#2 Provide legal support to people who's civil liberties has been violated. Mostly related to free speech.
#3 Protects security researchers from government harassment, particularly those who produce encryption software.
#4 Develops software security tools, like https everywhere.
#5 Uses legal tools to get government to admit and publicly release documents related to surveillance, incorrect search and seizures, anti-file sharing laws, patents and free speech. see more at https://en.wikipedia.org/wiki/List_of_litigation_involving_t...
http://istruecryptauditedyet.com/
The security of Truecrypt is incredibly important to privacy efforts.
If you're looking to provide legal support to people, consider donating to ACLU. By the numbers, ACLU appears to be a much more effective way of converting donations to legal support for civil liberties cases. I have some reservations about EFF but unreservedly support ACLU.
As a security researcher working in encryption, I'm not sure what #3 is about. I'm more likely to have the government offer me money (I won't work for the government, haven't in the past, or even accept DARPA grants) than harass me.
ACLU and EFF has joined their forces on several issues. EFF legal support is about Internet civil liberties cases, while ACLU has the broader scope of "the Constitution and laws of the United States". For example, ACLU domain covers anti-war protesters. When one is considering where to send donation money, a larger or small scope has both benefits and drawbacks.
tptacek, if you want to read more about EFF and their involvement around encryption and security researchers, I do want to point you to Wikipedia for more information. An example is the EFF DES cracker article at https://en.wikipedia.org/wiki/EFF_DES_cracker. There is also https://www.eff.org/issues/coders as linked on their website. A lawsuit that might be interesting to read could be https://w2.eff.org/IP/DMCA/Felten_v_RIAA/20010813_eff_felten... .
EFF had also a role during the Export of cryptography events. There is numerous good books/articles on the subject, include a somewhat sparse Wikipedia article at https://en.wikipedia.org/wiki/Export_of_cryptography_in_the_.... Eff has more details about their role on their own website at https://www.eff.org/issues/export-controls .
One could argue that that was the past and do not reflect today. Hotz might disagree a bit on that subject, as well as each time someone has had "anti-drm circumvention laws" being thrown at them for doing security research. I personally have not forgotten ACTA as a recent example where today's government still want to create laws that hinders security researcher in their job.
As a recurring donor, I'm interested to hear what you don't like about them.
As for protecting security researchers, I suspect the gov't is more interested in (and likely to harass) Applebaum et al than you guys.
Because I know folks will ask me, I think that antidiscrimination law and things like first amendment rights so frequently conflict that I think there is a real conflict of interest when an organization takes on both. The ACLU does take on both, or they claim to, but this usually means pushing antidiscrimination law over first amendment issues, which I think is a real problem.
The ACLU's position in a lot of issues like Hosana Tabor v. EEOC was wrong (so wrong that all 9 justices disagreed with the ACLU and stood up instead for civil liberties), and they are for corporate free speech on political issues (Citizens United) unless that is discriminatory (Willock Photography). And so forth.
The ACLU is doing some important work, particularly in the areas of drones and areas outside the EFF's focus.
I am not that enthusiastic about the ACLU because I think their defence of first amendment issues is rather tepid and has been for decades. In the 1950s they kicked my mother's uncle out for defending the rights of the Communist Party USA to peaceably assemble, and today I am really not happy with the way they look at religious liberty.
The problem with religious liberty and the ACLU is that they seem to look at it entirely as if it is just a piece of anti-discrimination law and nothing more. For this reason they came down 100% on the wrong side of Hosana Tabor v. EEOC, and have generally opposed religious liberty when it conflicts with other anti-discrimination agendas they push. But the First Amendment is not just another piece of anti-discrimination law, and it must have more force than the Americans with Disabilities Act or the Civil Rights Act. The unwillingness to really defend religious freedom outside of the antidiscrimination context is one reason I can't back the ACLU over the EFF.
As far as the EFF and ACLU meh...neither particularly excite me there are distinct differences to be sure. But it is the similarities that make me feel nonplussed about support. The way I think of these orgs if there is something specific you think they do well and more importantly if it makes you "feel good", then give. As for practical results there are other places your money could be better spent.
Practical application over Pontification
I mean, they didn't say it like that.... But still, very valuable. Likely saved me thousands of dollars with a 5 minute phone call.
And, my god, I never would have expected to have to hide behind the DMCA (Digital Millennium Copyright Act)! I used to protest against that thing like a maniac before it was passed!
There's plenty bad with the DMCA and how companies use and abuse it to be against it, but it can also be used for good.
yeah, we protested back in the day because the DMCA made it illegal to decrypt DVD's with DeCSS, which, to this day, is why you cannot watch DVD's legally in Linux without paying someone. For our protest, we actually printed out the code to DeCSS and handed it out to people saying "This piece of paper is illegal, you cannot read this piece of paper." http://en.wikipedia.org/wiki/DeCSS
The DMCA did a lot of stuff like this. It essentially laid the groundwork for future Internet and IP laws. It was the first law to address the content of the Internet, so it was a bit of a landmark.
The clause that's in there that ended up protecting me was where the DMCA states that service providers cannot be held accountable for the things their users say. Huge, awesome bit, that. Definitely a serious 20/20 hindsight thing. I can play DVD's on my Linux machine now, too... Though not legally, really.
In effect, they're contributing to making present and future US law. And they're on the side of civil liberties.