Addison Cameron-Huff, Blockchain Lawyer

Who runs Ethereum? Who's accountable for what happens on the Ethereum network? This is the first in a series of blog posts exploring this topic.

I've started a new law practice that's 100% dedicated to serving the blockchain/crypto market. The launch was been covered on Friday by Bitcoin Magazine: https://bitcoinmagazine.com/articles/canadas-first-all-crypto-legal-firm-opens-its-doors-to-global-clientele/. The firm was officially opened on the 10th anniversary of the Bitcoin genesis block, January 3rd, 2019. I'm excited to be able to work full-time in this industry as cryptocurrency enters its second decade.

From 2013-2017 I ran a technology law practice that slowly transformed into a cryptocurrency-focused law practice. The law practice was very successful, serving around 150 clients, primarily located in Ontario. But it was a bit too busy. In the fall of 2018 I was faced with the choice of either expanding my practice (i.e. hiring associates or adding partners), joining a larger firm, or doing something more radical. Around this time one of my key clients, Ethereum co-founder Anthony Di Iorio, expressed an interest in having me change my role from outside counsel to inside counsel. In 2017 Anthony made me an offer to join Decentral Inc., his main corporation, as its Chief Legal Officer. Within two months I was promoted to President and took on a general management role.

My last blog post was in August, 2017. The reason why there hasn't been other posts since then is that I became the President of Decentral Inc.

At Decentral I led the development of a next generation cryptocurrency wallet (jaxx.io) and many other exciting projects. I built up the company to 35 employees, increased revenue by millions of dollars a year, released a major new platform, and helped nearly a million people around the world to interact with their cryptocurrency. I didn't have time for personal blogging.

Last week the CSA published a staff notice on ICOs (token crowd sales) and cryptocurrency funds. This week my thoughts on that staff notice were published in Bitcoin Magazine: https://bitcoinmagazine.com/articles/op-ed-planning-ico-canada-here-are-10-regulatory-points-ponder/.

The actual staff notice, titled “CSA Staff Notice 46-307 Cryptocurrency Offerings” can be read here.

In an hour I'll be speaking on a panel at the Bitcoin & Ethereum Summit. The topic for the panel is ICO vs. VC. As a prelude to the talk, here's a table that compares venture capital (VC) investment with initial token offerings (ITO)/initial coin offerings (ICO) sales:

A model American state law for virtual currency businesses was approved last week by the National Conference of Commissioners of Uniform State Laws: “UNIFORM REGULATION OF VIRTUAL CURRENCY BUSINESSES ACT”.

I hope that this model law is not used as inspiration for regulatory efforts in Canada. This blog post explains why.

The US Securities and Exchange Commission has published a long report on the “The DAO” that contains an an analysis of the application of US securities laws to token sales/ICOs.

Surprisingly, they decided not to proceed with an enforcement action against anyone involved in The DAO. The full report can be read here: https://www.sec.gov/litigation/investreport/34-81207.pdf.

On March 20th Donald Johnston (Aird & Berlis) and I ran an event with OsgoodePD titled “Critical and Emerging Issues in Blockchain Law”. This is my recap of what was covered.

I created flatlaw.ca in 2013 shortly after starting up my law practice. It's now one of the highest ranked sites for many fixed fee-related search terms on Google. As of June 3rd, there are 100 lawyers advertising 551 fixed rate legal services products.

This blog post contains some of the statistics for the site over the last couple years.

I ran a webinar this afternoon with the BC Courthouse Libraries titled “Digital Security for the 2017 Lawyer”. You can download the slides here.

The event was conceived and hosted by Katrina Leung, a BC corporate-commercial lawyer who works for the BC Courthouse Libraries. We had about 125 people tune in and they've kindly permitted me to distribute the slides. A webcast will also be made available next week on their Vimeo page.

My article on “tokenization” of real world assets was published by Bitcoin Magazine on Friday.

From the introduction:

“Tokenization is the process of converting rights to an asset into a digital token on a blockchain. There is great interest by financial intermediaries and technologists around the world in figuring out how to move real-world assets onto blockchains to gain the advantages of Bitcoin while keeping the characteristics of the asset.”

Yesterday I spoke at the OsgoodePD mini-conference on “Critical and Emerging Issues in Blockchain Law”. One of the items I covered was a brief highlight of laws that are often relevant to blockchain companies. Here are the statutes:

1. Federal anti-money laundering law: Proceeds of Crime (Money Laundering) and Terrorist Financing Act. Note that there's also a Quebec law that might be relevant.

The Bank of Canada released a working paper this month that contains a bold claim: “Lesson 1: Digital currencies will be counterfeited.” The paper is on the lessons that private bank notes from many decades ago hold for digital currencies today. Much of the paper consists of an excellent history of bank notes. But the paper also contains claims about digital currencies, specifically, private, non-Central Bank affiliated digital currencies like Bitcoin. This blog post explains why the working paper's Lesson 1 claim about digital currency counterfeiting is not correct.

The working paper states that bank notes have always been counterfeited. They then go on to explain several problems with digital currencies that have nothing to do with counterfeiting (such as "fraud" and "cyber attacks") and conclude with:

Bitcoin hit new record highs recently ($1600 CAD), in part based on speculation about Bitcoin ETFs. Although some people look at Bitcoin as in investment, other people use it as a payment method. What sorts of things can you buy with Bitcoin?

In recent months I've used Bitcoin to pay for:

The Delaware Court of Chancery (leading corporate law court in the US) ruled on Wednesday in a case that involved miscounting of shares as part of a buyout of Dole. In a footnote the court notes that blockchain technology would be a good solution to one of the key issues in the case:

“[D]espite laudable and largely successful efforts by the incumbent intermediaries to keep the system working, the problems have grown. ... Distributed ledger technology offers a potential technological solution by maintaining multiple, current copies of a single and comprehensive stock ownership ledger.” - Footnote #1, pgs. 8-9

Delaware is the corporate capital of the United States. It has more corporations than residents. Many jurisdictions would like to follow in Delaware's footsteps and become a hub for incorporations (one benefit: ongoing registration fees). And in 2017 there's an opportunity to use technology to leapfrog Delaware and create a global corporate hub. This blog post lays out how Rwanda could create a Delaware-beating infrastructure based on blockchain technology (also called "Distributed Ledger Technology"). Added bonus: Rwanda create a new class of online corporation with publicly traded securities.

Last week I spoke about blockchain-based corporate voting (and other topics) at the “Blockchain Symposium” held by Gowlings WLG in Toronto. This blog post expands on that discussion and explains why I think corporate voting via blockchain will be reality within the next few years.

Corporate voting is just one aspect of the large constellation of service companies that handles ownership, registration, transfer, settlement, clearing, and other functions of the public securities markets. What's going on in the world of securities management/investor communications?

TD is looking for a manager for their "Enterprise Shared Platform of Blockchain Center of Excellence". The position "reports to the VP, Blockchain CoE to support the business priorities of the Blockchain CoE." The ad was posted a month ago: https://www.linkedin.com/jobs/view/236085965.

The US Federal Reserve published a paper this week on the application of blockchain technology to the payments, clearing and settlement sectors of the US financial system.

The paper is an excellent overview of the current system and how blockchain might change things. Section 2.1 provides explanations of payment processing, securities post-trade processes and the roles of financial intermediaries. From the section on settlement:

Starting a blockchain software business? Below is a checklist of some of the legal & business issues common to this emerging industry.

1. Code

Note: This post was written by Victoria Barclay and Dennis Bardetsky of the CFA Society Toronto. I've republished it here (with their permission) because the publication this appeared in, The Analyst (September edition), is not available online. I've slightly reformatted the article to better fit this blog. I was one of the panelists who spoke at the conference. The original title was "FinTech Conference - Three market developments poised to disrupt your business".

Just over a year ago I met Nachshon Goltz. Fast forward today and together we've built the world's most comprehensive global law search engine and implemented a new model for legal search. We run Global-Regulation.com, a law search engine that makes use of machine translation to make laws written in 25 languages searchable in English.

EY recently released a report for the UK government about how its Fintech sector stacks up against other global financial hubs. Toronto was not on the list of comparable jurisdictions. But if it was, it would probably be in fourth place by region.

I'm a technology lawyer and a legal technology entrepreneur. I was recently asked to contribute to a book about how people are leveraging law degrees outside of law. The author has allowed me to publish my thoughts here and hopefully they'll appear in print at a later date. Below are the three technology products I've developed that wouldn't have happened without a combination of J.D. and programming.

Last summer I wrote about why Ontario's bus system is so uncompetitive. That blog post has received a lot of traffic and I've even received a few emails from entrepreneurs wondering how to start a bus company. This summer the Ministry of Transportation (MTO) is discussing reform and has put out a discussion paper. The paper contemplates removing legal barriers to entry/reforming the Ontario Highway Transport Board and poses seven questions. My answers are at the end of this blog post.

McKinsey & Company (a prominent consulting firm) has released a report on the application of blockchain technology to the insurance industry.

"The DAO" was an attempt to create a virtual currency investment fund on the Ethereum network. I wrote about it from a legal perspective back in May. In the month following my blog post, The DAO reached over $150 million USD in value and was then hacked.

I am back in the office after a couple weeks in Japan (mainly Tokyo, Kyoto and Hiroshima). Below are a few of the highlights.

Teva Canada Ltd. v. Bank of Montreal, 2016 ONCA 94, contains everything you ever wanted to know about how cheques work and is a case study in financial risk. This is interesting reading for anyone who works with cheque systems or is seeking to replace them (re: Fintech industry). The litigation is focussed on the (federal) Bills of Exchange Act.

The case began with a Teva employee writing cheques to himself for around $5 million. The employee registered Master Business Licenses (MBLs) for names similar to Teva customers (and then a couple imaginary ones).

This blog (and the entire cameronhuff.com domain) now uses SSL courtesy of the Let's Encrypt project.

If you're not using SSL, see if your hosting company offers support for Let's Encrypt (Dreamhost has a great integration). It's free and works just as well as any other SSL cert.

A little while ago I had a Skype consultation with an Italian entrepreneur who had a problem with a German software developer. I asked what the problem had to do with Canada and he said nothing. I asked why he wanted to hire me and he said that he'd done extensive research online and thought that I was the best person for the job.

The potential client had a problem and they wanted someone who knew about contracts, law and software to help them out. They didn't think of their problem as an Italian problem or a Swiss problem.*

Global-Regulation.com (I'm the CTO) has published a list of the top word pairs found in global laws. The Excel file can be downloaded here.

I've looked through the top 500 words and taken note below of some of the more interesting word pairs.

A "Decentralized autonomous organization ('DAO')" white paper has been published by German blockchain company Slock.it UG. This white paper is part of a larger conversation that's been going on for a few years in the Bitcoin/blockchain world. The basic idea is to build a software program that runs like a company, but on a decentralized software platform (e.g. Ethereum). Slock.it's paper is one of the longer contributions to this effort (31 pages, including code examples).

This blog post details a few thoughts on the Slock.it proposal, from a lawyer's point of view.

Canada's equivalent of the NSA, CSEC, is always on the hunt for new talent. There's a job listing today for a "Telecom Technologist & Network Analyst". One of the job requirements: “Experience in administration of remote network endpoints where there is little to no assistance at the remote end.” I wouldn't expect too much help from the other end when you're doing foreign signals intelligence.

The pay for CSEC jobs is surprisingly good for Ottawa civil service but probably not competitive with the private sector right now. Posted salaries for experienced people range from $70k-$100k. Most private sector jobs for similar roles don't have posted salaries but appear to be about $30k/yr higher.

Last week I attended a roundtable put on by CIGI in Toronto titled “Regulating Blockchain & Distributed Ledger Technologies: Challenges and Opportunities for Canadian Innovation”. Speakers included key people from industry, government and academia. I've distilled my notes about speakers' thoughts and my own reflections into 18 questions. Please note that the roundtable was conducted under a rule of not crediting speakers - the thoughts below are mostly not my own.

1. When we talk about regulation, what are we talking about? (Smart contracts, industry standards, technical standards, regulations, acts, common law, etc.?)
2. What are the benefits of blockchains right now? What will the future benefits be? What might the downsides be?
3. Who should be trusted? Banks? Bitcoin exchanges? Programmers?
4. Do parties that require trust also require government-created rules?
5. Will we still have banks in 30 years? What about other intermediaries?
6. Who will take a cut of future blockchain transactions? Which intermediaries? Government authorities?
7. Will government authorities take a cut of transactions directly? (i.e. X% of each transaction goes to the CRA)
8. Governments have an impulse to regulate. Will new regulations mean giving up the benefits of blockchain or giving up Canada's place in the global market?
9. What are the implications of "programmable trust"? Will we have a future where government functions are transferred to private interactions (i.e. smart contracts) administered through blockchains?
10. What role is there for the (Canadian) government to play as a partner rather than a regulator?
11. Which activities should be governed by criminal law and which by a lighter touch (fines, AMPs, etc.)?
12. Is a lack of a regulation in the blockchain space a "gap" in the law or an opportunity for entrepreneurs?
13. Can regulatory "gaps" be filled with common law and economic behaviour rather than government-prescribed rules? Are there any gaps that cannot be filled by private actors or court-created law?
14. Should blockchain developers be expected to assist government in their traditional roles of law enforcement and taxation?
15. Are the differences between "public" and "private" blockchains important to regulators?
16. What are the jurisdictional challenges to a decentralized global economic system enabled by blockchains?
17. Is there a breaking point in which blockchain benefits (in the form of talented humans making these systems) migrate to less regulated countries?
18. What can be done to ensure that "good" regulations are made by the federal and provincial governments?

The presence of interveners doesn't seem to affect an appellant's chance of success at the Supreme Court of Canada.

I took a look at 844 recent Supreme Court of Canada cases that proceeded to the stage in which there was an appellant (as opposed to applicant). There doesn't seem to be any discernible pattern in the data.

I've analysed 1871 Supreme Court of Canada factums (88902 pages in total) to determine statistical information about factums for appellants, respondents and other parties (i.e. intervenors). This analysis was done using a program.

Appellants & Respondents

I've compiled a list of Toronto-based legaltech startups & established players:

30 Toronto-based Legal Technology Startups

The Canada Business Corporations Act requires that companies hold regular shareholder meetings but the statute allows companies to dispense with the requirement of physical meetings by using written resolutions instead (s. 142(b)).

Written resolutions are a great tool for corporations owned by a single shareholder or a small team of co-founders but it's important to note that all of the required business of a shareholder meeting must be addressed in the written resolutions.

The foot pad on my Macbook Pro Retina fell off the other day. The Apple Store didn't have a replacement part but an eBay seller in Shenzhen, China did. For $3 with free shipping.

The cheapest international shipping option with Canada Post is $5.35 for up to 100g (without tracking). How can a store in China sell me anything for $3, including shipping?

The CEO of BlackBerry blogged last week about how “our privacy commitment does not extend to criminals”. He accused Apple of placing “their [reputation] above the greater good” when the company explained to a court why they can't and shouldn't provide access to encrypted iOS devices.

John Chen would like companies to go beyond the law and do what's “ethical”, citing the responsibility of citizens to “help thwart crime when they can safely do so”.

CanLII's robots.txt file provides preferential access to its database of laws & cases to users of Google vs. other search engines. This blog post explains how they're doing it and why that is inconsistent with CanLII's privileged position in the Canadian legal publishing landscape.

As a preface to this post: I'm a big fan of CanLII's service and use it regularly for my legal practice. Just because something is great doesn't mean it can't be better.

Which lawyers have represented the most number of clients before the Supreme Court of Canada in recent years?

In order to answer this question I analysed the most recent 6984 cases before the Supreme Court of Canada (approximately ten years of cases) and extracted the named counsel for each case. The results are given below.

Google announced last week that they will start defending some of their users in court when "fair use" ("fair dealing" in Canada) is at stake.

Google is promising to, with consent of the video creator, “keep the videos live on YouTube in the U.S., feature them in the YouTube Copyright Center as strong examples of fair use, and cover the cost of any copyright lawsuits brought against them.”. Although this will only be for a “small number of videos”, this is a big step forward for fair use/fair dealing. Establishing important precedents in favour of creators will help the public and YouTube.

Continuing my work on Supreme Court data mining, I've extracted the firm names from the last ~7000 Supreme Court of Canada cases (going back about 10 years). This analysis was done by taking the first line of the address for each party, which is almost always the firm name. Below are the top 14 firms + the Attorney General of Canada.

Uber B.V. (the Dutch company that licenses the Uber application to end users) changed their "Terms of Use" agreement in Canada on November 19th. I was notified of this by an email from Uber Canada (shown below).

I often advise startups about running what I term "marketplace" businesses. That is, companies that connect customers with other businesses on a digital platform. The key challenge for these businesses is not being seen as the entity making the sale but rather as the entity connecting two independent entities (customer and supplier). These businesses are at the cutting edge of a change in the way that business is done as we move ever more towards a world of smartphones, contracting and reduced transaction costs. Uber is the most prominent of this new breed of startups.

This past summer's case of City of Toronto v Uber Canada Inc. et al., 2015 ONSC 3572, 126 O.R. (3d) is an incredible win for this business model and should encourage anyone interested in exploring marketplaces. Why is this case important?

SecondMarket has been acquired by NASDAQ.

SecondMarket is the main tech company private share marketplace in the US. I wonder if NASDAQ plans on expanding its presence in other markets.

New Zealand has an interesting offence on the books:

“No person may—
(a) carry out any nuclear weapon test explosion or any other nuclear explosion; or
(b) cause, encourage, or in any way participate in, the carrying out of any nuclear weapon test explosion or any other nuclear explosion.”

Ontario grocery stores will be allowed to sell up to 46 million six-packs of beer per year in Ontario, according to the Toronto Star. This sounds like a lot of beer but according to the beer trade association, Beer Canada, Ontarians purchased 7.9 million hectolitres of beer in 2014 (790,000,000 litres of beer).

46 million six packs of beer is, at 355mL per bottle (0.35L), 16,330,000 litres of beer (163,300 hectolitres of beer). So of the 8.9 million hectolitres of beer consumed in Ontario, grocery stores will be able to sell a maximum of 163,300 - around 2% of total beer sales.

One of the first applications of Bitcoin was online gambling because gambling companies have a hard time with a) chargebacks; and, b) the legality of their services. The earlier pioneers in Bitcoin gambling all suffered from a problem of centralization: there was always a single website that gamblers had to use and trust. Recent innovations like Augur and Ethereum are changing the dynamic.

A new service called Augur (built on top of Ethereum) has been getting a lot of media attention and apparently racing bookies are concerned: http://www.racingpost.com/news/horse-racing/tom-kerr-augur-could-become-racing-s-worst-nightmare/1953992.

As a lawyer and programmer I have long thought it would be useful to have a search engine for world laws. I run several specialized legal/legislative information services (e.g. OntarioMonitor.ca) that have taught me quite a bit about how hard it is to gather legal information and present it to users. After years of consideration and many months of hard work I'm pleased to announce the launch of Global-Regulation.com.

Global-Regulation is a law search engine that currently has a database of 212,000 laws from all over the world (some are machine translated from China, French and German). Searching this 12 gigabyte database of laws takes seconds because of a dedicated in-RAM search application that is in front of the MySQL database (hosted on Google Cloud for speed, redundancy and ease of scaling). If the current database were printed out it would be approximately 7 million pages (and completely unusable).

MIT and Boston University are teaming up to open a new legal clinic to assist students with innovation issues. The clinic is partly a response to the suicide of Aaron Swartz following prosecution for mass downloading journal articles at MIT.

The clinic is:

Let's say I have a company that sells gravel in Canada. I buy gravel wholesale for $500 per ton then sell it retail at $1000 a ton. I make approximately $500 per ton in profit. That means I would have to pay corporate tax on the $500 per ton in profit (assuming I had no other costs). What if I set up an offshore subsidiary (e.g. Cayman Islands) that buys the gravel from my supplier for $500 per ton then sells it to me for $1000 per ton and then I sell it to the customer for $1000 per ton? If that were possible, I'd effectively shift the profit I make from gravel sales from Canada to a no-tax offshore country and thus escape corporate tax while still making just as much money (and if I had any other costs, I'd then have a loss that I could apply to past year's gains).

"Transfer pricing" is the term given to the price set between related entities (e.g. a Canadian company and its Cayman Islands subsidiary). The rules for how companies can set their prices internally are complicated but attempt to stop would-be tax cheats from moving profit from one country (that has taxes) to another country (that doesn't, or has very low taxes). A key principle is that the price that a company should pay to its subsidiary is the price that they would pay an "arms-length" company. This principle is hard to apply and the rules create opportunities to pay very little tax on very large sales.

I started my law practice in July of 2013 and immediately began blogging. In the first full month of my practice my law blog received 80 visitors. Two years later, my blog receives around 1100 visitors a month.

New York's heavy-handed Bitcoin business regulation (the "BitLicense") has caused at least one player to abandon the New York market: https://www.bitfinex.com/pages/announcements/?id=51.

Bitfinex's move comes following outcry when the new regulations were first announced. Businesses complained that they'd be forced to leave New York due to high compliance costs and it seems they were right. That said, Bitfinex is a Hong Kong-managed British Virgin Islands company so this isn't a case of a domestic company being forced to leave.

Ethereum launched today just before noon EST. Here are the steps to follow in order to get it set up on your Mac:

1. Open up the Terminal

Before starting my law practice I ran a consulting programming business for many years. Since starting my practice I've assisted a number of web development agencies (and independent programmers) get off the ground/upgrade their contracting processes.

A rough overview to starting a web development/digital marketing agency:

More and more countries are hosting laws online. Machine translation gets better by the day. When will we have access to all of the world's laws translated into the languages of the world?

I think 3D printing is the future for cases that involve construction. Although insiders may understand floor plans, seeing a physical model of the building as it will be is powerful. Below are a few photos of a 3D printed model for a case that I recently worked on. It was the first 3D model that the expert planner, who's been in the business for 30 years, had seen (and they got a copy of the model too).

A bar near my house recently started selling "pints" in 16 oz. glasses. What should you be getting in Ontario when you order a "pint"?

According to the Weights and Measures Act:

A recent New York Times Magazine piece covers the evolution of machine learning methods for language translation.

If you're interested in building your own service that uses automatic translation then there are two big players in the space: Google and Microsoft. Both offer similar APIs although at slightly different price points and different technical limitations.

I work for agencies and independent programmers who offer consulting services. Before becoming a lawyer I did freelance web development. This is an overview to the steps required to start a business doing contract programming.

Step 0) Learn how to program and develop your skills to a point at which people would like to pay you to program for them.

Queen's Law held a panel discussion last week on the topic of AI and law. A recording of the discussion and a summary will be made available in the fall. In the meantime, here are my prepared remarks. The actual discussion ended up covering different ground than the questions that were distributed ahead of time and my fellow panelists had a lot to add. I'll post a link to the discussion when Queen's does.

The other panelists were Janet Fuhrer, Jeff Fung and Jordan Furlong. The moderator was Professor Cockfield with assistance from Lisa Graham and John Neufeld.

My business cards say "Technology Lawyer" not "Bitcoin Lawyer" but Bitcoin-related work was approximately 60% of my legal practice last year.

In the last year I've spoken about Bitcoin and law in front of 300+ Canadian Corporate Counsel Association lawyers, a roomful of banking lawyers at the Canadian Institute's Payments Forum and at other smaller events. I'm often asked "what do you do for your clients?".

I'd like a time-tracking service like Toggl (Internet-based and works well on mobile and desktop). But I'm a lawyer so I don't want to store confidential client information on a service like that, so it would need to be client-side encrypted. I'd also like the software to tell me about opportunities to generate additional business (i.e. make more money).

Client-side encryption can now be done on most browsers using the WebCryptoAPI (although implementation is a challenge for developers). My ideal service would encrypt all of my data client-side with AES and then upload it to the time-tracking system. When I access the service it decrypts locally to show me my information.

I got back from Bearskin Lake First Nation on Saturday morning. It's 1430km from Toronto (straight line distance) and a very different place.

OntarioMonitor has undergone a major rewrite that allows for a huge number of new features. One of those features is "bill prediction", accurately guessing whether a newly introduced bill will receive royal assent.

You can read more about the new feature and the 82-91% accurate results here: http://www.ontariomonitor.ca/blog/predicting-whether-a-bill-will-pass-in-Ontario/index.html.

CBC interviewed me for a segment on Nintendo asking for a cut of ad revenue generated by "Let's Play" videos.

The CRA and IRS should be the biggest champions of the "sharing economy". Why? Because the sharing economy means the taxable economy.

Uber is solving a problem its founders never intended to solve that it gets no recognition for: untaxed taxi transactions.

Nintendo is taking another stab at using YouTube's Content ID system to claim part of the advertising revenue of "let's play" videos that feature its games: http://www.wired.com/2015/03/nintendo-youtube-creators/. Where do content creators stand when it comes to Canadian copyright law and claims by video game companies?

For Canadian content creators there are three key legal sources:

If you are paying contractors in Bitcoin then you should take extra care to ensure your contracts are well-drafted. Specifically, you should make sure that you have a clear method of establishing the exchange rate between your national currency and BTC.

Two US Federal agents involved in the investigation of the Silk Road marketplace have been charged with a slew of crimes: fraud, corruption, money laundering and tax violations. The criminal complaint was unsealed today: http://www.justice.gov/sites/default/files/opa/press-releases/attachments/2015/03/30/criminal_complaint_force.pdf.

There are far more people with ideas than there are programmers to turn those ideas into reality. Even people with great ideas, domain knowledge and capital can have a hard time finding a technical co-founder to team up with.

If you want to start a bus line in Ontario you'll need to prove to the Ontario Highway Transport Board that your service will serve "public necessity and convenience" which includes, among other things, explaining your "impact on existing carriers if the service were granted". You also need to tell the board who are your "10 Largest Shareholders" and the "No. of Shares held" by each of them, your "business plan" and a "projected operating statement for the first year". After you file this information anyone in Ontario can request a copy ("All information pertaining to the applicant i.e. business plan, supporting evidence, etc. is on file at the Board and is available upon request." [e.g. on pg. 472]).

Bitcoin is changing perspectives on how we manage assets. If money can be moved around instantaneously without friction then why not shares too? In 2015 shares are often digital abstractions traded through all-electronic stock exchanges. Bitcoin enthusiasts look forward to a world where banking, investment and securities companies are disintermediated and the world's savers can invest around the world without friction. But how does this new model for issuing stock fit within securities laws?

QuadrigaCX, Canada's dominant Bitcoin exchange, is set to become the world's first publicly traded Bitcoin exchange according to Bitcoin Magazine. I don't see the news reported anywhere else (including on Quadriga's own site/Twitter) but Christie Harkin, the author of the article is a good source.

This is pretty big news for a Canadian company that only started a little over a year ago. Up until this year there were three exchanges competing for Canadians' wallets but as of mid-February there's only Quadriga. Given that the gross margins on Bitcoin trading are ~0.5%, Quadriga is probably still standing due to their cost structure being lower than their former competitors.

Canadian legal & tech people are very keen on Ross, a software system built on top of IBM's Watson that's designed for law. One of the co-founders of the Ross team* describes it as "[b]asically, what we built is a [sic] the best legal researcher available". I wish this was true but I'm very skeptical.

Watson is a question-answering computer system that was designed to win at Jeopardy (it beat the previous champion, Ken Jennings) but has since been expanded to tackle more general question-answering. IBM promises that it's a "new era of computing" but the area it's operating in, "natural language processing", is a hot space with companies like Facebook pouring resources into their own solutions. It's an area that has been of interest to researchers for more than half a century yet applications that use it are relatively rare. Has IBM made enormous breakthroughs that will soon change the way we interact with computers?

Q: How much would Canadian merchants save by switching to the Bitcoin network? A: About $9 billion per year.

Credit card transaction fees are around $9 billion per year in Canada. To process those transactions using Bitcoin would cost 1/100th of that: only $90 million. Read on for the math.

Lawyers think they know what makes a successful appeal but there aren't any numbers. What's the chance that a client's appeal will succeed? That's hard to answer but an analysis of thousands of Supreme Court decisions shows that there are factors that make cases more or less likely to result in a win for the appellant.

The odds calculator that you see below allow you to see what the approximate chance of success is for a person contemplating an appeal to the Supreme Court of Canada. Read more at the bottom of this page.

These are the business cards I've used since I started my practice:

This post is a response to comments made by Colin Lachance, CEO of CanLII on a Slaw.ca article titled “Trusting the System”. I recommend reading his remarks in full.

I want to preface my reply with a thank you to Colin for engaging in this debate and helping to raise awareness about the importance of licensing terms for court documents.

The Ministry of Government and Consumer Services filed a report today that explores the idea of new legislation to allow for "hybrid" social enterprise corporations. Here's the definition of "social enterprise" given in the report:

“A corporate entity that exists primarily to promote public benefit using business strategies, building social and financial capital, and offering innovative ways of operating for social and / or environmental purposes.”

Tech startups usually grant shares subject to vesting conditions (or use options) in order to solve the problem of a founder leaving and taking their shares with them. The shares are either issued immediately subject to the company buying the shares back later under certain conditions (a reverse vesting agreement) or are granted over time (a vesting agreement).

Vesting or Reverse Vesting Agreement?

The Committee of Adjustment is the first level of land planning dispute resolution in Ontario. Each municipality has their own Committee of Adjustment that manages its own affairs. The Toronto version makes thousands of decisions a year but the decisions are often not available online.

The appeal body for the Committee of Adjustment, the Ontario Municipal Board, make its decisions available through its inscrutable search engine and the commercial case law providers Westlaw and Quicklaw. Unfortunately, at least in Toronto, you can only get access to the Committee of Adjustment decisions by submitting a research request to the City of Toronto. Research requests give you the last five years of decisions on up to five streets for $150 + HST. Why doesn't the City make their database available online?

The Committee of Adjustment is Toronto's main land planning exemption approval body. They review applications by landowners asking for exemptions from the City's land planning rules.

The Committee of Adjustment for Toronto doesn't make very many decisions available online. Of the 23 days that the Toronto & East York Committee of Adjustment met to review applications only three are available on the City's website (the last three days of hearings in 2014).

Mt. Gox was the world's largest Bitcoin exchange until it's bankruptcy in 2014 due to an alleged hacking incident that cost hundreds of millions of dollars. Mt. Gox is a Japanese company but its customers were all over the world including many Ontarians.

In September a class action suit was partially certified but this week's Ontario Reports includes an October decision that stayed the suit:

Setting up a company is fairly straightforward but how can directors manage their shares, votes and vesting systems?

I did a bit of Googling and couldn't come up with a service for small businesses to manage their shares. There are quite a few services for managing shareholder registries but they don't have online voting built into them. They also don't have capabilities for managing vesting schedules/options. I think this would be a great piece of software for someone to build. Is there a project out there like this?

Ontario just launched an online casino: https://www.playolg.ca/content/olg/en.html. This unimaginative step is a wasted opportunity to create a gigantic global gambling company powered by Bitcoin.

The province's new site looks like it was designed in 2005 but it's a giant leap forward for the province's gambling industry because there was previously no way to gamble online (legally).

I've launched Congresser.com in the United States. The idea behind the service is that government action should be push not pull. Everyone affected by a law, regulation or decision should hear about it when it's being considered if possible and definitely when it takes effect. It builds on my Federal and Ontario-level services in Canada.

Congresser works by monitoring for client keywords in a variety of Congressional and Whitehouse data sources (e.g. Congressional Record, Congressional Reports, Federal Registry, etc.).

Until the 1930s there were few rules for public company accounting. Even with our thousands of modern rules and standards accounting is a complicated process that is generally post-hoc. Receipts are collected, tabulated and entered. Bank accounts are compared against invoices and income assessed. Digital currency (e.g Bitcoin) could change this.

Bitcoin is an Internet-first currency. It's digital and instantaneous. When you cash a cheque the bank will place a hold on the amount of money because they don't actually receive the money for several days. Digital currency skips the antiquated banking system that relies on reconciling amounts over days.

In last week's decision of R. v. Fearon, Justice Cromwell (for the majority) wrote "armed robbery ... a crime that has become depressingly routine." This is an odd observation to see from the highest court in the country given that crime rates have been falling across the board for decades.

According to the RCMP, armed robbery rates are down 50% since the bad old days of 2000. Statscan figures show that between 1999 and 2008, the overall rate of robbery with a firearm decreased by about 40% in Canada. The rate of armed robbery has decreased by about 50% since 1994 (table 16, compare with other Statscan table).

Arbitration clauses are a common feature of commercial contracts*. As Bitcoin becomes a more common way of transacting business I can imagine there being two-of-three multisig used with an arbitration company.

How the scheme would work is that one key is held by the buyer, one by the seller and the third by a mutually agreed upon arbitration agent. The agent would do whatever is ordered by the arbitration that is triggered by a dispute between the parties. This would allow for arbitration orders to be both binding in law and in practice (becomes the bitcoins would be sent immediately).

The Senior Deputy Governor of the Bank of Canada, Carolyn Wilkins, gave a speech yesterday about Bitcoin that outlines some of the Bank's thinking. Ms. Wilkins seems quite knowledgeable about digital currencies (she mentions Ripple and Litecoin in the speech) but she makes a few errors. These errors are completely understandable because digital currencies are complicated but it's worth correcting these mistakes because the Bank of Canada needs to thoroughly understand these new money-like technologies. As a lawyer who works in the cryptocurrency space and computer programmer, here are my views on Ms. Wilkins' speech.

Bank of Canada Claim vs. Fact

I was recently asked about my programming background and thought it would be useful to put together a few of the things I've done over the years.

In 2009 I won 1st place at the finals of Yahoo's international programming competition with this hack: http://www.youtube.com/watch?v=yNqgq7ej7JQ. This followed my win at the regional level (University of Waterloo).

The Nova Scotia Court of Appeal (NSCA) does something special with their published decisions: they have informative cover sheets. So far as I know, all other courts publish their judgements free-form. The NSCA cover sheets contain a list of subjects covered, a quick summary, a list of issues and a result. It seems like common sense but this practice seems to be limited to Nova Scotia.

Here's an example decision: Canada (Attorney General) v. MacQueen, 2014 NSCA 96 (scroll down to page two).

Imagine a poor, strung-out woman who testifies and then a man in a suit gives contradictory testimony. A judge hears both parties and rejects the woman's testimony.

Our judicial system depends on having people testify in court. The theory is that judges and juries can tell if someone is lying by looking at them while the person speaks.

I've written a computer program to process 4261 Supreme Court of Canada decisions going back to approximately 2006.

UPDATE: There's now an odds calculator that builds on this work.

Excellent advice from Sam Altman, President of YCombinator in the form of a transcript from his first class at Stanford on startups: http://tech.genius.com/Sam-altman-how-to-start-a-startup-lecture-1-annotated.

This lecture is aimed at university students but it's great advice for anyone.

My legal practice is mostly startup tech companies in Toronto, Canada. Every week I have two or three new founder teams who come in and ask what they need to do to start a tech company. Here's a general outline of the legal steps* necessary to start a software company in Canada:

Step 0: Talk to a Lawyer

If you're a lawyer then your emails are probably being monitored by the NSA/CSEC, China, support staff at your firm, criminals, etc. If you're using a cloud-based software system to keep track of documents or communicate with clients then there's an even higher risk that someone out there is looking over your shoulder and reading your clients' secrets.

As more lawyers migrate to "the cloud" with services like Clio, Slack and Office 365 the bar should be very concerned about the (lack of) security built into the tools we use. But don't these companies have great security? Yes, but the NSA has even better anti-security (e.g. $1.2 billion surveillance data centers) and legal-electronic tools like PRSIM to extract secrets from companies like Google, Microsoft, Yahoo!, etc.

The simplest way to accept Bitcoin payments is to set up a wallet and tell people to send you bitcoins. The next level of complexity is setting up a system where each person who pays you is given a unique address (to pay to) and then automatically collecting those payments and marking that person in a database as having paid. How can you do this?

Electrum Master Public Keys (BIP 32) allow you to generate new addresses on the fly that "deposit" automatically into one Electrum wallet. The trick is that you can generate addresses using the Master Public Key + Offset (an integer). So for each customer you assign an ID number and then generate a Bitcoin address that corresponds to that ID. The code that generates these addresses doesn't require access to your private keys, only the master public key (which is used to derive the other public keys that become the addresses).

Apparently I'm the world's first Certified Bitcoin Professional lawyer: https://cryptoconsortium.org/certifications/CBP/lookup?token=15b8ff.

The Certified Bitcoin Professional (CBP) designation is a new professional designation run by the "Crypto Currency Certification Consortium". Among the many people involved is Michael Perklin of bitcoinsultants.

I'm at LawTechCamp 2014 at Ryerson DMZ. Here are the slides for my talk that's coming up at 12:50.

PDF Version: why-has-software-not-revolutionized-law-slides.pdf

A few weeks ago I spoke with someone who buys a lot of Bitcoin. They buy it and then immediately send it to a supplier in China who then ships them manufactured goods. They used to use wire transfers but said it took about four days to clear and the Chinese company wouldn't ship the goods until they got the money. With Bitcoin they get the money immediately and he gets his goods four days sooner. The buyer also saved a bit on wire transfer/currency conversion fees.

Bitcoin would be a great way for banks to settle transactions between themselves without using intermediate banks/payment networks because it's instantaneous and irreversible. This could enable banks to offer wire transfer-like products that settle in minutes instead of days (or weeks).

There's a new grant program available to Ontario tech entrepreneurs who are 18-29 and affiliated with a university: http://www.oce-ontario.org/programs/entrepreneurship-programs/smartstart-seed-fund.

The grant program is called the "SmartStart Seed Fund" and is a program delivered by the Ontario Centres of Excellence.

LawTechCamp 2014 is coming up this September 6th at Ryerson's DMZ. It's a BarCamp-like event for legal technology and if last year's speakers are any indication, it looks like it'll be a who's who of Toronto legal tech people.

[Update: my law practice is now a sponsor of LawTechCamp 2014!]

If your business is considering using Bitcoin then please don't put the accountants in charge (or at least the internal auditors).

In this month's issue of Internal Auditor Magazine (put out by the 180,000 member Institute of Internal Auditors) there's an article titled "Digital Currency Risks" that describes Bitcoin as being used by "10,000" people with "12.8 million" bitcoins in circulation ("worth about US$8 million").

Killing an endangered blue whale has a softer penalty than breaching Canada's new anti-spam laws by sending a single unsolicited email. The Canadian anti-spam legislation (full text) is now in force and penalties for violations are theoretically up to $1 million for an individual who sends one email without consent and $10 million for a business.

$1 million for sending one spam message is completely out of step with the penalties for other Canadian laws. Here are a few examples of penalties for individuals under other laws:

People are paid every two weeks because it's too expensive to pay people daily. I mean too expensive both in the sense of administrative overhead (if people are paid manually) and transaction fees (cheques/EFT fees).

Bitcoin offers the potential to pay people daily or even hourly because transaction fees are reduced to near zero. Here's an interesting article that explores this concept and the idea of paying for performance using Bitcoin/Ethereum: https://medium.com/@spencernoon/paycheck-2-0-385cf6c70ec7.

Interesting blog post on how to use the Bitcoin scripting language to build complex applications: https://curiosity-driven.org/bitcoin-contracts.

The examples they give are Kickstarter-type campaigns, escrow and gambling. I didn't know these sorts of applications could be built (trustlessly) on top of the Bitcoin scripting language.

"Decentralized Applications" is a LinkedIn group (link) for anyone who's a part of the nascent decentralized application industry.

It's a small group for now but some good content (mostly written by Decentral, one of my clients). There aren't a lot of other places to find good information about decentralized applications ("DApps").

Information about Canadian public company quarterly reports, insider trades, and more is only being made available to companies who pay a (secret) licensing fee. Individuals can access individual filings (after solving a CAPTCHA) but the information is not free for re-use nor available in a machine readable format.

Canadian securities filings are required to be posted to SEDAR and SEDI. The two sites are the Canadian equivalent of the (much better) United States service run by the SEC called EDGAR.

Ethereum, a blockchain programming platform (and client of mine), has started selling ether. As of Wednesday night they've sold around $3.7 million of ether in about 24 hours. You can watch the progress of the sale by looking at the address where they're receiving the Bitcoin.

Congratulations to the Ethereum team!

I've returned from my two week honeymoon in Venice, Rome and Budapest. Below are a few photos from the Budapest leg of the trip.

Dell recently announced that they're accepting Bitcoin. Here's a blog post I wrote for the Decentral blog about how companies like Dell and Expedia are accepting Bitcoin: http://blog.decentral.ca/post/92445053308/how-dell-expedia-and-others-accept-bitcoin-payments.

The short version is that most companies are using Coinbase (US-only) or BitPay. Both of these services work well with Shopfiy.

Bill C-31 passed last Thursday and with it comes new rules for businesses dealing in Bitcoin.

I've written a guest post on the Decentral blog that explains what the new rules are, when they'll take effect and what might happen: http://decentralca.tumblr.com/post/89657114028/what-you-need-to-know-about-the-new-bitcoin-law.

Business contracts have two purposes:

1. creating a legal agreement; and,

A landmark Supreme Court decision came down last Friday: R. v. Spencer.

This case takes Canada away from the past regime where police could request subscriber information corresponding to an IP without a warrant. In earlier lower court decisions judges have relied on ISP terms of service to say that users have no reasonable expectation of privacy. The legal theory was that the contracts users enter into allowed ISPs to disclose information to police so it was permitted. The Supreme Court unanimously rejected this regime and declared such searches "presumptively unreasonable":

In a previous post I outlined the key government tax schemes for Ontario tech businesses (here). A colleague who saw that post has pointed me to the MaRS Discovery District guide to funding programs.

The MaRS guide is 173 pages of government programs for the ICT sector. It looks quite comprehensive.

I've made an online heat map generator that you can use by clicking here. Below is an example heat map made with the tool.

BitPay (a less feature-rich Stripe for Bitcoin) claims to be processing more than $1 million USD in transactions per day.

It's hard to get a sense of how large the world of Bitcoin is, and especially hard to get a handle on the amount used for commerce vs. speculation. BitPay is one of the main merchant processing companies so this statistic is one worth paying attention to.

What tax credits are available for software companies in Ontario?

SR&ED: 35% tax credit for Canadian-controlled private corporations (CCPC) conducting research. Infographic explanation: techvibes.com.

I've written a blog post on the Decentral Tumblr blog: "Decentralized Bitcoin Exchanges: A Solution with Three Big Challenges". This blog post explains what a decentralized Bitcoin exchange is, why Bitcoin industry people are keen on the idea and what the implementation challenges are.

I recommend reading the article if you're curious about where exchanges (e.g. CAVirtEx) are headed. Many people in the industry think that decentralized exchanges are what people will be using in a few years. The first person to create one that works will make a big splash.

I've extracted the words from 8077 Ontario Court of Appeal judgements and calculated the 100 most frequently used words.

The most common case-related words are what you'd expect: "appellant", "judge", "trial", etc.

I've written a series of programs that process and extract the names of counsel from Ontario Court of Appeal judgements. I've analysed 8077 decisions and extracted 12,000 lawyer-case pairs (some decisions have multiple counsel).

Using the extracted data I compiled a table of the lawyers who appeared most frequently before the Court of Appeal over the last 15 years.

I've completed a more thorough analysis (see previous post) of Ontario Court of Appeal decisions. This analysis involves the automated extraction of costs awards from thousands of decisions between the years 2007 and 2014.

Of the cases studied, my program was able to confidently extract 1723 costs awards. Here are the statistics:

[Update: there's a more thorough (and slightly different) analysis available now: http://www.cameronhuff.com/blog/court-of-appeal-statistics/index.html]

I've analysed 3000 Ontario Court of Appeal judgements from 1999 to 2014 using a program I wrote that extracts costs awards. Of the 3000 randomly selected cases that I supplied it was able to extract 733 costs awards with a high degree of confidence.

As part of my ongoing series of Bitcoin Law articles on the Decentral Tumblr blog, I've written a new post that looks at the feasibility of a blockchain-based real estate system in Ontario.

The blog post describes our current real estate registry and what it might look like if it was switched to a "smart property" system.

Parsing legal documents is hard. It's hard if you're a lawyer and it's even harder if you're a computer. Here's an article on the Free Law Project that describes the challenge of parsing legal documents: http://freelawproject.org/2013/11/01/want-to-merge-millions-of-legal-opinions-it-wont-be-easy/.

They have a collection of similarly great content on other practical problems that arise when parsing the law.

I've written a blog post on the Decentral Tumblr blog that explains Bitcoin terms in simple language.

Below is a text version of the glossary.

I've written a series of blog posts that will be published on the Decentral blog over the coming weeks. The first one is "Bitcoin: The Canadian Regulatory Landscape". It provides an overview of the laws that Bitcoin businesses should be interested in.

Coming up tomorrow will be a post about the steps for setting up a Bitcoin business in Canada.

Edward Snowden's email provider, Lavabit, shut down their company rather than let the US government spy on their customers: http://www.wired.com/threatlevel/2013/10/lavabit_unsealed/.

It would take a lot of moral strength to agree to shut down something you've built up over years of work in order to protect your customers from spying. It would have been very easy for them to allow secret spying (like Google, Facebook, etc.) but instead they stand out as the one company I'm aware of that refused to provide "lawful access" by the US government.

If you'd like to start an ISP in Canada you'll probably need to apply for two licenses:

1. A Basic International Telecommunications Services (BITS) license

I have code running on all of my sites that attempts to reverse the DNS for each IP that visits. This uncovers the organization for many visitors but unfortunately it still leaves a lot of IPs that don't have corresponding DNS entries.

There's a public database of who owns what IP address. Using two ARIN WHOIS API calls (shown below) you can pull the organization and address for every IP (usually the address of an ISP). This can be used to replace random numbers (e.g. 154.03.34.11) with entries like "GONET (Ministry of Government Services, Infrastructure Technology Services)" and "Alberta PWSS, Telecommunications Division (10365 - 107 Street)".

Ontario court schedules are now available online (http://www.ontariocourtdates.ca/). This is a big step in the right direction but the goal is still miles away.

In order to access the court information you have to agree not to republish it anywhere, and solve a CAPTCHA. The CAPTCHA is there to stop people from programmatically harvesting court schedules and the contract is there so they can sue people if they do it anyway.

I launched FederalMonitor.ca a few weeks ago and the reception has been quite positive so far.

This is the Federal version of OntarioMonitor.ca, a government relations SaaS that I've been running since 2011.

MintChip, the Royal Mint's digital currency solution, will be sold by the Mint according to the Wall Street Journal. Development has been halted.

I assume this decision was taken after looking at their competitor: Bitcoin. The Mint could easily make their own version of Bitcoin/Litecoin and launch their own cryptocurrency for about $200 right now.

There have been four speeches made in 2014 about Bitcoin in the House & Senate.

House, April 3rd: Patricia Davidson, Conservative

The federal government's budget act for 2014 passed "first reading" on Friday. It will amend the money laundering regime to create a new category of money services business: "dealing in virtual currencies".

The budget is a whopper of an omnibus bill but the key amendment is at s. 256(2). It adds to the existing categories of regulated businesses (e.g. foreign exchange): "dealing in virtual currencies, as defined in the regulations". I expect the regulations to set a limit of somewhere between $1000 to $3000 for dealing without collecting identity documents.

According to coinmap.org I'm the only lawyer in Toronto who accepts bitcoin.

I think it might be useful to form a group for lawyers who have particular expertise in the area of Bitcoin. Maybe "Canadian Bitcoin Lawyers" or maybe the "North American Bitcoin Lawyers Group".

If this sounds like something you'd like to be a part of please send me an email at addison@cameronhuff.com.

Are you backing up your MySQL database regularly?

Here's how to easily backup a MySQL database:

Here's a good technical article on how the Bitcoin protocol works: http://www.righto.com/2014/02/bitcoins-hard-way-using-raw-bitcoin.html?m=1.

This is a follow-up by the same author on how mining works: http://www.righto.com/2014/02/bitcoin-mining-hard-way-algorithms.html

1. Every eight minutes someone receives ("mines") 25 Bitcoins (worth more than $10k)

2. The Bitcoin network is many times faster than the world's top 500 supercomputers put together

Forbes reported $15 million per day in power consumption for the entire Bitcoin network back in January but some people disagree with that estimate.

I think a fair estimate of Bitcoin power consumption is about $150,000 per day.

I don't find Google Analytics to be very insightful. A big disadvantage is that it's mostly not real-time so you lose out on time-sensitive opportunities/insights.

There is probably a nice analytics service I could buy but it's also fun to roll your own software. The screenshot below shows my personal logging system (click for a better image).

I recently drafted a liability waiver. The waiver clearly stated why - in the first paragraph - there is a risk of loss.

This doesn't sound very ground-breaking but I wish more lawyers drafted contracts that clearly state why the legal language to follow is necessary. What is the object of the contract? Too few contracts have appropriate recitals/explanations of risk in plain language.

There are only three companies that are allowed to make case law search engines in Ontario and Google isn't one of them.

The decisions of Ontario courts are public information but there are only three organizations that you can get them from and none of them provide bulk access. That last part is the key because that's what a truly public system would have: the ability for anyone to access Ontario's cases and make use of them how they would like (e.g. building a better search engine).

Come learn about Bitcoin every Wednesday night at 7pm: 64 Spadina Ave, Toronto.

The event is held at Bitcoin Decentral, the main space in Toronto for this growing industry.

The New York Times reported over the weekend that Snowden used a web crawler to spider the NSA's internal sites and steal documents. This is a good example of an organization that didn't have appropriate controls over the velocity of access that was permitted and a great follow-up to my post from a couple weeks ago.

In lighter news, the NYT was mocked over their use of scare quotes by Marc Andreesen and others. It may not be the best story but it does highlight an important point for lawyers: don't let any user download all of your files.

I was interviewed by Global TV last week on the topic of CSEC's airport wifi spying experiment.

You can watch the interview here (at approximately 1:50). I did an approximately 15 minute interview but unfortunately only a few seconds made it into this three minute segment. There's a lot more to say on the topic!

The Communications Security Establishment of Canada (CSEC), the Canadian version of the NSA tasked with spying on foreigners, has been revealed by Snowden to be busy spying on Canadians too. But what has CSEC been doing?

A redacted version of the PowerPoint presentation that CSEC delivered can be found here. It's difficult to tell what CSEC is doing because the PowerPoint is at a fairly level. This blog post has my initial speculations.

I just presented at Campbell House in Toronto with George Takach, Mark Hayes and Alex Cameron on the topic of Cybercrime and Law Firms. I learned a lot from the other speakers about privacy, data breach notification and client-led security. You can buy access to the presentations here.

My slides for the presentation are below. The zip file has the slide notes and slides in PPT/PDF format. If you have any questions about the material please feel free to email me at addison@cameronhuff.com.

A static website is one in which all of the content is pre-generated. This blog is a good example of that because all of the HTML files are built locally and then uploaded to the server (using RSync).

The usual way that websites work is by having a content management system that generates pages on the fly (e.g. Wordpress, FlatLaw). Although there are a lot of factors that go into choosing a dynamic vs. static website, an important advantage for a static site is security.

I'll be presenting tomorrow on the topic of Cybercrime and Law Firms. Here are a few of the sources that I used for the presentation (some of which didn't make it into the final cut):

Small firms having their online banking accounts cleaned out: http://krebsonsecurity.com/2014/01/firm-bankrupted-by-cyberheist-sues-bank/

So far as I know, Gmail doesn't have a button to show you just your unread emails. I receive a lot of mail and I'm tired of writing in the search box "in:unread in:inbox".

So today I wrote a quick Chrome extension that injects an unread email button into Gmail. Could I have found an extension somewhere that does this? Probably, but I like to know what code is interacting with my emails. You can review the very short source code for this extension by downloading it below and reading the "run.js" file.

The Pentagon had several terabytes of data related to the F-35 fighter stolen in 2009. This is just one of many hacking incidents involving exfiltration of large amounts of data. Law firms are particularly vulnerable to these kinds of attacks.

If your firm has a network drive with everyone's files or a document management system then you're likely vulnerable to the mass theft of documents. Whenever I read about these kinds of losses I always wonder why the systems allowed thousands or millions of documents to be downloaded at once.

The most recent edition of Law Pro Magazine has some good tips on the use of passwords.

One good tip that isn't in the article is to use a base password that you modify for each website/service. I have a couple patterns that I modify by using letters from the domain that the password is for (e.g. the password for eBay would be "PasswordEba", and for Gmail it would be "PasswordGma"). This technique can help avoid the risk of your password being stolen from one site and applied to all of your other accounts.

Last night I was asked why a company would want to switch from outside counsel to in-house lawyers. I've been in-house at Research in Motion (AKA BlackBerry), worked at a large Bay St. law firm and am now practising independently. Although I'm not a grizzled veteran, I have seen both sides of the practise of law.

I think there are two key advantages of in-house:

This blog post contains a summary of practical steps to make your law practice more secure. Most of these steps require technical knowledge to execute on but there should be enough information provided for you to have a conversation with your technical staff.

The best way to secure a firm against hackers stealing money is to use "air gaps". Read more in this blog post.

I use Gmail to manage my eleven different email accounts. I have all of my accounts set up as mail forwards (e.g. addison@cameronhuff.com forwards to myemail@gmail.com) and then SMTP for outgoing from Gmail. This set up allows me to have all of my different businesses funnelled into one account that's accessible on my phone and computer. When I reply to a message my email will be sent from the email address that it was sent to (and not the Gmail address).

Besides the incredible convenience of managing many email accounts through one, using Gmail gives me Google's anti-spam filters (they're great). Google anti-spam is also a great defence against phishing emails.

Even if you have a password to unlock your phone (and you should), the contents of your phone are not secure. All of your attachments, emails, phone call records, notes, etc. could be available to a thief, hacker or border agent. If you're not using a firm-supplied BlackBerry (where this should be enabled by default) you should enable encryption on your phone.

In order to secure your phone you'll need to enable encrypted storage. The method for doing so depends on your model and may require some help from an IT expert. Try googling the name of your phone and "storage encryption". On Android you can enable it by following these steps (may not be applicable to your version of Android).

Large law firms should assume that their systems have been compromised by hackers. Whether the danger is state espionage (e.g. Potash hacking of Bay St.), "Anonymous" or cybercriminals in California, firms are either currently being exploited or about to be.

Obviously guarding the front line (i.e. lawyer/assistant computers) is important but generally front line computers aren't the real target. Often the targets of hackers are wire and ACH transfer systems (viz. payroll).

My law practice is stored in an encrypted disk image. Encrypting your practice files is like locking your files in a bank vault.

How does it work? A disk image is like a directory but when it's opened it requires a password. Once opened the directory will be available until you eject it (like a CD).

Law firms often have accounting departments with access to wire transfer capabilities through online banking. There is a risk with these systems of infection with malware (i.e. keyloggers) and then unauthorized wire transfers of hundreds of thousands of dollars. A Toronto firm in 2012 had a "six figure loss" from this type of attack. These attacks are likely just the tip of the iceberg because law firms don't like to admit to having had trust funds stolen.

A good solution to the problem of attacks on accounting computers is to air gap them. The strategy is to provide a dedicated computer with a separate internet connection for wire transfers. Having a separate computer (and internet) means that any infections on the network or in an email attachments can't affect the banking computer. This method would have prevented the two attacks linked to above (and virtually any other kind of attack).

I'll be presenting on the 29th of January on the topic of "Cyber Crime and Your Practice" (professional development credit).

I'm honoured to be presenting with Alex Cameron (Faskens), Mark Hayes (Heydary Hayes) and George Takach (McCarthy Tetrault).

I was covered in an article in Queen's Law Reports, the alumni magazine for Queen's Law. Here's the relevant page and you can read the whole issue here.

The article is a bit dated because this is from an interview I did in the summer before I started my law practice. Since the article was written I opened my own practice, created AlbertaMonitor.ca, FlatLaw.ca and EUAlerts.com.

EUAlerts.com has launched! It's the culmination of a fair bit of work over the last couple months and I'm excited to see where it goes.

EUAlerts is the first keyword-based government monitoring service for the European Union. The service works by monitoring for client keywords and then when they're found in new laws the client gets an email with excerpted sections and highlighted keywords.

If you've ever had to do cross-browser testing you're probably familiar with screenshot tools like Browser Shots (it's great and free).

I highly recommend checking out BrowserStack if you have to do any kind of interactive testing (e.g. Javascript, drop-down menus, etc.). I used it a few weeks ago for a project and it was easy + free.

Uber (traditional cab competitor from San Francisco) has hired a lobbying firm in Calgary.

New West Public Affairs will be lobbying Municipal Affairs and the Justice & Solicitor General for changes to the Municipal Government Act and Traffic Safety Act. Presumably they'll be trying to deregulate the taxi industry in Edmonton & Calgary.

Ontario is considering allowing autonomous vehicle testing (as is being done in Nevada & California by Google). The regulation that's being considered will allow for a five year testing period. Although the cars will be autonomous, they'll have to have a driver ready to take over immediately.

No driving systems that are "homebuilt conversions" will be allowed.

FlatLaw.ca was written up yesterday on the blog of Canadian Lawyer Magazine/Law Times.

The mention on their site caused about 50 extra people to visit the site (although it was published late Friday afternoon).

Online license agreements usually have warranties that are WRITTEN ENTIRELY IN CAPITAL LETTERS. This is an anachronism from the typewriter era that should be avoided according to the 9th Circuit, a leading author on contracts drafting and the deputy GC of Wikipedia.

The reason why people use all caps is a section of the UCC, an American law that codifies sales law (similar to the Sale of Goods Acts in Canada). You can read more about it here.

I've created a presentation about terms of use and best practices for ensuring enforceability.

It works best in Chrome & Firefox: “Terms of Use: Best Practices for Enforceability”

Here's an easy guide for getting SSH keys set up for SSH/rsync connections to your web server: myridia.com

Here are a few questions to ask when hiring a technology lawyer:

1. Does the lawyer have a website? I wouldn't hire one who doesn't. A decent website is quite affordable in 2013 (check Craigslist!).

In order to create AlbertaMonitor.ca I had to figure out how to convert PDFs to HTML using PHP.

The trick is to use a Java program called pdfbox and run it from the shell using PHP:

A week and a half ago I attended the 17th annual IT.CAN conference. The conference was more educational than I expected (i.e. less networking). Although the IT/tech bar is a fairly small group of people the conference was still accessible and open to new people like myself.

I wish I had attended IT.CAN as a student because it would have opened my eyes to the areas of practice within tech. I strongly recommend it to anyone considering the field (and there's a very cheap student rate).

I was quoted in a Globe and Mail article written by David Israelson.

The article is about Suncor's social media strategy. Here's what I had to say:

My legal marketplace, flatlaw.ca was written up today on Betakit. You can read the article here.

It's difficult to estimate what a case is worth. There are many variables and it's impossible to provide an exact figure but it's helpful to consider ballpark numbers (especially for settlement offers). The calculator below gives an idea of what a small claims court case could cost and what a plaintiff could get out of it (expected value).

Warning: this calculator makes a lot of assumptions and is a simplified model that overstates the odds of success (for a few reasons, such as judges not awarding the full amount claimed, non-payment by defendants [a $0 "win"], etc.). It does not include HST.

Square launched Square Cash today. It looks like a competitor to Interac e-transfer (at least in Canada) except it's free.

From what I know of the American market, this is a bigger innovation there than it'll be here where emailing money is fairly common (at least with young people). For the moment it's US only anyway.

As of a few months ago, all Ontario court proceedings are being recorded but the files are hidden from the public through court procedures.

Theoretically Ontario courts follow the "open court" principle (see e.g. Toronto Star Newspapers Ltd. v. Ontario). The public is supposed to be able to see justice be done.

The alleged founder of Silk Road (explanation in next paragraph) earned approximately 600,000 bitcoins (~$75,000,000) and the FBI would like that money. The FBI arrested him last week and is trying to recover his money but they can't figure out his password and until they do, they won't be able to seize his alleged proceeds of crime.

Silk Road was a marketplace that operated as a Tor Hidden Service. It was accessible by using a special encryption program that allows people to browse the internet anonymously. Silk Road was used by many people to buy drugs from sellers around the world who then shipped them by mail. All transactions were done using bitcoin so that the sellers and buyers couldn't be traced.

I've nearly finished developing AlbertaMonitor. It's a service that sends clients emails when their keywords are mentioned in Hansard, new bills or regulations (the Alberta version of OntarioMonitor.ca).

Now the waiting part. Scrapers can break for a variety of reasons so I'll need to wait a while before I can start getting people to try out the service. The Alberta Legislature will re-open at the end of October and I'll have a chance to test out the scraping/parsing services.

Answer: an arm and a leg at a time.

Better answer: hourly, fixed fee and on contingency.

Android is better than iOS if you have multiple email accounts set up in Gmail.

I switched to an HTC One about two weeks ago from iPhone (I'd been using iOS for about five years). There are a lot of differences but one thing stands out as being worth switching for.

A bill has been introduced to the Ontario legislature that will allow the personal, non-commercial importation of alcohol drinks from other provinces: Bill 98.

From the Explanatory Note: “The Bill amends the Liquor Control Act to add a provision that permits individuals who are 19 years of age or older to import or cause to be imported wine into Ontario from another province if the wine is for their personal consumption and not for resale or other commercial use.”

The Google AdWords rates for lawyer-related ads range from about 35 cents for a divorce lawyer in Edmonton to $63 for "car accident lawyers".

There are very few monthly searches for "injury lawyers" or "injury lawyers toronto" but every time someone clicks one of those ads it's about $60.

There's a large abandoned town in British Columbia: Kitsault. It was built in 1979 as a mining town for molybednum but the price collapsed shortly after construction and the town was abandoned.

Story and photos on MessyNessyChic.com.

The Don Valley River runs through the heart of Toronto. It's about a five minute drive from where I grew up yet I've never walked the trail next to it. It's nice in parts but generally pretty shabby.

It probably wouldn't take much work to make this a nice trail. If the City extended the Riverdale Farm design down through the trail and cleaned up the garbage it could be a beautiful walk. Throw a few container stores like at Dundas and Bathurst along the walk and it could be a bunch of new jobs for Regent Park/St. Jamestown.

Here are a few of the interesting things I read today:

popehat.com: A short essay on why government encryption breaking (as recently revealed by the Guardian) is un-American. It's particularly interesting because the author is a famous lawyer and discusses the (ab)use of nefariously obtained attorney-client emails.

I used to read the Toronto Star online several times a day. The trivia night I go to most Wednesdays used it as the source for questions for the first round every week. Then The Star introduced a paywall. I stopped reading it. The person who runs trivia night stopped using it and switched to the National Post.

It's incredibly hard to monetize casual internet content (e.g. news, blogs, etc.). Charging for access causes a huge drop in readership (depending on the form of paywall: 60%-90% for the Times UK, 40% for the Globe, etc.) and isn't an approach most small websites can take because their brand has no value (yet).

Microsoft has won a round in their battle with Motorola over licensing fees for industry standard patents.

The patents at issue were related to wireless (802.11) and video technologies (H.264) that are part of industry standards. When standards are developed the contributing companies agree to license their patents on "fair reasonable and non-discriminatory" (FRAND) terms. Microsoft and Motorola have been fighting over what that term means.

1. The Trial of an Action
2. Plain English for Lawyers
3. Letters to a Young Lawyer

I'd like to hear your recommendations. Send me an email! cameronhuff.com

A few weeks ago I discovered the (mostly American) subreddits for lawyers.

The /r/LegalMarketing subreddit is particularly useful for solo lawyers. Here's a post from yesterday that details one lawyer's web marketing efforts: reddit.com/....

It's worth learning some basic scripting if you're a lazy person.

For making new blog posts I created a Bash script that looks like this:

Before I started my own practice I spoke with a number of lawyers who went off on their own. One of these excellent lawyers, John Simpson, told me that the Law Society Referral Service (LSRS) was something that every new lawyer should sign up for.

The LSRS is a phone system run by the Law Society of Upper Canada. People who need lawyers call in and screening agents direct their call to a random lawyer who practices in that area (both legally and geographically). Lawyers must provide 30 minute consults (but not legal advice).

Paying Law Society fees and insurance are the easy steps in setting up your own law practice. The hard part is getting business.

After setting up my website, finding office space (19 Yorkville Ave.) and signing up for the LSRS, I needed to find places to advertise.

In a previous post I gave an overview of how this blogging software works. Once I made the PHP program that generate the script I needed a way to publish the site to http://www.cameronhuff.com/blog.

I created a bash script that looks like this:

I've helped quite a few people set up Wordpress blogs (e.g. Urban Flute Project) over the years. Wordpress is a very easy-to-use platform with tons of plugins but I wanted something simple for my own blog.

I looked into existing static blog generators (viz. Jekyll) but they were too complicated (or maybe I just didn't look into them enough). Not-invented-here syndrome is something all programmers should avoid but I just couldn't resist making my own static blog generator.

I've resisted blogging/Twitter/Google Plus for years but it's finally time. Now that I've set up my law practice I see the need to broadcast a bit more, improve my writing and tell people what I'm up to.

Writing here also fulfills three or four of these ten tips for success from one of my favourite blogs, BoingBoing.

Law Times has posted an article about ATD being acquired by Deloitte: http://www.lawtimesnews.com/201401273739/headline-news/accounting-firms-making-serious-noise.

ATD is the largest e-Discovery firm in Toronto that used armies of lawyer subcontractors to do document review, primarily for litigation.