Senator Backs Down On Crypto Backdoors
evenprime writes: " Sen. Judd Gregg (Republican, New Hampshire)
was advocating mandatory backdoors in crypto on Sept. 13. Wired
is now reporting that Sen. Gregg has changed his mind. They say that Gregg's spokesman, Brian Hart, has said: 'We are not working on an encryption bill and have no intention to.'" As Rob Carlson is quoted at the article's close, though: "(Gregg) said he was definitely supporting it. Now he says he's definitely not. Maybe he'll say he's definitely supporting it again."
From the Wired article:
I think if they put a crypto provision in this bill, it would have passed," Froomkin said. "Look at what the administration got."
Froomkin was talking about additional eavesdropping and surveillance powers requested by the Bush administration, which the Senate and the House overwhelmingly voted for last week. That bill is called the USA Act.
He backed off crypto backdoors because the government is going to get enhanced wiretapping powers, etc.
It's a little give and take, but it's nice to see the "give" this time.
I think some of us tech geeks ought to go to Capitol Hill and point out that "Secure" websites also use encryption. That banks transfer funds through encrypted channels, etc etc etc...
Isn't it strange how "Encryption" is bad, but "Secure" is good despite the fact that they are the exact same thing? Criminals encrypt their transmissions but Bankers make "secure transmissions"
The Dopester
"Yes, I'm a Karma Whore, but I'm doing it to pay my way through school."
You know Martin Luther King Jr. and Gandhi? You know what they had in common? They both thought that their respective governments had unjust laws, so they disobeyed those laws and accepted the punishments for them, and it worked.
This particular story is good news, because it means that representatives do think and can be convinced that they're not right. However there are still things like the SSSCA and the DMCA. I believe these laws are unjust myself. So I disobey them. If I get locked up in jail one day, so be it. But what good is their law if nobody obeys? Let them throw all the nerds in jail. See what happens then.
This is a little crazy, but imagine if all of slashdot turned off all of our servers at home and work. Then we refuse to turn them back on until the unjust laws are repealed.
Yeah, it's crazy, but I just ate a giant pixy stick, and I'm excited because my new computer is coming today.
The GeekNights podcast is going strong. Listen!
I seriously doubt that the Open Source movement or the EFF made any difference, but that big, American multinationals made all the difference. Remember, they require encrypted communications too, and the idea that a competitor or foreign government could pay someone off to secure access to the backdoor would sacre us, because it *might* cost our companies (good and bad) billions, as someone already pointed out.
When big or medium business is threatened by this style of legislation, you can pretty much count on it to die or be severely watered-down or exempted.
Looks like those jpg's of Senator Gregg and his mistress that I intercepted and then attached to my recommendations that secure email encryption is a Good Thing seemed to have done the job.
Sometimes you've gotta relate to them on the lowest common denomenator.
Now there are two good things about the anti-terrorism act:
1. It prevents the RIAA/MPAA from being judge/jurty/executionar and destroying OUR networks or our computers, and imposes severe penalties for such. Unfortunately, it also imposes severe pentalties on individual hackers for minor offenses less serious than a traffic infraction.
2. The government has not gained the right to violate OUR right to privacy/anonymity by forcing us all to use backdoors on our encryption. The same type of thing can be said to be true of anonymity: anonymizing services also won't, by extension, be forced to give the government a backdoor entrance.
On the other hand, unfortunately, there are some troubling concerns with this bill in terms of search & seizure & warrants.
I believe this bill has language in it that would make a warrant granted in one state to tap someone applicable in another. This violates the sovereignty of individual states. If the government wants a nation-wide warrant to tap someone, they should go to federal court.
The other troubling feature of this bill is that it allows the government to legitimately spy on every website we're visiting, and gives them the right to tap into more of our communications without a warrant from a judge.
If the government wants to have the right to tap into OUR communications, they should have to go to a court and get a warrant. If they go to a state court, the warrant should be applicable only in that state; if a federal court, then throughout the nation.
I have no problem with the government monitoring/tappign the online activity of people who'm one could reasonably believe are criminals(i.e., mobsters like John Gotti Jr). However, they should have to go to a court, and at that court, a public defender should be there to defend the accused's rights(the public defendant would simply make the case against a tap, based on available knowledge, without informing the accused that he was being considered for a wire tap -- if the accused were informed, it would be pointless).
So, what about Sen. Judd Gregg? Well, I'll give him credit for recognizing the validity of keeping encryption strong. It is obvious that when he initially called for a ban on backdoorless encryption, he was ignorant of encryption issues and caveats. Now, it is clear that he is more informed and realizes that his formerly proposed idea would not solve any problems, and would violate civil liberties. Of course, he did not say he was ignorant -- no one wants to say they didn't know what the fuck they were talking about.
That said, there are two reasons why politicians propose such laws which flagrantly violate civil liberties and solve no problems: (1) They were ignorant of the issues; (2) They simply did not care, and were bought off by some powerful organization(i.e., BSA, RIAA, MPAA, AAA, MS, etc).
If the reason why politiians propose such laws is that they were ignorant of the issues -- as most all of them are on issues of science, intellectual property, and computer technology -- that can be solved by educating them. If the problem is that they did not care and were bought off, that could be solved by: a. Not re-electing them; b. Launching a publicity campaign agaisnt them.
Of course, sometimes the reason why politicians are "ignorant of issues" is because they've been educated by self-interested lobby groups like the RIAA/MPAA/BSA/AAA/MS. These groups are large and rich, and it is natural for politicians to listen to them. In order to counteract that, we need to make politicians aware of the flaws of the positions of such groups, and the utterly self-interested nature of such groups. Any time any of these groups talks about "rights" or "benefitting the public" its bullshit. They have no concern for the public, only their bottom line; as for rights, the only rights they're concerned about are their own(i.e., the RIAA/MPAA seem to support their right to put out sexually explicit movies/songs even if these may reach kids[a right I support], but seem to think that freedom of speech is irrelevant when it comes to linking to a website with DeCSS on it, or sharing files).
social sciences can never use experience to verify their statemen
I want politicians who are smart enough to educate themselves before taking a position in the first place. Is that too much to ask?
"I can't learn anything from you I can't read in some fucking book." -- Sean in "Good Will Hunting"
Or send a fax. Faxes use the office's own paper - plus they're more attention-getting than snail mail.
sulli
RTFJ.
Behind the scenes a major reason for the change is the considerable change in the standing of Freeh amongst Congress and in particular the GOP. When Freeh was supporting the GOP in their impeachment machinations he was flavor of the month. Since then there have been more and more questions about his effectiveness.
There are several in Congress who will behind closed doors blame Freeh for spending effort on his encryption obsession he should have spent stopping the 9/11 attacks. Even before 9/11 there were many complaints about FBI competence. The witholding of evidence in the Oaklahoma City bomb trials, the Wen Ho Lee incident, renewed questions about Ruby Ridge etc.
With Freeh gone and Mueller now in charge it is very unlikely he would want to resurect a crusade that is strongly associated with a successor now widely considered to have been a failure.
Looking for an Information Security student project suggestion?
Try http://dotcrimeManifesto.com/