Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Larry Page addresses PRISM

googleblog.blogspot.com

Post reply on HN
Print view View original

31–40 of 482 posts

Re: Larry Page addresses PRISM

#31

Post by unreal37 »

chrisacky wrote: post #4

I can't understand the repeated use of "direct access". It's the kind of language a lawyer would use to qualify a patent clause. - We do not provide direct access to our servers. - We do not provide direct access nor is there a backdoor. - O, but we do still pipe all of your data to external NSA servers. Every company named (I'm not just picking on Google here) has come out with the same overarching statement. "We do…

I believe Google on this. The language is clear and non-weasel-y. Google does not hand over user data to the government unless specifically requested. There is no open-ended access.

But I also believe the government works with ISP's (all major ISPs) so that they can intercept traffic. Which would be a type of MITM attack allowing them to get data from all major web sites.

Re: Larry Page addresses PRISM

#32

Post by packetslave »

ceejayoz wrote: post #15
packetslave wrote: post #8

Earlier quoted context omitted.

Read the blog post. "Press reports that suggest that Google is providing open-ended access to our users’ data are false, period"

Which is still pretty flexible language. "Oh, it's not open-ended access, it's limited to the conditions in the authorization..." The Verizon order was limited to 3 months, for example, which is hardly open-ended... except that it presumably got re-upped every three months.

Read the NEXT SENTENCE! "Until this week’s reports, we had never heard of the broad type of order that Verizon received—an order that appears to have required them to hand over millions of users’ call records."

AND THE TWO AFTER THAT: "We were very surprised to learn that such broad orders exist. Any suggestion that Google is disclosing information about our users’ Internet activity on such a scale is completely false."

Re: Larry Page addresses PRISM

#34

Post by Dove »

chrisacky wrote: post #4

I can't understand the repeated use of "direct access". It's the kind of language a lawyer would use to qualify a patent clause. - We do not provide direct access to our servers. - We do not provide direct access nor is there a backdoor. - O, but we do still pipe all of your data to external NSA servers. Every company named (I'm not just picking on Google here) has come out with the same overarching statement. "We do…

    Until this week’s reports, we had never heard of the 
    broad type of order that Verizon received—an order that 
    appears to have required them to hand over millions of 
    users’ call records. We were very surprised to learn 
    that such broad orders exist. Any suggestion that Google 
    is disclosing information about our users’ Internet 
    activity on such a scale is completely false.
I'm not sure how much more strongly you'd like that worded. It seems pretty complete to me.

Re: Larry Page addresses PRISM

#36

Post by jessaustin »

chrisacky wrote: post #4

I can't understand the repeated use of "direct access". It's the kind of language a lawyer would use to qualify a patent clause. - We do not provide direct access to our servers. - We do not provide direct access nor is there a backdoor. - O, but we do still pipe all of your data to external NSA servers. Every company named (I'm not just picking on Google here) has come out with the same overarching statement. "We do…

There is another explanation:

https://financialcryptography.com/mt/archives/001431.html

Re: Larry Page addresses PRISM

#37

Post by kjackson2012 »

- What indirect access does Google provide to the government?

- What lawful data does Google automatically provide to the government without any requests?

- Can the government can ask Google for data once, and then Google is required to constantly supply data, periodically? If so, what is that data?

- What data does Google provide to the government upon request?

Re: Larry Page addresses PRISM

#38

Post by danielpal »

What a lot of people haven't considered is that it's likely that the NSA had a big breakthrough on Integer Factorization and their capable of breaking RSA public key crypto (used everywhere you see HTTPS)

Then they can just save all your encrypted traffic and break it on demand.

We all need to start considering moving to Elliptic Curve Cryptography.

Re: Larry Page addresses PRISM

#40

Post by Thrymr »

ceejayoz wrote: post #15
packetslave wrote: post #8

Earlier quoted context omitted.

Read the blog post. "Press reports that suggest that Google is providing open-ended access to our users’ data are false, period"

Which is still pretty flexible language. "Oh, it's not open-ended access, it's limited to the conditions in the authorization..." The Verizon order was limited to 3 months, for example, which is hardly open-ended... except that it presumably got re-upped every three months.

He also says: "Until this week’s reports, we had never heard of the broad type of order that Verizon received... We were very surprised to learn that such broad orders exist. Any suggestion that Google is disclosing information about our users’ Internet activity on such a scale is completely false."
Post reply on HN