Live data from Hacker News

Lavabit abruptly shuts down

lavabit.com

591–600 of 671 posts

Re: Lavabit abruptly shuts down

#591
post #517

Do you know much coverage this extraordinary events gets in mainstream media? Nothing, zilch, nada. http://imgur.com/a/WyDKy

Washington Post: http://www.washingtonpost.com/blogs/the-switch/wp/2013/08/08...

You may not include the Drudge Report http://drudgereport.com in your definition of MSM, but they have huge readership. They linked the WaPo story this morning.

Re: Lavabit abruptly shuts down

#592
post #183

The US government is destroying one of the few bright spots in the American economy with its out of control military. It is unconscionable. And the sad thing is it has been enabled by the betrayal by many of the web 2.0 giants, Facebook, Google etc. Google especially is sad to see since they were willing to forgo the Chinese market on principle, but then decided that taking on the authoritarian US government was too…

The actions of Lavabit actually caused me to cancel my account with Google Play All Access today (proof: http://i.imgur.com/KbmaBnS.png , if anyone cares), that I've had since day one. It's not that I didn't know that Google was ok with the spying before, but seeing the difference between the reaction of Lavabit, to the non-reaction from Google -- well THAT gave me the final push to stop doing business with the compa…

Lavabit was a tiny private operation. If you think that a publicly traded multi billion dollar company with millions of users and customers can just shut down to avoid complying with government requests then you are a deluded moron.

Re: Lavabit abruptly shuts down

#593
post #561

Earlier quoted context omitted.

The data may have been protected, but the senders and recipients probably were not. Similarly to SSL, it encrypts the traffic, but does not hide which websites you use. I bet that data are still valuable to the government. I have been thinking of starting a business in the privacy space. This has shown me that that all customer data needs to be periodically obliterated in safe way and that a kill switch or nuke butto…

Apparently a business where some guy is moving paper mail icognito from one point to the ther could be a possible business. I guess lawyers may want this, especially lawyers working to defend issues related to abuse of privacy breach or executive actions. Of course it will be hard to advertise such business. If you'll be trying to keep this secrect by creating small cells of people not knowing each other and smart ma…

Reminds me of the plot in the game Mirror's Edge, where couriers would physically deliver data instead of electronically, since there is no way to be sure that it isn't being intercepted. Such a thing might already be in practice already.

Re: Lavabit abruptly shuts down

#594
post #26

Seems like it would make sense for users to demand that any US based service includes a warrant canary, just like rsync.net's implementation. A global canary + separate canaries for individual accounts would also make sense. https://en.wikipedia.org/wiki/Warrant_canary http://rsync.net/resources/notices/canary.txt

There's an easy canary in this cases.

I don't know how FBI/NSA notifications are received in the US. But you can communicate to your uses any FBI/NSA/LE notification before reading the content. Of course, the notification should be posted to a medium where you don't have further control over, so there's no way for you to remove the notification.

Re: Lavabit abruptly shuts down

#595
post #589
post #582

Earlier quoted context omitted.

Some countries have a problem with bribery and corruption. Routing sensitive data through those countries risks that data being exposed by anyone in the chain who is willing to take a bribe. I am much more worried by corrupt workers in my ISP or telephony provider than I am about my government.

That's an issue with plain text data. However, nowadays absolutely no sensitive data should be transferred/stored unencrypted. The problem is, that it seems like eavesdropping is not enough for some certain governments and now they require physical access / backdoors to companies' servers in order to bypass encryption and/or other security means. What I, and few others have suggested is to move services away from suc…

> The problem is, that it seems like eavesdropping is not enough for some certain governments and now they require physical access / backdoors to companies' servers in order to bypass encryption and/or other security means. What I, and few others have suggested is to move services away from such countries so their governments would have harder times to obtain physical access.

Many governments are much worse than the US; they not only snoop on data but they imprison or kill people as a result of the things they find.

I'd be interested to hear about countries who will i) stand up against the US & ii) not be at large risk of corrupt employees.

(http://www.freedomhouse.org/report/freedom-net/2012/egypt) etc.

Re: Lavabit abruptly shuts down

#596

Earlier quoted context omitted.

The actions of Lavabit actually caused me to cancel my account with Google Play All Access today (proof: http://i.imgur.com/KbmaBnS.png , if anyone cares), that I've had since day one. It's not that I didn't know that Google was ok with the spying before, but seeing the difference between the reaction of Lavabit, to the non-reaction from Google -- well THAT gave me the final push to stop doing business with the compa…

Lavabit was a tiny private operation. If you think that a publicly traded multi billion dollar company with millions of users and customers can just shut down to avoid complying with government requests then you are a deluded moron.

I never suggested that it was feasible for Google to shut down, but that doesn't mean that I have to just accept what they are complicit in. I no longer choose to do business with them. That hardly makes me a deluded moron.

Re: Lavabit abruptly shuts down

#597
post #548
post #350

Earlier quoted context omitted.

Edit: I was a PM on Exchange and Exchange Hosted Encryption for some time, so it looks like Lavabit tried to fight the government on whether they are required to release private keys. I've seen one other customer try to fight, and it was not pretty either. The US government in these cases are serious. Takeaway for fellow hackers: If you are building a system that stores user-generated data, prepare for the eventualit…

Could you name some examples from Europe? Cases when police physically takes servers are common. But I never heard of case where police would require encryption keys for 'maybe we will needed it'.

Regulation of Investigatory Powers Act (RIPA) in the UK is relevant here.

(http://www.pcpro.co.uk/news/361693/teenager-jailed-for-refus...)

Re: Lavabit abruptly shuts down

#598

Earlier quoted context omitted.

Lavabit was a tiny private operation. If you think that a publicly traded multi billion dollar company with millions of users and customers can just shut down to avoid complying with government requests then you are a deluded moron.

I never suggested that it was feasible for Google to shut down, but that doesn't mean that I have to just accept what they are complicit in. I no longer choose to do business with them. That hardly makes me a deluded moron.

The burden isn't on Google (I'm not sure why you are singling out Google) their hands are tied from a legal and practical standpoints.

They receive warrants and subpoenas with which they have to comply to keep doing business, if you don't care for that blame the politician and the legal system, focusing on Google is not only missing the point, it's unfair

Re: Lavabit abruptly shuts down

#599
post #580
post #560

Earlier quoted context omitted.

I understand what you mean but I think the term '3rd world country' could be a bit discouraging to some of our American friends who might not have a clear picture about realities in our part of the world. For example I also live in a small EU country. By no means this is a 3rd world country - we have pretty strong IT industry (e.g. some globally successful antivirus companies etc.) and the country is certainly develo…

Yes, however, all of the mobile internet providers are censored with the infamous Wikipedia-blocking UK internet filter, and it can't be turned off.

This is only because our mobile market is so small that we only have 3 providers and they are all subsidiaries of global companies (O2, T-Mobile and Vodafone) with headquarters under different jurisdictions. This is not enforced by our government and if anyone wanted to circumvent this filter (which would be easy - VPN would do) AFAIK it would not be illegal here.

Re: Lavabit abruptly shuts down

#600
post #432

Earlier quoted context omitted.

The problem is that, left to market forces, we would end up with an email solution that looks like (or is) Facebook.

I'd rather we stopped talking electronically than ended up with Facebook.

Have you seen RetroShare? I like it quite a bit & have used it with a few friends so far. It claims security... but I don't know enough to be certain.
Post reply on HN