[Cc-webedit] Embedded video player at climatecamp.org.uk

[Jim Dog]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Hey all

Just a bit worried about the embedding of the YouTube player on the
front page of the Climate Camp website during a day of mass action.
cc-ing in the imc-uk-tech list as well as people there may be able to
offer support in finding a suitable alternative.

When visiting the front page of the Climate Camp website, all visitors
IP details are passed to several third parties without their consent or
knowledge. Firstly to YouTube who are hosting the video (and displaying
their branding on the player itself so Climate Camp is providing free
advertising for a corporate service).

Also, this embed is being provided by another third party corporate
service, Conviva (http://www.conviva.com), whose privacy policy states:

"We may disclose information under the following circumstances:

    * - When we share anonymous, aggregated information generated by our
services with our business customers.
    * - When we share anonymous data with third party service companies
to facilitate or to provide certain services on our behalf.
    * - When we respond to subpoenas, court orders, or legal process or
to establish or exercise our legal rights or defend against legal claims.
    * - When we believe in our sole discretion it is necessary to share
information in order to investigate, prevent or take actions against
illegal activities, suspected fraud, situation involving potential
threats to the physical safety of any person, violations of term of use
of Conviva, or otherwise required by law.
    * - When we need to transfer information about you if Conviva is
acquired by or merged with another company.
    * - Links to Other Sites"

If you go to the front page of the climate camp website, you will notice
an abundance of this and other online statistic gathering sites
hoovering up information on visitors of a site that promotes the use of
direct action (and is therefore of interest to law enforcement agencies).

not worried? Check out these other little nuggets from the conviva
privacy policy:

"while we strive to use commercially acceptable means to protect your
personal information, we cannot guarantee its absolute security."

and

"Your information may be transferred to, and maintained on, computers
located outside of your state, province, country or other government
jurisdiction where the privacy laws may not be as protective as those in
your jurisdiction. If you are located outside of the United States and
choose to provide information about you to Conviva, please be advised
that we transfer all information including personally identifiable
information to the United States and process it here. Your consent to
this Privacy Policy followed by your submission of such information
represents your agreement to that transfer."

Note the fact that none of the users of the site have chosen to do so.

Anyhow, the solution to this is to host such videos within the movement
rather than utilising corporate, paid for services to further a campaign
which many times over in the past has stated its anticapitalist aims.
There is of course Indymedia that these videos can be hosted at (that is
after all what Indymedia is for), but I am hoping that people on the UK
tech list can also suggest other, alternative options.

Solidarity

JimDog
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.10 (GNU/Linux)
Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/

iEYEARECAAYFAkxyTjkACgkQjI3ttaQQxvaXXACfUDKiMhyDaUajXxDwVVbKi9sM
KT0AnRwrrWgl4IAjYerJzCLW3ajBB2ZO
=1iE2
-----END PGP SIGNATURE-----