Pages

Jan 31, 2009

IT Voice responded to the COIAO consultation

Here is the response of IT Voice to the COIAO consultation.

----------------------------------

Commerce and Economic Development Bureau
2/F, Murray Building
Garden Road
Hong Kong
info@coiao.gov.hk

31-January-2009

Dear Sir/Madam,

Responses to the consultation of the Control of Obscene and Indecent Articles

The six members of IT Voice, who currently are members of the Election Committee, would like to express our opinions to the consultation of the Control of Obscene and Indecent Articles.


1. Due to the controversies and public outcries surrounding many decisions by the Obscene Articles Tribunal (OAT) in recent years, a review of the Control of Obscene and Indecent Articles Ordinance (COIAO) is necessary. A full-rounded review on the classification system and its operations, including law enforcement, is needed, but the motivation of the review should not be based on an assumption that more control is needed, and in particular any attempt to specifically target the new media would be misguided. We are in view that the OAT should be abolished, and making the courts to be responsible for the classification.

2. In the reivew, we must take into priority the freedom of information as a core value of the highest priority in Hong Kong, and one that is most critical even for our economic development and sustainability. We are concerned that over-regulation would harm the image and reality of information freedom in Hong Kong. Any actions to exert further control would cause damage to Hong Kong's reputation in information freedom.

Definition of Obscenity and indecency

3. We found the many problems in the past lie in the application of the strict standard in interpretation of obscenity and indecency by law enforcement and the OAT. In the definition, we should allow flexibility in order to cope with an ever-changing society.

4. We do not subscribe to a scheme in which the classification of articles is by the Government for it interfere with the freedom of information.


Adjudication System

We believe that the adjudication system can be improved in several ways.

5. All adjudications, including the first hearing, should be reasoned. The reasoned adjudications help to bring more transparency and to develop more comprehensive criteria for references.

6. The poll of adjudicators should be largely increased to avoid the opinions concentrated to only small portion of most active people. However, this expansion should not be based on sector or interest group but the whole population.

7. The proposal of Chief Justice to use the jury system of court can be considered. However, sampled adjudicator from the poll of jurors should be given the right to accept or deny to act as an adjudicator.


Submission of Articles to Classification
8. Submission should not be treated as a privilege of some sector or group. Hence we do not agree to expand the categories to allow certain sectors to submit articles to the OAT for classification.

9. When considering if we allow anyone from the public to refer the article for classification, we need to consider if the tribunal or the court will be overloaded by flooding of cases, and how to avoid abuse of use of the system. We have to ensure the system is not paralyzed to perform its proper function.

10. The law should be amended to require law enforcement to seek OAT’s classification before laying charge.

11. Similar to the court granting ex-parte injunction or search warrant, the efficiency of the law enforcement in referring articles to OAT can be guaranteed by more resources in OAT.

12.We do not agree to the proposal in Section 3 (2) paragraph 2.2 - 2.4 to sub-divide Class II (Indecent) to two subclasses IIA and IIB for different age groups. This proposal will further complicate the classification.


New Media and Server-side filtering at ISP level

13. We believe that laws and legislation should be held to be neutral in technology and media, and only in extreme cases of proven necessity would specific laws be appropriate to govern specifically any particular media or technology, such as the Internet. Attempts to legislate specifically for the new media would be both ineffective and unfair and the inconsistencies arise will create confusion and chaos in enforcement.

14. There is a proposal in Section 4.A2(2) paragraph 2.4 of the consultation paper on server side filtering at the ISP level. The paper believes that “Upstream control carried out by the operators would be more effective than the use of domestic filtering software. Since the filtering software is installed in the server-end rather than in the computer on the client side, it is less likely to be circumvented by children and youngsters.” We think the term is wrongly placed. “Server side filtering” can be performed at the client site or at the ISP level. They yield totally different effects. The consultation paper’s context is about ISP level filtering. So we use “ISP level filter” here and give some comments.

15. Filtering is used in many areas like antivirus, anti-phishing, anti-spamming and content filtering in general. A filtering system works only if there is a clear definition. For malware and phishing filtering which involve criminal damage the definition is clear. For spam, it is less clear because some electronic message regarded spam by one party is not regarded spam by another party. For obscene and indecent articles, there may be equally widespread views. In the consultation of the COIAO we have observed that there is a wide spectrum of opinions on the drawing of the line. This demonstrates that the society we are living is more or less pluralistic and that is something we value.

16. We think the server side filtering has many defects and also violate the freedom of information access. We propose to adopt client side filtering and empowerment should be given to users including parents, schools and children to use the tool.

(a) At a first glance, ISP level filtering saves management effort and is easy to implement. However, it is not so when we look deeper.

(b) ISP level filtering is monolithic but one size cannot fit all
ISP level filtering provides only one single standard to decide on what is allowed to pass and what is to be blocked. Customers (parents and children) from different background, different ages have no control of the level of filtering. The filter may be too lax for some while too restrictive for others.

(c) ISP level filtering is not compatible with the role of ISP as a neutral conduit
The Telecommunication Ordinance mandates that network providers serve as a conduit of information. The interception, delay and modifying of transported content constitute an offence. Unless there is a criminal case, ISPs do not decide for their customers what they are allowed to access. The law enforcement is not by ISP but the Police. Furthermore, customers have no knowledge if the information is inaccessible at all or just been blocked by their ISPs. The philosophy is about freedom of information flow and access in an open and free society. We have to observe this principle.

(d) Filtering at ISP level has significant performance impact
We are talking about inline filtering in this case in which content is examined packet by packet. For a likely large blacklist, inline filtering kills performance. We note that the Australia Communication and Media Authority conducted a trial test on similar filter and announced their finding in 2008. The performance degradation was reported to be from 20% to 87% with an average of 40%. Performance impact results in economical inefficiency of ISP operation.

(e) Filter at ISP level impacts availability of network service
From the availability point of view, filtering at ISP level has introduced a single point of failure. Network providers have been diversifying their network paths to provide better resilience. Additional filtering implies centralization of all traffics into an inline filter before they go out to the destination. This creates traffic congestion and in case of filter related equipment failure, it causes an outage. So ISP level filtering impacts service level commitment.

(f) No filtering is perfect.
Over-blocked contents (false positives) and under-blocking (false negative) are inherent to any filtering system. Even for malicious software and phishing site where we have few arguments in definition, we have some false positives and false negatives. For spam the definition is less obvious, so we have a lot of over-blocking and under-blocking in anti-spam filters. For obscene and indecent articles where the definition is so differently interpreted, the performance should be worse than spam. It is also worth to note that when one configure a more sensitive filter to block false negatives, the number of false positives increases. So we are bound to receive some unwanted content no matter what filters we use if we do not want to be blocked from wanted information.

Furthermore, content filters nowadays are not mature in blocking other traffics like P2P, email and instant messaging contents. Children and youngsters can bypass any filter set up by using other technologies.

(g) Client side filter has fewer adverse effects
Client side filtering can be a filter at PC desktop at home, or at the gateway in schools. Client side filtering does not have the disadvantages of filtering at the ISP level. Users make their own decision on what to block or allow. The transparency of the filtering policy is high. Users can tune the filters according to their needs which can change according to time (as the children grow up) or place (in a school, company or at home). This kind of self-determination is important in a liberal society. The filtering system is more “educational” than a single ISP level filtering with no user participation. The performance impact of client filter is low and the failure of the filter system at one client end does not affect other ISP users. Some assumes filtering software on the client side is more likely to be circumvented by children but children can circumvent the filter whether it is at the ISP or client side if they are determined.

(h) A holistic view on protection of children in digital age
In the digital age, new digital generation have to deal with enormous amount of information flooding the Internet. Children may face threats such as cyber bullying, fraud, identity theft, privacy invasion, and obscene contents. They will get in touch with lots of information that filters fail to block -- for example, filters do not have the intelligence to block cyber bullying and fraud temptation. We have to rethink our strategies to deal with the risks other than solely relying on filtering. We need to mitigate the risks by assuming our children would get access to malicious or unwanted information. Awareness education is a key element – that is to empower our children and their parents so as to minimize the stroke of these threats to children. We agree that this is not an easy task but is an eventual solution without side effects. We will elbaborate in the section “Publicity and Public Education”.

17. In Section 4.A2(2) paragraph 2.6 of the consultation paper, it was proposed that “web users are required to input their credit card data before getting access to webpage containing indecent materials to ensure that they have attained the age of 18”. We think that this measure is ineffective and has a lot of side effects. We are against using this mechanisms for authentication of age.
(a)A credit card is used for transaction and the authentication is via signature plus the credit card number and expiry date. The credit card number itself cannot authenticate the owner nor indicate the user has attained the age of 18.
(b)Children can get valid credit card number in many ways. Since there is no billing process to activate a notification to owner, the card owner is not even informed of the number being used for access of content portal with indecent content.
(c) The content portals to keep the log of credit card numbers used imposes additional burden on privacy protection on server side.
(d) Criminals may utilize this mechanism to set up malicious portal to capture credit card number for fraudulent purposes.


Publicity and Public Education

18. Government support for parental care and sex education
Parents play an important role in protection of children and sex education. Many parents are facing a digital divide problem -- they are less capable then their children in computer literacy. They found it discouraging to work alone. Government should provide more support to parents, promoting parental care and empowering parents with tools and resources to deal with the problem. This can be done via funding non-government organizations to hold workshops, to develop tools like client side filtering and blacklists, to develop education kits, and to receive enquiries from parents.

If parents can confidently discuss sex and surf the web with their kids, children would seek advices from them when they have difficulties. The threats of cyber bullying fraud, obscene content can be much minimized by empowerment than blocking.


Conclusion

19. The problem we are facing is the flooding of obscene and indecent articles in the society in different media channels. This trend will continue as the world is becoming more connected and more open. Fear, Uncertainty and Doubt should not drive us reversing back to a close society with more social control. We must not trade our freedom of expression and information access, and our reputation as an international city lightly for concerns.

20. The most prosperous economies in the world bear some commonalities – they are economically, socially and politically free and open comparatively. Facing the challenges from neighbouring and global competitors, Hong Kong must maintain our openness. Our children should be given the best access to information to allow them to think ahead.

21.We have to deal with the problem with a forward looking perspective. The trend of global connectivity, globalization of economy and culture and keen competitions among economies will drive us towards a more connected planet. There will be new threats and new opportunities. Our next generation, a digital native generation, will have a totally new perception of the world. We have to view the problem in a holistic way and adopt a mix of options including not just legislation, but technology, education and empowerment. We have to treat media education for parents and children a higher priority in our education.

If you need to contact us, please email to itvoice@itvoice.hk or phone S.C. Leung 91735967.


Regards,

IT Voice members

CHUNG, Edmon (edmon@itvoice.hk)
FONG, Francis (francis@itvoice.hk)
LEUNG Siu Cheong (sc@itvoice.hk)
SOONG, Chester (chester@itvoice.hk)
YIP, Lento (lento@itvoice.hk)
YOUNG Wo Sang (sang@itvoice.hk)

Jan 29, 2009

互聯網過濾器 難「保護兒童」

-- 經濟日報 2009.1.29 刊載

政府檢討淫審條例的諮詢文件,建議 (雖然政府從不承認) 強制互聯網供應商(ISP)提供「自願」過濾服務。政府官員不懂技術又不先諮詢業界有關建議的可行性,就放在諮詢文件,使不懂互聯網的家長及社會人士,誤以為有了ISP層次過濾服務便一勞永逸,忽略了家長自決和教育孩子的重要性。
由供應商在ISP設過濾服務這項建議,乍看是集中管理資源,減省用戶的麻煩,其實問題多多
首先,現時的淫審條例,只說那是「一般合理的社會人士普遍接受的道德禮教標準」,什麼是淫褻和不雅資訊,再辯論幾年也不能達致共識,而且會隨時間而變,ISP憑甚麼標準調較過濾器呢?供應商有上萬的用戶,有開放的也有保守的,同一的過濾器又如何滿足不同的需要?
第二,建議令人感到政府已不再堅持《電訊條例》內要求電訊商不截取資訊而只作管道的政策,將收緊互聯網資訊流通的「一把刀」放到供應商頭上,亦嚴重影響香港作為國際都會,資訊和貨幣可以自由流通的聲譽。
第三、政府沒有告知市民,引入ISP層次的強制過濾服務會犧牲上網速度。過濾器就如警方在高速公路設置路障找尋一個通緝犯,車輛的流量稍減也是可以接受;但若要找的是一萬個通緝犯,要從長長的名單中逐一核對,交通必出現癱瘓。澳洲政府的通訊及媒體管理局 2008年的測試就顯示,過濾會令訊息吞吐量平均減低四成,最差達八成七,莫非這就是政府要香港成為資訊都會的措施?
蘇錦樑副局長不談在早階段多個IT組織及ISP已表示在ISP層次的強制過濾服務行不通,卻強調某一大學教授說伺服器設過濾服務可行的意見,事實上該教授提供的服務祇有數百客戶,和ISP上萬計客戶的流量不能同日而喻,蘇在諮詢會就被另一大學講師質疑他的數據,希望副局長要兼聽。
第四、該教授的系統其實是在學校(客戶端)內的伺服器上安裝的過濾器,與ISP層次的過濾根本風馬牛不相及。客戶端過濾器沒有ISP層次過濾的塞車問題,亦不妨礙其他用戶的資訊自由,同時容許個別家長根據家庭背景、兒童的思想成熟程度調節過濾或警示的尺度,體現家長自決的精神。政府為甚麼不多推廣客戶端的收費和免費過濾器,教育家長如何善用此工具?
第五、沒有完美的過濾器,漏網之魚和錯誤阻隔都很普遍,提高「保護度」過濾漏網之魚的同時,又殃及更多池魚,剝削兒童存取資訊的權利。過濾軟件的另一弱點,就是只針對網頁,但淫褻及不雅資訊完全可以由其他技術如點對點、電郵、即時通訊軟件等方式傳播而是過濾軟件無法截取的。青少年要繞過這些關卡,連眉也不用戚一下
最後,單純依靠過濾而希望「保護兒童」,可能忽略了在諮詢文件內沒有提及的東西。政府和一些人士要求所謂「潔淨環境」的出發點,是假設青少年不會接觸到這些他們認為是「不健康」的資訊,由是之故,諮詢才會以「齊享健康資訊」為口號。可是,他們有沒有想過,在這資訊開放的時代,我們應假設(無論你想不想)青少年必定會接觸到性資訊,改而從教育青少年如何處理這些問題著手,其一就是鼓勵家長多與孩子上網,開放的、漸進的引導他們認識性和身體;同時要提供教育,就縮短家長和孩子間存在的數碼隔膜。把頭蒙在沙裡的駱駝,不是我們要求的政府吧。

梁兆昌
IT呼聲

Jan 12, 2009

Stop War in Gaza

全球呼籲加沙停火簽名運動: http://campaign.tw-npo.org/
以色列揮軍進入加沙,又狂炸包括民居的目標,造成上千無辜平民傷亡,哀鴻遍野。雖說是討伐哈馬斯,但實際上不但難達目標,更加深仇恨,把巴人推向激進的一端。

猶太人在二次大戰飽歷納粹德國的種族清洗和壓迫,怎麼以色列今天會對巴勒斯坦民族施加同樣的暴行?

是停手的時候了!



無國界醫生現正在加沙進行救援
http://www.msf.org.hk/online/enewsletter/2009_01_gaza/letter-ch.html
隨著以色列軍事行動於上月底展開,至今已造成逾七百人死亡及三千人受傷,無國界醫生項目主管鍾格表示:「今天,在加沙地帶有一百五十萬名巴勒斯坦人,成為 連續不斷的槍擊和轟炸的受害者,當中近半是兒童。」平民活在驚慌惶恐當中,外出是非常危險的事情;醫院急症室更是擠滿了傷者。

衷心感謝您的支持,讓我們能迅速地應付當前的人道危機。在軍事行動開始後,無國界醫生的三名國際救援人員和七十名巴勒斯坦員工組成的醫療隊,已即時為傷者提供治療。在當地主要的醫院—─什法醫院,無國界醫生的救援人員於十日內進行了逾三百宗手術,主要是截肢切除、顱骨及多發性損傷手術。

衷心感謝您的支持,讓我們能迅速地應付當前的人道危機。在軍事行動開始後,無國界醫生的三名國際救援人員和七十名巴勒斯坦員工組成的醫療隊,已即時為傷者提供治療。在當地主要的醫院—─什法醫院,無國界醫生的救援人員於十日內進行了逾三百宗手術,主要是截肢切除、顱骨及多發性損傷手術。

然而,無國界醫生在加沙的救援工作仍然困難重重。項目統籌杰西卡.寶拉茲說︰「我們正面對的問題,是如何能夠接觸受傷的平民;很多傷者仍然無法到醫院或醫 療設施求助。」基於安全理由,救護車只能把重傷者送到醫院;傷勢較輕者只能守在家中,等待戰事結束,才可外出求醫。無國界醫生現時有二十名居住於加沙地帶 的救援人員,每天帶同醫療工具,四出到民居治療傷者;他們每天能為約四十名傷者提供治療。「由於局勢極不安全,我們的救援活動和提供醫療服務的工作受到很 大的限制。」她續說︰「我們需要行動不受限制,才可以日以繼夜地接觸到傷病者,而平民亦能夠前往求醫。」
:
:
如您願意支持無國界醫生的全球救援行動,讓救援人員可以繼續為危困中的人群提供緊急醫療救援,您可以登入 www.msf.org.hk/edonation 網上捐款,或填妥附上的捐款表格。

有關無國界醫生在加沙地帶救援行動的最新消息,請留意網站的焦點報道
http://www.msf.org.hk/public/contents/news?ha=&wc=0&hb=&hc=&revision_id=39601&item_id=39600

Jan 11, 2009

余若薇數落一眾官員和議員

http://www.facebook.com/video/video.php?v=1074325262722&oid=32334815927

立法會議員吳靄儀動議,促請行政長官在制定行政長官和立法會選舉辦法時,須清楚表明廢除功能界別,其所提出的選舉方案,須達到《公民權利和政治權利國際公約》的要求。一眾官員和議員竟砌詞反對。


余若薇在立法會的慷慨陳詞 ,駁斥林瑞麟一再混淆視聽,無視基本法對香港政制邁向普選的承諾、無視香港對政治權利及國際公約的義務。同時,亦揭露一班在競選時口稱支持普選,行動上卻向"取消功能組別、走向普選"插上一刀的人,包括譚偉豪(資訊科技界)、謝偉俊(旅遊界)、劉健儀(交通航運界)、陳茂波(會計界)等…

謝偉俊:唔好迫我咁早表態…要等東風

-----
(補充) 譚偉豪在動議之前數日回應Professional Commons 詢問 "會唔會支持吳藹儀有關促請政府明確邁向普選的議案"時,回覆說要先諮詢業界決定,幾日後他在立法會向吳藹儀議案投上反對票,譚偉豪你有沒有過諮詢業界?!

Jan 7, 2009

世界級城市,民主不容停步 (True Democracy for a World City)

IT 呼聲全體成員參加由公共專業聯盟發起的聯署行動,支持立法會議員吳靄儀動議,促請行政長官在制定行政長官和立法會選舉辦法時,須清楚表明廢除功能界別,其所提出的選舉方案,須達到《公民權利和政治權利國際公約》的要求。

聲明的全文如下:

--------
踏入2009年,香港面對嚴峻挑戰。切實推行普及而平等的選舉制度,是邁向高質素管治、凝聚民心民力以應付挑戰的必要條件。

立法會議員吳靄儀於今天 (一月七日) 立法會動議,促請行政長官在制定行政長官和立法會選舉辦法時,清楚表明廢除功能界別,其所提出的選舉方案,須達到《公民權利和政治權利國際公約》的要求

公共專業聯盟全力支持該項動議,並發起了聯署行動,呼籲社會各界支持,在短短個多星期內已獲得來自十四個界別的人士表態簽署聲明,包括工程、法律、資訊科技、醫學、衛生服務界、社會福利、會計、建築、測量及都市規劃、旅遊、保險、商界、批發及零售以至區議會及其他人士共二百六十多人,聲明將於今天在信報刊登。同時,我們亦徵詢了三十位功能界別議員的意向,結果同時會在聲明內刊登。然而,這並不是一次性的行動,我們的聯署行動將會在公共專業聯盟的網頁(www.procommons.org.hk)上接力進行,誠邀各界人士聯署,可電郵至info@procommons.org.hk 或致電8200 6332 。

就2012年政改方案,公共專業聯盟於去年五月已提出了建議,除了要求盡快廢除功能組別外,同時確保立法會在沒有功能組別的情況下,專業人士亦可繼續利用其專業知識,在社會上作出貢獻。

英文版(English version)
http://www.procommons.org.hk/documents/C10022_090106_pr_en.pdf


記者會發言的短片:

公共專業聯盟黎廣德發言:
http://hk.youtube.com/watch?v=o3JcLQ6a0Xw

公共專業聯盟莫乃光發言
http://hk.youtube.com/watch?v=7XEeEGjBSDI

公共專業聯盟梁繼昌發言
http://hk.youtube.com/watch?v=TlDu2G_ZRSA

Jan 6, 2009

電郵推廣知多點

寬頻及電郵已經是所有企業的必要設施。因電郵成本低,很多大中小企業也常用電郵發放推廣訊息。如果你也用電郵推廣,本文一定要讀。

大部份電郵推廣人員都有一個 "訊息不平衡" 問題,看到電郵的方便,但看不到互聯網服務供應商或電郵服務提供者(這裏統稱ISP)及電郵接收者的角度,因而可能達不到最佳的推廣效果,甚至適得其反。

首先,ISP不是逢推廣電郵都不歡迎,ISP提供的正是溝通服務,沒有電郵ISP的存在價值會大減。但ISP要顧及所有客戶的電郵需要,例如如果其中一個客戶發放大量電郵而令該ISP被其他電郵服務提供者拒收,該ISP的所有客戶都會受影響。因此,傳送方的ISP通常都會設定一個合理的傳送限制,而有些ISP更會選擇於傳送前過濾垃圾電郵及病毒,以確保不會跌入黑名單因而影響整體客戶服務。

但如果客戶用自己的電郵伺服器直接收發電郵又如何呢?這就牽涉到接收方ISP的電郵過濾系統了。經過多年的發展,現時的電郵過濾技術已經比往日先進很多。除了相對靜態的黑名單外,ISP已經用動態的統計方法(Bayesian Inference)去偵測大量電郵,而該方法包含對電郵的特性及數量、頻率、寄件者及IP位址、郵件上的超連結(hyperlink,相當於該電郵賣甚麼)等等的統計。如果一間公司的電郵被接收方的ISP標籤為垃圾電郵,該公司的電郵往後被過濾的機會會相應提高。反之,如果被標籤為非垃圾電郵則往後被過濾的機會會減低。這些動態的統計方法都有開放源碼的軟件可用,電郵伺服器管理人員可自行研究及安裝。

另外,比較新一點的發展是現時國際間有部份ISP已經有特別的網絡去共同偵測大量而大致相同的電郵。例如一個電郵在很短時間內發放了很多封,該電郵的數碼指模及數量、寄件者、IP位址及郵件上的超連結資料等等會即時出現於該網絡上令所有該網絡的ISP知悉。而各ISP亦會將被客戶投訴的電郵通過此機制通知其他ISP。大部份電郵用戶端軟件(如Thunderbird、Outlook等)都是用類似的方法去過濾電郵,亦同時從客戶收集垃圾郵件資料。現時未有一個此類形網絡專給本港的ISP共用,但部份ISP已經利用了一些海外的此類形網絡。

因此,電郵推廣人員已不可再有一個舊觀念,認為如寄一萬個電郵有一百個有人看等於十萬個有一千個讀者。相反,寄得愈多可能真正讀者愈少,而寄得愈多只會令更多ISP拒收將來的電郵。如企業將大量電郵發放服務外判,則更應留意以上各點,以免效果適得其反。

要達到最佳的推廣效果,電郵推廣人員除了要考慮基本的《非應邀電子訊息條例》外,更重要的是要真正地從接收者的角度去從新思考。

作者:葉旭暉,ITVoice 成員。
原載於 PC3 Corporate

Jan 1, 2009

Donation: One Laptop Per Child to SiChuan school