If you want to have data storage that's secure from the NSA then you are going to need to do client side encryption. Moving your data to a company/country that promises not to access it isn't going to cut it.
Norwegian backup provider promises NSA-free data storage using Norwegian laws
11–20 of 125 posts
Re: Norwegian backup provider promises NSA-free data storage using Norwegian laws
#12NSA.no!
Re: Norwegian backup provider promises NSA-free data storage using Norwegian laws
#13From the article "U.S. law enforcement could use the USA PATRIOT Act on a U.S.-based organisation, like Microsoft, Google, Dropbox or Amazon, for example, to force its local subsidiary companies across the world into handing over user data to U.S. authorities." Exactly how? By my understanding a company in EU operates under EU law and US parent company is only stock owner. Stock owner can not by my understanding forc…
Microsoft have already admitted this with respect to office 365.
http://www.zdnet.com/blog/igeneration/microsoft-admits-patri...
Re: Norwegian backup provider promises NSA-free data storage using Norwegian laws
#14This is nice. But I think that the long term solution needs to be based on something that does not depend on the ability of your host to protect your data. The US is strong enough to pressure (almost?) any country to jump through hoops for them (we have seen leaks about their pressure on Sweden [1] or Spain) so just being out of their jurisdiction is not enough.
1. http://falkvinge.net/2013/01/06/banana-republic-justice-behi...
Re: Norwegian backup provider promises NSA-free data storage using Norwegian laws
#15This is nice. But I think that the long term solution needs to be based on something that does not depend on the ability of your host to protect your data. The US is strong enough to pressure (almost?) any country to jump through hoops for them (we have seen leaks about their pressure on Sweden [1] or Spain) so just being out of their jurisdiction is not enough. 1. http://falkvinge.net/2013/01/06/banana-republic-just…
I agree 100%. Your country or company isn't going to make a difference when the people maintaining it are threatened or bribed by a force that can and does leverage power outside their jurisdiction. Honestly, the problem has to be addressed at the source, not with bandaids applied by the hopeful or naive.
Re: Norwegian backup provider promises NSA-free data storage using Norwegian laws
#16From the article "U.S. law enforcement could use the USA PATRIOT Act on a U.S.-based organisation, like Microsoft, Google, Dropbox or Amazon, for example, to force its local subsidiary companies across the world into handing over user data to U.S. authorities." Exactly how? By my understanding a company in EU operates under EU law and US parent company is only stock owner. Stock owner can not by my understanding forc…
> US parent company is only stock owner
That is rarely the case. In most arrangements, foreign subsidiaries are still under direct control of the main company - do you really think "Google US" doesn't have a say in how "Google Ireland" operates?
There are tons of accountancy rules dealing exclusively with partially-owned-fully-controlled foreign companies, but when it comes to the Patriot Act, as long as there is even a shred of control from an American company, then all data held by the controlled company is subject to US laws, regardless of actual location. This is far from an expansive interpretation of the Act, tbh; it's just one of the many that have been tested in court.
Re: Norwegian backup provider promises NSA-free data storage using Norwegian laws
#17"In Norway, privacy stands firm like the mighty mountains of Jotunheimen.". Let's not flatter ourselves too much: http://no.wikipedia.org/wiki/Datalagringsdirektivet (in Norwegian, http://translate.google.com/translate?sl=auto&tl=en&js=n&pre... ), or the less detailed http://en.wikipedia.org/wiki/Data_Retention_Directive
[deleted]
Re: Norwegian backup provider promises NSA-free data storage using Norwegian laws
#18If you want to have data storage that's secure from the NSA then you are going to need to do client side encryption. Moving your data to a company/country that promises not to access it isn't going to cut it.
I have to agree. The user needs control over their encryption.
Taking advantage of Norway's laws is fine, until the day that those laws go sour on you.
Re: Norwegian backup provider promises NSA-free data storage using Norwegian laws
#19"In Norway, privacy stands firm like the mighty mountains of Jotunheimen.". Let's not flatter ourselves too much: http://no.wikipedia.org/wiki/Datalagringsdirektivet (in Norwegian, http://translate.google.com/translate?sl=auto&tl=en&js=n&pre... ), or the less detailed http://en.wikipedia.org/wiki/Data_Retention_Directive
[deleted]
(the now deleted parent wrote that the Data Retention Directive is an EU directive and that Norway is not part of the EU)
That doesn't seem to stop them. 2nd paragraph of the translated WP article:
In Norway DLD was adopted by the Parliament on 4 April 2011 . It was scheduled to take effect on 1 April 2012, but has been postponed several times. Ministry of Transport are now looking for that storage requirement comes into force on 1 January 2015.
Re: Norwegian backup provider promises NSA-free data storage using Norwegian laws
#20If you want to have data storage that's secure from the NSA then you are going to need to do client side encryption. Moving your data to a company/country that promises not to access it isn't going to cut it.
I have to agree. The user needs control over their encryption. Taking advantage of Norway's laws is fine, until the day that those laws go sour on you.
Don't you need a combination of encryption AND no law forcing you to reveal the key?