Blog Archives

All Posts in

June 14, 2018 - Comments Off on May 2018: Online safety of journalists and press freedom are imperative for countries to thrive

May 2018: Online safety of journalists and press freedom are imperative for countries to thrive

World Press Freedom Day 2018

Digital Rights Foundation celebrated World Press Freedom Day on May 3, 2018 alongside journalists and media, and discussed the important issues pertaining to press freedom - both locally and internationally. The conversations revolved around the safety of journalists in the digital world and their right to free speech without being subjected to violence that force them to self-censor, or censorship enforced by internal and external actors. Here are the activities the team of DRF was involved in for #WPFD2018:

  • UNESCO World Press Freedom Day Celebrations in Accra, Ghana

Hija Kamran represented the Digital Rights Foundation at the World Press Freedom Day celebration organised by UNESCO in Accra, Ghana. She was part of some important conversations that discussed journalists’ right to online safety, and their right to freedom to expression.

The panel discussions that Hija was part of included a high level panel hosted by UNESCO titled “Artistic Freedom in the Digital Age” (details on the discussion here) where her intervention addressed how women artists experience online spaces differently than men. Sharing some case studies from Pakistan, she shared that the abuse is mostly directed on a personal level for women, while men experience criticism on their work.

Another session that Hija spoke on was hosted by Access Now and was titled “Internet shutdowns and service restrictions - 'New tools' in restricting the free flow of information?” hosted by Access Now. This session addressed that internet shutdowns, in addition to being the violation of people’s right to freedom of expression, obstruct journalists’ work a great deal. Hija shared the findings of the interviews she conducted with journalists in the light of now two-year long internet shutdown in Federally Administered Tribal Area (FATA), Pakistan where journalists have to travel 20 km to deliver news to their media houses.

  • "Advocacy for Digital Rights" - Training session in Accra, Ghana

Hija Kamran conducted a training session hosted by Media Foundation for West Africa with the partner organisations from around West Africa, in Accra, Ghana. The training titled "Advocacy for Digital Rights" aimed to equip advocates of free expression for journalists in the region to raise issues of digital rights in a manner that is inclusive and effective. By using examples and case studies from South Asia, Hija directed the conversation on rights of the people in digital spaces focusing on building counter narrative especially around internet shutdowns - a frequent problem true to almost all of the world.

  • DRF Campaign on World Press Freedom Day 2018

According to a survey conducted by DRF, nearly 72% of female journalists in Pakistan and 61% of male journalists experience digital insecurity. Through our Network for Journalists for Digital Rights, we ensure empowerment with digital tools and security protocols in order to work more securely and efficiently.
Here’s what our network members shared on World Press Freedom Day:

Anushe Noor: “Being in the media is not considered very feminine - so when a woman decides to take up journalism as a career, she's faced with criticism”.

Umaima Ahmed: "The challenges faced by women in media include discrimination in position, pay and the beats assigned to them as well as emotional and sexual harassment. Today, I press for women’s freedom in media so that they can place an active role in making this world a better place".

Zeenat Shehzadi: "Our culture is restrictive of women entering the media, which leads to a lack of reporting on women-centric issues. We must be provided with safe and secure environment to be able to shed light on the issues that people face".

Sabin Agha: "Women journalists face an added threat and that is character assassination. It is very easy to assassin the character of a woman journalist as we live in a conservative society and they are considered easy target for intimidation".

Afia Salam: "The journalist community in Pakistan needs to take a stand against those who are suppressing their voices because without it people in this society won't be able to seek justice."

Freedom of Expression, Privacy and Rights of the Marginalised: DRF discusses at RightsCon 2018

Digital Rights Foundation headed to Toronto this May to attend RightsCon 2018. At the leading conference on human rights in the digital age, DRF's intensive participation was focused on Freedom of Expression, Data Protection, and Gender. All of these areas are related to human and digital rights, they are all causes that DRF has been working hard for whether through research, on-the-ground assistance, or advocacy. Read more...

Digital rights defenders under threat: Strategies to resist fear, surveillance and (self-) censorship: re:publica 18

Nighat Dad spoke at the panel titled "Digital rights defenders under threat: Strategies to resist fear, surveillance and (self-) censorship" at re:publica18 in Berlin, Germany. The discussion focused on digital attacks against human rights defenders that have expanded dramatically. Vaguely defined anti-terrorism legislation and spyware allow for targeted surveillance; trolls manipulate online content and conduct intimidating smear-campaigns. Against this backdrop of shrinking space and global backlash, holistic strategies for digital rights defenders are crucial. The session presented experiences from human rights activists in the Global South and discussed success stories and lessons learned from digital security and privacy initiatives. Watch the discussion here and details on the panel here.

Responding to Risks and Challenges: Human Rights Frameworks in the Digital Age - HRBDT

Nighat Dad attended the HRBDT Conference - Human Rights in the Digital Age to be part of the panel titled "Responding to Risks and Challenges: Human Rights Frameworks in the Digital Age" happened in Geneva. Nighat highlighted the issues that human rights defenders and advocates for social change face in the global south, and emphasised particularly on issues in the context of Pakistan. She said, "In the absence of strong data protection legislation, human rights defenders are particularly at risk based on their digital footprint, the threat which very quickly transfers into offline consequences. Hence, it's imperative that countries like Pakistan move towards drafting a legislation that grants relief and protection to people and their digital data."

DRF condemns yet another breach of NADRA database and demands strong data protection legislation

There have been a staggering number of instances of mismanagement of personal data that can be traced back to NADRA, the most recent of which is a reported breach into Punjab Information Technology Board (PITB) that has resulted in the loss of a critical amount of confidential data, access to which was granted by NADRA and which is being sold over the internet for as low as Rs.100 (equivalent to almost $1). This hit, which is as recent as May 2018 is yet another forced intrusion into our private lives at the hands of hackers, however the reason our personal data has been so easily plucked is the abysmal state of affairs is our data protection policies, or lack thereof. Full statement here.

Open Letter to Twitter: Please Do Better about Misinformation during General Elections 2018

Dear Twitter,

We heard that you want to do better in making Twitter an inclusive platform. We heard that you have updated your strategy to fight trolls to make it a safe space for everyone. And we also heard that you are committed to fight fake news, especially after what Facebook has gone through in the past couple of months. We, for one, were glad that you are at least trying. But are you?

Digital Rights Foundation writes an open letter to Twitter to address the spread of misinformation on its platform during the General Elections of 2018 in Pakistan. Read the letter here.

Statement: DRF expresses concerns over the ban on the messaging app Telegram in Pakistan

We at the Digital Rights Foundation (DRF) are extremely concerned regarding the ban on the social media messaging application, Telegram, by the Pakistan Telecommunication Authority (PTA). We issued a statement to express our concerns about this ban which curtails the right to communicate in a secure and safe manner. Read the statement here.

TED Global publishes Nighat Dad's talk

Nighat Dad speaks at TEDGlobal 2017 - Builders, Truth Tellers, Catalysts - August 27-30, 2017, Arusha, Tanzania. Photo: Bret Hartman / TED

Nighat is one of the remarkable Pakistanis who, along with her team of phenomenal people, is making Pakistan proud across the world. Nighat’s story is not one of its kind, in fact, it’s a story of every woman - young and old - who was brave enough to mark her existence in the online world; a world that is known to be cruel and yet is believed to be harmless for its virtual nature. Details and video here.

“Online Safe Spaces for Journalists” at University of Management and Technology, May 4th, 2018

DRF held a session at University of Management and Technology with students of Media and Communication. Around 65 students attended the awareness raising session where they were encouraged to keep themselves secure online. In the second half of the session they were given digital security training and were also provided with CDs which included security toolkits and a guidebook on digital security.

Workshop: Right to Play

DRF attended and participated in a day long workshop around women’s participation sports and journalism around sports. Social media was marked as a game-changer for coverage as women sports as great strides have been made without the strictures of traditional media. However female sports journalists talked extensively about online harassment and the toll it can take on their work. The workshop was attended by the top female journalists in Pakistan and some prominent sports personalities.

June 4, 2018 - Comments Off on Freedom of Expression, Privacy and Rights of the Marginalised: DRF discusses at RightsCon 2018

Freedom of Expression, Privacy and Rights of the Marginalised: DRF discusses at RightsCon 2018

Digital Rights Foundation headed to Toronto this May to attend RightsCon 2018. As the leading conference on human rights in the digital age, DRF was happy to represent Pakistan and explain its context, and present the work that DRF has been doing over the past couple of months.

DRF’s participation in RightsCon can be categorized into three areas: Freedom of Expression; Data Protection; and Gender. All of these areas are related to human and digital rights, they are all causes that DRF has been working hard for whether through research, on-the-ground assistance, or advocacy.

Participation at RightsCon was intensive, with Nighat Dad and Hyra Basit representing the team on a total of 14 sessions, two of which were proposed by DRF, over the course of three days. However, Day 0 was also quite busy - Hyra divided her time between a Protect Our Spaces meeting, called to discuss the sexual harassment that goes on within the tech and human rights circles and what can be done about it, and a meeting on the way Facebook plays a significant role in the politics and operations of a country; Nighat, meanwhile, attended the Executive Directors’ meeting.

DRF has always been vocal about the granted right  to freedom of expression without discrimination between race, gender, class, ethnicity, or religion. Freedom of expression not only includes the freedom to speak and express opinions and thoughts online, but to be able to access online resources without blockades so that a person can then express themselves. The latter especially was discussed during the session ‘Digital Rights for the Persecuted Refugees: Can there be a Global Support Framework?’ moderated by Faheem Hussain. Hyra talked about the struggle to access the internet among the Internally Displaced Persons (IDPs) in Pakistan, refugees from Afghanistan, and also some of the more positive ways that the internet is being and can be used. Nighat as a panelist in the session ‘Eye of the Beholder: Government Attempts to Define and Detect "Extremism" talked about how freedom of expression is curbed because of the constant monitoring and surveillance that is prevalent because the definition of who an extremist or terrorist isn’t clear.

Nighat expanded on the context of Pakistan during the session ‘Free Speech is not Blasphemy’ hosted by Bolo Bhi, talking about the thin line between hate speech and free speech, stressing on how someone’s free speech shouldn’t be used as an excuse to impinge on the rights of others. Continuing the conversation on Day 3, she pointed out the gap in protection offered by privacy policies by the same telecom companies in different countries, as well as the systemic harassment faced by women online which results in many women withdrawing from online spaces during the ‘The Widening Digital Divide’ session arranged by Bolo Bhi. Talking about the nearly two-year internet shutdown in FATA, she suggested strategic litigation using a mix of human stories, violation of human rights and economic cost argument to deal with internet and mobile shutdowns at the session ‘Combatting Shutdowns with COST: A Data Driven Policy Tool for Internet Freedom’. She also addressed the issue of Youth Surveillance as part of a panel hosted by IFEX, especially social surveillance, which affects young girls even more, and while DRF is initiating the discussion on privacy by going to schools and universities, laws that protect children are not adequate for the digital age.

DRF has always stressed on data protection and privacy laws, understanding the intersection between human rights and digitization. As part of our research and advocacy, we looked into the continuous NADRA breaches that have taken place over the years, and all the informed sharing of data by NADRA and government officials without taking the consent, privacy, and safety of Pakistani citizens into consideration. This was also shared during a session “Fingerprint on the pulse: Challenging the lack of privacy protections for biometric data.” hosted by Privacy International. ‘The Global State of Data Protection’ hosted by Access Now was also an opportunity to discuss the right to freedom of information and informational self-determination, and how the GDPR will affect Pakistan.

RightsCon was also an opportunity for DRF to continue its participation in the development of the feminist principles of the internet, as Nighat explained them for the audience and how they applied in Pakistan’s context. We also had the chance to talk about our experience running the Cyber Harassment Helpline and what we’ve learned from our experience in the ‘Take Back the Net: Innovations in Tackling Online Hate and Harassment’ session hosted by PEN America. And while online harassment covers a range of activities, an effort to start a discussion around how the victims of non-consensual pornography can be helped was made through a session hosted by Acoso Online, where the digital security tools and the mental health aspect were discussed.

The ‘Masculinity in Online Spaces’ session hosted by DRF proved to be a thought-provoking session with the panelists speaking out about their experience with men’s behavior online and how the way masculinity exhibits itself has lead to gendered trolling, devaluation of women’s work and severe mental trauma.  The ‘Gendering Surveillance’ panel was also proposed by DRF to discuss the ways in surveillance manifests itself in different contexts, and how it disproportionately affects women and gender minorities.

The four intensive days at RightsCon proved to be packed with insightful discussions, opening us up to new perspectives and giving us the opportunity to present our concerns, criticisms, cultural context. This exchange of ideas opens us up to work towards improving the work that we do in Pakistan.

Written by Hyra Basit

June 1, 2018 - Comments Off on Open Letter to Twitter: Please Do Better about Misinformation during General Elections 2018

Open Letter to Twitter: Please Do Better about Misinformation during General Elections 2018

Dear Twitter,

We heard that you want to do better in making Twitter an inclusive platform. We heard that you have updated your strategy to fight trolls to make it a safe space for everyone. And we also heard that you are committed to fight fake news, especially after what Facebook has gone through in the past couple of months. We, for one, were glad that you are at least trying. But are you?

Facebook is taking the heat for allowing user data to be misused during the democratic processes worldwide, but do you think you have done better? We are talking particularly in the context of fake news through fake accounts that Twitter very conveniently allows to exist on its platform. The biased community standards suspend the accounts of women speaking up against trolls in the language they understand, but trolls operating under the shadow of fake accounts keep making use of the platform without facing the consequences of the said standards.

Pakistan is going to have its General Elections in almost 2 months from now, and what we are seeing today is an orchestrated political campaign through fake accounts on Twitter; case in point the convicted rapist of a former Pakistani film actress being appointed in one of the political parties running for the office and later being expelled after an outrage on social media and subsequently on mainstream media. What went wrong here is that during this appointment and expulsion of the rapist, a fake account was setup in the name of the artist who was forced to leave the country after her brutal rape, commending the actions of the political party to expel the rapist. Here’s the screenshot of the tweet, and the link to it in case you actually decide to take action against fake news:

https://twitter.com/JharnaBasak/status/1002246808448495616

You may want to consider the number of reactions on this tweet in a couple of hours, and the impact this misinformation has been making among Pakistanis. The tweet was subsequently picked up by local mainstream media and stories were published and aired within hours.

While this may not seem a big issue by the face of it, but this incident is particularly giving leverage to the political party in consideration, and your platform is the core tool for it. It’s taking away people’s agency to make decisions on their own - overshadowed by misinformation.

Let us reiterate - a political party appointed a convicted rapist and is being celebrated for it because the army of fake accounts on Twitter is pitching for a narrative that will promote this party as being better than others. Would you not agree that it’s against the very principles of democracy that we all advocate for?

Shabnam, the legendary artist who was forced to leave the country after her rape by this influential politician, has been snatched of her agency to voice her concerns during this fiasco. This particular fake account (@JharnaBasak) brought her experience down to a political agenda that only suits the people who benefit from it in current political environment closer to the elections. And not only the political goons are celebrating this incident but also human rights defenders; “Good effort by PTI [Pakistan Tehreek-e-Insaf]”, said one women’s rights activist. Twitter has become a tool that has taken away people’s ability to think rationally. While the convicted rapist shouldn’t have been appointed in the first place, your platform has paved way for people to shrug off the problems that this part of the world has been struggling with for generations - violence against women - and honour the forced measures of rectification under the pretence of awareness.

In such instances, efforts to curb misinformation, abuse and trolling by platforms like Twitter become particularly relevant for them being the primary source of news for people. At this point, we are reminded of a remarkable research by Science Magazine featured in The Atlantic in March 2018 that says, “By every common metric, falsehood consistently dominates the truth on Twitter [...].” It’s evident that the problem has been around since the advent of Twitter, but we ask you, what have you done to improve this, if anything at all?

We want you to actually take action and set the case straight that false information is not welcomed on your platform that is trusted and used by millions across the world.

We recommend,

  1. Setting up a clear editorial policy to counter misinformation, by consulting with all stakeholders
  2. Taking strict actions against fake accounts and false news when it is flagged, and take measures where identical IPs are used to create multiple, possibly fake, accounts
  3. Being transparent about who sponsors the content on Twitter and who benefits from it
  4. Promoting credible voices, especially of women and representatives of marginalised groups, among communities

Pakistan is a fairly new democracy that struggles to keep the reigns of its democratically elected government in place, and has successfully completed the tenure of the second government of the said kind. It wasn't easy, and let us tell you - it was ugly, to say the least. But we did it, and we hope that the next government will do better, because democracy is what we strive for, and democracy is what we want in all the processes that we opt for. And because Twitter holds a strong presence in the country, it remains one of the platforms that influence people's decisions.

We hope that you will do better and give people a chance to make their democratic decisions independent of any influence through misinformation propagated through your platform.

Sincerely,
Concerned members of a democratic country that is Pakistan.

About Digital Rights Foundation: Digital Rights Foundation is a researched based advocacy NGO registered in Pakistan, focusing on ICTs to support human rights, democratic processes and digital governance. For more information, visit www.digitalrightsfoundation.pk or write to us at [email protected]

Written by Hija Kamran

May 28, 2018 - Comments Off on DRF condemns yet another breach of NADRA database and demands strong data protection legislation

DRF condemns yet another breach of NADRA database and demands strong data protection legislation

The National Database and Registration Authority (NADRA) of Pakistan held the record for being the largest database of citizens’ biometric information the world over, until recently overtaken by India with its Aadhaar card programme. Such stature meant that it enjoys control over a mass amount of information, the kind whose confidentiality is crucial to every person it belongs to, and was duty-bound to protect from prying eyes and predators. Instead, as demonstrated in an infographic available on the Digital Rights Foundation’s (DRF) website, there have been a staggering number of instances of mismanagement of personal data that can be traced back to the Authority, the most recent of which is a reported breach into Punjab Information Technology Board (PITB) that has resulted in the loss of a critical amount of confidential data, access to which was granted by NADRA and which is being sold over the internet for as low as Rs.100 (equivalent to almost $1). This hit, which is as recent as May 2018 is yet another forced intrusion into our private lives at the hands of hackers, however the reason our personal data has been so easily plucked is the abysmal state of affairs is our data protection policies, or lack thereof.

At the time of publication, Pakistan does not have any data privacy legislation enacted. This is a precarious condition given the monumental amount of data that flows through the internet -- through the applications we install and use, and allow our internet service providers (ISPs) and applications themselves to use -- and is stored on the servers. As per a report published by DRF titled ‘Privacy and Data Protection Policies of Telecom Companies in Pakistan’, the measures in place by telecommunication companies to protect our data leaves a lot to be desired and little to no redress is available if any untoward situation arises.

The incident that we are reporting is unfortunately not the first of its kind and is indicative of the fact that cyber security is not a priority of our government institutions, as can be elicited from the following instances;

  • In 2002, NADRA chairman Saleem Ahmed Moeen admitted that about 300,000 NICs that were issued by NADRA carried errors. 
  • In 2011, NADRA employees were accused of preparing fake identification cards for employees of Bahria Town housing authority.

Instances of data sharing, apart from the accounts of unprofessional behaviour by NADRA officials, are also being quoted, for example, the sharing of data with a private company awarded the contract for issuance of National Smart Card Foreigner Identity Pakistan (NICOP) and Pakistan Origin Card (POC) in the UK and Europe. What is worrisome here is just the basic notion of our data being shared with private companies and multiple government departments, as the greater the spread and avenues of access to NADRA’s database, the higher the chances of a leak or misuse of the information.  Also in the news in 2014 was the Coordination Director of Chairman NADRA for leaking out all the messages of the government and strategy of NADRA to PTI and the media. Just these cases in themselves are illustrative enough to show the negligence present across the board at an institution as crucial as NADRA. A top-to-bottom revision of how the Authority operates, its standard operating procedures (SOPs), security and confidentiality-ensuring methods needs to be undertaken.

Further proof of the gravity of the situation is embodied in the recent spate of data breaches that have occurred at NADRA and PITB in the past year. This most recent development occurred in May of 2018, when NADRA handed over access to citizens’ data to the PITB for digitization and has resulted in the aforementioned data being pawned online and on social media platforms for chump change.

As per details available via ProPakistani : ‘… the data breach occurred when NADRA gave access of its servers to Punjab Information Technology Board (PITB), which wanted to digitize citizens’ data by linking CNICs with every other department, including but not limited to education, health, police and land registry.’

Just nine months ago another catastrophe was reported by ProPakistani when PITB’s technical settings allowed for anyone with basic computer navigation skills to access the Computerised National Identity Card (CNIC) numbers, photographic copies of the front and backs of CNI cards and scanned copies of educational degrees amongst other data, on an unregistered scale. It was written off as a technical glitch that was later fixed, however this intrusion into the privacy of civilians brings attention to the vulnerability of national database carriers in protecting sensitive and private information.

According to a source that has worked extensively with NADRA, the official position is that no NADRA database was breached, but that it was in fact the access provided to PITB and its team that resulted in any data leak that may have occurred. They added that NADRA extends its database to banks and telecommunication companies on a need basis, the inference being that no leaks or breaches have occurred on those occasions. The source also expressed concern over the lack of data protection laws in place and when asked if there was any redress available for those civilians whose data had been made public, responded in the negative but pitched that the process of ‘de-identification’ should be introduced wherein on the basis of a breach an individual can request NADRA to de-identify them and allot them a new national identification number and card. It was also highlighted that during the previous general elections, NADRA provided the Election Commission of Pakistan (ECP) with printed voter lists, which complete with CNIC number, name, address and photos was a breach of security of the voters, in itself.

Our data is being accessed by authorised personnel of several government departments, however we have seen that this authority that they have been entrusted with is being misused to sell user data to citizens through WhatsApp and Facebook groups and Twitter accounts. Accountability is a key aim that should be implemented by the government as such worrisome breaches cannot go unnoticed and require a prompt response. Another key aim would be to question is, why access to such sensitive information is provided so nonchalantly where seemingly everyone attached to a certain institution or department can gain access. Special focus should also be fixated on the Punjab Safe Cities Authority (PSCA) and its projects which employ surveillance as one of its methods to be able to improve the law and order situation in Punjab’s biggest cities through the use of technology. The potential for misuse or problematic leaks here is substantial and is only exacerbated by the lack of data protection legislation in the country.  Likewise, access to the data collected by PCSA and security of the servers employed by them is crucial given that it is potentially putting people at risk while they are constantly surveilled. The importance of transparency in these processes cannot be stressed enough given the delicate nature of the whole setup. The public, the people whose very data is at stake here, have a right to know not only how their data is collected, stored and used but also when it is compromised. It is essential that this information be relayed through official channels so that its veracity is not doubted, as much of the information and messages being forwarded on social media platforms cannot be trusted. Ownership must be taken by the state institutions and resultantly, accountability must be demonstrated for the people to see.

The need of the hour, as expressed by DRF time and time again, is to enact a comprehensive and effective data protection law that will serve the purpose of protecting the society’s best interests and one that not only chalks out how to best safeguard our data but also polices the institutions that have access to it.

Author: Zainab Durrani

May 18, 2018 - Comments Off on Nighat Dad makes it to TED Global

Nighat Dad makes it to TED Global

Nighat Dad speaks at TEDGlobal 2017

Nighat Dad speaks at TEDGlobal 2017

“Imagine waking up to a stranger - sometimes multiple strangers - questioning your right to existence for something that you wrote online”, Nighat Dad - a celebrated digital rights activist and lawyer from Pakistan starts her talk at a global stage of TED in August 2017 with an anecdote relatable across borders. The talk can be found here:
https://www.ted.com/talks/nighat_dad_how_pakistani_women_are_taking_the_internet_back#t-29310

Pakistanis are finally being recognised globally for extraordinary work that they have been occupied with for years - the work that was overshadowed by a lot of issues that suppressed the image of this otherwise remarkable country that is full of potential. Nighat is one of those remarkable people who, along with her team of phenomenal people, is making Pakistan proud across the world. With many accolades already in her bag, Nighat shared her story at TEDGlobal in Arusha, Tanzania where she was welcomed by people from various backgrounds who came to listen to her talk, and were in awe when she finished talking.

Nighat’s story is not one of its kind, in fact, it’s a story of every woman - young and old - who was brave enough to mark her existence in the online world; a world that is known to be cruel and yet is believed to be harmless for its virtual nature. Her struggles were just a window to what women have to face everyday, things that are harrowing and can’t be put in words.

Cyber harassment is not a new term anymore. The victim knows it, the harassers know it, the bystanders know it, those who support either party know it. Yet the experiences are questioned, challenged, and ridiculed everyday. Nighat and her team oppose these questions and challenges to support the victims, and this is also when the Digital Rights Foundation was founded out of passion and sheer motive of helping others in the digital realm.

Cyber harassment leads to deadly outcomes and keeps women from accessing the internet, essentially, knowledge - is what Nighat reiterated in her TED talk. While it can be challenged that cyber harassment only affects women, but the fact that women are most vulnerable to online violence can’t be contested. The gendered nature of online abuse was also what kept Nighat from accessing technology because her family imposed restrictions on her that didn’t imply on the male members of her family. The cruel notion of “technology is the root of all evil” is still alive in this part of the world, and is heavily used to restrict women from accessing the pool of knowledge that the internet holds - furthering the oppression that has been going on for centuries. Digital Rights Foundation is challenging this notion, and calling for the harassers to be blamed for their actions, and not the technology. We are advocating for women’s right to access without barriers.

While Pakistan is the home to some remarkable individuals who are known and respected across the world, including Malala Yousafzai, Dr. Abdus Salam, Sharmeen Obaid Chinoy to name a few. But this doesn’t take away the fact that it is also a nation where women are left to die outside their house for answering a phone call, where women are killed in the name of honour for expressing their opinions online, where women are murdered to marry someone they like, because this is how polarised Pakistan is.

Nighat emphasised that because of the strong hold of conservative mindsets in her family, she wasn’t allowed to own a phone until she was married, and even after she got married, this mobile phone became a tool to surveil on her by her ex-husband. She refused to be subjected by the abuse that was projected on her, as a result she was abandoned along with her then-6-month-old son. It could either be the end of all worlds, or it would pave way for her to be the guiding light for many such women who choose to stand up for themselves, or those who have no one to stand by. She chose the latter.

Since then, DRF has been supporting women by providing avenues for them where they can seek help. The laws that grant all citizens right to access the information didn’t extend their legality in the case of women. Why is it that women have to fight for their rights when they were actually born with them? Why is it that the rights that women were born with aren’t given to them by default? Why is it that it’s always men - fathers, brothers, husbands - who choose what rights a woman will be granted, making the laws irrelevant?

The establishment of the Cyber Harassment Helpline - first of its kind in Pakistan and in the region - was done in hopes to extend the fact that women have equal right to access the internet as much as anyone in the society and no one can have the easy way out for making it unsafe for them. By actively lobbying for safe internet access for women, DRF is extending the idea that the internet is not owned by anyone and yet belongs to everyone.

Nighat puts it aptly in her TED talk, “Safe access to the internet is the access to knowledge, and knowledge is freedom.”

Author: Hija Kamran


While you are here...

Because DRF is still a very small organisation, we seek support from our friends and supporters beyond borders. If you’d like to extend your help to our cause, spread the word about our work through your platforms
Or
Reach out to us at [email protected].

May 18, 2018 - Comments Off on DRF at RightsCon Toronto 2018

DRF at RightsCon Toronto 2018

RC-2018-logo-comb

Digital Rights Foundation is at the largest digital rights gathering RightsCon 2018, this time happening in Toronto. The conference brings together human rights advocates, activists, lawmakers, academics, and allies of digital rights to discuss the most pressing issues concerning the people of the world in technological age.

The team of DRF is highlighting the gendered nature of these issues at the conference, along with many other problems that need the attention of the global community.

Here's where to find Hyra Basit and Nighat Dad - team members of DRF - if you are at the RightsCon! [PDF]

May 11, 2018 - Comments Off on First Conviction Under Pakistan’s Cybercrime Act – DRF in April 2018

First Conviction Under Pakistan’s Cybercrime Act – DRF in April 2018

Man Convicted in the First Judgement under the Prevention of Electronic Crimes Act (PECA)

1507124-whatsappafp-1505470111-348-640x480

In an important decision, a Judicial Magistrate, Muhammad Amtiaz Bajwa of the District Courts, Lahore has convicted an offender under the Prevention of Electronic Crimes Act, 2016 (PECA) [see judgement here]. Digital Rights Foundation has been advocating on the need for sound jurisprudence on issues of online harassment and cyber crimes in general. Read more...

DRF Submits Recommendations to OHCHR on Right to Privacy in the Digital Age

OHCHR

In response to the Office of the High Commissioner of the UN’s Human Rights (OHCHR)’s call for inputs to its report on the right to privacy in the digital age, the Digital Rights Foundation penned down its recommendations and observations.

The prime concerns highlighted by DRF were the state of affairs in Pakistan with regards to the country’s treatment of its citizens’ data privacy and the kind of digital protection it affords us in what is an increasingly technology-reliant age. Read more...

Workshop: Digital Rights in Asia | University of Sydney, April 12-13, 2018

UniSydWorkshop

Digital Rights Foundation took forward in an academic workshop with experts in internet law and policy from around Asia. Representing Pakistan, DRF spoke about its activism, work in protecting freedom of expression and gender perspective that it offers to digital rights.

DRF expresses concerns over the security breach of Careem’s servers

CAREEM-App-660x330

Digital Rights Foundation expresses serious concerns over the breach of servers of one of the most used ride-hailing services in Pakistan, Careem. It was announced in the company’s official statement on April 23 that its servers were breached on January 14, 2018 and since then it has been investigating the matter. In the absence of a data protection legislation that DRF has been advocating for since last year, incidents like this put Pakistani customers at risk and at the mercy of hackers who can use this stolen information against them without any legal repercussions. Read more...

DRF condemns Google’s alliance with Pentagon

google-data-trends-analytics-ss-1920

Digital Rights Foundation (DRF) strictly condemns the involvement of technology giant Google with the US Department of Defense’s (DoD) Project Maven, an initiative that intends to deploy machine learning for military purposes, particularly in terms of using artificial intelligence to interpret video imagery which will potentially be used to improve the targeting of drone strikes. We strongly urge Google to reconsider the decision to collaborate with the DoD, considering the cost, hefty ethical stakes and safety risks involved. Read more...

#MoneyAndMovement - Count Me In! Consortium, Kenya

Nighat Dad was in Kenya on April 11-13, 2018 to attend the Count me In! (CMI!) Consortium organised in partnership with Urgent Action Fund-Africa, Association for Women's Rights in Development (AWID-Canada), Crea (India), Just Associates (JASS, USA) and led by Mama Cash (The Netherlands). The meeting brings together activists and funders to strategise the future of feminist movements globally.

DRF hosted a Digital Security Clinic at the consortium to help people with their digital security questions and needs.

Open Government Partnership Network Meeting - Bellagio, Italy

OGP Network Italy

DRF participated in the OGP Champions Network Meeting, "Building an Opening Government Chapmions Network", on April 25, 2018 in Bellagio, Italy - attended by 30 world-class political leaders, civil society heads, and thought leaders all working toward smarter & more ambitious open government reforms.

Hamara Internet: Our Right To Safe Online Spaces - Quetta

Quetta HI

DRF with the help of our partners FNF held an awareness raising session on data protection and privacy in BUITEM’s University, Quetta on the 25th of April 2018. Students discussed in detail about their concept of privacy and the implications it has in real life if there is a possible breach in it. 105 students attended the session.

Online Safe Spaces for Journalists at University of Peshawar

University of Peshawar session

DRF held a session at University of Peshawar with students of Journalism and Mass Communication on April 25, 2018. Around 70 students attended the awareness raising session where they were encouraged to keep themselves secure online. In the second half of the session they were given digital security training and were also provided with CDs which included security toolkits and a guidebook on digital security.

Workshop for Lawyers on Digital Rights

Workshop for lawyers on digital rights

A workshop was held for Lawyers in Peshawar on April 26, 2018, focusing on creating awareness about the legal landscape that governs digital platforms. A comprehensive training session, complemented by specifically designed toolkits, was given to lawyers to guide them on how they can make online spaces safe for themselves by adopting various tools and resources available to them.

Workshop for Journalists on Digital Rights

Workshop for journalists on Digital Rights

A workshop was held for Journalists in Peshawar on April 27, 2018, focusing on raising awareness regarding making online spaces safe for them, considering the sensitive nature of their field. The deliberations also allowed participants to discuss the underpinnings of their role in digital advocacy. They were also given security training to protect themselves from harassment and threat online.

Digital Youth Summit - Peshawar

DYS

DRF set up a booth to raise awareness regarding the cyber harassment helpline at the Digital Youth Summit in Peshawar on April 27th and 28th, 2018. The Summit had individuals from the tech industry come in and discuss the implications of the online world on the offline world with us. Around 350 to 400 individuals visited the booth and were given DRF merchandise.

Understanding Harassment - a discussion with policy and legal experts

Understanding Harassment

DRF’s team member, Shmyla Khan, participated in a panel discussion at the Lahore High Court organized by LEARN on April 28th, 2018. The panel consisted of notable figures such as sociologist Rubina Saigol, educators like Mariam Saeed, Salma Muzaffar from PCSW and lawyers such as Dania Mukhtar and Asad Jamal.

The discussion was rich and sought to discuss legal loopholes that discourage women from coming forward and what a law on sexual harassment should look like.

Hamara Internet: Our Right to Safe Spaces Online - University of Management and Technology in Lahore

UMT

DRF held a Hamara Internet session at UMT with female students of the law school to discussion online harassment, digital rights and the tools that women have in place to protect themselves in online spaces on April 30th, 2018.

May 4, 2018 - Comments Off on Statement: DRF expresses concerns over the ban on the messaging app Telegram in Pakistan

Statement: DRF expresses concerns over the ban on the messaging app Telegram in Pakistan

telegram

We at the Digital Rights Foundation (DRF) are extremely concerned regarding the ban on the social media messaging application, Telegram, by the Pakistan Telecommunication Authority (PTA). We are issuing a statement to express our concerns about this ban which curtails the right to communicate in a secure and safe manner.

As per Pakistan Telecommunication Company Limited’s (PTCL) official twitter account, it was confirmed on the 9th of November last year that Telegram had been banned as per PTA’s instructions. This notification was restricted to PTCL’s own network. However multiple attempts by other users as well as our team have led to the confirmation of the fact that the ban is effective across networks.

The need to implement policy that would bar access to a messaging platform similar to WhatsApp is befuddling and seemingly arbitrary.

We believe that such a decision hinders citizen's freedom of expression, which is a base and fundamental right as per Article 19 of our Constitution. It is a fundamental right recognized in countries the world over and was also recognized by ours through ratification of international treaties.

The cloud-based instant messaging service is a close second to WhatsApp in terms of popularity, however it has endearing features of its own, including its secret chat option and ability to send up to 1.5 GB worth of files, that prompts its usage. The security features of the app are its biggest selling point and in today’s world of information leaks and data hacks, it provides something we all desire, no matter what our station in life: some semblance of privacy. Such an avenue for communication without intrusion should definitely remain available to all those who choose to use it.  In any case, whether there is an alternate available or not, this blocking off of access is unconscionable, especially in light of the fact that no official notification was made public and neither was any reason provided.

Curtailing access to information is a violation of the civilians’ rights and basic expectations of a democracy. DRF demands the government authorities to provide justification on why was the app blocked and work towards ensuring transparency in such process.

April 24, 2018 - Comments Off on Statement: DRF expresses concerns over the security breach of Careem’s servers

Statement: DRF expresses concerns over the security breach of Careem’s servers

Digital Rights Foundation expresses serious concerns over the breach of servers of one of the most used ride-hailing services in Pakistan, Careem. It was announced in the company’s official statement on April 23 that its servers were breached on January 14, 2018 and since then it has been investigating the matter. According to the statement, the private and sensitive information of its millions of customers and drivers were stolen, which included their names, contact numbers, email addresses, passwords and trip data. According to the company, however, credit card and financial details were not affected.

This breach is particularly worrisome because Careem, as a ride-sharing application, amassed a huge amount critical and personally identifiable information of its users. Information compromised in the breach, i.e. names, phone numbers and trip data, can help identify individuals but also their whereabouts given trip patterns. This data, once revealed, has the potential to put lives in danger.

While we commend their effort of being transparent, the incident points at the larger issue of weak data protection protocols and putting people’s sensitive information and, in grim situations, their lives at risk. Moreover, in the light of many physical attacks on the drivers of the ride-sharing apps in the past couple of months in Pakistan, this incident further endangers life and property of the people using these services for an honest living or for safe commuting.

This particular breach of Careem’s security protocols raises a lot of queries and concerns that their statement failed to answer. First and foremost, why did it take four months to report the incident to the public. Although the blog states that they took their time to investigate into the details of the breach due to the complex nature of the incident, but the fact remains - millions of Careem’s customers and drivers were using their compromised accounts while there data was compromised. Customers were kept in the dark and had no mechanism of holding the company accountable.

Secondly, the statement fails to mention the number of customers that were affected by this breach. Careem is used by over 14 million users around the world, and the silence of this important aspect could signify that all of the users were influenced.

Furthermore, it is the right of the customers to have full transparency of the incident and the statement leaves several questions unanswered. Important questions like who was behind the hack, what happened to the stolen data, where is it stored, what measures has Careem taken to ensure the security of the stolen data, whether Careem takes responsibility of any unforeseen incident that the misuse of this data may ensue, and what actions has it taken to warrant strong security of customer information in the future.

Careem’s silence for four months and inadequate justification of the data breach is indicative of the fact that tech companies operate without being held accountable under any laws in the countries where they operate. Furthermore, in the absence of a data protection legislation that DRF has been advocating for since last year, incidents like this put Pakistani customers at risk and at the mercy of hackers who can use this stolen information against them without any legal repercussions.

It would be remiss not to point out that the business model for several tech companies has been to amass personal data and monetize it for profit-making. Companies, such as Careem, need to be more transparent regarding what data is collected, its storage and its ultimate use; and at the same time reorient its approach towards data. A larger critique of these practices and their human rights implications is in order.

April 11, 2018 - Comments Off on Statement: DRF condemns Google’s alliance with Pentagon

Statement: DRF condemns Google’s alliance with Pentagon

google-data-trends-analytics-ss-1920

Digital Rights Foundation (DRF) strictly condemns the involvement of technology giant Google with the US Department of Defense’s (DoD) Project Maven, an initiative that intends to deploy machine learning for military purposes, particularly in terms of using artificial intelligence to interpret video imagery which will potentially be used to improve the targeting of drone strikes.

This recent development, in the highest echelons of technology, has been unsettling for us as a digital rights organization situated in a region that has been at the epicenter of military operations by the United States, particularly drone strikes. DRF would like to register its concerns and alarm regarding the far-reaching ramifications of the proposal.

Here is what we know so far:

  1. Employees of Google, numbering in thousands (3000+) have drafted and signed a letter in protest of their employer’s collaboration with the State Department in Project Maven to help increase the existing technology’s efficacy in terms of video imagery and drone strike targeting. “We believe that Google should not be involved in the business of war”, the employees’ letter stated.
  2. The outcry is motivated by the employees’ resistance to the idea of Google allocating resources to the DoD for military surveillance and the potential ethical implication of such involvement. The news, broken by Gizmodo’s article on the 3rd of March, 2018 notes that this pilot project which was not previously reported, was the subject of much debate after being shared on an internal mailing list.
  3. The letter, addressed to the CEO, Sundar Pichai, demands a reassurance from the company by asking it to extricate itself from this allegiance with the Pentagon - the Headquarters of DoD - and for the implementation of a policy which promises that it will not “ever build warfare technology”.

This state of affairs is alarming for a multitude of reasons, the most crucial of which is the possible trend that this could give rise to in terms of overlapping roles being played by organisations that deal in mass data collection to operate and streamline their products in collaboration with state apparatus. The prime concern here is that a behemoth such as Google is used and trusted by billions every single day for business and leisure. Given its influence and role in the daily lives of people all around the world, and the fact that the fate of the data we all hand over to it is hitherto unknown, there will be serious doubts about how it is used. In the aftermath of the Cambridge Analytica scandal, this is a worrisome development especially since no official word has come from Google denouncing data leaks and providing reassurance as to the privacy of users.

Secondly, it should be noted that such projects carry the potential to cause physical harm to humans and/or give rise to geopolitical instability, so Google and the individuals working at the company should be extremely cautious about working with any military agency, especially given the notorious history of conquest that the US armed force enjoys. The consequences of such projects are not only difficult to mitigate but even predict. Moreover, they cannot assume that the DoD has fully assessed the risks involved in the Project before going ahead with it further. It is important to highlight that in the past, drone strikes have been inaccurate and have resulted in the loss of innocent lives, therefore creating a sense of fear within the general population of the targeted area. Indeed the sharpening of the military’s ‘lethality’ has been termed as a goal by the US defense secretary, Jim Mattis, a worrying indicator of the mindset in place. Thus, the onus is on Google as well to fully analyze the consequences and if this new technology is used by the US armed forces, then Google bears the ethical responsibility for the casualties.

Thirdly, since many of the details of Project Maven have not been made public, it is uncertain if Google has asked an independently constituted ethics board to veto or raise concerns regarding any aspects of the program. Any project review process should not only be independent and transparent but should also be made public, and without independent oversight, such a project runs a real risk of harm.

Lastly, as a country on the receiving end of drone surveillance and attacks, this does not bode well for Pakistan. These strikes have targeted the most vulnerable areas of Pakistan, particularly the politically marginalized FATA. As per a report published by the Bureau of Investigative Journalism, a UK-based not-for-profit organization, the strikes have killed between 424 to 966 civilians between 2004 and 2016. For a country not actively at war and for its citizens who did not have the ability or even get the chance to defend themselves before being killed by orders issued from thousand of miles away, this is a cruel mockery of the sovereignty of our boundaries. The alliance of Google with what is essentially a perpetration of ‘war crimes’ within the bounds of our nation, comes across as a breach of DRF’s beliefs in democratic participation. Drone strikes have in the past, however, repeatedly undermined democratic processes and denied decision-making powers to Pakistani citizens. The very concept of foreign surveillance within the territory of Pakistan and its airspace is unsettling.

The US government officials claim that the drone strikes are accurate and rarely harm innocent lives in the area but the reported number of civilian lives lost due to these attacks suggests otherwise. It has also been reported that in Pakistan where drone strikes take place, parents have taken their children out of school to protect them from possible strikes. Such are the lives of civilians living in these affected areas where they cannot even enjoy something as basic as roaming around in the streets without fearing for their lives.

Despite the high number of civilian casualties and criticism that the program lacks transparency, the US Government has repeatedly defended the strikes. While they claim that drone strikes are accurate and rarely harm civilians, strikes can kill or injure anyone in the area, even if they are only meant to kill a targeted individual. Many victims have come forward and shared their harrowing stories of when a drone strike changed their lives. One of the victims of a drone attack reported that 11 of his family members were killed, despite having no links with the Taliban. A member of a local pro-government peace committee was also killed, along with his three sons and a nephew, due to wrongly targeting their house, instead of where the militants resided. These are just two out of the many examples where civilians were killed in the name of collateral damage. Unfortunately, there is no accountability, at least in Pakistan, the death tolls are never confirmed and the strikes, whether successful or not, are never publicly acknowledged by the US government. The psychological impact of drone surveillance, when combined with the civilian casualties during strikes, leads to significant negative strategic costs that need to be incorporated into the assessment of the project by not only the US government but all the relevant stakeholders involved in aiding this project, including Google.

Although it is commendable that Google employees are debating the project internally and voicing their dissent, however there are other stakeholders involved as well--the citizens of countries who are on the receiving end of US surveillance and drone strikes. We strongly urge Google to reconsider the decision to collaborate with the DoD, considering the cost, hefty ethical stakes and safety risks involved.