PDA

View Full Version : U.S. Aims to Force Web Services to Compromise Message Encryption: Frustrated that ema



vacuum
6th May 2013, 08:25 PM
This is insane.

U.S. Aims to Force Web Services to Compromise Message Encryption: Frustrated that email and social network users can encrypt their messages, law-enforcement agencies want the feds to enact punitive measures to force cooperation (http://www.eweek.com/security/us-aims-to-force-web-services-to-compromise-message-encryption/)

U.S. Aims to Force Web Services to Compromise Message Encryption

NEWS ANALYSIS: Frustrated that email and social network users can encrypt their messages, law-enforcement agencies want the feds to enact punitive measures to force cooperation.

Even if it accomplished nothing else, the Middle Eastern governments’ crackdowns on communications during the Arab Spring movement two years ago demonstrated how much governments, in general, and repressive governments, in particular, hate encryption—particularly in the hands of private citizens.

This is why governments from Egypt to Oman to India have tried to ban BlackBerry smartphones with their uncrackable encryption. Now, in the United States, the Federal Bureau of Investigation and the military and intelligence agencies are going after your encrypted communications (http://www.eweek.com/security/us-seeks-power-to-wiretap-web-services-including-google-facebook/) on Google, Facebook and other Web communication services. Google, as you’ll likely recall, was hacked by the Chinese military who tried to get into the email accounts of dissidents who use Gmail for communicating their pro-freedom activities. The Chinese, a repressive regime if there ever was one, just hates dissidents. So the military hackers wanted to read their email to find out who they were and what they were up to.

Google responded by encrypting its network from end to end. Facebook, after being attacked repeatedly, has done the same thing. Other networks that pride themselves on their security are also providing encrypted communications, including BlackBerry, which is widely used by the U.S. government precisely for this reason.


Of course those other repressive governments never actually banned BlackBerry devices because their own intelligence agencies also use them and needed the security more than they needed to read other people’s email.

So now we come to the FBI and other U.S. law-enforcement agencies that are trying to read the text messages, chats and the email of people they think are bad guys. The feds say that they’re doing this to fight crime and terrorism. And they say they have a right to get information if they have a legally obtained wiretap order.

The problem is, as The Washington Post reported recently (http://www.washingtonpost.com/world/national-security/proposal-seeks-to-fine-tech-companies-for-noncompliance-with-wiretap-orders/2013/04/28/29e7d9d8-a83c-11e2-b029-8fb7e977ef71_story.html), that not all providers of communications services have the ability to comply with a federal wiretap order. Their systems are secure and they’re meant to stay that way. What the FBI is asking for is the ability to fine those companies that don’t comply with a wiretap order, even if they’re technically unable to do so within a time limit set by the FBI.

In other words, if you can’t provide the feds with a back door to your system, the government will keep piling on fines until you go out of business. The idea, of course, is to compel companies that provide secure communications to also build in a means for the feds carry out get their wiretaps.


read more:
http://www.eweek.com/security/us-aims-to-force-web-services-to-compromise-message-encryption/

Ares
6th May 2013, 08:41 PM
Good luck fuckers, I'll just step up my encryption from 1028-RSA to 4096-RSA. If it means I have to send a 2MB e-mail just to say hi how are you doing because of all the encryption overhead so be it.

vacuum
7th May 2013, 09:18 PM
U.S. Weighs Wider Wiretap Laws to Cover Online Activity By CHARLIE SAVAGE (http://topics.nytimes.com/top/reference/timestopics/people/s/charlie_savage/index.html) Published: May 7, 2013 WASHINGTON — The Obama administration, resolving years of internal debate, is on the verge of backing a Federal Bureau of Investigation (http://topics.nytimes.com/top/reference/timestopics/organizations/f/federal_bureau_of_investigation/index.html?inline=nyt-org) plan for a sweeping overhaul of surveillance laws that would make it easier to wiretap people who communicate using the Internet rather than by traditional phone services, according to officials familiar with the deliberations.


https://www.nytimes.com/2013/05/08/us/politics/obama-may-back-fbi-plan-to-wiretap-web-users.html?partner=rss&emc=rss&utm_source=feedly&_r=1&

Son-of-Liberty
8th May 2013, 06:35 AM
This will backfire. More people will just switch to messaging systems like Bitmessage and skip the email all together.

drafter
8th May 2013, 11:51 AM
There is just so much irony in the advancement of technology in this regard. It's like we've "regressed with advancement". Where we once used to "talk" on phones, we've regressed with the "advancement" of texting. People actually talk to their texting apps so that it can then send a message. Does anyone else scratch their head at these "advancements"? So anyways, in the case of all this "spying" by our illustrious governments, soon will come a day where they spend so much time focusing on all these "advancements" that something as simple as meeting to chat over plans at a coffee shop will ultimately be the easiest most secure way to transfer "secret" info. The more we go forward the more we go backwards.

vacuum
9th May 2013, 09:05 PM
Bombing Pressures Technology Providers to Aid Policy

Google Inc. (GOOG) (http://www.bloomberg.com/quote/GOOG:US), Twitter Inc. and even Silicon Valley startups are confronting calls by law enforcement (http://topics.bloomberg.com/law-enforcement/) following the Boston Marathon bombings (http://topics.bloomberg.com/boston-marathon-bombings/) to make their products more easily used for surveillance.

Police and federal agencies made record levels of requests for data from companies including Google and Twitter in months before the bombing, seeing increasing value in smartphone data, e-mails and online chats to help find and prevent terrorist plots and crime.

Police and federal agencies made record levels of requests for data from companies including Google and Twitter in months before the bombing, seeing increasing value in smartphone data, e-mails and online chats to help find and prevent terrorist plots and crime. Photographer: Andrew Harrer/Bloomberg

The International Association of Police Chiefs (http://www.theiacp.org/) wants Congress to update a federal law to compel more companies providing communications services to build intercept tools that allow them to conduct surveillance with court orders.

more: http://www.bloomberg.com/news/2013-05-03/bombing-pressures-technology-providers-to-aid-police.html






FBI Still Doesn't Think It Needs A Warrant To Read Your Email, Despite Court Ruling To The Contrary

The ACLU has continued its campaign to explore whether or not the government gets a warrant before scouring your email. Last month, they discovered that the IRS doesn't believe (http://www.techdirt.com/articles/20130411/01260522676/irs-investigators-see-no-need-warrant-to-snoop-emails.shtml) in getting a warrant -- leading to the IRS promising to change (http://www.techdirt.com/articles/20130421/23062122797/irs-says-it-will-change-its-policy-looking-emails-without-warrant-some-point.shtml) that policy. Now they've received some documents from the FBI in response to a FOIA request that again suggest that, despite the ruling in US v. Warshak (http://caselaw.findlaw.com/us-6th-circuit/1548071.html), in which the 6th Circuit said that a warrant is needed to compel an ISP to turn over emails, the FBI believes it can access emails older than 180 days without a warrant (http://www.aclu.org/blog/national-security-technology-and-liberty/fbi-documents-suggest-feds-read-emails-without-warrant), under ECPA. As we've discussed at length, ECPA (the Electronic Communications Privacy Act) is a very outdated piece of legislation which considers emails on a server over 180 days to be "abandoned" because no one considered a cloud computing future.

more: https://www.techdirt.com/articles/20130508/11523523006/fbi-still-doesnt-think-it-needs-warrant-to-read-your-email-despite-court-ruling-to-contrary.shtml






The FBI Is Winning the Fight to Invade Your Online Privacy

Two months ago, the Supreme Court refused to hear a challenge (http://motherboard.vice.com/blog/warrantless-wiretaps-forever) to the Foreign Intelligence and Surveillance Act (FISA), a Bush-era law that allows the NSA to wiretap American citizens without a warrant. Now, the full scope of the US government's warrantless surveillance schemes is becoming known.

Leaked documents from the IRS, the FBI, and the Department of Justice have now shown that none of those agencies believe that warrants are required for monitoring the online communication—think emails, not just public Twitter posts—of American citizens. At the same time, the Obama administration is reportedly planning on backing an FBI plan that would force internet providers, email hosts, social media platforms, and others to install backdoors to their system to allow the FBI easier access.

The past few months have seen the culmination of years of work by authorities to exploit the regulatory vagaries of electronic communication and the technical ineptitude of legislators (http://motherboard.vice.com/blog/dear-congress-it-s-no-longer-ok-to-not-know-how-the-internet-works). By loudly proclaiming that internet is the realm of criminals, authorities are successfully pushing to make monitoring of American's communication online far easier, and with fewer legal barriers, than traditional modes of communication.

The revelation that the FBI doesn't believe the Fourth Amendment applies to all online communication comes via the ACLU, which filed a FOIA request to see if the FBI was exploiting loopholes in the Electronic Communications Privacy Act (ECPA), a hopelessly outdated pre-Internet bill that Congress has yet to update (http://motherboard.vice.com/blog/congress-might-finally-update-the-electronic-communications-privacy-act) and which allows for some warrantless monitoring of communication.

more: http://motherboard.vice.com/blog/the-fbi-is-winning-the-fight-to-invade-your-online-privacy