responsibility for any materials posted on or related to the PRIVACY Forum. ------------------------------------------------------------------- CONTENTS Texas Government Web Site Reveals Voters' Home Addresses and More (Lauren Weinstein; PRIVACY Forum Moderator) *** Please include a RELEVANT "Subject:" line on all submissions! *** *** Submissions without them may be ignored! *** ----------------------------------------------------------------------------- The Internet PRIVACY Forum is a moderated digest for the discussion and analysis of issues relating to the general topic of privacy (both personal and collective) in the "information age" of the 1990's and beyond. The moderator will choose submissions for inclusion based on their relevance and content. Submissions will not be routinely acknowledged. All submissions should be addressed to "<A HREF="mailto:privacy@vortex.com">privacy@vortex.com</A>" and must have RELEVANT "Subject:" lines; submissions without appropriate and relevant "Subject:" lines may be ignored. Excessive "signatures" on submissions are subject to editing. Subscriptions are via an automatic list server system; for subscription information, please send a message consisting of the word "help" (quotes not included) in the BODY of a message to: "<A HREF="mailto:privacy-request@vortex.com">privacy-request@vortex.com</A>". Mailing list problems should be reported to "<A HREF="mailto:list-maint@vortex.com">list-maint@vortex.com</A>". All messages included in this digest represent the views of their individual authors and all messages submitted must be appropriate to be distributable without limitations. The PRIVACY Forum archive, including all issues of the digest and all related materials, is available via anonymous FTP from site "ftp <A HREF="ftp://ftp.vortex.com/">ftp.vortex.com</A>", in the "/privacy" directory. Use the FTP login "ftp" or "anonymous", and enter your e-mail address as the password. The typical "README" and "INDEX" files are available to guide you through the files available for FTP access. PRIVACY Forum materials may also be obtained automatically via e-mail through the list server system. Please follow the instructions above for getting the list server "help" information, which includes details regarding the "index" and "get" list server commands, which are used to access the PRIVACY Forum archive. All PRIVACY Forum materials are available through the Internet Gopher system via a gopher server on site "<A HREF="http://gopher.vortex.com">gopher.vortex.com</A>/". Access to PRIVACY Forum materials is also available through the Internet World Wide Web (WWW) via the Vortex Technology WWW server at the URL: "<A HREF="http://www.vortex.com">http://www.vortex.com</A>"; full keyword searching of all PRIVACY Forum files is available via WWW access. ----------------------------------------------------------------------------- VOLUME 09, ISSUE 23 Quote for the day: "You have to open graves to find girls to fall in love with?" -- Helen Grosvenor (Zita Johann) "The Mummy" (Universal; 1932) ---------------------------------------------------------------------- Date: Fri, 03 Nov 2000 17:56:57 PST From: <A HREF="mailto:lauren@vortex.com">lauren@vortex.com</A> (Lauren Weinstein; PRIVACY Forum Moderator) Subject: Texas Government Web Site Reveals Voters' Home Addresses and More Greetings. During the current election cycle, conflicts between the use of voter registration information and individual privacy concerns have appeared a number of times. These have highlighted the rapid pace with which technology has taken data that is traditionally "public record" in nature, and resulted in some very non-traditional impacts on individuals. I've written previously here in the PRIVACY Forum about commercial use of voter registration data and related data-matching with Web activities (please see: <A HREF="http://www.vortex.com/privacy/priv.08.22">http://www.vortex.com/privacy/priv.08.22</A>). But today I learned of a remarkably egregious example of poorly-controlled voter registration data -- a government-run Web site that even now would seem to have the potential not only to violate people's privacy expectations, but to put some individuals at physical risk as well. In the state of Texas, as in many states, citizens are encouraged to "automatically" register to vote when they go in to renew their motor vehicle driving licenses. But in the county of Denton, Texas you may get even more than you bargained for. In Denton County, you apparently get your home address, gender, and other information listed in a <B>public</B> Web database that can be accessed by anyone, anywhere, for any reason from snoopiness to stalking. The Denton County, Texas Voter Registration Database Search page: <A HREF="http://elections.co.denton.tx.us/VRSearch">http://elections.co.denton.tx.us/VRSearch</A> allows any Web user to submit a query with no identifying information other than the target's first and last name, and their year of birth. The "year of birth" field, apparently a ludicrous attempt at security, can of course be trivially guessed through trial and error. The database then returns the person's full name (special bonus -- you often get the complete middle name!), their registration address (which would typically be their home address), their <B>complete</B> date of birth (month, day, year), and their voter registration certificate number. Click on that number, and you get more information, including their gender. This is perhaps the most vivid example I've seen of why we need to <B>immediately</B> take a long, hard look at the "public record" status of this sort of information. To have such data available without even a modicum of a "need to know" requirement, and then to publish it to the world via the Web, is breathtaking in its risks. Any number of persons in sensitive professions, persons involved in domestic disputes, or individuals in a range of other situations could potentially be seriously, physically compromised by the ease with which home addresses can be obtained via this system. Many of these persons might have assumed that they had protected their home addresses by not listing them in the local phone books. Plus, the database's providing of complete birth date and full middle name could be handy for identity fraud. I attempted to reach Denton County, Texas officials to discuss this matter, but was not successful. It's bad enough that this is happening right now in Texas, but unless there are some immediate changes in how we treat such data, we can expect to see similar Web-accessible databases in other areas around the country. I wouldn't be at all surprised if other municipalities already have plans to deploy such systems (or already have them up and running). Registering to vote should not necessitate the surrender of basic privacy rights! --Lauren-- Lauren Weinstein <A HREF="mailto:lauren@pfir.org">lauren@pfir.org</A> or <A HREF="mailto:lauren@vortex.com">lauren@vortex.com</A> or <A HREF="mailto:lauren@privacyforum.org">lauren@privacyforum.org</A> Co-Founder, PFIR: People For Internet Responsibility - <A HREF="http://www.pfir.org">http://www.pfir.org</A> Moderator, PRIVACY Forum - <A HREF="http://www.vortex.com">http://www.vortex.com</A> Member, ACM Committee on Computers and Public Policy ------------------------------ End of PRIVACY Forum Digest 09.23 ************************ </PRE> <hr> <center> <A href="/privacy"><h3>PRIVACY Forum Home Page</h3></A><p> <A href="http://www.vortex.com"><h4><i>Vortex Technology Home Page</i></h4></A><p> <A href="/privmedia"><h4>Radio, Television, and Press Contact Information</h4></A><p> </center> <p> <font size=-2>Copyright © 2001 Vortex Technology. All Rights Reserved.</font> </BODY> </HTML>