Brenno de Winter

Brenno de Winter (born 6 December 1971 in Ede) is a Dutch ICT and investigative journalist. He writes for Linux Magazine, Computer!Totaal, NU.nl and Webwereld and is a commenter for the PowNews programme on PowNed TV. Brenno is also a podcaster and hosts "Laura Speaks Dutch". He caused controversy by submitting requests for information on the basis of the Open Government Act (WOB) to include Jeltje van Nieuwenhoven (regarding her role as OV ambassador)^[1] and hundreds WOB requests to all Dutch municipalities and provinces.^[2] Because not all agencies fulfilled the WOB requests, de Winter filed lawsuits against them.^[3] The Dutch Association of Journalists (NEY) supported de Winter.^[4] In the decision of the Hague court on 4 May 2010, de Winter's favor, which is not confirmed that municipalities may levy fees for the appeal to the WOB.^[5] In April 2010, de Winter was involved in the disclosure of the expenditure of the FENS funds (1.3 billion euros) by the NS.^[6] After the publications^[7] and media appearances]^[8] of de Winter related to the ease and simplicity of the OV-chipkaart, the public transport smart card in the Netherlands, the Minister of Infrastructure and Environment was able to get the NVB in Haaglanden about a one-month postponement. Due to the disclosure the District Attorney decided to open a criminal investigation against de Winter; however,^[9] after a legal defense fund met its goals within an hour.^[10] The Journalist magazine Villamedia has named Brenno de Winter as the journalist of the year 2011.^[11] In July 2012 de Winter broke a new story about Dutch employer censorship after an employee of Unisys Netherlands was threatened with termination for giving a presentation about online censorship for the conference Last H.O.P.E., New York, USA^[12] In September 2012 de Winter released a video and accompanying news story of how he was able to use an obvious fake identification to gain access to numerous Netherlands and European government offices: The European Parliament, four Dutch Ministries among which the Ministry of Justice and the Ministry of the Interior, The Dutch Secret Service, The Dutch Telecom Regulator OPTA, The Dutch National Cyber Security Center, The Royal Palace, The Dutch National Police, The Police Department of The Hague and Brabant Zuid-Oost. De Winter purchased the obvious fake ID at the 28C3 Chaos Computer Club Congress in 2011 where he was the conference closing speaker.

Open source software

Since 1993 de Winter has developed software for commercial applications. Since 1995 he focuses on projects with open source software as a basis. From late nineties he gives lectures and trainings on this and advises organizations on their IT security.

Journalism

Since 2000 de Winter has been a professional journalist. The articles written by him focus on the business side of the IT industry and the technical aspects of open source software and IT security. In his work as an investigative journalist, he makes frequent use of the WOB. This has in the past led to controversies.

OV-chipcard Security Jeltje de Nieuwenhoven wrote a report during her function as OV (public transport) ambassador called "The OV-chipcard, the Traveler and Confidence"^[13] which concluded "many travelers are not very concerned about privacy; it's only an issue when the media makes an issue of it. However a small amount privacy is important". De Winter found that these statements, other statements and recommendations in this report were not substantiated and so sent a WOB request in order to gain an understanding of the data on which these claims are based. De Nieuwenhoven rejected this application. De Winter presented this to court. The OV-chipcard/MIFARE uses 48-bit encryption and offers no modern security features.

Netherlands in Open Connection During the program's Open Standards and Open Source Software, later as part of the Open Source Software Strategy (for the government), (OSOSS) (2002-2007) and its successor Netherlands in Open Connection (NOiV) (2008-2011) de Winter followed developments critically. It turned out that the House of Representatives did not follow its policy on the implementation by the IT departments of the government. De Winter issued a WOB request to the Dutch Association of Municipalities (VNG) to gain more insight into the performance. When the VNG refused to make the information public, de Winter filed a lawsuit^[14] and later WOB requests to all individual municipalities, provinces and many independent administrative bodies. This was Winter on 16 December 2009 at the presentation of the Book A wall of rubber, the WOB in journalistic practice, to criticism from the parliamentarian Pierre Heijnen (PvdA).^[15][16] This was criticized by the other attendees at the meeting, including former minister Bram Peper.^[17]

Criminal proceedings and dismissal In 2011 de Winter was the subject of a criminal investigation. For uncovering weaknesses in the chip card and the central system the Public Prosecutor assumed he was illegally cracking the cards. The company behind the chip card has reported. Winter by the Public Prosecutor considered suspicious for manipulating value cards, possession of means to do so and computer intrusion.^[18] He faced imprisonment for up to six years. De Winter indicates that the manipulation was performed as part of the journalistic investigation into the weaknesses of the OV-chipcard expose and denounced the investigation. In demonstrating the weaknesses were also journalists, among others, the NIS, the public broadcasting Powned, Computerworld, RTV Rijnmond involved. Against them would not report been made.^[19] In order to pay the legal costs NU.nl, Computerworld, PC-Active and GeenStijl started a campaign to raise money. Within an hour the necessary €2,500 was raised and the funds kept coming.^[20] The case dargged a while and, according to Winter influence on his work. He now also being hindered in his work by the prosecution.^[21] The Dutch Association of Journalists supported de Winter in his case. On 8 September the prosecution announced that Brenno de Winter would not be prosecuted for fraud associated with the smartcard. The prosecutor noted that de Winter acted carefully and the limits of the permissible maxima were not exceeded. Moreover, in this case considered important in that de Winter, a professional journalist exposed the vulnerability of the smartcard and was criminally investigated for fraud by the request of the corporation associated with the card.^[22][23]

See also

• Chaos Computer Club Wiki
• MIFARE

Publications

• (Dutch) Computer! Total: Linux in practice, 2004, Addison Wesley, ISBN 9043009342
• (Dutch) Privacy and the Internet: How do I protect my identity?, 2011, Academic Service, ISBN 9789012582414
• (Dutch) Open Map, 2011, Academic Service, ISBN 9789052619071

References

External links

Wikimedia Commons has media related to Brenno de Winter.

• Laura Speaks Dutch Podcast
• (Dutch) bigwobber.nl, website, 24 September 2012
• 28C3 Chaos Computer Club Congress, website