Live data from Hacker News

More on the NSA Commandeering the Internet

schneier.com

41–50 of 66 posts

Re: More on the NSA Commandeering the Internet

#41

I feel like we've identified this problem to death. I think now the real question is, as an internet community, what are we going to do about it? Are we going to build something that 'routes around' this? Are we going to protest? Or are we just going to keep identifying the problem and complaining about it on Twitter? I'm not saying that I'm not one of those people too - I'm just saying we need to start thinking abou…

Such implicit pessimism is a bit premature. We've already had one legislative wack at the problem and the results were close and extremely promising, e.g. they didn't break down in any conventional way (by party, region, etc.)

We already know from history that the American system can draw back from this sort of thing (https://en.wikipedia.org/wiki/Church_Committee), it's way too early to assume that won't happen again. (One caveat, the Church Committee did its work after the death of J. Edgar Hoover.)

We also won the Cold War/Clinton era "Crypto Wars"; this account is U.K. centric (I'm amazed at their success), I'll note we won earlier in the US: http://wiki.openrightsgroup.org/wiki/Crypto_Wars (HT betterunix in this current discussion: https://news.ycombinator.com/item?id=6302520).

Re: More on the NSA Commandeering the Internet

#42

I feel like we've identified this problem to death. I think now the real question is, as an internet community, what are we going to do about it? Are we going to build something that 'routes around' this? Are we going to protest? Or are we just going to keep identifying the problem and complaining about it on Twitter? I'm not saying that I'm not one of those people too - I'm just saying we need to start thinking abou…

I think you make a good point.

I think we must also assume that protesting (both to our peers and our so-called "representatives") won't achieve much, at least for the foreseeable future. There's too much money being poured into the right pockets, and too many of the wrong people in the wrong places in government to dislodge. And even if this particular group of authoritarians are removed, there are plenty of replacements waiting in the wings to take their place.

For this reason, I think your first option ("build something that 'routes around' this") is the best. Granted, it's easy to hand-wave and say that this can be done -- but we cannot otherwise assume that the people and agencies which have lied to us in the past will quickly turn over a new leaf and respect our Constitutional rights. We must assume that they will continue to snoop on us, and respond appropriately: peacefully, and cleverly.

Re: More on the NSA Commandeering the Internet

#43

I feel like we've identified this problem to death. I think now the real question is, as an internet community, what are we going to do about it? Are we going to build something that 'routes around' this? Are we going to protest? Or are we just going to keep identifying the problem and complaining about it on Twitter? I'm not saying that I'm not one of those people too - I'm just saying we need to start thinking abou…

I'm not a big fan of Bruce. He does have some valuable technical things to read though, you just have to take his personal opinions with a grain of salt.

Re: More on the NSA Commandeering the Internet

#44
post #18

Several months ago that tone would have sounded conspiracy crazed nutty. But post-Snowden and given that it's schneier, it's sad to realize we've come to realize how bad the situation is. I'm still inclined to not change any actions on my part because I'm not worried about being under surveillance. I'm neither interesting, nor engaged in anything interesting. However, I would like it if the spying were reduced to rem…

There's a lot these days that, in years past, would have sounded like something out of a tinfoil hat convention.

Yet, even some of the nuttiest, worst-case scenarios that people feared about in the wake of the Clipper Chip debacle have been surpassed by reality.

It boggles the mind.

Re: More on the NSA Commandeering the Internet

#45
post #34

Earlier quoted context omitted.

By stopping reporting that, they have divulged that they received a letter. So once you receive one, in order to avoid prosecution, you need to keep your notification up as a continuous lie.

No way. You can be compelled by the courts to actively perpetuate a lie? I don't think so. The deal with the warrant canary is the guy signs a new message every (day?), actively affirming that he hasn't been served with any such secret warrants. What if he gets tired of it? Same with running the business? You can't be compelled to work forever, neither for free or otherwise.

You can when you're in jail

Re: More on the NSA Commandeering the Internet

#46

I feel like we've identified this problem to death. I think now the real question is, as an internet community, what are we going to do about it? Are we going to build something that 'routes around' this? Are we going to protest? Or are we just going to keep identifying the problem and complaining about it on Twitter? I'm not saying that I'm not one of those people too - I'm just saying we need to start thinking abou…

I'm not a big fan of Bruce. He does have some valuable technical things to read though, you just have to take his personal opinions with a grain of salt.

Agreed. I've found him to be startlingly ignorant in declaiming on real world stuff I'm a domain expert in; he just doesn't realize it when reciting generic talking points.

In this article, he made a very clumsy attack on the current Internet ecosystem; there's a good case to be made for it (see other comments in the topic), but he didn't make it and sounds like a generic anti-business crank.

Which might be the truth, the really startling omission in this article is the ultimate fate of Joseph Nacchio, who was convicted of the very nebulous crime of insider trading. Even if you think government was or might have been right about him, you ought to accept that a lot of executives will assume in this Three Felonies a Day legal environment that the government will get them some way, some how if they resist like Nacchio indisputably did.

Re: More on the NSA Commandeering the Internet

#47
post #18

Several months ago that tone would have sounded conspiracy crazed nutty. But post-Snowden and given that it's schneier, it's sad to realize we've come to realize how bad the situation is. I'm still inclined to not change any actions on my part because I'm not worried about being under surveillance. I'm neither interesting, nor engaged in anything interesting. However, I would like it if the spying were reduced to rem…

"I'm neither interesting, nor engaged in anything interesting"

You are missing a word: yet. You are not interesting yet. You might become interesting some time in the future, and discover that what you thought were uninteresting conversations today can be used against you. Here is a famous example:

https://en.wikipedia.org/wiki/Fred_Fisher_%28lawyer%29

Re: More on the NSA Commandeering the Internet

#48
post #34

Earlier quoted context omitted.

By stopping reporting that, they have divulged that they received a letter. So once you receive one, in order to avoid prosecution, you need to keep your notification up as a continuous lie.

No way. You can be compelled by the courts to actively perpetuate a lie? I don't think so. The deal with the warrant canary is the guy signs a new message every (day?), actively affirming that he hasn't been served with any such secret warrants. What if he gets tired of it? Same with running the business? You can't be compelled to work forever, neither for free or otherwise.

> You can be compelled by the courts to actively perpetuate a lie?

tl;dr Yes, these NSL have compelled people to directly lie.

And I don't see why the courts couldn't do that, as lying isn't even a crime. Maintaining the posting isn't even actively telling a lie, you're just not changing anything from the way it was before. So I could definitely see the same court that authorized these sweeping movements also supporting prosecution if you tip your hand on these matters; it's national security on the line, after all!

And even if the courts wouldn't force you to lie, the FBI could still attempt to prosecute you for not lying, and for taking action that directly reveals your receipt of the letter. Even if the court is opposed to it, it will be a lengthy process, and because of "national security!" you may not even get that far. From the government's perspective, you're enabling terrorists through secret and underhanded messaging, so you're already behind the ball both in the judicial court and in the court of public opinion.

Take, for example, the necessarily anonymous writings from 2007 from an NSL recipient:

> Living under the gag order has been stressful and surreal. Under the threat of criminal prosecution, I must hide all aspects of my involvement in the case -- including the mere fact that I received an NSL -- from my colleagues, my family and my friends. When I meet with my attorneys I cannot tell my girlfriend where I am going or where I have been. I hide any papers related to the case in a place where she will not look. When clients and friends ask me whether I am the one challenging the constitutionality of the NSL statute, I have no choice but to look them in the eye and lie.

http://www.washingtonpost.com/wp-dyn/content/article/2007/03...

So yes, even the person who has done the most to stop NSL, has been compelled to lie directly to his friends and colleagues.

Re: More on the NSA Commandeering the Internet

#49

Earlier quoted context omitted.

These companies can't detain you in an airport or throw you in prison, there are massive benefits to be had from this data for the user, not to mention that you have a contract in place with these companies that don't have with the NSA.

These companies can't detain you in an airport or throw you in prison... Neither can the NSA. Remember this? ( http://www.theatlanticwire.com/national/2013/08/government-k... ) Cops searched this family's house at a private corporation's behest, more or less. The fact that a large database is privately held isn't going to protect you from the government.

Actually, that story was later proven to be false and hysterics drummed up by the woman who was searched.

Skip to the update: http://watchdog.org/98870/feds-raid-home-after-couple-search...

http://www.forbes.com/sites/kashmirhill/2013/08/01/employer-...

Her employer tipped off the FBI after seeing suspicious searches show up in their logs. Not Google.

Please check your facts and leave the tinfoil hat hysterics at the door.

I'm worried about what the NSA is doing too, but making shit up doesn't help.

Re: More on the NSA Commandeering the Internet

#50
post #18

Several months ago that tone would have sounded conspiracy crazed nutty. But post-Snowden and given that it's schneier, it's sad to realize we've come to realize how bad the situation is. I'm still inclined to not change any actions on my part because I'm not worried about being under surveillance. I'm neither interesting, nor engaged in anything interesting. However, I would like it if the spying were reduced to rem…

"I'm neither interesting, nor engaged in anything interesting" You are missing a word: yet . You are not interesting yet . You might become interesting some time in the future, and discover that what you thought were uninteresting conversations today can be used against you. Here is a famous example: https://en.wikipedia.org/wiki/Fred_Fisher_%28lawyer%29

Exactly. "I'm not interesting" as a statement of safety has to mean: "I'm going to be very careful to spend the rest of my life not being interesting, and to make sure my family doesn't become interesting either." Otherwise it's just being an ostrich.

Of course, that's one of the aims of a surveillance state: if any word or action could be used against you, then people mainly police themselves.

Post reply on HN