Live data from Hacker News

Silent Circle removes warrant canary

techcrunch.com

21–30 of 197 posts

Re: Silent Circle removes warrant canary

#21

Earlier quoted context omitted.

Why monthly and not daily? Or hourly?

I wonder what the legal limits on the granularity are, probably up for a lot of interpretation in a court.

Before you receive an NSL, you have no limits. After you receive one, you may only report buckets (0-249, 250-499, etc.) on a quarterly basis.

Re: Silent Circle removes warrant canary

#22

After the departure of Mr Callas this probably further proof of the decline in Silent Circle more than anything. Too bad...it showed promise. Probably too close DC to really affect change.

It had friggin Navy SEALs in it's advertisements. They know what we need because they were in the field and needed secure comms. Help run the business, too. All that told me is anyone concerned about Five Eyes surveillance better run.

Re: Silent Circle removes warrant canary

#23
post #8

Earlier quoted context omitted.

I think the idea is that a warrant canary is regularly updated. And the fact that it is NOT updated would be an indicator that a warrant (or whatever) has been served. So it's the INACTION that triggers it, not an actual action (like tweeting).

I suppose for that you would need to say "We have not received a letter as of $date" and then stop updating that date. The current notion, adding a line you'd remove if you did receive one, may be still an action, if it's part of your default reporting. But I don't believe warrant canaries "actually work" in practice.

Yes, the apparent standard practice of just saying "We haven't received a letter" and then removing it if one is received makes no sense to me. Much better to have something you regularly update, and then stop updating it. The government could nab you for deleting something, but they might have trouble forcing you to update your declaration with false information.

Re: Silent Circle removes warrant canary

#24

After the departure of Mr Callas this probably further proof of the decline in Silent Circle more than anything. Too bad...it showed promise. Probably too close DC to really affect change.

It had friggin Navy SEALs in it's advertisements. They know what we need because they were in the field and needed secure comms. Help run the business, too. All that told me is anyone concerned about Five Eyes surveillance better run.

The founder and original CEO was a SEAL.

Re: Silent Circle removes warrant canary

#25
post #13

Current warrant canaries are useless, it's a one time fuse. We need new, better, recurring (i.e. monthly) warrant canaries of different types (common canaries, individual canaries for each user). I want something like this everywhere: Jan 2016 - we haven't received any NSL Feb 2016 - we haven't received any NSL concerning your account Mar 2016 - we haven't received any NSL Apr 2016 - Jun 2016 - we haven't received an…

That's a great way to end up in prison. That said, civil disobedience has been used in the past to great effect.

  That's a great way to end up in prison. 
It's like you're talking about an oppressive regime, but no, it's the USA. The land of opportunity, independence and above all, freedom. /s

Re: Silent Circle removes warrant canary

#26
post #13

Current warrant canaries are useless, it's a one time fuse. We need new, better, recurring (i.e. monthly) warrant canaries of different types (common canaries, individual canaries for each user). I want something like this everywhere: Jan 2016 - we haven't received any NSL Feb 2016 - we haven't received any NSL concerning your account Mar 2016 - we haven't received any NSL Apr 2016 - Jun 2016 - we haven't received an…

That's a great way to end up in prison. That said, civil disobedience has been used in the past to great effect.

>That's a great way to end up in prison

easy there, cowboy, this isn't East Germany just yet. I think American authorities can tell the difference between what they do and the Stasi.

As in, I actually, literally think they can tell the difference. Nobody will be ending up in prison for posting the above. Seriously. Show me a judge who'll do that.

You don't get a 4-year philosophy degree before getting a JD in American law, and structurally answer to a constitution literally containing the words "Congress shall make no law ...abridging the freedom of speech, or of the press" which is the first amendment, and which has been judged and interpreted very carefully by 9 independent justices upholding Freedom for 220 years, while sending people to prison for publishing

" Apr 2016 - "

Not happening. Not in 2016, and not in 2020. People need some perspective here.

EDIT: getting a lot of downvotes. Show me anyone who is in prison for publishing " Apr 2016 - " or any other similar warrant canary. You people need to stop throwing around "a great way to end up in prison" like that.

I'm not defending the status quo, but the suggestion that anybody is going to prison for posting a warrant canary is too much, sorry.

It diminishes the conversation and criticism around the actual status quo.

Re: Silent Circle removes warrant canary

#27

I'm not sure warrant canaries are particularly useful anymore. Yes, it's nice to know when a company has received a secret order or request for cooperation. However, any company that stores user information is going to receive such an order or request at some point, it's practically inevitable. Furthermore, one can never be assured that a canary is entirely reliable as a signal -- just look at the other comments with…

> Furthermore, one can never be assured that a canary is entirely reliable as a signal -- just look at the other comments with conjecture as to why a canary might be removed.

I would treat the removal of a canary as I would a fire alarm. Sure, it's possible that it's a business decision, just like it's possible that the fire alarm is a false alarm. But I'd rather make the assumption that is most likely to protect me.

Re: Silent Circle removes warrant canary

#28

Earlier quoted context omitted.

Why monthly and not daily? Or hourly?

I haven't put much thought into it, I guess it could be daily but hourly is overkill I think. Actually, this is an interesting startup idea - warrant canary as a service, with an API.

https://canarywatch.org/

Re: Silent Circle removes warrant canary

#29
post #23

Earlier quoted context omitted.

I suppose for that you would need to say "We have not received a letter as of $date" and then stop updating that date. The current notion, adding a line you'd remove if you did receive one, may be still an action, if it's part of your default reporting. But I don't believe warrant canaries "actually work" in practice.

Yes, the apparent standard practice of just saying "We haven't received a letter" and then removing it if one is received makes no sense to me. Much better to have something you regularly update, and then stop updating it. The government could nab you for deleting something, but they might have trouble forcing you to update your declaration with false information.

Agreed. Although I wonder if removing cron or similar to update the date would be the same as removing the message legally speaking. I doubt these companies would have someone go in every day and bump the date. Then again that might be a good thing to outsource.
Post reply on HN