At last, we've found the counter-example to Betteridge's Law of Headlines.
The Moral Failure of Computer Scientists
41–49 of 49 posts
Re: The Moral Failure of Computer Scientists
#42Yes, cryptographers should take on the surveillance state. So should developers, and entrepreneurs, and politicians, and the common citizen that thinks AES is some foreign sports conference or IND-CCA is a new trade agreement. I'm growing tired of watching journos try to point the fingers of "encryption is good, says cryptographers" and "encryption is bad, says this guy in a federal law enforcement position" and comp…
It's hard to take on the surveillance state when you have to make a living and all the money and jobs are in surveillance and surveillance based business models.
However, people working within institutions that contain sensitive data can help affect positive change from the inside as well as the outside. Be a voice for the security of user data within your organization, and do what you can to meaningfully contribute to methods that increase user anonymity and business models that do not require being excessively intrusive into the personal details of others. There is something you can do everywhere, and it is far better to have people privacy-minded even inside of the classical "surveillance" companies than having these companies run recklessly without a voice for the user. In fact, it may even have more impact than yet another frontend for yet another OTR implementation.
Re: The Moral Failure of Computer Scientists
#43Earlier quoted context omitted.
Think I could've done better? Just file some FOIA requests and lawsuits on the subject requesting all specific examples of cooperation between NSA and other LEO's plus list of all TAO and BULLRUN activities against Americans. Bet you'll have less than I posted. Btw, a manual for DEA of using NSA's evidence isn't a specter: means it's ongoing.
Ongoing retaliation against people working on crypto?
So, we saw LEO's and payment processors largely kill Wikileaks by cutting its donations off. Wikileaks supporter and Tor evangelist Jacob Appelbaum does plenty OPSEC to avoid problems they aim at him. Lavabit, Snowden's email provider, was shutdown after receiving a secret order to compromise all its users and lie to them about it (see records if you doubt that part). Surespot allegedly pulled its warrant canary after ISIS used its tech. Apple and other companies doing end-to-end messaging are getting hit hundreds of millions at a time via Virnetx: a shell company for patents from NSA, CIA, and SAIC.
Seems to be a number of actions and reactions against anyone that becomes a problem. Most never see it. Hence, would doubt it's a concern. That they do enforcement part with "legitimate" organizations and courts makes that more so. That's be beauty of the modern, Dual State: invisible to most means odds of questioning or getting rid of it are lower than prior surveillance and police state models.
Re: The Moral Failure of Computer Scientists
#44Earlier quoted context omitted.
You're way off. The people and politicians knew to get a grip on this decades ago when they discovered all the abuses of CIA, etc. They had two main choices: 1. Create accountability mechanisms a la GAO working alongside these organizations ensuring they follow the law and imprison offenders. 2. Create a court that approves most of what they do, never imprisons offenders, and operates in secret. America went with No…
This comment doesn't make a whole lot of sense to me. What's all this talk about America? We've been talking about China the whole time. You're seriously blaming the Chinese people for their heavy-handed government? By focusing their work in directions that harm freedom, computer scientists and developers make it easier for the Chinese government to use surveillance to hold onto power.
Yes.
Re: The Moral Failure of Computer Scientists
#45Earlier quoted context omitted.
Ongoing retaliation against people working on crypto?
Part of my overall claims here is that the police state aspect of our government only kicks in on priority targets. Average person or project in crypto doesn't matter. A good case would be solid protection that applies to high-value target. Might support those like Wikileaks, Snowden, or terrorist cell that happens to use a specific product. So, we saw LEO's and payment processors largely kill Wikileaks by cutting it…
Lavabit shut down because they got a court order! Related to Snowden (who clearly violated the letter of the law, he isn't just some rabble rouser that they decided to hassle). It would also be more interesting if Lavabit was forced to shut down because it did not have the ability to access users communications, rather than the refusal of Levison of provide the FBI with access (a capability he did have).
You directly state that Appelbaum manages to avoid problems (remember where I started? How would he just avoid them shooting his dog?).
Re: The Moral Failure of Computer Scientists
#46Yes, cryptographers should take on the surveillance state. So should developers, and entrepreneurs, and politicians, and the common citizen that thinks AES is some foreign sports conference or IND-CCA is a new trade agreement. I'm growing tired of watching journos try to point the fingers of "encryption is good, says cryptographers" and "encryption is bad, says this guy in a federal law enforcement position" and comp…
It's hard to take on the surveillance state when you have to make a living and all the money and jobs are in surveillance and surveillance based business models.
Re: The Moral Failure of Computer Scientists
#47Earlier quoted context omitted.
Part of my overall claims here is that the police state aspect of our government only kicks in on priority targets. Average person or project in crypto doesn't matter. A good case would be solid protection that applies to high-value target. Might support those like Wikileaks, Snowden, or terrorist cell that happens to use a specific product. So, we saw LEO's and payment processors largely kill Wikileaks by cutting it…
You said I create an encryption system to protect email. It gets large uptake to point NSA and FBI are pissed by it. With current laws, they will feel free to Lavabit shut down because they got a court order! Related to Snowden (who clearly violated the letter of the law, he isn't just some rabble rouser that they decided to hassle). It would also be more interesting if Lavabit was forced to shut down because it did…
Love how you word it in a way that throws it under the rug. You could similarly say all of America deserves to be under surveillance because they got a [FISA] court order for certain parameters. Most court orders involve invading the privacy of the accused or some people connected. Lavabit was ordered to compromise all users and to lie about it. The only reason we know the order exists is because the owner fought for that. Before that, people like you would've argued that individual accounts info are turned over per warrants or court orders but not all users. And certainly not secret, black boxes added to companies' networks to do whatever the government wanted with that data.
"It would also be more interesting if Lavabit was forced to shut down because it did not have the ability to access users communications, rather than the refusal of Levison of provide the FBI with access (a capability he did have)."
Hence the warrant canaries, including what I gave you. Unfortunately, they're threatened with prison if they give details up to that they've been compelled to compromise their users. "End-to-end," but proprietary, schemes can be compromised with the update mechanism. It's all we have because that's what kind of pseudo-police state we live in.
"How would he just avoid them shooting his dog?"
You have no arguments against my claims so you make up other ones I never said? People's dogs getting shot is something that happens in my city but I never said it would happen to U.S. government opponents. I've said they would use whatever legal pressure they could against whoever mattered. This includes FBI FISA warrants, NSL's, and court orders. This might also include harassment via other agencies. There's precedent for these things. They don't shoot peoples' dogs and they rarely assassinate them if that's your next move.
Going to prison with what dirt NSA can give FBI is already bad enough for most. Lifelong surveillance, risk, and/or harassment is the common reaction. Financial troubles for businesses. Most just go along with whatever they're doing.
Re: The Moral Failure of Computer Scientists
#48Re: The Moral Failure of Computer Scientists
#49Earlier quoted context omitted.
The legal aspect was taken care of by the Bill of Rights. The govt is trying to erode them and so now we need to "fight" against it.
I'm not with 'nickpsecurity on this issue, but what you just said is not a valid argument. Cryptography enables individuals to override the interests of any element of the state, no matter how compelling those interests are. Any way you read the Fourth Amendment, even the wrong way that implies that the government requires a warrant for any conceivable search, there remains a pathway through which the state can compe…
If the Constitution is amended to say "Government officials may levitate" it does not confer the power to make gravity illegal.
Similarly, if encryption can build an uncrackable "safe" for your documents - moreover one that can be made invisible and deniable - government search powers are as limited by mathematics as they are by gravity. The only difference is that government officials don't actually expect to levitate.
That means when the people invent something that thwarts government power, there is nothing in the Constitution that says anything about that. Even less does it say "No, the people can't have that."