Slashdot Mirror


FBI Adds to Wiretap Wish List

WorkEmail writes "A far-reaching proposal from the FBI, made public Friday, would require all broadband Internet providers, including cable modem and DSL companies, to rewire their networks to support easy wiretapping by police. The FBI's request to the Federal Communications Commission aims to give police ready access to any form of Internet-based communications. If approved as drafted, the proposal could dramatically expand the scope of the agency's wiretap powers, raise costs for cable broadband companies and complicate Internet product development."

46 of 471 comments (clear)

  1. Stock Tip by BinBoy · · Score: 5, Insightful

    Invest in encryption products.

    1. Re:Stock Tip by cperciva · · Score: 5, Insightful

      You really think they have time to look at the data contents of your packets? That takes time and human resources... what they're interested in watching is your packet headers, which aren't going to be encrypted.

      This is all about traffic analysis. They can work out who is talking to whom over the air via the NSA's listening network (or rather, GCHQ's network, via reciprocal "let's get around domestic spying laws" deals), but they need hardware on the wires to look at those packets.

      Sure, if you're under investigation, they might use this hardware to log the contents of your traffic; but they'd do that anyway. These changes are about identifying possible suspects based on who they associate with.

  2. Dial Up by HughDario · · Score: 4, Interesting

    Wait, what about us who still have dial-up? (yes we do still exist) It says nothing about it in the article from what I saw.

  3. You watch.... by Anonymous Coward · · Score: 5, Insightful

    Next, they will come for your encryption. Maybe not today, maybe not tomorrow... but soon.

    1. Re:You watch.... by identity0 · · Score: 4, Insightful

      That is sort of inevitable, I think, given the post-9-11 power grab and fearmongering we've seen. They'll at least try to ban strong encryption, if not an outright decree to use government-escrowed keys.

      It makes me almost glad that we went through the nonsense with encryption during previous administrations - first the Phil Zimmerman prosecution, export controls, and even the Clipper chip attempt. It mobilized & organized a whole lot of pro-encryption people who otherwise would not have cared. The arguments for encryption controls were mostly theoretical and less fear-inducing before the current climate of fear, too. It actually made us stronger, I think. If we had never gone through that and the administration now banned strong encryption, we would be scrambling to come up with good arguments for allowing encryption, and the public hysteria over "secret terrorist messages" would probobly drown us out given the current media climate.

      Man, who would've thought during the Clinton administration that we'd be nostalgic for those days? Ah, Janet Reno, Louis Freeh, Phil Zimmerman, Clipper... great times, eh?

  4. can the FBI break 128 bit encryption? by netnerd.caffinated · · Score: 5, Insightful

    if they can't, then whats the point. anyone who's doing anything illegal & knows the FBI can listen in, will just encrypt.
    Big waste of time

    --


    You tried your best, & you failed miserably,
    The lesson is:
    Never Try
    1. Re:can the FBI break 128 bit encryption? by HeghmoH · · Score: 4, Insightful

      This is very tin-foil hat. There is absolutely no evidence that reasonable crypto like blowfish, AES, or RSA can be cracked without enormous amounts (read: more than currently exists) of computing power if you use a reasonable key size. The NSA may have some top-notch people, but the private sector has more. If some amazing mathematical technique were discovered that made cracking these problems tractable, it's extremely implausible that it could be discovered inside NSA and never get independently discovered. The same goes for magical computing techniques that would allow these things to be cracked with existing math.

      --
      Mod down posts with a "Free Mac Mini/iPod" sig, they're spam!
  5. Re:Screw you, government! You pay for the upgrades by jtwJGuevara · · Score: 5, Insightful
    I concur with the parent. However, the consumers will end up paying for the wiretapping regadless, whether the ISP's are forced to do the upgrade themselves, or if the FBI funds since the FBI is funded with everyone American's dollars.

    Regardless, this is pretty intrusive on the FBI's part. Even though it isn't a blatant intrusion into our private lines located within our home, it may as well be, since our direct line to the internet for 99.9% of the population runs through commercial ISP's. I hope someone cries foul on this proposal in support for the protection of privacy. However, with the state of most American's line of thinking, such a hope is far-fetched.

  6. They have that in Russia by melted · · Score: 4, Interesting

    ISP's are obliged by law to install wiretapping devices and provide internet connectivity to police to use these wiretapping devices. There's no warrant necessary to wiretap. Best of all, all encryption standards (except GOST, which comes from the government) are outlawed, so you can get hard time for using PGP. I haven't heard about anyone getting sued for using strong crypto, though, so it looks like these laws are not enfoced.

  7. In all my communication... by SisyphusShrugged · · Score: 4, Funny

    All my commmunication will have to have GW is Double-Plus Good as the header :) Using words such as Terrorism, Nader for President, and Same-Sex Marriage will merit an immediate termination.

  8. Easy way of securing your mail by Isbiten · · Score: 4, Interesting

    Well at least if your using Mac OS X 10.3 Mail.app

    I used this tutorial on how to certify my email adress so the one receiving my email will know that's it me. Also when the receiver and the sender got a certified email adress you can encrypt your email adress.

    Yes I know about PGP but this is much easier since Mail automatically adds the senders key for you when you get a mail that's signed.

    --
    I fought the corporate America, and the corporate America bought the law.
  9. Listening in on X-Box Live? by letdownjournals · · Score: 5, Funny
    Legal experts said the 85-page filing includes language that could be interpreted as forcing companies to build back doors into everything from instant messaging and voice over Internet Protocol (VoIP) programs to Microsoft's Xbox Live game service.

    To avoid any potentially deadly misunderstandings, I'd advise you not to play a Counter-Strike "terrorist."

  10. 1984 by aixou · · Score: 5, Funny

    Some visionary should write a book about a future dystopia and call it 2040. Then Apple can come out with a cool new commercial in 2040, with a dubbed over voice saying, "god damn it. it's happened.", and have a gunshot fire with the sound of a body falling to the ground. right?

  11. Vacancies at the FBI: by eltaDciraD · · Score: 5, Funny

    The FBI seeks to appoint a senior AOL linguist. The successful candidate will form a 1337 team able to translate AOL to American English in real-time as part of a stimulating new FBI initiative...

  12. Encryption. by captnitro · · Score: 5, Informative

    If you boil a frog, it doesn't know that it's in trouble until its legs are paralyzed and can't escape. Yup.

    This is probably more for the "VoIP" segment of the universe than "XBox Live", this is a perfect reason to enable IPSEC over VoIP.

    Too often the open source community thinks of the unreasonable approaches before the reasonable, and that's only because you have to fight fire with fire. In this case, you have to have as much reason as a politician will -- and yes, that sometimes means being as evil as they can be -- that is to say, with transparent encryption, it makes it unreasonable for a state agency to tap because it would mean confiscating servers and disrupting business (the state, in the US, must have a compelling state interest to do just about anything). This can have two effects: (1) Hosts increasingly require unreasonable agreements (CYA). (2) The disruption of business is so much that is becomes a burden for politicians to support.

    My point being: look guys, we're Slashdotters, and we administrate public networks, and we're smarter than them, and with no disrespect, we can make prior art out of whatever aged notions of data security they have. That's what open source is about; the gathering of the people above those with green and power.

    We should assume our data is being intercepted in the first place -- that's why you provide data security. Thou shalt encrypt.

    ALSO SEE: Due Process, Fourth Amendment.

  13. Re:Screw you, government! You pay for the upgrades by ScrewMaster · · Score: 5, Insightful

    ON the other hand, if the government pays for the upgrades, it will be with tax dollars, so either way the consumer/citizen gets screwed. And, actually, if you look at the number of court cases that are successfully prosecuted nationwide using legitimately-garnered wiretap evidence, it's more like forcing 99.99999% of the people to pay for something the FBI needs only .000001% of the time, or worse. Ridiculous on the face of it: all the numbers I've been able to find simply don't justify this ongoing crusade for advanced wiretapping capabilities. Those boys just hate like hell to have anything kept from them. The problem, as I see it, is that the ease with which the FBI (and the Federal Government in general) was able to grab new powers in the wake of 9/11 has simply encouraged them to go for more of the same, although they've been trying for a national wiretap center for a long time prior to that. This is much like the FBI excesses decades ago, under Hoover, that resulted in Congressionally-mandated restraints upon its' behavior. Back then, of course, wiretapping was a relatively simple affair involving a lineman's handset and a pair of clip leads. Times have changed, and in the modern world the costs of allowing them to run in this open-loop fashion for very long are going to be significant, both in terms of money (tax dollars or on your Internet bill, take your pick) as well as civil-liberty abuse. Congress is the only entity that has the power to reign these people in, and I don't see a lot of effort being expended there on our behalf.

    --
    The higher the technology, the sharper that two-edged sword.
  14. Re:Screw you, government! You pay for the upgrades by Felinoid · · Score: 5, Funny

    Next they'll bill the suspect for being investigated and failing to produce justification for an arrest warent.
    Improves law enforcment and cuts the budget.. What could be wrong?

    Oh right.. paying for being innocent.

    --
    I don't actually exist.
  15. Re:Civil Protest by velo_mike · · Score: 4, Funny
    everyone should download anything and everything they can think of. Delete it when it is done and then initiate a new down load

    Similar concept but I think everything should be encrypted. Notes to mom, grocery list to the s.o., plans for laser beams mounted on fricken sharks, encrypt it. Fuck em, let em spend a ton of money decrypting a note to my g.f. asking to pick up drycleaning... Overload the system.

    --

    At the bottom of the endless pile of paper work which characterizes all regulation lies a gun.
    Alan Greenspan

  16. Re:Civil Protest by ScrewMaster · · Score: 5, Insightful

    Or simply encrypt your transmissions. The Federal Government has been aware of this possibility for many years (predating the opening of the Internet to the public) and tried mightily to get encryption effectively outlawed for private use. Fortunately they failed that time around, but that doesn't mean they won't try again. If all significant Internet traffic was adequately encrypted it wouldn't much matter if they could tap the packets, it would be too costly to decrypt it. That's where it's heading anyway, if nothing else to keep the RIAA from peeking at our upload folders. The question is whether or not the Feds have the balls to try and make that illegal.

    --
    The higher the technology, the sharper that two-edged sword.
  17. Any bets on the timeline for hacking it? by Grym · · Score: 5, Insightful

    I can't believe the government is actually considering putting a backdoor in every cable modem. Karnivore, while of debatable, legitimacy, is at the very least, secure because its physical components are kept very far away from crackers (in secured buildings of Tier one providers). Thus, it works on a fairly good premise of obscurity and limited access.

    If this type of backdoor was inside the cable/DSL modem next to your computer, imagine how quickly both the obscurity and limited access factors disappear. You can kiss any type of sibilance of security on the internet goodbye because, in no time, every script kiddie running windows will be able to packet sniff your computer.

    Sometimes, I really wonder how highly funded groups like the FBI can ignore common sense problems. If there's ONE thing I think we've all learned in the past twenty years in regards to computer security is: if it's even minutely possible for them to do so, they (geeks) will figure it out. If you put an encryption scheme on every DVD drive in the world, they will figure it out. If you don't address a security bug in a prominent piece of software, they will figure it out. And if you put some uber-packet sniffing device on every cable/DSL modem in the country, they will figure it out with probably an extra sense of haste.

    So if this does come to pass, how long do you think it'll take for it to be cracked? My guess is a week. *sigh* Your hard earned tax dollars at work.

    -Grym

  18. this would be a good time... by zeruch · · Score: 5, Insightful

    ...among many other opportunities, to use the sharp minds many here claim to have and contact your congresscritters...in writing. on paper. that will always bear more attention than an email (or even a phone call).

    People really need to stop bitching about this stuff in web fora and actually try to interface with the people that can put a stop to some of these intrusive inanities.

  19. in The Netherlands by sachar · · Score: 5, Informative

    ISP's have been forced to install tapping devices since december 1998. Accroding to the Dutch Telecommunications Act 1998. http://www.ez.nl/english/docs/tweng.pdf

  20. Not likely by max+born · · Score: 5, Interesting

    Wouldn't worry about this.

    1. The FBI is only "asking" the FCC which, anyway, lacks jurisdiction to tell IRC programmers how to program.

    2. The Internet is becoming more decentralzed (e.g. anonymous wireless LANS,P2P networks, etc.) so there will be too many small time non compliant ISPs to go after. And the government, not for want of trying, has so far shown only futile attempts at regulating the Internet.

    3. The only people for this are the FBI and a few conservative politicians. They're going up against the communications giants and equipment manufacuters -- financially secure industries with campaign contributions, lobby groups, and lots of lawyers.

    4. Besides all that, they just don't get it. Any two connected nodes communicating by pulses (ones and zeros) can always encrypt their conversation. Language is a secret handshake.

  21. FBI by Vexware · · Score: 4, Insightful

    I am pretty sure that the majority of Internet users have nothing to hide, and are involved in no illegal activities, or at least no such activies that would be of interest to the anti-terror force that is the FBI, but privacy is one of the most basic principles of a free society, and making broadband users pay more so that the perverse desires of some unknown FBI agent "searching for terrorists" can be fulfilled is, in my opinion, outraging. The FBI already has some power when it comes to eavesdropping on the Internet, but breaching the privacy of the gigantic Broadband userbase of the USA, when they only need to track a few individuals, is I think horribly exaggarating.

    What have the Broadband ISPs said about this? They stick to revolting against delivering confidential information of their heavily downloading clients, but they don't even try to stick a word in when their whole userbase's privacy is at risk?

    --
    "Really, I'm not out to destroy Microsoft. That will just be a completely unintentional side effect" -- Linus Torval
  22. Some implications by tehanu · · Score: 5, Insightful

    Besides the privacy, police-state implications that I'm sure other people will point out, here are several points:

    Firstly, if there is a easily available backdoor for everything, what's to stop criminals and terrorists from using it as well? People don't seriously think that they are not going to be able to get the technical information easily. Especially if *every* software program that allows communication the way they describe requires these backdoors. There's no-way you can keep all those civilian mouths shut. These backdoors will be built-in security holes. Just like mandating only low-level encryption may mean that it is easier for the US government to break into your data, but it also makes it easier for criminals to do so as well. The likely ease with which the technical information will spread will mean that hackers will probably make versions of the programs w/o the backdoors and spread them through the underground. Real (smart) criminals and terrorists will use these backdoorless programs leaving the American government to spy on harmless citizens and the inept.

    Secondly, I can see governments like China rejecting any protocol or programs which has these backdoors installed. They are already paranoid enough about rumoured backdoors. If they are sure they exist (say through a FCC mandate) they are going to drop American software like a hot stone. While the Chinese government is a police state and would love the ability to spy on their *own* people, the last thing they want is to allow the American government to spy on *them*. Other countries, like the EU, UK might have a few qualms of letting the US government spy on *them*, though I wouldn't put it past them (esp. the UK ie. Blunkett) to start thinking of mandating their own spyware for their citizens....Say goodbye to the American software export industry...

    I also wonder how these things would work in conjunction with Trusted Computing?

    The last thing is, I presume that all rules and regulations will apply to open source software as well. So I guess all open source developers of the mentioned program types will have to submit their programs to the US government for approval before they can release it. And how does this affect the open source nature of development if you need government oversight *every* time you want to release any sort of new code?

  23. Re:Screw you, government! You pay for the upgrades by Xabraxas · · Score: 5, Insightful
    If we are going to pay for them with taxes, then they should not be in the form of additional taxes. Rather, the legislature needs to tighten its purse-strings: cut social programs, reduce administrative salaries, and put the money back into where it needs to go: defense and public works.

    I disagree. Social programs have been decimated in the past four years. The Great Society has been destroyed in favor of corporations and the wealthy. Defense spending has been astronomical and does not need to get any bigger. If greater power is given for wiretapping we will be running headlong into a police state. At this point the government already has too much power and needs to cut money out of programs that only serve to arm the government to the teeth, only to attack its own citizens and other nations unilateraly. If we need anything right now it's programs that will get the people of this country back on their feet.

    --
    Time makes more converts than reason
  24. Re:Money Power Politicss by Anonymous Coward · · Score: 5, Funny

    It's funny to see one of these incorrect corrections.

    Everyone else has fixed your error, I'm just here to laugh at you.

  25. Re:Screw you, government! You pay for the upgrades by vanillacoke · · Score: 4, Interesting

    I don't think he meant to say bring the system down, because that's pretty stupid and we don't have a backup plan (rip it down to put it back up WTH?)....

    ANYWAY He is agitated like I am at the FBI for their complete incompetence, we already eroded our right for them and they still FUCK UP. The track record of the FBI is they consistently do more harm then good (anyone heard of them going after the guys who wrote Louie Louie for subversion?).

    --
    The secret to getting modded up is to allways say i've got karma to burn in your sig..
  26. Crypto in Russia by drosselmeyer · · Score: 4, Informative

    For government insititutions, yes. Government-owned corporations may only use certified encryption technology, and only GOST is certified. (It's not a bad standard for strong private-key encryption, but not very popular either.)

    It is not clear if the specified regulations actually apply to private citizens or to private-owned companies, but there is no article in Penal Code about illegal use of encryption. It is clear that this law (as well as many other evil laws) was never actually enforced. (Thank God!) The fact that everybody, including government, uses SSL in daily practice due to using existing OS and browser software incorporating it is quietly ignored.

    In real life, unless you actually find anyone getting busted for this, you should ignore the rumors and use crypto if you feel you need it. Practice is much more of a criterion than written law in this country. For example, there's no law prohibiting the usage of GPS devices for purposes other than construction work, but people do get in trouble for using them anyway, on the grounds of misinterpretation of the existing regulations - like the absurd notion that all geographical coordinates more precise than 200 meters are classified.

    --
    In Soviet Russia... RUSSIANS comment on YOU.
  27. Re:Screw you, government! You pay for the upgrades by sosume · · Score: 4, Insightful

    If approved as drafted, the proposal could dramatically expand the scope of the agency's wiretap powers, raise costs for cable broadband companies and complicate Internet product development .. what about the US turning into a police state. I'd say that's quite a bit more disturbing than paying a few bucks.

  28. Re:Screw you, government! You pay for the upgrades by AuMatar · · Score: 4, Insightful

    Or better yet- keep the much needded social projects and drop a few less bombs next year.

    --
    I still have more fans than freaks. WTF is wrong with you people?
  29. No... by Greyfox · · Score: 4, Insightful
    They'll simply speak in code that they agreed upon offline. If a bunch of guys agree offline that one of them posting a "first post" troll on slashdot means "plant the bombs on the bridges tonight and detonate them at rush hour tomorrow," no one's going to catch that except the intended audience.

    You might net the Martha Stewarts of the world with wiretaps, but with most criminals you'll have better luck just siezing all their gear and reading their hard drives anyway. For domestic terrorists, conventional surveilance methods seem to fall short anyway, so in either case I'd have a hard time justifying the added cost of being able to tap their internet communications.

    I think the best way of defeating terrorists may be education. Convince the people who tend to turn a blind eye to suspicious activities out of misguided loyalty that ignoring those activities is not beneficial to their community or cause. Take Iraq for instance. Terrorists there are merrily targetting Iraqi citizens at least as much as they are American troops. A lot of the people there blame the USA for "not providing enough security," but how many of those same people are letting those same terrorists crash at their houses, or know someone who is? As long as those people tolerate it, the problem will not go away.

    --

    I'm trying to teach myself to set people on fire with my mind... Is it hot in here?

  30. Re:NSA by HeghmoH · · Score: 5, Insightful

    According to Charles Stross, the CIA has a cache of alien portals that they use to travel to other planets, and the Russians are keeping Cthulhu in a bunker near the Baltic Sea.

    What was your point?

    --
    Mod down posts with a "Free Mac Mini/iPod" sig, they're spam!
  31. Re:NSA by HeghmoH · · Score: 4, Insightful

    People have been crashing airplanes into things in order to destroy them for sixty years. Even in the terrorist world, this idea predates Debt of Honor; an Algerian terrorist group hijacked a French airliner with the intention of crashing it into the Eiffel Tower in 1994, the same year that the book was released. Fortunately, they stopped for fuel and negotiations, and the plane was raided before they could take off. Planning operations like that takes time, so it's very doubtful it was inspired by the book.

    I have never heard anything that indicates Clancy has special sources into the military and intelligence community. Hunt for Red October caused a tizzy in the Navy because it was so accurate about various things, but it was discovered that he simply did a hell of a lot of research using public sources. Unfortunately, his later books have slid rather downhill.

    The idea that the NSA has a quantum computer powerful enough to be used to crack cryptography while private researchers are struggling to make ones that can factor the number 15 is ridiculous. Working for the NSA does not automatically turn you into a Grade A genius, so their genius population is necessarily limited and proportionate to the level found in the private sector.

    I know that it's fun and exciting to believe that the NSA, CIA, and FBI are these amazing, magical places where things can be done that can't be done in the regular work-a-day world, and certainly this image is constantly perpetuated by books and movies, but reality is more mundane. They are government bureaucracies like all others, which happen to work in a certain area and are reasonably good at getting their job done. They are populated by people; inexperienced new guys, career politicians, mediocre middle managers, etc.

    --
    Mod down posts with a "Free Mac Mini/iPod" sig, they're spam!
  32. I am frightened by 0x0d0a · · Score: 5, Insightful

    Legal experts said the 85-page filing includes language that could be interpreted as forcing companies to build back doors into everything from instant messaging and voice over Internet Protocol (VoIP) programs to Microsoft's Xbox Live game service. The introduction of new services that did not support a back door for police would be outlawed, and companies would be given 15 months to make sure that existing services comply.

    I am going to keep in mind that this is seen through the filter of cnet, which tends to be somewhat Slashdottish -- kind of liberal, pro-tech, anti-regulation. I really need to see the "85-page document" to decide.

    That being said, this is possibly the most disturbing thing I have heard proposed from the federal government yet. Besides the obvious issues of holding back innovation, I find the privacy issues unacceptable. If you want to wiretap someone, fine. Go to wherever they are, and use a parabolic mic or physical bug or something similar. Yes, it doesn't let you tap the population en-masse. There is no justifiable reason for this request. The only thing it does is make cheap, easy, and hard-to-detect-abuse-of wiretapping much more feasible and tempting. I *want* it to be a pain in the ass to wiretap people. It's worked well for hundreds of years, and I see no reason to change this.

    I also want to make it clear that I will not follow any such directives requiring programs to including monitoring backdoors. If I have to, I will develop anonymously, through Freenet or similar (no, I'm not brave enough to do something like this openly as a protest and get hammered for it), but I will not begin inserting backdoors into the software I work on.

    I am absolutely appalled that something like this would be suggested. It is the sort of thing that people that I considered "tin foil hatters" were worrying about for a long time. I would like to see an EFF analysis of this. If this is as bad as the article makes it out to be, this will be the thing that tips me over the edge to sending money to the EFF.

    I would like to know what evidence cnet has for claiming that the Bush administration backs this. If they really are, they are going well beyond even what I thought Ashcroft's most tyrannical police-state aspirations were.

    Among other things, I claim that this will:

    * Limit innovation. This is a *real* issue, not a "we can't bundle Internet Explorer and now innovation is being suppressed" whine. Putting backdoors in protocols is a serious issue.

    * Damage US credibility internationally when it comes to secure software. The cryptographic export restrictions did a phenomenal amount of damage to the US computer security industry, and let foreigners take over the market. When you want smartcard systems, you don't go to a US company. This is absolutely unacceptable, as computer security is becoming ever more important as more and more people are using it.

    * Provide an impediment to international software projects. The United States is not the world, nor is it even "effectively universal" on the Internet. If you ban something like development of a VoIP system without key escrow, development will simply move overseas. Sure, you could make *using* software without escrow a federal offense (thank you Britain, which has set the path for this wonderfully stupid approach). It will do *nothing* to stop propagation of software. The last time the FBI tried to meddle with the Internet via legislation like this was when they arrested Mr. Zimmerman for releasing PGP. It *didn't work*, and wouldn't have protected their ability to snoop on people. We have come up with many approaches to deal with US laws limiting computer security, and can be used again in this case.

    * Is stunningly short-sighted. You can't make a single effective law like this. What if I ssh to a system and use an IM system there to talk to someone else on the same system (and I *have* sshed in and used talk or phone on a Unix or VMS system before).

  33. Re:This is WAR!! by 0x0d0a · · Score: 4, Insightful

    I want those fucking Islamic extremists killed on the spot.

    I suspect many of them would like to see people like you wiped out on the spot for suppressing their religion, intimidating and screwing with their country and economy, etc.

    9/11 al Queda members didn't wake up one day and decide, for no reason at all, to spend their own lives to try to hurt people they saw as oppressors. There was a reason that they feel the way they do, and I doubt that trying to use force and intimidation is going to work all that well. It didn't work for the Soviets (and they could be awfully brutal). It just makes more people that hate you enough to die to hurt you.

    But, whatever. Bush doesn't need to solve the terrorist problem to get votes. He needs to make people feel good to get votes. And beating the crap out of someone makes people feel good.

  34. Re:Screw you, government! You pay for the upgrades by Lord+of+Ironhand · · Score: 4, Interesting

    Oh, and before you thought this was just something typical of the American government and all the Europeans were laughing at you; we've had this kind of monitoring here in the Netherlands for some time now. To the extent that ISP's are not allowed to offer encrypted services such as IMAP over SSL.

  35. Joe Blow's encryption by 0x0d0a · · Score: 4, Interesting

    1. The FBI is only "asking" the FCC which, anyway, lacks jurisdiction to tell IRC programmers how to program.

    Currently, this is the case. I think that no matter what, there will be pragmatic issues. However, the FCC's role in regulating Internet-based things is very much up in the air, and conflicting opinions have been taken.

    The Clinton administration, barring a few moves, took a very federal-hands-off approach to the Internet (taxes, especially, were a big sticking point). Bush largely continued that. At some point, though, it's a good bet that someone's going to try regulating the Internet in various ways, and the FCC is the most obvious choice to designate as a starting point.

    2. The Internet is becoming more decentralzed (e.g. anonymous wireless LANS,P2P networks, etc.) so there will be too many small time non compliant ISPs to go after. And the government, not for want of trying, has so far shown only futile attempts at regulating the Internet.

    Not necessarily. For certain major systems, like VoIP, there will likely be a few large ones due to network effect. Think of AIM and ICQ today. If you don't play by the rules, you can't interoperate. These services are centralized, so it's easy to monitor and pick up on noncompliant systems.

    3. The only people for this are the FBI and a few conservative politicians. They're going up against the communications giants and equipment manufacuters -- financially secure industries with campaign contributions, lobby groups, and lots of lawyers.

    Now this is a damn good point, but I can think of a couple of legitimate counterarguments. The first is that telcos are scared of the VoIP. It breaks down barriers to entry that have existed for a long time to nothing. They have a *lot* of overhead and costs that have cropped up over years, and they're looking for a way out. If VoIP systems required key escrow and *federal approval* before they can be rolled out, it makes for a *very* nice barrier to entry. You just have to donate some money to the appropriate politicians, and you've good a good reason for companies to want to play along.

    4. Besides all that, they just don't get it. Any two connected nodes communicating by pulses (ones and zeros) can always encrypt their conversation. Language is a secret handshake.

    In theory, yes. In practice, there are only so many easy-to-use mass-market clients out there. It would be difficult but feasible to go after noncompliant types. For techies, this is a non-issue, since it's easy to whip something else new up each day. For Joe Blow, this is very effective.

    I first realized the "Joe Blow"-"techie" separation when the Feds stopped going after Zimmerman for PGP. It didn't *matter* that a couple of security nuts with the dedication to get gpg and a wrapper and mutt set up. There aren't many people who were willing to copy and paste text in and out of Eudora each thime they wanted to encrypt or decrypt a message. As a result, the masses did not use PGP, so PGP was not a huge issue. The hard-core security nuts and cryptographers are kept shut up, because they *can* set up PGP, and the Fed is happy because the masses *don't* use PGP.

    However, with VoIP, the issue came up again. Email is generally read on a computer, where you can add PGP on, and hence software vendors don't bundle PGP support. However, if you start selling VoIP embedded devices, you probably need to bundle native encryption support for it to be used. It will be easy-to-use and probably automatic. This is unacceptable, because the masses will start *using* end-to-end encryption.

    The thing is, I can't work up much dislike by the FBI, because they're getting displaced by the OHS, which is ever so much more nasty and has ever so much less oversight. At this point, the FBI is the lesser of two evils -- by a long, long, long shot.

  36. Germany already has this by Nice2Cats · · Score: 4, Insightful
    Germany already has such laws, and the ISPs have been screaming about the costs ever since. The government's reaction: Tough. If you don't like it , go sell Bratwurst instead.

    The sick thing about all Internet wiretapping is that when asked why this is required, the cops always just say "child pornography", and everybody rolls over; the media has created the impression that about every second byte transmitted has something to do with child porn. Between our War on Terrorism (With an Occasional Aside for Oil) and child porn Internet hysteria, we have two beautiful excuses to slowly rip up the Bill of Rights, piece by piece.

    Here comes the next shred.

  37. Re:Civil Protest by mborland · · Score: 5, Interesting
    If all significant Internet traffic was adequately encrypted it wouldn't much matter if they could tap the packets, it would be too costly to decrypt it.

    I agree generally with the intent your statement, but have two concerns:

    1) The government still should not have the right to monitor packets; you don't want them use the 'well, you can always encrypt your traffic' argument to support general sniffing, and

    2) Even if they can't decrypt the payload efficiently, they can still tell where the packets are going and presumably draw conclusions from that. Most likely they'd use such conclusions to get warrants for further access to your systems.

    For example, you get spam or other traffic from some hijacked computer in Syria/Chad...these days that would be enough to establish possible terrorist links--especially if the payload was encrypted.

    No monitoring whatsoever is appropriate.

  38. Re:Screw you, government! You pay for the upgrades by 0x0d0a · · Score: 4, Interesting

    I've got a shitlist here:

    China: Repressive government with deep love for monitoring citizens and harsh penalties for political dissent.

    Australia: Extremely socially conservative government with love for censoring Internet.

    Britain: Anti-gun, laws forcing people to hand over passwords/keys upon request, leader has mouth firmly glued to Bush's cock.

    Netherlands: Apparently anti-encryption government?

    Man, I wish some hacker would grab email from a couple of important figures in the Netherlands and post said data all over.

    This worked nicely in the United States when protesting "trash rights". Theoretically, when you throw something out, you no longer lay claim to it, and it isn't yours. That means that anyone (even without a warrant) can come along and root through your trash for interesting information. The police force of some town busted someone for marijuana-growing or something after monitoring their garbage for a long time without a warrant. The local paper ran an editorial criticizing them. The mayor and police chief both bashed the editor of the paper, saying that the paper didn't know what it was talking about and should shut up. The police chief sent a letter in to the paper saying that the ability to monitor garbage wasn't an invasion of privacy and was perfectly acceptable. The editors of the paper ran out and collected the *mayor's* and *police chief's* trash for two weeks (using the same argument of legality that the police chief used), then published a rather embarassing dossier on each.

  39. Re:Screw you, government! You pay for the upgrades by no+soup+for+you · · Score: 4, Insightful

    The Great Society is a socialist state. We need less government, less welfare, less projects, less help. The government does not exist to help people. It exists to protect people. But protection, in my opinion, does not mean protection from the realities of life.

    --
    If you blog it...
  40. Re:Screw you, government! You pay for the upgrades by 0x0d0a · · Score: 4, Insightful

    The problem isn't in allowing LEA access to what they want. It's making sure there's a process they have to go through to get them, which prevents them from getting the information when they shouldn't be.

    We have one. It's called "the current system", where if you want to tap someone's VoIP connection you have to stick someone out by their house with a parabolic mic or plant a bug in their house. This makes for a wonderful check on the system -- LEAs simply can't *afford* to monitor each and every person, do fishing expeditions, or do the sort of thing the French claim in the form of Echelon. I rather like this system. It means that if the police *really* want to bug someone, like a mob boss, they can, but they can't just wildly run out and monitor huge swaths of society.

  41. Encryption products will be next by Anonymous Coward · · Score: 5, Insightful

    In principle I have no objection to altering the existing wiretap laws to account for new technologies such as VoIP. However, make no mistake that once this occurs, the next thing on the chopping block are encryption products. The argument will be "We cannot effectively monitor terrorists and child pornographers because strong encryption has become commonplace."

    We'll be back to either mandating weaker forms of encryption or requiring backdoors be installed at the encrypted tunnel layer. SSL/TLS, IPSec and SSH all come to mind (key escrow, anybody?). By designating the tunnel endpoints as "service providers" (they ARE in fact providing some sort of service or else you wouldn't be communicating with them), they could require a backdoor be installed at the endpoint.

    Shape of things to come...

  42. Re:Screw you, government! You pay for the upgrades by Gojira+Shipi-Taro · · Score: 4, Insightful

    You mean the Johnson administration? That was more than a few years ago.

    If you think deficit spending started "a few years ago" or with the current administration, you're sadly deluded.

    --
    "Oh my God. This is terrible. This is the end of my Presidency. I'm fucked."; ~ Donald J. Trump
  43. Welfare bums by M.+Baranczak · · Score: 5, Interesting

    Yeah, I've met people like that too. They're definitely a small percentage of society, but they do exist. But there are a few points I'd like to raise:

    1 - I have a problem with this Puritan idea that work is a moral obligation. "Work" should be something you do to solve a problem: If there's not enough food, you grow more food. If there's a hole in the roof, you fix the hole. If people are dying of disease, you make a vaccine. Our society has reached a point where there aren't enough of those problems to keep everyone employed; so what do we do? We create problems where there weren't any before. 20 years ago, were people truly suffering from the lack of GameBoys?

    2 - As a former manager in a small business, I can tell you that I wouldn't want those slackers working for me. I don't want employees who are forced to work for me; I want employees who do the work because they find it interesting, or because they like their co-workers, etc. If I have to give up 0.2 % of my paycheck to keep these lazy fucks out of my hair, I consider that a worthwhile investment.

    3 - If we do accept the above-mentioned Puritan work ethic, then we should apply it equally to all. What about the hereditary billionaires who never did a day's work in their lives? If they were forced to work for a living, it might keep them out of mischief. Like running for office.