This is a free event, but we need to get an idea of how many people are coming, and a rough list of contacts so that we can furnish you with things like Wifi keys etc.

Anyway, tickets are being served by Eventbrite like our virtual event, go get yours!

This was an enjoyable and lively event made up of a panel of interested parties and members of the public.

On the panel were:

• Robert Buckland (Tory candidate, Swindon South)
• Steve Goddard (Lib Dem candidate, Oxford East)
• Peter Hitchens (Columnist, Mail on Sunday)
• Peter Tatchell (Human Rights Campaigner, Green candidate, Oxford East)
• Glyn Wintle (Open Rights Group)

Many points were raised, including the need to not be complacent.

Something of particular interest which was raised by someone in the audience before I had a chance to do so, and that is the issue of data ownership.

I think that it is data ownership that is at the heart of the issue here. As we move into a much more data-centric society with more and more information about us is held by third parties, we need to start looking at our laws – and in particular to enshrine in law the concept that data about a person belongs to that person.

Right now we have a rather backward system where agents – be they the Government or Amazon – who collect information about your view that information as theirs. They mine it, monetise it and share it, all without your permission.

If the organisation is in the UK, there is a certain amount of protection afforded to you by the data protection act (unless it’s the government that holds your data), but this is rarely enforced and has been systematically weakened by the labour government.

What would happen if individual was the arbiter of who has access to what? Since third parties can be rarely trusted to retain important data, what would happen if we made the individual the physical gatekeeper of such information?

Could we have a device that asked you “Agency X is trying to access item Y, allow? (no, once, always)”, and allow you to revoke such permission at any time?

Such data you released could then be licensed, and perhaps we could at last put DRM to some good use?

Its technically possible, but probably impractical. Still, if we could just do the very first part – reversing the basic idea of who owns what – we would have a way forward.

Data about me is mine, the audit trail I leave as I live my life is also mine. Some time after I die, I dare say it would be useful for society to have access to that data since I no longer need it (perhaps for census data or medical research) but certainly while I am alive it is me that should govern who has access and for what purpose.

While I am alive it will be necessary for some third parties to have access to my data, either because it exists in their systems, or because they need it to provide me with a service. I can choose to grant access to them for a limited time and for set purposes.

There is already a system in place to handle this sort of arrangement, its called copyright. Thanks to all the lobbying done by big business the punishment for copyright infringement these days is punitive to say the least (in most cases it is a civil offence not criminal – so theoretically less punitive than a breach of the DPA – but civil actions seem to be pursued more often).

Wouldn’t it be a delightful irony if these restrictive and punitive laws turned out to be one of the great safeguards of individual sovereignty?

Of course, as I mentioned previously – once the data is out it is out – so it is still better not to give out unnecessary information in the first place.

But if the individual was concious that data belonged to them in the same way as their clothes, car or house they might mind a little more if this data was misused. Equally, if agencies feared the punitive action for such misuse available under copyright law, perhaps such instances of misuse would be fewer.

Just a thought, any lawyers want to comment?

To give us some idea of the numbers coming we have tickets available on Eventbrite, so go grab yourself one!

Our main avenue is the event Friendfeed account here: http://friendfeed.com/barcamptransparency

We have prepared three virtual rooms for you to discuss issues related to:

1. Open government – http://friendfeed.com/ff-bct09opengoverment
2. Cyber-activism – http://friendfeed.com/ff-bct09cyberactivism
3. Social media ethics – http://friendfeed.com/ff-bct09socialmediaethics

Later this week we will be releasing the first batch of tickets for the main event using the same system, more to follow so watch this space!

This is a fabulous venue (the same one as Barcamp Apache Oxford), directions and other details can be found on our website.

I am also delighted to announce that Google has agreed to be the main sponsor for the event and will be covering the cost of the venue for us! Big thanks to all at Google and our other sponsors for making this event possible!

See you there on the 26th July!

A good example of where this has been done is the newly introduced Captcha functionality available in the latest nightly testing builds of Elgg.

The Captcha functionality is provided by a module which extends a view called “input/captcha“. This view is blank by default but is used in several places such as user registration and the lost password form.

This means two things; firstly that if a Captcha module isn’t installed or enabled then forms behave normally, and secondly it becomes a trivial matter for third party modules to provide their own Captcha functionality.

This same mechanism is how the URL shortener module works by the way.

Next, the Captcha module extends a number of actions to require a correctly validated Captcha code. This list itself is the product of a plugin hook which returns an array of actions which require Captcha validation:

$actions = array();
$actions = trigger_plugin_hook('actionlist', 'captcha', null, $actions);

...

function captcha_actionlist_hook($hook, $entity_type, $returnvalue, $params)
{
if (!is_array($returnvalue))
$returnvalue = array();

$returnvalue[] = 'register';
$returnvalue[] = 'user/requestnewpassword';

return $returnvalue;
}

The reason why the list of actions is provided this way is twofold, firstly it lets modules use Captcha functionality in their own code through a generic interface, and secondly it is harder to spoof than looking for some marker in the form code.

The Captcha itself injects a server generated token into the form, which together with the user’s response to the characters generated in an image are used to validate that the user is indeed human.

As we can see, Elgg asks to be provided with a Captcha if one is available by including a specific view, but is agnostic as to where (or indeed if) this functionality is supplied.

By using the techniques available to an Elgg programmer I was able to loosely couple the Captcha system to Elgg in such a way that a third party can easily use the same techniques to provide a more advanced module.

Happy coding!

Image “A new Captcha approach” by XKCD

This was a techy event organised by @mattythorne and @loleg at the Jam Factory in Oxford bringing together hackers, ideas people and general interested populous to bash out some ideas and start hacking on some projects.

The group split into two main camps based around a couple of ideas; Oleg wanted to hack on a visual wiki representation, and my off the cuff idea which I’ve been playing on for a little while – the Stalk-O-Matic.

Stalk-O-Matic is a little data mining toy I have had in skunk for a while which uses the Google Social Graph api to aggregate much of the public information available on the internet about you into an easily explorable form. This is done for the purposes of education and illustrates just how public private information is – something that I might talk about at Barcamp Transparency.

Off the back of the Geek Jam I have open sourced the code and have started a Google Code project which I’d be interested in seeing people get involved in – usual “It was a private hack made public so is a total mess” disclaimer applies!

Anyway, I found today both enjoyable and thoroughly useful. I hope that there will be many more events like this in Oxford!

I therefore urge you to keep the 26th of July free in your calendar! Tell your friends!

On a somewhat related note, I vote for Global Voices Advocacy, because they are doing some very important work regarding freedom of speech and the fight against censorship – and without those you can’t have transparency or democracy.

This blog post is part of Zemanta’s “Blogging For a Cause” (http://www.zemanta.com/bloggingforacause/) campaign to raise awareness and funds for worthy causes that bloggers care about.

Please take a moment to digg this up!

I just thought I’d write a quick post about it as this module makes use of a bit of Elgg functionality which has been around for a while, but that I know a number of plugin developers have missed.

Namely, the ability to extend actions.

When the Elgg framework calls an action the Action handler triggers a plugin hook called “action” before executing the action itself. This hook looks like this:

$event_result = true;
$event_result = trigger_plugin_hook('action', $action, null, $event_result);

Where $action is the action being called. If the hook returns false then the main action will not be executed.

The captcha module uses this to intercept the register and user/requestnewpassword actions and redirect them to a function which checks the captcha code. This check returns true if valid or false if not (which prevents the associated action from executing).

This is done as follows:

register_plugin_hook("action", "register", "captcha_verify_action_hook");
register_plugin_hook("action", "user/requestnewpassword", "captcha_verify_action_hook");

.
.
.

function captcha_verify_action_hook($hook, $entity_type, $returnvalue, $params)
{
$token = get_input('captcha_token');
$input = get_input('captcha_input');

if (($token) && (captcha_verify_captcha($input, $token)))
return true;

register_error(elgg_echo('captcha:captchafail'));

return false;
}


As you can see, this lets a plugin extend an existing action without the need to replace the action itself. In the case of the captcha plugin it allows the plugin to provide captcha support in a very loosely coupled way.

Happy coding!

I am pleased to announce that the Barcamp Transparency UK sponsorship pack is now available! Many thanks to @sylwiapresley for putting this together!

Please help by spreading the word as much as you can, and if you represent an organisation that is interested in sponsoring us for any amount then don’t hesitate to get in touch!