 It is an honor to me to introduce this talk. NetPolitik in Switzerland between the Bodensee and the Motterhorn. I might present for this talk the trio in finale. Martin Steiger, the guy currently on the rightmost position. The speaker of the digital society. This is Paki Patrikire in the middle and Kire, the CEO of the digital society. Kind of CEO. Welcome to our trip through the Swiss NetPolitik as every year. The digital society is a non-profit organization and these are our partner organizations and we represent another 400 individual members as well. Between the Bodensee in the northeast and the Motterhorn in the southwest a lot of things happened. One of our federal counselors said the following thing, I really don't protect my computer. I just don't leave it lying around. That's the best protection. That's quite the statement from the previous minister of defense who said, well NSA can't really surveil us because like Swiss German is almost a kind of protection. He's from the canton Bern, which is where we continue. In Zimmerwald in a small spot in Bern, it's a few kilometers southwest of Bern Airport which is where signals intelligence based on cables is happening. Well we were there, we checked it out from the air. We flew across there in low heights and that's where the center for electronics operations of the Swiss army has its seat. You can see there are satellite dishes and radio installations and they do this so-called cable intelligence and this is kind of how it's visualized. We have users in Switzerland and they use the internet and the internet is international and so data crosses the border and that data is locked in a kind of mass surveillance without suspicion and they are stored just in case and well the center searches this data for certain search terms and filters them and just takes a look and the internet providers have to co-operate and all of that is secret and nobody really has any rights about that. And of course this is called cables intelligence because it affects fiberglass cables and of course it doesn't just affect metadata, it also affects contents and it's approved by the Minister of Defense and also by a secret court and it's filtered by sort of search terms but not the search terms themselves aren't approved and that's done through the army and then the results are analyzed by the civil intelligence service. And as we saw when we flew past, when they aren't just violating human rights, they are taking a break sometimes. And as you can see aren't civilian members, these are military members of the military and they are looking for recruits and please don't do that, that should not be a job violating human rights and fundamental rights is not a good idea to do as a job. Of course they are aware that they are being surveilled as well so for security reasons they ask you to send in your application forms and data in paper form. And of course they assure you that they are being discreet with your data but please don't do it, it's a bad idea. It's not just Timurwald, there is also surveillance infrastructure in other locations, you can see another one here. That's where radio and satellite surveillance happens or in Leuch in the Valley, there is a lot more. Half of this by the way is Swiss and the other half is American and while you can ask yourself, do they co-operate? We have to leave that question open. Of course as the digital society we are not happy about this, we filed an administrative appeal. Currently this appeal lies with this building, that's the Federal Court of Administration. We don't know when it will be dealt with, we are hoping that it will happen next year but there is one problem which is that this Federal Court of Administration is the aforementioned secret court for the cable intelligence. So the same court has to decide on both things and of course we don't even know what they decide for cable intelligence because it's secret. So we have to expect that they will decide against us and it will continue. We'll go to the Federal Supreme Court and then we go to the European Court for Human Rights in Strasbourg and we hope that at the latest there we shall win and in Strasbourg is where it will continue with Pocky. In Switzerland of course we have data retention since 10 years ago and here we have reached Strasbourg. This beautiful court with our appeals, we appealed against the data retention and metadata retention and beginning of March we got the decision from the Federal Court that yes it violates fundamental rights but the interest in public security and so on matter more and that's a kind of argumentation that we know from Germany but apparently it applies in Switzerland too and anyway we're just, you know, we just store metadata and it's not like NSA says we kill based on metadata. We continued onwards to the European Court of Human Rights with this and we can only do that because Switzerland still cleaves to international contracts and treaties and potentially we might have lost access to this had the Swiss decided differently. Until this is decided the surveillance law, the BUP, is still in force. And so the service responsible for this surveillance has found a way to further extend their powers. They have a notification and usually that happens through executive decisions where you could appeal or go through a process and here that just sort of happened and in there it says that the surveillance service defines very vaguely who has to retain metadata and if this applies to you or not the way you find that out is when you get an order from a court so this is now being enforced and who doesn't store metadata according to these rules will have to pay a fine of up to 100,000 Swiss francs And so this can be very costly so everybody will have to save metadata because asking ahead of time is kind of risky as well and so here we see a sample of from Martin about the metadata that has been retained about himself. So interesting is you get the IP address that Martin's phone actually had but I mean that's not really useful I mean missing is where you're connected to to which IP address also for the antenna the mobile cell antenna you only get the place of the antenna but not kind of into which direction the user was from the antenna that's a trade secret yeah so it's not very detailed but Martin also got 20 year old ISDN contracts with his request for information I mean the product Swisscom doesn't even offer anymore so then the question was do they have to keep this as long are they even allowed to keep this stuff that long we had some kind of weird decisions of our Supreme Court in the domain of IMSI catcher that's Stingray in English this type of device here so according to the old law very specific cases it was only allowed to use this and now the Federal Supreme Court decided well you could have used the Stingray before yeah so kind of it was made legal after the fact an important case for the new surveillance law actually kind of fell away with this but we have this new surveillance law and and so kind of Switzerland isn't really that good in terms of privacy so we're now falling behind the European Union also we don't really have a constitutional court constitutional court yeah and now we have a new law to surveil social insurance fraud so with the new law a lot of surveillance can be done without actually court decision so yeah some companies advertise with kind of how safe Switzerland is in terms of privacy that's actually not really their case so this here is us bringing the signatures for a referendum to the chancellery so the company that advertises with privacy in Switzerland is from the canton of Geneva and this is where our story continues with Martin we don't really have to introduce Geneva Geneva is kind of the e-voting or internet voting place in internet internet voting place of Switzerland so in Geneva there's places that look like look like this this is actually unrelated to e-voting we just had a visit at the CERN so they have this cool thing the anti-matter factory where they produce antimatter and do other cool stuff there's other interesting stuff there which kind of makes you afraid of the apocalypse so kind of where does the CERN buy stuff cement like for example these boxes were all over the place there i hope they're not using this as critical infrastructure so the canton of Geneva didn't just introduce e-voting they also developed their own system so it's one of two providers in Switzerland it was called it's called ch vote so you can order it there if you want to introduce do internet voting in Switzerland well i mean you could have ordered this but a few weeks ago there was this headline hackers find a security flaw in one of the biggest e-voting system in Switzerland these were hackers from the chaos computer club it turns out that you a user a voter can be redirected to a fraudulent website so i mean as you can imagine this is a serious problem if you're a redirected to a different website to cast your vote so this went through the media and the canton Geneva what did they do they sent a formal warning so that was in french came from the state of Geneva there was a few interesting things in here um so apparently we violated the the law protecting the coats of arms or it actually it actually uh there was a crime against the will of the people and that they undermined the confidence in the final results yeah so this typical situation there are some bad news and then you get punished for it so also this coat of arms protection all the kinds of very exotic what is this so this is a screenshot from this formal warning and here you can see the the coat of arms of the participating cantons so if you manipulate this website you reuse these coat of arms symbols and so this is actually a federal crime yeah so a couple of years ago we had a different case where a journalist was sentenced because he was able to show that you can vote twice in the canton of Geneva so in first instance he was guilty and the federal supreme court then dropped the charges so he should be thanked for the work that he does so after we relieved we received our formal notice uh three weeks nothing happens and then there the next news headline the dark day for internet voting in Switzerland well I mean I think it wasn't really a dark day for me because a state of Geneva announced we're stopping our system development of this internet voting system but it was an issue of security it's an issue of money much too expensive so the canton of Geneva isn't really uh poor but they think they can't really afford this anymore so these e-voting systems there's uh so there's a public call for um companies to develop this and here the so the technology and security has a weight of five percent in the rating so they're also here um requirements according to the bsi very interesting so we didn't find these requirements but uh yeah so as you can see here the the weight isn't really on security so there's one uh service provider left for internet voting it's uh the swiss post and they offer a product from skytle they're from Spain this company skytle and their world leaders in e-voting from their website we power democracy and they really mean it if you look more closely they really do everything election training registering voters you can vote on the internet then there's results consultation whatever that means and there's election night reporting so we can buy all of the direct democracy from this one company so how is this company financed with venture capital of course many uh lovely investors here so they give you money and of course they want to make a profit so a profit is definitely comes first over security so good luck if you trust the system like this so in switzerland there's still uh the federal council that trusts in internet voting so it was just trial runs so far and now it's supposed to be officially the third way of being able to cast a vote and so now organizations like the digital society switzerland can publicly comment on this uh on voting on the internet we also do other things so we want to have um a public referendum a moratorium on e-voting um on e-voting so that it can't be done unless it's at least as secure as paper ballots so you have to collect 100 000 signatures to be able to do this and then uh yeah we hand them in in burn and i give over to pocky okay so we continue in burn with uh internet blocking so i think in in all our talks internet blocking uh was a topic for us so this is kind of a symbolic image most decisions in switzerland are made in burn um yeah so internet blocking for politicians they look something like this this is a um a border fence only things that uh government employees want to let through actually go through though in reality that actually looks more like this i mean i showed this picture last year already but uh yeah it's really kind of symbolic for the state of things so in switzerland internet blocking is very popular so swiss come actually advertises net block internet blocking for uh private users so i'm not quite clear what this is but looks like the first dose is free so in the swiss gambling law we now have internet blocking so they wanted to kind of uh block access to foreign casinos we collected 50 000 signatures for a referendum yeah so this is us handing in those collected signatures technically they're not specified in the law but um supposedly they have to work in a way that even if it's a sub page on facebook that sub page can be blocked without blocking facebook so this is kind of an information leaflet that came out before the the referendum was voted on yeah i mean so there's kind of uh and some issues here obviously if you think about it but uh yeah unfortunately we lost this referendum with 34 percent of votes but we just couldn't kind of compete with starving squirrels and uh disfunded zoos so yeah this was really the first law in switzerland that had internet blocking and didn't really legitimize was legitimizing this vote so this really kind of sends out a signal so i mean on one hand we could collect these 50 000 signatures just based on this topic of of internet blocking but then on the other hand now there will be other upcoming laws that actually will include internet blocking probably so next one is the law that regulars telecom service providers they have want to block illegal pornography so um if you access then one of those blocked ips directly you will get kind of a placeholder page like this so kind of in some weird way during the crafting of this law from a can be implemented it was changed to the must be implemented even though everybody knows these uh blocking is not effective and these blocks are easy to bypass who need who wants to know um can to go can go to a consultation process answer that i wrote um on the government's web page and uh i included how to bypass blocks in this document which is now hosted by the government of course we fought for having a uh deletion mechanism into this law and and we won and now there is a delete and block um formulation in the law and we just have to keep a sharp eye on on how this is being implemented so this is only possible because politicians support us and give us access to the federal palace um this is a pass that bernhardt got and they bernhardt and others from the digital digital society go there and try to talk to people and show them this image about net blocking and um a lot of thanks to bernhardt and jogan i think yorgo yorgo sorry um um and we will continue need this work because the next uh law is already in the pipeline and that's the copyright law and that's uh continuing in zürich with martin so copyright law in zürich we don't just have the the river limo and this nice old town with churches but also a society which is called audio vision switzerland and that is part of an alliance against internet piracy which uh uh applies pressure to um enforce the law and they have the swiss flag in their logo but it's really about this it's about the americans who have this idea of a strong copyright law and they want to implement that worldwide and switzerland is one of the few countries that hasn't done so yet and this leads to the u.s declaring switzerland a pirate state what does that even mean well we're put on a list as a country which currently this year looks like this he's showing an image of the watch list where switzerland is in good company with funny other countries so switzerland is not in the priority watch list it's on the watch list here between saudi arabia and to jikistan so the countries on the priority watch list are having more pressure applied on them but even in switzerland it works and um so we get a we got a list of demands and and a lot of that has already been um uh done so we legalized mass um formal warnings um for file sharing um that's we had that once we got rid of it and now it should come back um all of any pictures any photos on the internet should be protected um of course we know how that works from germany it's getting expensive um upload filters take down and stay down should be implemented not for all providers yet but for many an internet tax should be introduced um if you share things on social media um you should pay of course not directly but sort of um we will have to indirectly pay when we buy a smartphone or internet access and um replay tv like um having to watch tv and non-linear at way um should have gotten rid of but wasn't but it might get more expensive and now more internet blocking it's not happening yet but the americans are applying a lot of pressure there and so it's not clear if that might not come after all and of course all of that has consequences um like we know this has consequences because of um file sharing like there have been uh searches um so like police shows up six in the morning and takes along all of the it devices and of course that were those weren't like pirates somewhere in a cellar though those were families and students and nice people so that was kind of unpopular and so it went away but like yeah but even for images look here the vegetarian chops way um and uh for this image roughly 2500 euros were were um organized so i mean it's a valid way now to make money with food porn because you can take a nice picture put it online somebody is stupid enough to to copy it and now you ask for money so next thing is we move to gertzensee which is a nice little um place in tun so data bounty um we have a lot of data lying around including in places where it's not supposed to be lying around so in gertzensee we are talking about hellocott.ch which is a portal that um brings people together who need a haircut with people who can provide a haircut and this portal suddenly went down and all of the hairdressers got um news like this turns out they got their server hijacked by a cryptidrogen they didn't have any um uh back out it was a military full bit encryption technician was informed and the portal is back up in the next case it hit someone bigger migro one of the biggest um supermarket chains in switzerland and martin wanted his data um and asked for data in a formal way and he got an answer of course they have a process and it works so a few days later he got a he got a letter um unfortunately he didn't just get his data but those of a random woman he didn't know wasn't the only case that something like that happened in switzerland um corp bank the corp bank bank claire these days sent um the wrong um years end data to a lot of people um that didn't lead to any trouble at all but at least it was clear who had to pay for a beer for everyone of course with our privacy laws nothing happened to the bank we do not have any uh relevant passages in the law and of course it was all the the interns fault it's always interesting to read these um letter templates um the standard letters because they they give an insight in how um companies and the state work and you should do that and and and you should ask the companies regularly for your data so that you kind of know what they do and they don't forget to make sure that you can know of course from your telecom provider you want your metadata and of course um migro probably does not have your um metadata so the next story were taxes taxes is kind of you know good and bad of course you want the roads to be nice and and trash to be collected um but unfortunately there is the software that you could use to uh do your taxes it runs under linux too and um that's been outsourced and you can scan your receipts and everything um and do your taxes and unfortunately they just end up on the internet visible to everyone they forgot to set uh their cloud storage to not browsable eh what can you do it happens it's like tax data isn't exactly private everybody talks about it in swiss and of course they uh heard from it from the researcher uh thought it was a joke and only reacted when heise asked about it and at this point um the page is down and they are celebrating the new year and what it looks like next year um for us um is what uh kir is going to talk about now in bremgarten so for a good 2019 i'm gonna talk about what's gonna happen in the future and we start in bremgarten we're going to have an excursion there um that's where the seat of the um digital society is that's where we had our first um meeting um and we still meet every half a year uh on the 4th of may um roughly 30 people will um from the different net politics-oriented organizations in switzerland will meet and talk about common topics and um things to do bremgarten it's a indelic little city at the roi on the river rois um but of course that idil is a bit deceiving at least if you trust this quality paper he shows a boulevard paper headline saying bremgarten um is seen as a nest of leftist extremists that was due to um raids that happened um after the g20 demonstrations um somebody was searched for in the cultural center in bremgarten in a big raid and unfortunately that person wasn't there um as far as i know they were home at that time and were left to walk free after a short conversation um that had consequences in in in hamburg these biometric data um that was gathered at the g20 um had to be deleted because it was gathered in an illegal way um and oh this is the um search warrant for this um whole thing of course uh luckily um at the first winter congress of the digital society in february 2018 we um had a presentation about how to act when the police um rings your doorbell in at six o'clock in the morning um on the 23rd of february 2019 we will have the second winter congress of digital society um you can buy tickets and uh the link is on the slide in the same place in the centrum calder große in zürich there will be a second um event um and this is a series of events um and the next topic will be digital digitalization in education on the 10th of january and on the 11th of april um the data ownership will be the topic right now we are going to continue with a workshop in the lecture room m one it's one um one floor down through the glass hall and um um to the right just ahead of adams there will be a workshop there um right after this talk where we will um deal with the topics um for 2019 how to get involved and um of course we are here for all four days um we have our own um space um in the about freedom cluster just one floor down as well we look forward to your visit and interesting conversations thanks a lot we have a very short time left for questions and otherwise we shall meet at the workshop in lecture hall m one okay microphones please uh please uh line up at the microphones if you have questions are there any questions from the internet no well if no one stands up then from my end thank you very much i guess another chance for an even bigger round of applause okay so thank you for your attention and remember organizations like this really live from your volunteer work if you're from so it's a land please help out the digital society so it's a land if you're from other countries uh help the organizations in your country