101–110 of 420 posts
Earlier quoted context omitted.
The spineless, reprehensible CEOs are doing it willingly.
This is unsubstantiated speculation.
One more reason FISA is one sick, disgusting piece of legislation, and it was just extended to 2017, last year - yet too many were dormant when all of it was going down.
I'm just going to leave these here: https://www.cdt.org/content/donate https://supporters.eff.org/donate
Earlier quoted context omitted.
It's described for a couple of the cooperating corporations in the article. For example, for Facebook, the analyst goes to a special webpage/site at Facebook, then they simply clicks through a "Yep, this person is a terrorist" EULA and they have full access to Facebook's database (eg. full access to user content). I bet they rejoiced when Facebook Graph opened shop.
Move fast and break the Constitution.
Earlier quoted context omitted.
I've read somewhere that it's voluntary edit: read it here http://mobile.theverge.com/2013/6/6/4403868/nsa-fbi-mine-dat...
Source.
Yes, this is bad. Yes, you are right to be upset. Yes you (not not really me, I'm not American and i avoid american hosting and hosting companies like amazon for exactly this reason) should change that. But honestly, are you surprised? Are you really? Government agencies have be building large datacenters, the EU loves data retention. There was no tin foil head required to see this.
No, but now there is proof, which should make a difference. How are all of these not cases for impeachment? If Fox News thought Obama should be impeached over Benghazi, they should love this.
In fact, with all of the "scandals" right now, there's an even greater motivation to run this story.
So what's the motivation that's holding this story back?
Earlier quoted context omitted.
Dropbox has every encryption key used with Dropbox, so they can decrypt any file. Both transport keys and storage keys. Dropbox does at least (allegedly) encrypt stuff for storage, so they can RMA hard drives without having to destroy them first, but that's pretty meaningless. There are some (flimsy) reasons for Dropbox to have copies of all storage keys (a web UI, which only some users use). Dropbox has done a good…
What alternative do you suggest?
The problem is mobile. Due to some questionable decisions made by especially Apple but also earlier with Google, you really need every single app to write to your cloud storage provider's API. Dropbox is unquestionably the leader there; iCloud on iOS seems to do ok for newer apps. Neither provides meaningful encryption. Requiring every app developer to figure out encryption and manage keys on his own and then handle that on top of the Dropbox API is also insane.
Arguably Apple has a lot of ways to pwn iOS users already, so I'd consider trusting Apple and iCloud to not be that much worse than just trusting iOS, but it is still bad (and most of the bad things Apple can do to you either involve signing bad things, then requiring an active step by the user or MITM, or doing things like retaining device keys at manufacture time and subsequently seizing the devices, or having some deeply-buried backdoors which probably require physical access or are exceedingly infrequently used.)
There's really no good solution for mobile now. You could probably build something fairly non-shitty in the Android world, although I don't know enough about how applications share files and interoperate to know if it would need to be a per-user-app integration. On non-jailbroken iOS, it's pretty clear you'd need to develop a new API which did client-side crypto, key management, etc., on top of file sharing. It would be a pain, and even more of a pain if you wanted to avoid fully trusting Apple in the process.
The best solution right now is "no data lives on the phone", rather than trying to sync; use some kind of web or app which just uses transport crypto to interact with a server but never stores anything locally. If you trust the OS a lot, you could do something like what Good Technologies does and try to sandbox your data within a specialized app like that.
I'm saddened to see Dropbox on the list. Did they choose to participate or is it mandatory? In any case, we've moved several projects to BTSync recently from Dropbox (for no other reason than to free up space on Dropbox for our personal files) and have been enjoying the service. As a p2p encrypted protocol, I imagine it's much more difficult to eavesdrop on your files and would actually require a warrant to obtain. I…