Code

Lawrence Lessig, a constitutional law professor, opens by drawing a parallel between two moments of libertarian optimism. In the early 1990s, as communism collapsed across Central and Eastern Europe, citizens embraced antigovernmental fervor and faith in free markets, but the result was not freedom; power shifted to organized crime and public services went unmet. Around the same time, cyberspace advocates, most famously John Perry Barlow, co-founder of the Electronic Frontier Foundation, declared that governments could not regulate the Internet. Lessig argues that both waves of optimism rested on the same error: the assumption that removing government control automatically produces liberty.

Lessig introduces his central thesis: The "invisible hand" of cyberspace, driven by commerce and government together, is constructing an architecture of increasingly perfect control. The real challenge is not whether cyberspace can be regulated but whether essential liberties can survive within an environment designed for efficient regulation. The key to this transformation is "code," the software and hardware that constitute cyberspace. Code functions as law, regulating behavior not through sanctions but by defining what is possible, visible, and permitted within digital spaces.

To orient readers, Lessig presents four stories introducing recurring themes. Martha and Dank, neighbors in a virtual world, dispute over digital flowers, illustrating that cyberspace problems can be solved by changing code rather than through legal means. "Boral," a hypothetical state unable to stop offshore Internet gambling, illustrates "regulability," the government's capacity to control behavior when the network's architecture conceals user identity, location, and activity. The case of Jake Baker, a University of Michigan student who published violent fiction on USENET (a network of electronic bulletin boards), shows how cyberspace creates conflicts among "competing sovereigns." A hypothetical government "worm" that silently searches every hard drive for a classified document raises a "latent ambiguity," a situation in which changes in technology reveal an unresolved choice in constitutional values: The framers never decided whether a perfectly noninvasive, suspicionless search is constitutional because such a search was technologically impossible in 1791.

Lessig dismantles the claim that the Internet is inherently unregulable, calling this the fallacy of "is-ism," the mistake of treating the Internet's current design as its necessary nature. He contrasts two university networks from the mid-1990s: the University of Chicago's, which permitted anonymous access, and Harvard's, which required registration and monitoring. The difference was designed, not inevitable. Lessig identifies three "imperfections" in the Internet's original architecture: The protocols did not require users to reveal their identity, their physical location, or the nature of the data they transmitted. He traces how commercial interests have steadily filled these gaps through IP address tracing, "cookies" (small data files that track browsing behavior), digital credential systems, content inspection technologies, and geographic mapping services. Government, Lessig argues, will build on this commercial infrastructure through a "regulatory two-step," changing technology to change behavior. Examples include the Communications Assistance for Law Enforcement Act (CALEA), which required telephone networks to preserve wiretapping capability, and European Union data retention directives. The critical question is what kind of identification-rich Internet will emerge: one that forces users to surrender all personal data, or one that reveals only the minimum necessary, with traceability permitted only under judicial authorization. Drawing on Harvard professor Jonathan Zittrain's work, Lessig predicts that a catastrophic cyber-attack will generate the political will to complete this transformation, because the same open design that enables innovation also enables devastating malware.

Lessig shifts to how code regulates, surveying virtual spaces from America Online to Second Life, an online virtual world, to show how different architectures produce different forms of social life. He presents a framework identifying four modalities that constrain behavior: law, norms, markets, and architecture. Using the example of smoking, he shows how all four operate simultaneously and how government can regulate indirectly by manipulating any of them. He warns that indirect regulation raises problems of transparency: When government achieves its ends through architecture rather than legislation, responsibility is obscured. He also argues that whether code is "open" (transparent and inspectable) or "closed" (opaque) matters profoundly, because open code constrains government power by making regulation visible.

Lessig applies this framework to three areas where technology creates latent ambiguities. He introduces the concept through the Fourth Amendment's history, tracing from the 1928 case Olmstead v. United States, where the Supreme Court held that wiretapping required no warrant because no physical trespass occurred, through Justice Louis Brandeis's dissent arguing the amendment must be translated to account for new technology, to the Court's eventual adoption of this view in the 1967 case Katz v. United States.

On intellectual property, Lessig argues that digital technology is transforming copyright from a limited regulation of commercial copying into a regime governing virtually every use of creative work. 'Trusted systems' can enforce granular rights over digital content but without limitations like fair use (the right to use copyrighted material without the owner's permission for certain purposes), limited terms, and anonymous reading that the old system's imperfections preserved. He identifies latent ambiguities: whether fair use is a fundamental value or merely an accommodation to imperfect technology, whether anonymous reading should be legally protected, and whether copyright's expansion to cover amateur creativity is constitutionally sound. On privacy, Lessig catalogs expanding surveillance technologies, from search engine logs to face recognition cameras, and argues that three competing conceptions of the Fourth Amendment, protection from the burden of unjustified searches, protection of dignity against suspicionless intrusion, and a substantive limit on government power, now diverge in ways the framers never anticipated. He proposes solutions combining law and technology, including machine-readable privacy policies treated as binding contracts. On free speech, he proposes tagging content harmful to minors using HyperText Markup Language (HTML) markers to enable browser-based filtering without burdening adult access, and argues that copyright's expansion and the government allocation of broadcasting spectrum (the radio frequencies licensed by the government for radio and television broadcasting) both conflict with First Amendment values.

Lessig addresses jurisdictional conflicts by contrasting a French court's order requiring Yahoo! to block French users from Nazi paraphernalia with a U.S. court's shutdown of iCraveTV, a Canadian service streaming broadcast television. He identifies "reciprocal blindness": Americans saw France's order as censorship but their own country's order as unremarkable. He predicts a "many laws rule" combining an identity layer with international agreements, allowing servers to grant or block access based on nationality.

Lessig argues that American institutions cannot make the choices cyberspace demands. Courts hesitate to resolve latent ambiguities for fear of appearing political. The state action doctrine, the legal rule limiting constitutional claims to government rather than private actors, excludes code from constitutional review despite code functioning as law. The legislature is corrupted by fundraising imperatives that empower organized special interests. Lessig proposes improving democratic deliberation through mechanisms like political scientist James Fishkin's 'deliberative poll,' in which representative groups of citizens receive information, debate in small groups, and then express considered views.

Lessig closes by warning against libertarian passivity. When those who believe in Internet freedom refuse to engage with government, the result is regulation by and for the powerful. Over a decade, Congress passed 24 copyright-related laws but only one spam law, despite spam causing far greater economic harm, because the content industry lobbied aggressively while no comparable interest pushed for spam regulation. Lessig expresses pessimism that the necessary engagement will occur, predicting that losses of privacy, free speech, and the intellectual commons will be treated as natural phenomena rather than as consequences of human choices about the architecture of cyberspace.