Informed P2P User Act intended to prevent people from accidentally sharing files on their computer by requiring that file-sharing programs first provide notice and obtain consent from users.
Legislation designed to protect people from privacy and security risks when using file-sharing software has been introduced in the House of Reps.
Sponsored by Reps Mary Bono Mack (R-CA), John Barrow (D-Ga.), and Joe Barton (R-Texas), the Informed P2P User Act [H.R. 1319] is intended “to prevent the inadvertent disclosure of information on a computer through the use of certain `peer-to-peer’ file sharing software without first providing notice and obtaining consent from the owner or authorized user of the computer.”
“Far too many people have no idea that they could be sharing all of their personal files and documents when popular peer-to-peer software is on their computer,” said Rep Bono Mack in a statement. “Computer users deserve to know – in fair and simple terms – about this potential security risk. This bill will empower individuals by making them aware and keeping them from inadvertently sharing their private information with complete strangers.”
As file-sharers are well aware, many have inadvertently allowed access to sensitive information on their PC by improperly configuring their shared folder. This has now drawn concern from lawmakers.
“A lot of folks connect to these networks and don’t even realize that their most personal and private files are visible to everyone else on the network at any time,” said Rep Barrow. “It’s like they’re posting their tax returns, financial records, and personal messages on the Internet, and they don’t even know it. This bill will let them know, in a way they can understand, that the information on their computers could be at risk. We have truth in lending and truth in labeling – this is truth in networking, and we need it.”
The legislation would require file-sharing programs to show users a “clear and conspicuous notice that such [a] program allows files on the protected computer to be available for searching and copying by another computer,” and to obtain the “informed consent to the installation of such program from an owner or authorized user of the protected computer.”
The bill would also require file-sharing programs to provide “clear and conspicuous notice of which files are to be made available to another computer.”
It would also make it illegal to prevent the authorized user of a computer to block the installation of a P2P file-sharing program, disable or remove the program.
“From tax returns to family photos, a person’s private information should not be unknowingly shared to anyone in a P2P network,” added Rep Barton. “This bill illustrates that there are bipartisan solutions to this problem and takes strong steps to empowering P2P users with information they need to better protect themselves and their families online. Congresswoman Bono Mack has proven herself to be a leader in matters of online security, and I am proud to join with her and Congressman Barrow in this important effort.”
The statement on Bono Mack’s Web site that announced the legislation also mentioned recent reports that P2P software was involved in a recent security breach with Marine One, the presidential helicopter, whereby a US Defense contractor reportedly leaked classified military information about it.
Related Posts
- House Committee Takes Up P2P Protection Bill
- P2P Association Announces Initiative to Stop Accidental File-Sharing
- P2P Leak Hits Congress
- House Introduces Bill Banning P2P from Fed PCs
- Steganos Security Announces Secure File Sharing Program
Loading ...
Having helped many relatives with their computer woes, I can attest to the ignorance of many computer users. For that reason I understand the reasoning for this bill. Sadly I don’t see it changing much, it will simply cause people who are I’ll informed to think file sharing automatically opens up your computer to everyone. A better solution would of been the prevention of an automatic shared folders. Users should be forced to select the folders they want to share, the software should never automate the process, or add certain folder by default. If vendors would of never created the auto shared folder settings in the first place this would of never become a problem.
As well intended as this legislation is, it is ultimately futile. If a P2P program is developed in a different country this law will have zero effect. As for those that develop their programs in the US, they’re probably small operations that don’t have legal teams and I’m not sure if they would even care enough about the law to keep up with new legislation such as this.
Also, how would one go about enforcing this type of law? Police can’t be there watching the coding. If someone dose expose their data due to automatic sharing how much do you really think they could get from the app builder? Not much.
Anyway good thought for a law, but ultimately impractical in terms of enforcement. I say it would be better to spend money to educate people on not sharing their whole harddrive when they install P2P programs. Its not hard, and most P2P programs even ask what you want to share during their first-run configuration.
IMO if there is any data breach because someone put a P2P program on their PC and they shared their whole harddrive then they should be the only one liable for the breach.
I agree that it wont protect everybody, but it will help those use US-based programs like Limewire, probably the #1 N00b P2P program around….
I bet these politicians have never used Vista – with its neverending requests for permission to do what you’ve asked it to do.