The Digital Rights Movement

Abstract

The digital rights movement is the loose, quarrelsome, transnational coalition of programmers, lawyers, cranks, and activists who spent four decades arguing that the freedoms people take for granted offline (to speak, to whisper, to read, to share, to be left alone) must survive the move into computers and networks. It has no single leader and no founding date. It is instead a chain of people who each answered a specific provocation: a badly aimed police raid, a law that made encryption a weapon, a prosecutor who treated a download as a felony, a state that quietly logged the whole internet. Some of them founded institutions that still fight in court today; some won landmark rulings; some went to prison; one killed himself while facing thirty-five years. This is the story of what they fought for, and what it cost them.

What “Digital Rights” Means

The phrase is younger than the fight. Before anyone spoke of “digital rights,” people were defending specific things: the sysop whose computer was seized without a coherent charge, the cryptographer forbidden to publish his own code, the student who copied a file. Only in retrospect do these look like one movement.

The unifying claim is simple and radical: a right does not evaporate because it is exercised through a machine. Free speech includes speech made of source code. Freedom of the press includes a mailing list run from a bedroom. The right against unreasonable search includes the hard drive. The right to privacy includes the right to use mathematics (encryption) that even the state cannot break. Each of these had to be won, argument by argument, because the institutions of the physical world kept insisting that computers were different, and therefore exempt.

The movement drew on older traditions, the hacker ethic (“information wants to be free”), civil-liberties law, and the free-software philosophy of Richard Stallman, but it became its own thing the first time the police came for the machines.

The First Fight: The Raids and the Birth of the EFF

In early 1990 the US Secret Service ran Operation Sundevil, a sweep of bulletin board systems it suspected of trafficking in stolen phone-card numbers. The raids were indiscriminate: agents hauled away computers belonging to people who had committed no crime, on legal theories about electronic communication that had no precedent. In a separate 1990 raid, the Secret Service seized the computers of Steve Jackson Games, a Texas game publisher, over a manual for a role-playing game, destroying a business over a book about fictional hacking.

Two men watching from the WELL online community decided the law needed a defender. Mitch Kapor (the millionaire creator of the spreadsheet Lotus 1-2-3) and John Perry Barlow (Wyoming cattle rancher and Grateful Dead lyricist) co-founded the Electronic Frontier Foundation (EFF) on July 10, 1990, together with Sun Microsystems’ John Gilmore; the early board and backers included Apple’s Steve Wozniak and Whole Earth founder Stewart Brand. The EFF’s premise was that police and legislators simply did not understand the technology they were regulating, and that someone had to litigate the difference. It won the Steve Jackson Games case, establishing that email stored on a seized computer had legal protection, and it remains the movement’s flagship institution today, now led by Cindy Cohn, the litigator who would later win the crypto wars’ decisive case. Barlow went on to write the movement’s most famous (and most wrong) text, the 1996 Declaration of the Independence of Cyberspace.

Europe got its own version of the crackdown four years later. In May 1994 the Italian Guardia di Finanza, on a narrow piracy tip, seized around 200 of the country’s ~300 FidoNet bulletin boards (the Italian Crackdown) decimating a legal hobbyist network and, in the backlash, giving Italy its first digital-rights activists in groups like Strano Network and PeaceLink. As in the US, heavy-handed enforcement against people who barely understood the medium was what first convinced that medium’s users they needed to defend it.

The Crypto Wars: The Right to Whisper

The sharpest battle of the 1990s was over mathematics. The US government classified strong encryption as a munition under arms-export law and pushed the Clipper chip, a scheme to give itself a key to every encrypted conversation. To a rising subculture, this was the whole game: without private communication, no other digital right was safe.

That subculture had a name. In late 1992, Eric Hughes, Timothy C. May, and John Gilmore began meeting in the San Francisco Bay Area; a member christened the group the cypherpunks (from cipher + cyberpunk). Their creed was Hughes’s Cypherpunk Manifesto (March 1993): “Privacy is necessary for an open society in the electronic age… We cannot expect governments, corporations, or other large, faceless organizations to grant us privacy… We must defend our own privacy if we expect to have any.” Their method was in the slogan “cypherpunks write code”, build the tools and put them in everyone’s hands, so that surveillance becomes technically impossible rather than merely illegal. The mailing list seeded much of modern privacy technology, and decades later, its logic ran straight into Bitcoin, the precursor chain from Hashcash to b-money is traced in The Cryptocurrency Revolution.

The war produced two heroes. Phil Zimmermann wrote PGP (Pretty Good Privacy) in 1991 and let it loose on the internet, putting military-grade encryption in ordinary hands for the first time. For that he spent three years under a US Customs criminal investigation for “exporting munitions”, an investigation the government quietly dropped in January 1996 after Zimmermann outflanked it by publishing PGP’s source code as a printed book, which was plainly protected speech. His full story is told in Phil Zimmermann and PGP. The decisive courtroom victory belonged to a graduate student: in Bernstein v. United States, the EFF backed Daniel Bernstein’s right to publish his own encryption algorithm, and in 1999 the Ninth Circuit ruled that source code is speech protected by the First Amendment, cryptographers “use source code to express scientific ideas in much the same way that mathematicians use equations.” The government’s power to suppress encryption collapsed. For the underlying science, see Cryptography: The Secret Science and Whitfield Diffie and Martin Hellman.

The Free Culture Front: Copyright vs. the Commons

The 2000s shifted the fight from privacy to copying. As the music industry sued file-sharers by the thousand and copyright terms stretched ever longer, a second wing of the movement argued that the same laws written to protect authors were being used to lock up culture itself.

Its philosopher was Lawrence Lessig, the Harvard/Stanford law professor who argued in Code and Other Laws of Cyberspace (1999) that “code is law”: that software architecture regulates behavior as powerfully as any statute. In 2001 Lessig co-founded Creative Commons, giving creators a menu of licenses to share work legally, and in 2003 he took Eldred v. Ashcroft to the Supreme Court to challenge endless copyright extension, and lost, a defeat that pushed him toward political reform. The movement also went electoral: on January 1, 2006, Rick Falkvinge launched Sweden’s Pirate Party on a platform of copyright reform and privacy; it won a European Parliament seat in the June 2009 election (a second followed once the Lisbon Treaty added seats) and spawned Pirate Parties across the world. The most notorious front was The Pirate Bay, whose defiant operators (chronicled in Peter Sunde and The Pirate Bay) turned a copyright trial into a folk legend. The legal terrain is mapped in Copyright and IP in the Digital Age.

This front produced the movement’s martyr. Aaron Swartz, teenage co-architect of RSS and Reddit, and a driving force behind the January 18, 2012 SOPA/PIPA blackout, the largest online protest in history (Wikipedia, Google, and ~7,000 sites went dark; the anti-piracy bills died within days), was arrested for mass-downloading academic papers from JSTOR. Federal prosecutors charged him under the Computer Fraud and Abuse Act with counts carrying up to 35 years. Facing that, he killed himself on January 11, 2013, at age 26. His death turned “CFAA reform” into a movement demand and made him its emblem; his life and prosecution are told in Aaron Swartz.

The European Front

Europe fought on different ground (less First Amendment absolutism, more data protection and consumer law) and built durable institutions. Germany’s Chaos Computer Club (CCC), founded in West Berlin on September 12, 1981 by Wau Holland and others, is the oldest and largest hacker association in Europe; it fused hacking with a rights politics of transparency and privacy, exposing insecure government systems to force reform rather than for profit. In June 2002, ten NGOs from seven countries founded European Digital Rights (EDRi) in Berlin (its founding board including the CCC’s Andy Müller-Maguhn) to fight for rights at the EU level, where it became a central force behind the GDPR and against mass data retention. In France, La Quadrature du Net, founded in 2008 by Jérémie Zimmermann and others, became the sharpest European campaigner against surveillance and for net neutrality. This European wing is why the world’s strongest digital-privacy law, the GDPR (2018), is European.

The Surveillance Era

In June 2013, an NSA contractor named Edward Snowden handed journalists proof that the United States and its allies were logging the internet wholesale, the exact outcome the cypherpunks had spent twenty years warning about. The disclosures, told in Edward Snowden and the NSA, vindicated the movement’s founding fear and triggered its largest practical victory: within a few years, encryption went from an activist cause to an industry default. HTTPS spread across the web, end-to-end encrypted messaging reached billions of phones, and “privacy by default” became a product feature rather than a fringe demand. The broader arc of that fight (cookies, bulk surveillance, and the law that answered it) is The Privacy War.

Dead End: The Utopia That Didn’t Arrive

The movement’s founding optimism (Barlow’s belief that the internet was inherently ungovernable and inherently liberating) was wrong, and honesty requires saying so. Governments learned to regulate the network; corporations enclosed it; the “new home of Mind” became a handful of surveillance-funded platforms with more data than any intelligence agency. The cyber-libertarian dream is examined where it broke, in Online Censorship and Internet Freedom and Surveillance Capitalism.

But the movement was never really the utopia; it was the resistance to its opposite. Measured concretely, it won more than it lost. Encryption is legal and ubiquitous. Code is legally speech. The internet was not turned into a medium fit only for children. Culture can be shared under Creative Commons. Europe has enforceable data rights. Those are not the gifts of a self-governing cyberspace; they are the hard-won results of specific people who sued, coded, campaigned, and in one case died. The through-line of the whole history is the same claim the first EFF lawyers made in 1990 and Cindy Cohn’s EFF still makes today: a right you hold in the physical world, you hold in the digital one, and if no one defends it there, you will lose it there first.