Slashdot Mirror


FCC Rules VoIP Must Be Tappable

pengie2 writes "The FCC has unanimously approved the U.S. Justice Department's bid to expand CALEA to broadband and VoIP networks, according to reports from SecurityFocus and News.com. This means, following a mandatory public comment period, service providers will have to wire their networks for easy law enforcement surveillance, the way phone companies do now. The feds have wanted this for a long time." Ebon Praetor adds a link to Reuters' version, writing "In addition, the FCC has decided that the push-to-talk, or walkie-talkie, functions available on phones from Nextel should also be subject to the same tapping regulations that regular phones are."

568 comments

  1. The last thing I need... by AcquaCow · · Score: 2, Insightful

    is the FCC getting more permission to sniff my packets...

    --

    up 12 days, 22:30, 2 users, load averages: 993.20, 994.21, 994.56
    *makes note to limit user processes...
    1. Re:The last thing I need... by peculiarmethod · · Score: 0

      well at least _someone_ is interested in sniffing your packets.

      pm

      --
      ** "It's not my job to stand between the people talking to me, and the ones listening to me." -- Pego the Jerk
    2. Re:The last thing I need... by cyber_rigger · · Score: 4, Funny

      Just speak in Navajo pig latin with a Klingon accent.

      See if they can make this illegal.

    3. Re:The last thing I need... by dnahelix · · Score: 4, Funny

      They give a class in that at the CIA.

      --
      Slashdot Eds Link Anonymous Posts With Logged Posts
      They Are Vermin Feeding On Each Other's Feces.
      I Hate \.
    4. Re:The last thing I need... by NanoGator · · Score: 1

      "is the FCC getting more permission to sniff my packets..."

      Why, are there exposed breasts going through them?

      --
      "Derp de derp."
    5. Re:The last thing I need... by jrockway · · Score: 2, Interesting

      They can sniff all the packets they want. Have fun breaking my 4096-bit AES key that I encrypted them with, though. And if that's illegal, then I'll resort to steganography. If they don't know I'm making phone calls then they can't tap them... right?

      (If you're not aware of what steganography is, take a look on google.)

      --
      My other car is first.
    6. Re:The last thing I need... by FireFury03 · · Score: 3, Interesting

      I don't understand how this is enforcable - VoIP is an end-to-end system - no middlemen are needed. How are they going to stop me doing VoIP over an IPSEC connection?

    7. Re:The last thing I need... by VagaStorm · · Score: 2, Insightful

      Not necessarily, if you use software like skype to communicate directly with another client it should be hard at best. But if you use an IP Phone, you probably have to have an account with at firm that provides some kind of phone service (You don't want to go around remembering the ip v6 for all your friends =) At least you need that here in Norway. Then it should not be that hard to put a tap some where in there system.

      At least that's my unqualified gues since I don't "know" the VoIP systems in the US.

    8. Re:The last thing I need... by FireFury03 · · Score: 1

      But if you use an IP Phone, you probably have to have an account with at firm that provides some kind of phone service

      See my other comment about this.

      You don't want to go around remembering the ip v6 for all your friends

      There's a thing called DNS, it lets you use easy to remember names instead of IP addresses... Or do you email people using their IP addresses? :)

      At least that's my unqualified gues since I don't "know" the VoIP systems in the US.

      I'm in the UK, but I don't see why this is different anywhere else - I have Asterisk running on my server which handles my IP phones. My server also has an FXO card in it that lets me make and receive calls over my POTS line. The only 3rd-parties involved are:
      1. My telco when I make PSTN calls over my POTS line (but that's just like having a plain POTS phone)
      2. e164.org - for translating phone numbers into VoIP addresses using DNS (this is _lookups_ only, no actual voice traffic involved here)
      3. VoipUser who provide some incoming PSTN DDIs for me over the internet

      So the only "tappable" third parties there are only involved when I'm making calls via the PSTN - VoIP calls are always made directly. I honestly can't see a place for any VoIP service providers except VoIP-PSTN gateways and maybe voicemail providers, etc in the event your internet connection breaks or your server goes down.

    9. Re:The last thing I need... by fubar1971 · · Score: 1

      I don't understand how this is enforcable - VoIP is an end-to-end system - no middlemen are needed. How are they going to stop me doing VoIP over an IPSEC connection?

      If you are using a provider, are you not actually sitting on that providers network? For eaxmeple, lets say that I am using provider A, and make a VoIP call to a subscriber that uses provider B. Don't my packets travel from my phone to provider A's network, bounce around in their until they are routed to provider B's network, bounce around their until they get routed to the other VoIP phone that I am calling. Sounds like there are a lot of different places that packets can sniffed. It seems to me to be quite possible to sniff the packets. You probably coud do it with Snort or anyother IDS implemetation. The only problem then would be to break any encryption.

    10. Re:The last thing I need... by Pxtl · · Score: 1

      Well, if this does cover Skype and other ip-to-ip communication (which I doubt) - does it cover X-Box Live Voice Chat?

    11. Re:The last thing I need... by FireFury03 · · Score: 1

      If you are using a provider, are you not actually sitting on that providers network?

      See my other comment...

      I'm not entirely sure who the "providers" are you're talking about - doing VoIP over the internet involves 2 endpoints talking to eachother. I don't see why you need any telephone "providers" involved at all. It's the same as email - I don't pay an "email provider" to route my mail for me (and maybe charge per mail or something), I run a mail server on the end of my DSL line and people wanting to email me send to there, no middlemen involved.

      For eaxmeple, lets say that I am using provider A, and make a VoIP call to a subscriber that uses provider B. Don't my packets travel from my phone to provider A's network, bounce around in their until they are routed to provider B's network, bounce around their until they get routed to the other VoIP phone that I am calling.

      As far as I'm concerned, you have an IP phone plugged into your internet account and you dial another IP phone either by entering an IP address, DNS name or real phone number (translated by an ENUM DNS lookup). What are these providers doing? Why do you need them? Do you subscribe to an "SSH provider" to route your SSH sessions to the right server?

    12. Re:The last thing I need... by fubar1971 · · Score: 1

      I'm not entirely sure who the "providers" are you're talking about - doing VoIP over the internet involves 2 endpoints talking to eachother...

      I run a mail server on the end of my DSL line and people wanting to email me send to there, no middlemen involved.


      Who provides you your DSL connection? You don't really think that your network is connected directly to the Internet Back bone do you? When people send email to your server from somewhere else, there are lots of middleman involved. That is the hole concept behind routing. When I said "provider" I was meaning your data provider or better known as ISP.

      What are these providers doing? Why do you need them?

      What these "providers" are doing is connecting you to the Internet, by providing the proper routes to the backbone which will then provide the proper routes to another ISP that will send data to the other endo of your convesation, whether it is VoIP, mail, IM, IRC, etc. The methold of communication does not matter. If it is data that is being transmitted, then there are lots of middlemen involved.

    13. Re:The last thing I need... by jpvlsmv · · Score: 2, Funny
      (If you're not aware of what steganography is, take a look on google.)

      I don't see any steganography on google.

      It must be hidden really well...

      --Joe
    14. Re:The last thing I need... by FireFury03 · · Score: 1

      Who provides you your DSL connection?

      My ISP, but they are not a telephone provider and will not be dictating what protocols I can and can't use, nor will they be charging me on a per-second basis for my phone calls (ok, eventually we might each end up paying for the bandwidth we use, but the bandiwdth used by voice calls is tiny compared to the bandwidth used for surfing the web and downloading pr0n so the bandwidth cost of telephony will be largely irrelevent).

      When people send email to your server from somewhere else, there are lots of middleman involved.

      Yes, but again, they are not going to be dictating what protocols I can use - some random router on the internet isn't going to sit there sniffing TCP traffic on port 25 and reject it because I'm sending an encrypted email - only the mail relays are in a position to do that.

      That is the hole concept behind routing. When I said "provider" I was meaning your data provider or better known as ISP.

      By "end-to-end" I meant that the protocols don't rely on there being lots of VoIP relays understanding the protocol and routing it - the source VoIP server connects directly to the destination server, the routers between just do IP routing and don't know/care what protocol I'm using over IP. The backbone routers are not in a position to be stopping me using whatever protocols I want.

    15. Re:The last thing I need... by Lodragandraoidh · · Score: 3, Informative

      The FCC ruling effects service providers - not private networks.

      Since most, if not all, service provider VOIP networks have controlled access - then this is very doable from a voice tapping perspective.

      The problem comes into play when you are talking about the wider internet and non-controlled access. End users could encrypt their data communications - even using IP tunneling in the form of VPN (virtual private network) in addition to multiple layers of encryption.

      The authorities could sniff the packets - but wouldn't get much useful information. Further decryption would be required - which negates the 'instant access' that Federal Agents are seeking, and used to with the PSTN (public switched telephone network).

      With the ubiquity of VPN - I think it would be problematic to bring a 'no encryption' rule into effect; businesses would squawk at the loss of flexibility and attendant profitability.

      --

      Lodragan Draoidh
      The more you explain it, the more I don't understand it. - Mark Twain
    16. Re:The last thing I need... by FireFury03 · · Score: 1

      I don't see the need for "VOIP networks" - please explain the concept?

      (see my other post)

    17. Re:The last thing I need... by Anonymous Coward · · Score: 0

      I agree, VOIP is just another bunch of IP packets. But currently, most people use PSTN for their phone service, not VOIP. So someone has to provide the routing between the internet and the PSTN. But once most people switch to VOIP and the PSTN goes away, VOIP will be easy to encrypt and there won't really be any way for the Feds to tap it.

      This also makes me wonder about the long-term business plan of VOIP providers such as Vonage and Skype. Once the PSTN has gone the way of the dodo, they won't be necessary either.

    18. Re:The last thing I need... by fubar1971 · · Score: 1

      My ISP, but they are not a telephone provider and will not be dictating what protocols I can and can't use...

      Yes they do, it is called IP.

      Yes, but again, they are not going to be dictating what protocols I can use...

      Yes they do, it is called SMTP

      ...some random router on the internet isn't going to sit there sniffing TCP traffic on port 25 and reject it because I'm sending an encrypted email - only the mail relays are in a position to do that...

      Who say's that they have to be sniffing for encrypted mail. You have an MX record for your email server don't you? You can sniff for traffic based the IP address that is being sent to or sent from and capture the raw data. After that, you have a copy of the raw data that can be rebuilt and hacked against to break the encryption. Just for fun put a Snort box right outside of your email server and see what you get.

      By "end-to-end" I meant that the protocols don't rely on there being lots of VoIP relays understanding the protocol and routing it - the source VoIP server connects directly to the destination server, the routers between just do IP routing and don't know/care what protocol I'm using over IP. The backbone routers are not in a position to be stopping me using whatever protocols I want...

      Your are still looking at it at to high of a level. VoIP is still nothing more than data encapsulated into an IP packet. Once the data is transmitted via IP it can be sniffed and captured. IP traffic can be captured at any point once it is being transmitted. Put a sniffer on the data wire after your telephone or VoIP server and make a call. You should be able to see and capture the raw data since it is nothing more than IP packets. After that it is not impossible (even though it may take some time.)to reconstruct the data from the packets and break any encryption.

      Take a look at the OSI model, and pay closer attention to the bottom layers.

      Capturing IP packets is trivial. Sincce VoIP is nothing but IP encapsulated data, sniffing and capturing phone conversations should be just as trivial as long as you have the resources to rebuild the voice and break the encryption.

    19. Re:The last thing I need... by Anonymous Coward · · Score: 0

      That would not make a difference. Nobody ever calls me.

    20. Re:The last thing I need... by FireFury03 · · Score: 1

      Yes they do, it is called IP.

      Ok, maybe I should've been clearer - they don't dictate what application layer protocols I can use.

      Yes they do, it is called SMTP

      Err, no they don't - the ISP's router doesn't know anything about SMTP. For all the ISP knows I could be running a frickin' web server on port 25.

      Who say's that they have to be sniffing for encrypted mail. You have an MX record for your email server don't you? You can sniff for traffic based the IP address that is being sent to or sent from and capture the raw data. After that, you have a copy of the raw data that can be rebuilt and hacked against to break the encryption. Just for fun put a Snort box right outside of your email server and see what you get.

      Yes, they could sniff the traffic, but they're not going to be blocking it - if the backbone routers start blocking traffic then the internet is frankly doomed. If the backbone routers start parsing traffic to work out what to filter they would fall over from the load. And if my ISP starts filtering my traffic then I'll damned well find an ISP with a clue.

      Your are still looking at it at to high of a level. VoIP is still nothing more than data encapsulated into an IP packet. Once the data is transmitted via IP it can be sniffed and captured.

      Yes, and as my original message said - how are they going to stop me encapsulating it in IPsec? I wasn't arguing that you couldn't sniff VoIP traffic (indeed you can and there are utilities that will output a wav file of the conversation if you feed them tcpdump logs), my arguement was that it's completely unenforcable because they can't stop people using whatever the hell protocol they want - encryption or no.

      Capturing IP packets is trivial. Sincce VoIP is nothing but IP encapsulated data, sniffing and capturing phone conversations should be just as trivial as long as you have the resources to rebuild the voice and break the encryption.

      Ok, I'll hand you an IPSEC encrypted VoIP stream and you tell me what the conversation was about - if they have the technology to break encryption they wouldn't need to have legislation saying that the protocol allows for them to listen in would they?

    21. Re:The last thing I need... by fubar1971 · · Score: 1

      Ok, maybe I should've been clearer - they don't dictate what application layer protocols I can use...

      Well fianlly, you are starting to see what I'm talking about.

      Yes, they could sniff the traffic, but they're not going to be blocking it - if the backbone routers start blocking traffic then the internet is frankly doomed. If the backbone routers start parsing traffic to work out what to filter they would fall over from the load. And if my ISP starts filtering my traffic then I'll damned well find an ISP with a clue...

      Who said anything about blocking? I thought we were talking about sniffing and capturing?

      Yes, and as my original message said - how are they going to stop me encapsulating it in IPsec? I wasn't arguing that you couldn't sniff VoIP traffic

      That's what it sounded like to me...

      Ok, I'll hand you an IPSEC encrypted VoIP stream and you tell me what the conversation was about -

      I never said that I could do it. I don't have the reources available to me to accomplish that in my lifetime. That does not mean that somone...like say...the Government, may not already have those resources availbale.

      if they have the technology to break encryption they wouldn't need to have legislation saying that the protocol allows for them to listen in would they?

      Why spend millions/billions of dollars on Super Computer time to break encryption, when you can pass legislation to make it so people have to give you the ability to listen. Sounds much cheaper to me.

    22. Re:The last thing I need... by FireFury03 · · Score: 1

      I think somewhere along the line we diverged from my arguement:

      1. You cannot legislate against what protocols private individuals use over their internet connection, only what protocols *VoIP service providers* use - if I want to use an encrypted VoIP protocol to talk to my mates directly over the internet how can they stop me? I'm not going via any 3rd party VoIP providers so noone can dictate any protocols to me.

      2. Even if you can legislate what protocols I may use when connecting to machines owned by other private individuals, it's unenforcable to say "you may not do encrypted VoIP" - if I choose to encapsulate my VoIP traffic in IPSEC then it may be illegal but theres no way the authorities could tell that it was VoIP traffic I'm encapsulating. It would be like saying "letters written on green paper may not be enclosed in an envelope" - how are you going to tell that the contents of an envelope isn't a letter written on a bit of green paper (assuming that opening the envelope is impossible).

      3. Legislating about what protocols a VoIP service provider can use is possible, but the only reason to use a 3rd party VoIP service provider is if you need to gateway VoIP traffic onto the PSTN. In which case the traffic is tappable as soon as it gets onto the PSTN anyway.

      So the legislation seems moot. And before you start telling me that I do use 3rd party providers to carry my traffic, yes - I use an ISP, I am talking specifically about people providing VoIP services, not general internet connections and I cannot see how you can legislate that no ISP is allowed to carry any encrypted traffic of any description (whcih is essentially what you'd need to stop private individuals from being able to transmit encrypted VoIP traffic between them).

    23. Re:The last thing I need... by maximilln · · Score: 1

      Ok, I'll hand you an IPSEC encrypted VoIP stream and you tell me what the conversation was about

      I'm pretty sure that the goal is to allow wiretapping at the interface between the data network and the residential phone system. Previously such a thing may have required a special warrant.

      Now that I write it, however, I'm puzzled. Was there a legal technicality which disallowed them from tapping the residential side of a VoIP involved call? Why is this even news?

      --
      +++ATHZ 99:5:80
    24. Re:The last thing I need... by fubar1971 · · Score: 1

      I think somewhere along the line we diverged from my arguement:....

      Wow all of that sounds awfully different from your orginal post of...

      I don't understand how this is enforcable - VoIP is an end-to-end system - no middlemen are needed. How are they going to stop me doing VoIP over an IPSEC connection?

      From you orginal post it sounded to me like you were questioning how they were going to enforce it, when you believed that there were no middlemen involved. Which is what I was arguing. Now it sounds like you think that they want to ban encrypted VoIP communication.

      I am talking specifically about people providing VoIP services, not general internet connections and I cannot see how you can legislate that no ISP is allowed to carry any encrypted traffic of any description (whcih is essentially what you'd need to stop private individuals from being able to transmit encrypted VoIP traffic between them).

      Unfortunatelly you can not talk about VoIP without talking about Internet connections. The only way you can talk about VoIP without talking about the Internet is if you are routing the conversation to the PSTN, or if it is all internal communcations within a private organisation. As soon as you call an IP enabled phone that is external to your control, then the traffic is going to be transmitted via IP on other peoples network and/or the Internet. Besides, the big selling point to VoIP is the fact that it does work with the Internet.

      I do not believe that the intent of the FCC regulation is to ban encrypted communications. The FCC regulation ownly wants to make it possible to tap the conversation, just like they can tap a normal phone call. How that is going to be accomplished if you encrypt it I do not know. I'm just speculating now, but if they can capture the packets, I would believe that it would not be to hard to get a court order to make you surrender your encryption keys to decrypt the conversation.

    25. Re:The last thing I need... by FireFury03 · · Score: 1

      Wow all of that sounds awfully different from your orginal post of...

      "I don't understand how this is enforcable - VoIP is an end-to-end system - no middlemen are needed. How are they going to stop me doing VoIP over an IPSEC connection?"

      From you orginal post it sounded to me like you were questioning how they were going to enforce it, when you believed that there were no middlemen involved. Which is what I was arguing. Now it sounds like you think that they want to ban encrypted VoIP communication.


      By "middlemen" I was *never* talking about the internet infrastructure - I'm talking entirely about VoIP infrastructure (yes, yes, VoIP runs over the internet - I don't see why that's especially relevent - your ISP does not need to know and frankly doesn't care what you're doing with your connection in the same way as the people who make the copper wires your POTS line uses don't care what you're using them for).

      As soon as you call an IP enabled phone that is external to your control, then the traffic is going to be transmitted via IP on other peoples network and/or the Internet.

      I'm still not seeing how that's relevent - the people at the _end points_ of the VoIP connection (or infact any IP conversation) choose the application layer protocol, not the ISP - the ISP does not need to know what you're doing - why does it matter to them if you're doing VoIP or playing Quake? Once you start regulating what protocols private individuals are even allowed to use over the internet (and forcing the ISPs to identify those protocols and filter them, whcih isn't exactly easy) you're on a really slippery slope.

      The FCC regulation ownly wants to make it possible to tap the conversation, just like they can tap a normal phone call. How that is going to be accomplished if you encrypt it I do not know. I'm just speculating now, but if they can capture the packets, I would believe that it would not be to hard to get a court order to make you surrender your encryption keys to decrypt the conversation.

      They could already do this anyway - it seems to me the only reason to get such legislation is to prevent people using (to all intents and purposes) unbreakable encryption on their phone conversations, whcih seems to me completely unenforcable unless people are gatewaying to the PSTN (where the communication is in the clear anyway).

      In any case, it's *exceptionally* easy to get around the court order to force you to hand over your keys - if you use public key cryptography then you can rekey frequently without worrying about how you distribute the keys. Generate a key pair, publish the public key, use the key pair to encrypt your phone conversation and then completely destroy your keys. The next time you make a phone conversation you just need to create a new key pair. If you are ordered to relinquish the keys, well too bad - you already destroyed them. If you want to get really paranoid you could rekey even more frequently - like every minute or something.

    26. Re:The last thing I need... by fubar1971 · · Score: 1

      (yes, yes, VoIP runs over the internet - I don't see why that's especially relevent - your ISP does not need to know and frankly doesn't care what you're doing with your connection in the same way as the people who make the copper wires your POTS line uses don't care what you're using them for)...

      You are right your ISP and Teclo provider could for all intents and purposes care less about what you are using the lines for...until the Feds show up. That's the whole point of the regulations. The Feds want to be able to monitor what you are doing supposedly when they have a legitamte legal reason. I'm just trying to point out that even though you may think it is *end-to-end* communications, there are lots of places and ways to enforce this regulation.

      Once your communications leave your control, then they are succeptible to be sniffed and captured(Please don't confuse this with filtering or blocking, that is totally different). Encryption will only keep your neighbors from hearing the conversation. The Government however has always been in the busines of decoding encrypted information, and are quite good at it. You don't really believe that the Govt. can't beak IPSec encrypted communication, do you? They definetily have the resources available to do so.

    27. Re:The last thing I need... by Lodragandraoidh · · Score: 1

      To provide an SLA for voice grade of service, a service provider needs to control the traffic accross the network to a certain extent. This will occur through segmentation of parts of the network. (this is 'Networking 101' - take to any network admin worth his salt)

      So, the VOIP part that interfaces with VOIP phones, and PSTN gateways will be segregated from the other parts of the network that deal with email, and internet access (for example). As a result they will be tappable. (again - that is not to say a private VPN network, or private encrypted VOIP sessions between two or more users on the Internet will be instantly decipherable either - I am just saying that service providers will be able to monitor unencrypted traffic as required by law)

      You have to be very careful to control bandwidth utilization over a VOIP network, or you will degrade your voice quality. A degraded network is not acceptable for many applications (voice and video conferencing, voicemail, etc. etc.) where packets must arrive in order and in a timely fashion. Remember: the VOIP protocol is at the Transport layer and above - routing takes place several layers below that - so treating your VOIP network - particularly for high demand/capacity systems - as a traditional IP network will only lead to problems as your capacity increases beyond trivial use.

      Additionally, the PSTN is not going to go away any time soon - we will be dealing with PSTN gateways for along time to come.

      So, the answer to the question 'is VOIP just another bunch of IP packets' is both true and false at the same time: true in the sense that - yes, the underlying transport mechanism looks and tastes just like TCP/IP, and false in the sense that you will be able to accept degradation of service below voice and video standards on a network intended to hold such traffic.

      --

      Lodragan Draoidh
      The more you explain it, the more I don't understand it. - Mark Twain
    28. Re:The last thing I need... by Netssansfrontieres · · Score: 1

      Most of the responses to this assume that it's the terrorists that we want to catch and that there is not enough probability that we'll succeed in snaring terrorists to make the (real or imagined, new or renewed) infringement on liberty worth while. At least one post notes the availability of encryption, IPSEC, ... and assumes, perhaps correctly, that a crafty terrorist lot will use some of these tools. I'd like to make a comment or two that are explicitly separate from considerations of the "Patriot Act", but are in the context of prior use of CALEA.

      First: The majority of those who are likely to get caught through CALEA are not terrorists: they're your average scumbag felon -- murderers, rapists, etc. While at least some in the terrorist line o' business might be smart (hmmm check the want ads for IT support for Big Al Qaeda?) the typical criminal makes mistakes ... it's a dumb line of work after all. And here, as more than one poster has noted, the trail of phone calls is itself a great evidence trail "called xxx from yyy at 2214; ..."

      Second, and not less important ... even the most evil, smartest terrorist will make an occasional mistake. Stuff on a hard drive; an unencrypted phone call; the passcode taped to a desk as someone noted. Get just ONE of these ... while the Bad Guys still think they're safe, and ... It's like when the Brits & Poles cracked Enigma in WW2 -- from then on they could read ALL German intelligence.

      Third, on average, any nation that expends enough energy (read: money) that it can spy on tinfoils is doomed. But that's on average, and it's a time-averaged series. The Patriot Act has gotta go.

      The general who wins a battle makes many calculations in his temple ere the battle is fought (Sun Tzu, 'Art of War')

  2. oh my.. by Anonymous Coward · · Score: 0

    previous news: fcc good
    this news: fcc bad

    *confused*

    1. Re:oh my.. by Gherald · · Score: 2, Funny

      >previous news: fcc good
      >this news: fcc bad
      >
      >*confused*

      We have a rule of thumb for these situations: everyone is bad, except when they do something good.

  3. Oh well it was nice while it lasted by GoClick · · Score: 4, Funny

    I guess me and my terrorist buddies will just have to go back to using encrypted email.

    1. Re:Oh well it was nice while it lasted by Three+Headed+Man · · Score: 2, Informative

      And here's a way to do it:

      http://www.fourmilab.ch/javascrypt/

      For freedom loving Americans only! Terrorists need not apply.

      --
      I'm probably at the karma cap. Mod up a funny troll instead, it lightens the mood :)
    2. Re:Oh well it was nice while it lasted by LostCluster · · Score: 5, Insightful

      That's good enough for the spooks. See, even if you encrypt the content of your e-mail, you can't encrypt the headers. Sure, "subject" can be filled with nonsense, but the address is good enough to draw a line that says "X said something to Y at this date/time" which is still useful info in an intel puzzle...

    3. Re:Oh well it was nice while it lasted by Anonymous Coward · · Score: 1, Interesting

      Use an anonymous remailier, and MIME-wrap the actual message.

    4. Re:Oh well it was nice while it lasted by Anonymous Coward · · Score: 2, Interesting

      http://www.fourmilab.ch/javascrypt/

      For freedom loving Americans only!

      And maybe the Swiss, given where this site lives?

    5. Re:Oh well it was nice while it lasted by Carnildo · · Score: 3, Interesting

      Steganography. Hide your message in an image posted to alt.binaries.pictures.erotica. The feds might be able to figure out that a message was sent, but they won't have a clue who the recipient was.

      --
      "They redundantly repeated themselves over and over again incessantly without end ad infinitum" -- ibid.
    6. Re:Oh well it was nice while it lasted by Anonymous Coward · · Score: 0
      Yeah, but then the relious right will bust you for downloading porn.

      Better to encode it in a .mp3 upload it to napster (or is the RIAA even scarier)

    7. Re:Oh well it was nice while it lasted by Monkelectric · · Score: 1

      I think that happens quite a lot actually ... You'll see images that are visually the same, about the same size, but have different MD5 sums.

      --

      Religion is a gateway psychosis. -- Dave Foley

    8. Re:Oh well it was nice while it lasted by thedillybar · · Score: 3, Insightful
      >"X said something to Y at this date/time" which is still useful info in an intel puzzle...

      But clearly not enough for their intel. The feds aren't asking VoIP companies to keep call logs that can be reviewed by subpoena. They're asking for the ability to actually tap the calls. Big difference.

    9. Re:Oh well it was nice while it lasted by RealAlaskan · · Score: 4, Insightful
      Steganography. Hide your message in an image posted to alt.binaries.pictures.erotica.

      You don't need stegan-what-he-said. The picture can be the message. When the picture on a webpage changes, you carry out your instructions.

      Someone is going to point out that anyone stupid enough to fly a plane into a building might have difficulty with advanced topics like steganography. Someone else is going to say that the NSA can crack it. That's all nonsense: folks have been putting a candle in the window as a signal for as long as there have been candles and windows, and the internet is a far more visible yet far less obvious way to send a signal.

    10. Re:Oh well it was nice while it lasted by kfg · · Score: 4, Interesting

      If I were a terrorist interested in using the internet to pass messages the spooks would have a hard time even knowing where to look for it amongst the noise.

      And once they'd found it, and decrypted it, they'd still be left having to crack the code.

      "Honey, could you pick up a chicken on the way home?" might mean "rent a van," "deliver the bomb now," or "Honey, could you pick up a chicken on the way home?"

      The spooks are good, I'll give them that. I'll assume they'll crack my messages. . .given time, so I just won't give them that time.

      KFG

    11. Re:Oh well it was nice while it lasted by spezz · · Score: 1
      Really? My cell is going to revert to encoded comment postings on technology websites purple monkey dishwasher.

    12. Re:Oh well it was nice while it lasted by John+Hurliman · · Score: 2, Insightful

      Neither will the recipient.

      This won't suffice as a full method of communication like calling someone up or sending someone an e-mail, because the two parties have to establish when the message is going to be sent, where it will be sent to, and how the recipient will pick up and decode the message. If that was done over a tapped VoIP line the fact that you encrypted and attempted to hide the payload is kind of beside the point.

    13. Re:Oh well it was nice while it lasted by vadim_t · · Score: 1

      Pretty much the same really.

      You could hide information even in Kaaza. Just share files, and establish some kind of code, like that the second digit of the duration of the songs that have a "t" in the name sorted in reverse alphabetical order indicates the time of the attack.

    14. Re:Oh well it was nice while it lasted by SCHecklerX · · Score: 1

      Or encode your messages in spam...

    15. Re:Oh well it was nice while it lasted by Carnildo · · Score: 1

      Usenet makes a perfectly good blind drop. All each party needs to know how to identify a steganographic message, and that could be something as simple as "run every message in this newsgroup through this software".

      --
      "They redundantly repeated themselves over and over again incessantly without end ad infinitum" -- ibid.
    16. Re:Oh well it was nice while it lasted by Anonymous Coward · · Score: 0

      Dear operative:

      ZXzxczfZXCztwerkjwnfo[eiwqeoy8gwefbnwefpiqwuetwe rt ergtergeg

    17. Re:Oh well it was nice while it lasted by DavidBrown · · Score: 4, Funny

      Forget posting to Usenet, post to /. as an anonymous coward, type something supporting Microsoft and attacking Linux, followed by your terrorist communication. Get modded down to -1, and most people will never see your message anyway.

      Unless it's funny. That's why Al Quaida had to stop using it's initial protocol, which consisted of references to Natalie Portman and hot grits being poured into pants.

      The number of question marks in the typical underwear gnomes joke - that's code too, if you know what it means. The frequent use of Admiral Ackbar saying "It's a trap" on www.fark.com - code. "In Soviet Russia..." jokes - not code, but that's just to throw us off.

      --
      144l. ph34r my 133t l3g4l 5k1lz!
    18. Re:Oh well it was nice while it lasted by cheekyboy · · Score: 1

      What I think happens NOW, is that the way they get the messages out is encrypt the message, then encode it in an image, like a porn image, and post it to the newsgroups, where the 'readers' will read it and decifer it.

      perhaps even be coded using objects inthe background as a message, or combination of objects in a bakground over multiple images.

      --
      Liberty freedom are no1, not dicks in suits.
    19. Re:Oh well it was nice while it lasted by Phillup · · Score: 1

      So, use a picture of the crusifiction.

      Dude's head droops to the left the attack is a go.

      Dude's head droops to the right the attack is postponed.

      Millions of ways to communicate...

      --

      --Phillip

      Can you say BIRTH TAX
    20. Re:Oh well it was nice while it lasted by argent · · Score: 3, Interesting

      It's trivial to disguise who you're sending a message to on the Internet. Consider the alt.binaries.warez groups for one of the first examples... you know that X said something, but you have no idea who to. And when you can leave a message just by doing a search on a site that shows "recent searches", you don't really know that "X said something".

      The Internet is full of drop boxes and cutouts and other opportunities to play well-publicised spy shenanigans. And when you consider that a rotten log in a park in Berlin was secure enough to avoid the attention of most of the East German spy apparatus for a couple of months, there's really no chance that any credible level of signals intelligence will find an even modestly competent bad guy.

    21. Re:Oh well it was nice while it lasted by T-Ranger · · Score: 1
      Well, that kind of code could very well be a one time pad. So unless the spooks get a hold of one of your code books, you're golden. And if a spook has gotten a hold of one of your code books, that also means they have gotten a hold of one of your buddies. And chances are that your buddies are hepped up on LSD in Gt'mo by the time you figgure it out.

    22. Re:Oh well it was nice while it lasted by darin3200 · · Score: 2, Insightful

      Why not just encrypt your message with 4096 bit RSA, and then use hping2 to insert your message into the body of an ICMP or TCP packet? That way it would fit right in with the rest of TCP traffic coming from your connection.

    23. Re:Oh well it was nice while it lasted by NanoGator · · Score: 2, Insightful

      "The spooks are good, I'll give them that. I'll assume they'll crack my messages. . .given time, so I just won't give them that time."

      The problem with your logic is that it assumes that this is simple enough that every would-be terrorist would just do it that way.

      a.) Not looking would be painful if somebody managed to get away with it. Just on the off chance that something MIGHT have been found.

      b.) It's simple enough to wipe your fingerprints off a gun or a glass, yet there are people who still don't do this when they commit a crime.

      You might be a bad-ass-would-be-terrorist, but the implication (I hope you can forgive my making assumptions here) that it's ineffective is flawed.

      --
      "Derp de derp."
    24. Re:Oh well it was nice while it lasted by Nivag353 · · Score: 1

      Hmm...

      Spam is most probably used by intelligence agencies to send out coded information without "enemies" knowing who the intended recipients are.

      Looking at the spam I am getting (filtered out by Mozilla), some of it could easily be encoded for secret content.

      In the WWII a radio station in New Zealand broadcast details of laundry lists. However, some of the "laundry lists" were actually coded messages - no way for the Japanese to know which "laundry lists" were real and which were secret messages...

      So I don't think that the US government will act too effectively to halt spam.

      -Nivag

    25. Re:Oh well it was nice while it lasted by kfg · · Score: 1, Interesting

      I'm not talking about every terrorist. Some of them will be caught. They're expendable. There's more where they came from. We're not talking about army operations here where have to happen where and when planned. We've got time. Decades if we need them.

      Tell me, where's Bin Ladin?

      These laws have nothing to do with terrorists. That's a complete red herring. They're about pot dealers and prostitutes.

      KFG

    26. Re:Oh well it was nice while it lasted by timeOday · · Score: 4, Insightful
      You don't need stegan-what-he-said. The picture can be the message. When the picture on a webpage changes, you carry out your instructions.
      But your method only communicates one bit (presense or absense of the image). So how do they know what instructions to execute when they see that image? The instructions must be prearranged through some higher bandwidth medium. Ideally, that would be face-to-face communication at a time and place distant from sending the bit. But that is very limiting when you're trying to run a global jihad. You could prearrange a huge catalog of messages, but you'll still be severely limited unless you leverage combinatorics - forming something like an alphabet. But then (whoops!) you're right back to cryptography and the messages might get cracked.

      Your method is indeed hard to defeat, but mostly because it's so severely limited in expressive power.

    27. Re:Oh well it was nice while it lasted by balloonhead · · Score: 1

      You could even just type in your plans in plain text, on the site of your choice. It'll get modded down soon most likely, but no-one would pay attention anyway.

      If you knew which site it was on and which topic, or time of day, or which journal it would be posted in, or whatever, you can look it straight up. Or google a key phrase or nonsense words. Everyone else will ignore the explicit instructions until the retrospectoscope gets turned on.

      PS New York Stock Exchange, 0915h, main stock floor, 14th August 2004.

      PPS be funny if anyone sees that and doesn't turn up for work that day

      PPPS the above PPS could be seen as a bluff

      PPPPS as could the above PPPS

      --
      This idea was invented by Shampoo.
    28. Re:Oh well it was nice while it lasted by mother+pussbucket · · Score: 1

      "Tell me, where's Bin Ladin?"

      Sorry. You'll have to wait for Bush's October Surprise.

      --
      Yes, it's true. This man has no dick.
    29. Re:Oh well it was nice while it lasted by sharkey · · Score: 1
      but the address is good enough to draw a line that says "X said something to Y at this date/time" which is still useful info in an intel puzzle...

      Wow. So, "CowboyNeal said something to GoatseGuy yesterday afternoon, which will help us put together our new Itanium!"

      --

      --
      "Outlook not so good." That magic 8-ball knows everything! I'll ask about Exchange Server next.
    30. Re:Oh well it was nice while it lasted by magefile · · Score: 1

      Technically, that's still steganography. And terrorists aren't stupid. Desperate, fanatical, etc., are all words that could be used, but there are many terrorists that are not stupid. Keep in mind, many suicide bombers were well-educated - and that someone has to tell the suicide bombers what to do.

    31. Re:Oh well it was nice while it lasted by Tassach · · Score: 2, Interesting
      Yeah, traffic analysis can yield intel even if the content is unknown. However, it's also pretty easy to defeat. A simple cron job is all it takes -- all you need to do is send messages of a fixed size (or of random size within a given range) on a regular schedule. If you want to get fancy, you send it to a bunch of decoy addresses as well as the intended recipients.

      If you have real data to send, it gets encrypted and goes out in the next scheduled transmission. If not, you encrypt and send some worthless data (eg a couple pages of text from project guetenberg) If you have a small message it gets padded out with garbage until it's the standard size.

      You could even camoflage it as spam if you want even more protection -- if you use steganography to hide your message in an image which you spam to tens of thousands of addresses, you've given your dozen intended recipients a huge dose of plausible deniability, and you've given the opposition a massive number of decoys to investigate.

      --
      Why is it that the proponents of "one nation under God" are so eager to get rid of "liberty and justice for all"?
    32. Re:Oh well it was nice while it lasted by Fulcrum+of+Evil · · Score: 1

      PS New York Stock Exchange, 0915h, main stock floor, 14th August 2004.
      PPS be funny if anyone sees that and doesn't turn up for work that day

      Hate to break it to you, but the 14th is a saturday.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    33. Re:Oh well it was nice while it lasted by nelsonal · · Score: 2, Interesting

      Why is the abreviation for Swiss ch? The ISO currency symbol for Swiss Francs is CHF as well, am I missing something in German or something?

      --
      Degaussing scares the bad magnetism out of the monitor and fills it with good karma.
    34. Re:Oh well it was nice while it lasted by M.+Baranczak · · Score: 2, Funny

      I think that happens quite a lot actually ... You'll see images that are visually the same, about the same size, but have different MD5 sums.

      You actually spend time analyzing the checksums of porno images?

    35. Re:Oh well it was nice while it lasted by andreyw · · Score: 4, Informative

      The Swiss are the "Helvetians", so Switzerland would be the "Conferederation of Helvetians" or CH.


      http://www.straightdope.com/mailbag/mhelvetians.ht ml

    36. Re:Oh well it was nice while it lasted by Three+Headed+Man · · Score: 1

      Confoederatio Helvetica become .ch

      --
      I'm probably at the karma cap. Mod up a funny troll instead, it lightens the mood :)
    37. Re:Oh well it was nice while it lasted by Xabraxas · · Score: 1
      These laws have nothing to do with terrorists. That's a complete red herring. They're about pot dealers and prostitutes.

      Exactly

      In fact most, if not all, the terrorists that attacked the US on 9/11 could have been caught using traditional law enforcement means if they didn't all have their heads up their asses. Some of them used their real names! That's enough to make me cringe. We're just giving more power to incompetent government agencies.

      --
      Time makes more converts than reason
    38. Re:Oh well it was nice while it lasted by Anonymous Coward · · Score: 0

      Anyone sending meaningful messages would also send just as many meaningless messages, heck if not 99.9% junk for 0.1% legitimate. Say every minute send an encrypted email of different payloads and do this for months if not years before "the big one". The spooks would not be able to derive any intel from traffic analysis.

    39. Re:Oh well it was nice while it lasted by Minna+Kirai · · Score: 2, Interesting

      However, some of the "laundry lists" were actually coded messages

      Uh, this still happens... but without the silliness of disguising it as laundry (which never fooled anyone). International spymasters run numbers stations, which just read out random-like numbers continually. Most of the numbers are random, but at certain pre-arranged times a spy will listen to the station and copy down his coded instructions.

      Civilians can only speculate how often an actual message goes through, and how much is just chaff keeping the station busy.

    40. Re:Oh well it was nice while it lasted by macosxaddict · · Score: 1

      How about encoding data in the modification date of the image? If that's not enough, use multiple images (each of which has its own modification date).

    41. Re:Oh well it was nice while it lasted by tombeard · · Score: 1

      I thought thats what alt.anonymous.messages was for.
      I can't imagine anyone cracks All of them.

      --
      The reason we subjugate ourselves to law is to better procure justice. If law does not accomplish this purpose then it m
    42. Re:Oh well it was nice while it lasted by nettdata · · Score: 1

      And there's nothing saying that the messages have to be sent via electronic means at ALL.

      Simple want ads in the local paper, or a personal ad, etc., can be just as, if not more effective... especially when the ad is placed 100% annonimously... no electronic trail at all.

      --



      $0.02 (CDN)
    43. Re:Oh well it was nice while it lasted by qtp · · Score: 1

      They're about pot dealers and prostitutes.

      They're about anybody that "they" desire to rid themselves of for any reason. Ridding the streets of drug dealers and prostitutes might be the majority of it, and you can expect the majority of the public to think this is great.

      But there will be those who are labeled as drug dealers, prostitutes, and terrorists simply because someone decided that that particular individual or family is undesirable. It's foolish to think that doesn't already occur, and these taps are simply another means to gather "evidence" that can be used to arrest and convict whomever happens to get targeted.

      The example you used in your previous post demonstrates how words can be interpreted to mean anything. If you've ever sat on a jury, you'll know that words can also be presented as if to mean whatever the prosecution might wish.

      --
      Read, L
    44. Re:Oh well it was nice while it lasted by aridhol · · Score: 1

      But if nobody shows up on the 14th, the terrorists will have won!

      --
      I can't say that I don't give a fuck. I've just run out of fuck to give.
    45. Re:Oh well it was nice while it lasted by Monkelectric · · Score: 1

      more or less? yes...

      --

      Religion is a gateway psychosis. -- Dave Foley

    46. Re:Oh well it was nice while it lasted by 0x0d0a · · Score: 1

      See, even if you encrypt the content of your e-mail, you can't encrypt the headers. Sure, "subject" can be filled with nonsense, but the address is good enough to draw a line that says "X said something to Y at this date/time" which is still useful info in an intel puzzle...

      It is possible to communicate with someone on the Internet without providing association via Freenet; there is Frost (the message board protocol) and a Freenet email protocol.

      Of course, the very fact that someone is using Freenet in the United States of America could be considered incriminating. After all, if you don't have anything to hide, if you aren't a bad guy aiding terrorists or growing marijuana, then exactly why do you want privacy?

    47. Re:Oh well it was nice while it lasted by Alsee · · Score: 1

      It would certainly suck to be you if a terrorist saw your posted and decided "What the hell, that's as good a time as any" to go ahead with his existing plan to slip in and plant his bomb with a 48 hour timer.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    48. Re:Oh well it was nice while it lasted by jonbrewer · · Score: 1

      No fucking way! So this is why that so-common Mac font is called "Helvetica"

    49. Re:Oh well it was nice while it lasted by Anonymous Coward · · Score: 0

      Or you could post a message to Slashdot.
      Delibertately misspelling the message one way would mean one thing; misspelling it another way would mean something else.

    50. Re:Oh well it was nice while it lasted by Anonymous Coward · · Score: 0

      Or you could post a message to Slashdot.
      Deblierately misspelling the message one way would mean one thing; misspelling it another way would mean something else.

    51. Re:Oh well it was nice while it lasted by Anonymous Coward · · Score: 0


      Honestly, Honey, I'm not looking at porn. I'm a secret agent checking checksums and looking for steganography.

    52. Re:Oh well it was nice while it lasted by Anonymous Coward · · Score: 0
      Someone is going to point out that anyone stupid enough to fly a plane into a building might have difficulty with advanced topics like steganography.

      Someone else can point out that Al Queda has trained its members in the use of steganography for the past few years.

    53. Re:Oh well it was nice while it lasted by zanderredux · · Score: 1
      Another explanation: Swiss, in German, is written Schweiz. IMO, maybe they did not like "SC" for a country code and decided to pick the next two (and phonetically more significant) letters, "CH".

      Just a guess.

    54. Re:Oh well it was nice while it lasted by Anonymous Coward · · Score: 0

      Yes, privacy - who needs it? I think we should all walk around naked, anyway. ;)

    55. Re:Oh well it was nice while it lasted by trifakir · · Score: 1
      Steganography. Hide your message in an image posted to alt.binaries.pictures.erotica. The feds might be able to figure out that a message was sent, but they won't have a clue who the recipient was.

      Steganoanalysis. If I am a fed and I suspect you I would tap all your communication. Then I would give it to a whole class of kids to analyze it at leisure. They will discover all kind of patterns which you may have intended to create or not. You know - humans are pretty good in seeing patterns. Programs, not so, but they are improving.

      And if it turns out that you are doing something illegal and you are using steganography and/or cryptography the latter should aggravate the offence (i.e. you shoud in addition of being punished also pay the efforts to detect communication/decipher the data)?

  4. Encryption anyone? by Anonymous Coward · · Score: 5, Insightful

    Encryption should be so much easier with VOIP, since the data is already digital...

    1. Re:Encryption anyone? by thedillybar · · Score: 2, Interesting
      Sure, but encryption is much easier with e-mail too. Just because it's much easier doesn't mean anyone will implement or use it.

      Why would people start encrypting phone calls when they won't even use PGP? After all, phones haven't been encrypted in the past anyway.

    2. Re:Encryption anyone? by pavese · · Score: 0

      Lol, encryption = kinda mandatory. If not, VOIP is nothing more than digital encryption, or...

    3. Re:Encryption anyone? by magefile · · Score: 2, Insightful

      Because people started emailing before encryption capability was integrated in "user-level" (i.e., AOL/Outlook level) software. Witness Skype as an example of why VoIP is different.

    4. Re:Encryption anyone? by Troed · · Score: 1

      ... and Skype is secure because ... ? They use cool buzzwords?

      It's easy to implement crypto. It's hard to do it in a secure way. I haven't seen any descriptions on how Skype has done it.

    5. Re:Encryption anyone? by magefile · · Score: 1

      All I'm saying is, assume Skype is as secure as, say, Thunderbird's crypto. Now, which is my Grandmother more likely to use - Thunderbird (which, to set up, requires that she run GPG or similar, send keys to a server, etc), or Skype (no setup - just click a button)?

      The problem with crypto is partially security. But security is worthless if people don't use it. And even if Skype isn't secure yet, if it becomes secure in the future, then it's a good thing that people will be in the habit of checking "yes, encrypt my conversations".

  5. No problem: end to end encryption by Anonymous Coward · · Score: 0

    Can they make this illegal?

    1. Re:No problem: end to end encryption by Lord+Kano · · Score: 1

      Can they make this illegal?

      Probably. But just because they can doesn't mean that they will.

      LK

      --
      "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
    2. Re:No problem: end to end encryption by zogger · · Score: 2, Interesting

      It's a gray area. On the ham bands-"radio" in general, encryption is technically illegal. I've been waiting for them to rule thusly on wireless computer applications. So far, it doesn't appear to be, but give it time and it probably will be "ruled" that it is.

    3. Re:No problem: end to end encryption by RealOldGuy · · Score: 1

      Conversely, just because they can't doesn't mean that they won't. Or am I the only person in the whole universe who still gets spam? -- rof

    4. Re:No problem: end to end encryption by dgatwood · · Score: 1
      At that point, it will no longer be possible to provide access control. Once that happens, wireless networking would be wide open, and a terrorist could, for example, use the base station at my house with impunity. Could someone explain to me how that newfound mobility would somehow make it easier to snoop on terrorists? :-)

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    5. Re:No problem: end to end encryption by Anonymous Coward · · Score: 0

      Because if your neighbor uses any form of encryption, you will be expected to denounce him to the secret police. Thus, they have caught another terrorist, and the government will be one closer to fulfilling its quota of arrests.

    6. Re:No problem: end to end encryption by dgatwood · · Score: 1
      My point was that if I can't use WEP, the -real- terrorists could use my base station. Outlaw encryption and you make terrorist communication trivial and untraceable.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    7. Re:No problem: end to end encryption by nkh · · Score: 1

      Someone on /. had a good idea we could implement: a client/server program that would spit random bytes all day long just to give more work to the TLAs!

    8. Re:No problem: end to end encryption by Anonymous Coward · · Score: 1, Insightful
      Ahh, you mean -real- terrorists?


      Different situation entirely. The chances of you meeting a -real- terrorist are so low, you might as well discount it. That isn't what these laws are for.

    9. Re:No problem: end to end encryption by pavese · · Score: 0

      [quote]Can they make this illegal?[/quote]

      Guess you just did...

    10. Re:No problem: end to end encryption by zogger · · Score: 1

      sounds like a variation INITIATOR on the old YELLOWCAKE mr. subliminal style RYDER TRUCK keywords ECHELON to waste various governments HALIBURTON time and bandwith.

      Side issue, but I have it one step removed from the puzzle palace guys that they had various "offshore" web based "shhhhh!-mail types" encrypted email services cracked quite a long time ago.

    11. Re:No problem: end to end encryption by Anonymous Coward · · Score: 0

      Encryption over ham radio is illegal with a few exceptions. Wireless network cards are NOT ham radio equipment, so that rule does not apply to them.

    12. Re:No problem: end to end encryption by zogger · · Score: 4, Insightful

      yes, it would mean that, and if p2p and alleged "terrorist" and kiddie pornographers completely take advantage of anonymous wifi and various things like that I expect them to outlaw the encryption and unhackable access in various forms. I wouldn't put it past them to eventually require a unique access IP to be tied to a named human, at all times.

      Governments are weird and will go to some lengths and spare no expense (all the money is theirs, they just let you use some of it when they want to) to enforce police actions of any sort once they set their collective minds to it. Look at merre olde englande, roving vans to catch people receiving unpaid-for "illegal" TV broadcasts. Geez, look at what is happening in china now and some other places, and who is in the thick of enforcing any amount of government surveillence and censoring and control-good old 'merkin based globalist corporations, all the name brand guys. Look who owns the implantable human tracker microchip, the one called "digital demon" in slang terms- "friendly open source"IBM.

      I have no doubt the future will be forced global big brother,massive scale, with little differences between so called nations and global big business, the lines are blurring daily. We are just "human resources" to governments and global bigcos, to buy and sell and command and control, and to do that, they want to track their inventory-to surveil- and to monitor and to enter into databases what their inventory is doing. Encryption, "free" P2P, etc falls well outside those efforts, so eventually they will be outlawed entirely. Look at the proposals for mandatory blackboxes in the cars, and charging a per mile tax/fee will be one day behind that one. Internal passports-coming soon to a checkpoint near you. Newspeak in the media,and don't go against them, lest you become an untermenschen "detainee" and lose any remnants of human-ness.

      We are in the "wild wild west" days of the net right now, a few years from now, I don't think it will exist like it does currently. The handwriting, as they say, is on the wall. Free and open and uncensored communication with "the masses" guy is the biggest threat global corporate government faces, so.... they will deal with it whatever it takes.

      How many people predicted 3 years ago the sally and molly kidpack were going to get sued for song trading? I know I did, and got roundly accused of tinfoil hat-itis, because "no one is ever going to sue normal small time end users". Got told that a lot of times.

      Oh well

      There's ways to still communicate semi securely, and the ones who need to do it will do it, but universally? As soon as it gets just a scosh easier and more prevalent so as to start to threaten to become commonplace, expect a rather severe crackdown and smackdown.

    13. Re:No problem: end to end encryption by zogger · · Score: 1

      yes, I know that, but I think in the future it will be outlawed or changed radically. They will complain that the "tarists" and porno traders and movie and song traders are using "encrypted anonymous wireless access points" and then do something about it. I don't know what technically they will do, but they will certainly try. It6's coming and here in a lot of cases already, every day we see more and more restrictions and lawsuits, still on my home page here is that dvd-copy place got put out of business, and that is fairly innocuous as things go. Big business and it's siamese twin government just don't want YOU to have encryption and anonymous this or that, and they got the gold and the guns, so they gonna get what they want, and turn thee and thou and me and you into "outlaws" suitable for...well, what happens to detainees lately.

      I just got done reading several articles in a row over linux and patents and big business intentions. Go back to big blue, this is a quote, they "aren't contemplating any lawsuits against THE KERNEL". Still leaves quite the room for lawsuits against other folks though, don't it?

      I'll say it again, don't trust global corporations ~governments, they will stab you in the back when it suits them. In the meantime they will rip you off for your brains and sweat until you are no longer useful to them, then f-f-f-ft! Cut you, bad.

      And you moz developers doing MS work for them-no big boo hoo hoo crocodile tears when they shaft you, and they will, it's coming. This is serious clinical psychological *denial* to not see it. You really need to know who your friends are, and who your enemies are, and not live in fantasy land. Leopards do NOT change their spots.

    14. Re:No problem: end to end encryption by Jim+Starx · · Score: 1
      Look at merre olde englande, roving vans to catch people receiving unpaid-for "illegal" TV broadcasts.

      I wish the US would do that. You mention the enforcement but you don't mention why the law is there or what benifit it provides.

      England pays a tax on watching TV. That tax pays for the BBC which delivers programming nearly commercial free. They don't have to sell advertising space so they aren't strong armed by companies into changing their content to fit into a corporate package. It's a definite plus.

      But if you don't enforce the tax knowone's going to pay it, hence the hunt for unliscenced TV antennas.

      --
      The darkness... controls the music. The music... controls the soul.
    15. Re:No problem: end to end encryption by zogger · · Score: 1

      I'd rather end the rubber stamped spectrum hijacking the major networks have enjoyed for generations, and replace it with a more open way of assigning spectrum. When's the last time any major broadcasters/networks license wasn't automatically renewed? It's a big fat joke. We need more microbroadcasters, not just a handful of big media outlets. We need to end the local monopoly on wired access a lot of communities have. We need to open up the shared commons of the right of way granted to the powerline and telcos so that that area and the poles are free for others to use for reasonable fees to the providers, so that some real competition can occur. There are a varietuy of sound decent ideas out there that would help, yet they aren't being implemented-because of payoffs and legalised bribery more than anything else. Eliminate that, open it back up and treat the commons AS a commons,and that would address the issue of diversity of opinion and content over the airwaves, and over the wired avenues, more than anything. Right now for under one thousand dollars I could put up quite a decent local community radio station, yet it is illegal for me to do so. The FCC has consistently caved in to larger corporate-and so-called "public broadcasting"-demands on this issue. And now they want in on the internet as well. Frankly, I don't even see where they have dipsquat for authroity to regulate any airwaves that cross state lines, they are a federal agency after all, and weaseled their way in under the commerce clause that only kicks in when commerce crosses state lines. If I were to put up a small 5 watt transmitter, and it really didn't cross state lines, where do they get off regulating it? The majority large broadcasters and the FCC don't want competition basically, so they got it legislated in. It's not technologys fault, we still have a ton of unused spectrum and mal-used spectrum, just we have a bureaucratic and legislative process that is geared to those with the deepest pockets, and a lot of that pocket stuffing tends to be "off the books" I would wager.

      We don't need more big brother, we need *less* big brother, IMO.

    16. Re:No problem: end to end encryption by Jim+Starx · · Score: 1

      And the system that Britan has put up accomplishes that. The people who own TV's are now paying for the airwaves, it would pave the way for more community related broadcasting, the big broadcasting corporations wouldn't have the leg up that they do now.

      --
      The darkness... controls the music. The music... controls the soul.
  6. That's why anyone with half a brain uses by Ckwop · · Score: 5, Interesting

    PGP Phone. I don't care if it's law enforcement or not. I want to place a phone call in privacy and frankly I don't trust a huge organisation like the police to use their powers sparingly.

    Encryption is the way gents.

    Simon.

    1. Re:That's why anyone with half a brain uses by peculiarmethod · · Score: 1, Interesting

      I suspect that one day networks will have authenticated licenses for software code in order to run at all across the network.. and I suspect these routines will be open to work-arounds. And logically, this would mean blackmarket programming. So start making a rogue program for encrypted communications that adapts like the best virus and emulates p2p networks.. and you'll own a large market in the future. Get to work, and call me!

      pm

      --
      ** "It's not my job to stand between the people talking to me, and the ones listening to me." -- Pego the Jerk
    2. Re:That's why anyone with half a brain uses by LostCluster · · Score: 1

      You can't encrypt envelope information. They'll still know a call between you and your wife took place and how long it lasted.

      If they want to know what was said... all they have to do is pull you and your wife aside at the same time and ask you each what was said over the call. If you match, then it's likely that you're both telling the truth. If you don't, then you've just attracted their interest further because one of you must be lying.

      Sure, the terrorists could have agreed cover stories... but eventually those will crack by some slip.

    3. Re:That's why anyone with half a brain uses by Necrobruiser · · Score: 1

      If they want to know what was said... all they have to do is pull you and your wife aside at the same time and ask you each what was said over the call. If you match, then it's likely that you're both telling the truth. If you don't, then you've just attracted their interest further because one of you must be lying.

      They have no right to know what my wife and I talk about. And if I'm planning something I need to hide from the gummint, I'll have my wife tell them we were talking about where to have dinner.

      If I choose to waive my right against self-incrimination, and my spousal privilege rights, that is.

      --
      "I planned within my means and got a fixed rate mortgage, so where's MY bailout?" -cafepress
    4. Re:That's why anyone with half a brain uses by tdvaughan · · Score: 1

      You can't encrypt envelope information. They'll still know a call between you and your wife took place and how long it lasted.
      Yup, until we have freenet-style VOIP networks. A call which someone makes from their computer will be made to be indistinguishable from a call that's rerouted through their computer. I guess, like with freenet, it'll come down to the same tradeoff between convenience and security.

    5. Re:That's why anyone with half a brain uses by Short+Circuit · · Score: 1

      John Proctor: Elizabeth, I confessed!
      Elizabeth: Oh, God!

      -- The Cruicible

      (Actually, my family has traced itself back far enough to know that Mary Warren was one of my ancestors.)

    6. Re:That's why anyone with half a brain uses by Saeger · · Score: 5, Insightful
      I suspect that one day networks will have authenticated licenses for software code in order to run at all across the network.

      That's the plan.

      "Trusted Computing" and "The Secure Internet" are double-plus ungood euphemisms for COMMAND & CONTROL (over you).

      A world with 100% accountability is damn depressing. Anyone who says otherwise either hasn't seriously thought about the implications, or has, but thinks he's among the few who stands to benefit from stopping the natural freeflow of information.

      --

      --
      Power to the Peaceful
    7. Re:That's why anyone with half a brain uses by bluGill · · Score: 1

      them: what did you say to your wife on such and such data by pgpphone?
      me: I plead the fifth
      them:we repealed the fifth long ago
      me:I still plead the fifth. You can get my pgp-phone key when you pry it out of my brain.

      Though the above assumes I find a girl dumb enough to marry me that I can stand being around....

      Troture be brought up, but my solution to that is to start lieing, starting with obvious lies, and getting more creative. Sure they will get the truth from me eventilly(If they don't kill me first), but by then they will have so many lies they won't believe it.

    8. Re:That's why anyone with half a brain uses by WindBourne · · Score: 2, Informative

      Nice in theory. Think back in early 90's when phil was getting nailed for pgp. The FTC was doing their job and getting ready to put him away for a long time. Then the NSA stepped in and told FTC to do nothing. When FTC balked, they apparently showed them somethings. After a day, all charges were dropped. This is a historical fact.

      Take the above as you will and apply it against what you suggested.

      --
      I prefer the "u" in honour as it seems to be missing these days.
    9. Re:That's why anyone with half a brain uses by russint · · Score: 1

      That must be why anyone with a quarter of a brain DONT talk to the police if they feel they are being suspected of something.

      --
      ^^
  7. How feasible is this? by ttyp0 · · Score: 2, Insightful

    How do they plan to tap encrypted VOIP traffic? Of course the majority of phone calls won't be encrypted. However, the criminals that would be tapped I assume would use end to end encryption?

    $1.99 web hosting

    1. Re:How feasible is this? by Aadain2001 · · Score: 4, Interesting

      Last time I looked into the statistics, the FBI (or was it the CIA?) released some basic statistics about their phone tapping activities (such as how many, reasons for taps (such as drugs), etc) and they listed the number of times they encountered encrypted taps (it wasn't a very high percentage). What shocked me was the line that said the encryption never prevented them from listening to the conversations. So all this talk about encrypted VoIP is probably just a waste of time. Why do you think the NSA finally stopped pressuring the government to classify strong encrypting as a weapon (and thus limited by export laws) around 2000? Do you think it was because they had a change of heart, or that they figured a way to crack pretty much any encryption (PGP included) and no longer worry about losing control? I'm thinking the latter is more likely. So, when VoIP becomes common don't expect PGP et al to protect you from a snooping government. It will probably keep your neighbor from listening, but that's about it.

      --
      Space for rent, inquire within
    2. Re:How feasible is this? by Anonymous Coward · · Score: 0

      hmm, how to tap encrypted voip... dood do you realize since the government has unlimited funds aka: our hard earned cash that they have computing power that you cant even begin to imagine and if they want to do real-time 1k decryption i bet it would take them 2 or 3 minutes to sync up to your key and then BOOM. Distributed.net and everything is good but the gov systems are most likely much better.

    3. Re:How feasible is this? by Carnildo · · Score: 1

      I think that's about when they realized that rubber-hose cryptography was easier than trying to keep up with all the encryption methods.

      Even if they do have a method that lets them exhaust the keyspace of 256-bit encryption in a matter of hours, they still need to know when they've got the correct key. If you're tunneling encrypted audio over a VoIP link, how would the feds know when they've got the right key? Since audio data is meaningless to a computer, they'd need a person to listen to each decryption attempt.

      --
      "They redundantly repeated themselves over and over again incessantly without end ad infinitum" -- ibid.
    4. Re:How feasible is this? by dgatwood · · Score: 1
      Neither. They realized that there was no need to intercept the signal on a wire. If you have a wiretap order from a judge, you can tap it in many ways, from splicing the wire to putting a radio transmitter in the handpiece. Encryption only eliminates one of those mechanisms.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    5. Re:How feasible is this? by ttyp0 · · Score: 1

      That's just a little scary. I have a friend in the military overseas right now. When we want to chat in private, we use talk over a 1024bit ssh2 connection. I'm starting to wonder just how strong that really is.

    6. Re:How feasible is this? by Timber_Z · · Score: 1

      Would these be the same criminals that let the police search thier car when there IS something hidden?

    7. Re:How feasible is this? by Anonymous Coward · · Score: 0
      I would imagine it is very easy to determine from the frequency spectrum whether the decryped plaintext is actual audio or not. If you don't have the right key, it will be basically random noise. Try comparing a .wav file and a .gz file in a hex editor, the differences are obvious.


      And of course, usually there will be a header in some fixed format anyway, so you probably only need to check the first few bytes for the correct header info, in the first instance.

    8. Re:How feasible is this? by Anonymous Coward · · Score: 0

      Dude, that's because they just found the keys, or subpeoned (sp?) them, or put a mic someplace prior to encryption (or after decryption). Using a virtually unbreakable cipher is always the easiest and least important part of any 'secure' system. The worst weaknesses that are hardest to plug have nothing to do with the crypto itself.

    9. Re:How feasible is this? by Anonymous Coward · · Score: 1, Interesting
      That's what you've been taught. That's what you've learned. That's what you've been led to believe.

      What makes you think the government doesn't have some technology you can't even fathom?

    10. Re:How feasible is this? by Carnildo · · Score: 4, Funny

      That's what you've been taught. That's what you've learned. That's what you've been led to believe.

      What makes you think the government doesn't have some technology you can't even fathom?


      If they were that far ahead, I'd be writing this from prison.

      --
      "They redundantly repeated themselves over and over again incessantly without end ad infinitum" -- ibid.
    11. Re:How feasible is this? by Anonymous Coward · · Score: 1, Insightful
      I doubt in any of these cases they actually broke the encryption itself, far more likely is some kind of side-channel attack, or stealing the key (well, i guess it isn't really 'stealing' when the FBI do it :-) or simply placing a bug on the phone.

      In the early days of the internet, the Australian secret service managed to get a bill through parliament that made it legal for ASIO to break into anyone's computer and read and/or remove and/or replace any information they like. The politicians at the time simply didn't understand what they were doing, and the ones that did, were fascists. But the result is ASIO probably don't have a strong need to break encryption, they can just break into your computer and install a key logger (if you use a system other than Windows, they might have to actually break into your house and install it physically ;-) But its potentially bad for Australia. If there was ever a time in the future where the government wanted to suppress a dissident, they could quite legally get ASIO to plant child-porn on their PC, or change their tax-return records, for example.

    12. Re:How feasible is this? by Anonymous Coward · · Score: 0
      The problem with that is he probably doesn't own the computer he's sitting at. Stuff can be intercepted before (or after) it's encrypted (decrypted).

      If the right person wants to see your conversation, he'll see it. That's all there is to it.

    13. Re:How feasible is this? by vakuona · · Score: 1

      What if as part of the encrypton process, you actually included some useless data that you owuld get with some wrong keys. So you would have them crack you little message that you wanted to do something which you wouldn't do. In this way, they cannot rely on looking at the randomness of the data.

      Or you could encode information using a compression routine in any case. Make it look random.

    14. Re:How feasible is this? by Phexro · · Score: 2, Funny

      Whoops, forgot to post anonymously.

      I hope you enjoy your stay in our fine correctional facilities.

    15. Re:How feasible is this? by Anonymous Coward · · Score: 0

      You're a fucking idiot. You obviously know nothing about encryption.

    16. Re:How feasible is this? by Daniel · · Score: 1

      I doubt it would be hard to come up with a statistical technique for separating random data from the sound of people talking (or from sound data generally).

      Daniel

      --
      Hurry up and jump on the individualist bandwagon!
    17. Re:How feasible is this? by Anonymous Coward · · Score: 0

      you're a fucking idiot. modern-day encryption is pretty much uncrackable, all the computers on earth working till the end of the universe couldn't break a single key.

    18. Re:How feasible is this? by KjetilK · · Score: 4, Interesting

      What makes you think the government doesn't have some technology you can't even fathom?

      How science works. It consists of open, institutional critisism by qualified peers. The larger the community, the more people can and will contribute critisism.

      In a world where this does not exist, it will invariably lead to many bad ideas, ideas that are not abandoned. Even though you may recruit the best brains on the planet, they are still just humans, and they can't perform without this critical component of how science works.

      That's why I'm pretty sure that no major breakthroughs will happen in secrecy.

      Smaller breakthroughs, OTOH, can happen in secrecy. It is conceivable that Shor's algorithm will be implemented on a secret quantum computer, but only after the civil society has done most of the work. They will certainly try.

      Just take a look at the most hefty project we know was done in secrecy: Manhattan Project. They had the best brains. Still it was not very fundamental science, and many of the participants got bored out of their minds. It was definately not technology I can't fathom.

      --
      Employee of Inrupt, Project Release Manager and Community Manager for Solid
    19. Re:How feasible is this? by darkewolf · · Score: 1

      Fairly obviously you don't have much of an understanding of cryptography or prime-number theory etc.

      Dnet when it ran its RSA challenges and the current challenges used a lot of resources. Many many many thousands of computers and even then, the process took some years. And, the ciphers that were broken were just very short key lengths. Much smaller than the usual non-paranoid key length used by most people. And paranoid key lengths (PGP used 768 or 1024 bits as a first choice, GnuPG uses 2048 in there. 2048bits is quite a number of factors larger than even 1024 bits.).

      Now, the NSA has admitted they can build a suitcased sized device that can crack a 56bit DES key in a few hours. Will only cost them $256000 or so. But, that said, 56bit DES is considered weak.

      You also make the unfortunate assumption that the Government has unlimited funds. (Un)fortunately they don't. Governments, no matter how large, can't keep throwing money at problems til a solution happens. Whether one assumes they are all powerful and deceptive or not.

      All that said, its been a few months since I brushed up on my cryptography and I have had too much coffee this morning. If you want detailed information on cryptography, search for a FAQ online called the 'Cryptonomicon' (named after Neal Stephenson's book and/or the original 'Cryptonomicon' a treaty on cryptography written a few hundred years ago).. Or maybe look on Cryptopane (I think that is BruceS's page)..

      --
      "That is not dead which can eternal lie...."
      Nimheil
    20. Re:How feasible is this? by magefile · · Score: 1

      Actually, there are several documented cases of *major* leaks ... including one case in which a Soviet spy was hired as one of those "best brains" - he produced good material to cover up his espionage, but passed a *lot* along.

    21. Re:How feasible is this? by NoMercy · · Score: 1

      Well if you encrypt your phone, the'll put a microphone in your phone, the resources/cost of breaking the encryption on most things is a lot higher than just puting a bug to listen in on the conversation before it gets encrypted.

      I still trust PGP, if the CIA could break such encryption the mere fact that they could would be so damn secret that they'd not let 90% of there agents know they can. Coventry wasn't evacuated even though they knew it was going to be bombed to hell, I doubt the CIA would use any evidence gained though breaking 2048+ bit encryption apart from as a indication to dig a bit deeper and find evidence they can tell the world about, the kind of things they'd blow a secret like that for, well they would be interesting times.

    22. Re:How feasible is this? by Fulcrum+of+Evil · · Score: 1

      Dnet when it ran its RSA challenges and the current challenges used a lot of resources. Many many many thousands of computers and even then, the process took some years. And, the ciphers that were broken were just very short key lengths. Much smaller than the usual non-paranoid key length used by most people. And paranoid key lengths (PGP used 768 or 1024 bits as a first choice, GnuPG uses 2048 in there. 2048bits is quite a number of factors larger than even 1024 bits.).

      Doesn't gpg and its ilk use DSA or some other symmetric codec for sessions? You can't compare keylength between Assymetric and Symmetric ciphers - they're too different.

      --
      "We returned the General to El Salvador, or maybe Guatemala, it's difficult to tell from 10,000 feet"
    23. Re:How feasible is this? by darkewolf · · Score: 1

      Yeah that too. But I decided a /. comment wasnt really the place to go into many details. Hence why google searches for real texts may be more useful.

      I guess I get easily annoyed at the many "but the government can crack these codes in minutes" type arguments every time cryptography comes up. Its one of the few things that REALLY irritates me.

      --
      "That is not dead which can eternal lie...."
      Nimheil
    24. Re:How feasible is this? by afidel · · Score: 1

      I'm not so sure. With the ability of viewing things with historic hindsight I think the NSA may be far more advanced then the tinfoil hat crowd wants to believe. For instance the sbox modifications to DES that the NSA helped protect against techniques that the public sector wouldn't rediscover for almost 30 years.

      --
      There are 4 boxes to use in the defense of liberty: soap, ballot, jury, ammo. Use in that order. Starting now.
    25. Re:How feasible is this? by Ceriel+Nosforit · · Score: 1

      Computer Science careers at NSA

      And I quoteth:

      It's been said that the systems environment we offer is a veritable fantasyland for computer science, with vast networks that manipulate huge volumes of data and accomplish information analysis at mind-boggling speeds.

      * Consider acres of hardware
      * software years ahead of current commercial technology
      * microprocessor-based advances
      * over-the-horizon supercomputers
      * leading-edge activities in programming, signals (including analog control), GUI's, AI, neural nets, information security, the design and implementation of encryption algorithms, and far beyond.


      On the other career pages, you'll find that NSA has the philosophy of "building what they cannot buy" (paraphrased).

      --
      All rites reversed 2010
    26. Re:How feasible is this? by KjetilK · · Score: 1
      I do not doubt that they've got some good stuff there. Probably, they can also spend a lot of resources engineering ideas that researchers in civil society have on their scratch-pad, and so have "products" that are far beyond the civilian market.

      But do remember that the quoted page is a recruitment page. It's an ad. Marketing. What do "we" think about marketdroids? :-)

      The question is if they are capable of producing really first-class fundamental research. Would there be Nobel prizes awarded if we knew what was going on?

      Can hey factor prime number so that my 2048 bit PGP is obsolete? Right now, you have to do some really good research if you were to do that. It won't take very many years before it happens, though, so we need QPQ (Quantum Privacy, err).

      The stuff about Nobel prizes is actually an important point, because most scientists would want recognition. They also want to bounce their ideas off of other scientists. To motivate a top scientist to make things secret, you'd either have to offer him something unique (which is a chicken-and-egg problem), or find something that finds a great interest in National Security issues, whatever that is. I think it is noit very many who would find that very motivating.

      --
      Employee of Inrupt, Project Release Manager and Community Manager for Solid
    27. Re:How feasible is this? by Anonymous Coward · · Score: 0

      I'm afraid I have not researched encryption enough to call myself a credible source, but I would imagine that with the genious some mathematicians employ, they would simply attack the encryption from a weak, rather than hardened point. It is common knowledge in the code-hacking scenes that many mundane and repetitive problems can be approached from an abstract, and interesting, perspective. When the abstract, harder, problem is solved, the mundane ones are also solved. Then, for encryption to be effective, it must be impossible to be made abstract. - Now we venture into philosophy, and with the mere 8 years of experience I have in this field, I would like to claim that everything can be generalized and made more abstract.
      Also, a lot mathematicians have the hacking spirit, and not fame nor fortune are important to them. A lot of mainstream scentists work alone these days and a harbor their secrets until they feel confident enough to publish. I'd imagine that the work-flow at a place like the NSA allows for researchers to discuss their work freely amongst themselves, and therefore employ a sort of open-suorce approach with constant feedback to science. A think-tank, if you will. I'd imagine progress would be quick.

      So from my, probably subjective, point of view it is quite likely that they indeed can trivially crack encryption. From the description of their resources, I'd say that their current mission is to employ AI on their acres of distributed ("over the horizon", by their own words. Sort of like what CERN will employ for the LHC.) computing power to weed out what, gathered through the Echelon program, actually deserves attention.

      --

    28. Re:How feasible is this? by Anonymous Coward · · Score: 0

      The point is that the NSA is kind of a special case. It has enough scientists and researchers that it forms its own peer review community. While NSA scientists may or may not care about Nobel prizes, they almost certainly do care about what the others in the NSA think of them. And yes, I'd put quite a lot of money on them having rendered 2048-bit PGP keys obsolete, if not the entire concept of NP-hard-problem-based cryptography.

  8. Michael!??? by Anonymous Coward · · Score: 0

    you know Michael wanted to post this so bad his fucking nutz hurt. Think about it, check some history and share his pain!

    1. Re:Michael!??? by Anonymous Coward · · Score: 0

      Dude stay off the crack your not making sense anymore.

  9. Asterisk? by Slyder · · Score: 1

    So what does this mean for Asterisk?

    1. Re:Asterisk? by 955301 · · Score: 1


      Nothing. Even though ISP's are permitted legally to read your emails, that does not mean you cannot use pgp or gpg.

      Equivalently, Even though VoIP providers are required legally to make your calls through their services tappable, doesn't mean you can't use SIP and IAX (or whatever, inter-asterisk exchange) over an encrypted tunnel.

      So homebrew is still legal for now...

      --
      You are checking your backups, aren't you?
    2. Re:Asterisk? by Anonymous Coward · · Score: 0

      Probably that there will be a back-door into your server in the near future.

    3. Re:Asterisk? by Anonymous Coward · · Score: 0
      I don't think it means anything to asterisk. Number 1 I think this is a push more towards providers then individuals and businesses. Secondly, it would be up to the provider to make sure they adhere to the standards. Digium does not have to change anything within asterisk. Of course, it is an open-source project, someone will write the needed code.

      It also needs to be noted that asterisk is much much more then a voip gateway. As for as Digium's business, it is geared more towards the people that want to connect PRI's and/or analog phones to the system. This is how they make their money.

      http://www.asterisk.org/
      http://www.digium.com/
      http://asterisk.xvoip.com/

    4. Re:Asterisk? by petscii · · Score: 1

      Asterisk allows you to record all phone calls over a trunk. So those who want to comply with the law can. Those who don't can find suitable solutions.

      Not a technical problem in the slightest.

  10. Doesn't this weaken security? by Anonymous Coward · · Score: 0
    Seems to me, putting in other channels to access information streams would weaken rather than strengthen security. For a company that wants information to be kept confidential (say, sales guys out in the field calling home), what means area available.

    I bet the phone-tapper-guys do great in the stock market via illegal insider trading off of tapped messages from sales guys calling home. Worse, such insider trading would be extremely hard to catch because the person committing the crime has little to do with the companies involved.

  11. In other words, wholesale data tapping by ElForesto · · Score: 2, Insightful

    You don't know it's VoIP data until you sniff the packets. I guess this means they can monitor any and all data traffic to look for VoIP. And, of course, they aren't going to poke around the non-VoIP packets. *ahem*

    --
    There is a difference between "insightful" and "inciteful" other than spelling.
  12. Hmmmm.... by JonoB · · Score: 1

    ...do the feds not realise that the calls don't actually pass through a central point between the phones (only the signalling)...

    1. Re:Hmmmm.... by mr.+methane · · Score: 1

      In many cases they do. Keep in mind that a lot of voip traffic is not two people using voip, but two regular POTS subscribers, and one of the intermediary carriers is using voip to get better rates. Lots of international traffic gets handled like this.

      Many pre-paid calling cards, too - the company selling them might not have any equipment of their own, they just lease time on a switch somewhere.

    2. Re:Hmmmm.... by Anonymous Coward · · Score: 0

      CALEA requires that the calls pass through a device where monitoring can take place. If a particular VoIP provider is not compliant, they will have to redesign their system. And of course they will pass the bandwidth cost on to you.

    3. Re:Hmmmm.... by Anonymous Coward · · Score: 0

      Despite the theory in the textbooks, it's rare in practice for different packets of the same flow to take different paths through a network.

      In fact, it's common for network providers to try to avoid random packet switching. VLAN tags, MPLS headers, or IPv6 flow labels exist so that networks can provide "traffic engineering" and group different flows along consistent paths, which is valuable for all sorts of reasons not having to do with surviving a nuclear attack.

  13. I'm confused... by red+floyd · · Score: 1, Funny

    Is the FCC good or evil?

    --
    The only reason we have the rights we have is that people just like us died to gain those rights. -- Cheerio Boy
    1. Re:I'm confused... by nlindstrom · · Score: 1

      The FCC: is it good, or is it whack?

  14. For more information: by temojen · · Score: 5, Funny
    1. Re:For more information: by blitzrage · · Score: 2, Insightful

      SSSSSSHHHHHHHHHHHHHHHHHH!!!!!!!!!!!!!!!!!

      We're fine just the way we are. Don't give'em any ideas!

      --

      I have no signature
    2. Re:For more information: by fishwallop · · Score: 3, Informative

      Canada's Department of Justice is pushing for the same thing: see the Lawful Access Consultation document about the Canadian government's plans to insure that it can tap your phone, regardless your telephony technology.

      For those of you who don't RTFA, note that the VoIP tapping in question refers to "managed" VoIP, which means VoIP that "touches" the PSTN. Computer-to-computer VoIP calls are not covered by the FCC's decision.

    3. Re:For more information: by UnknownSoldier · · Score: 0, Offtopic

      I've lived in both places. Canada is just as fucked up as the States. (Probably get modded flamebait, but take a look at the facts, because the Truth hurts...)

      - It's illegal to buy, get this, MILK (?!?!) from a dairy farmer. (Right now, you can own part of the cow, to get around this stupid law.)

      - It's illegal for the farmer to sell his grain to anyone other than the Wheat board. A number of years back, there was a farmer who owned land on both sides of the East-West dviding line. He was fined $10,000+ when he tried to sell his WHOLE crop at the higher price that the Eastern Wheat board was paying.

      - Hemp protein contains ALL 20 known amino acids including the 9 essential amino acids (EAAs) our bodies cannot produce, yet this *natural* plant is illegal to posess or grow?!?! (I'm NOT talking about the hallucinogen type. The US constitution was written on Hemp paper for Christ's sake.)

      What's that old adage?

      The more numerous the laws, the more corrupt the republic.
      Tactus.

      --
      The evolution & "supposed" pre-ancient history of man is a crock.
      One of the many proofs that intelligent pre-historic civilizations existed long BEFORE man's ancient civilizations...
      1. Progression of "apparent" history of "man" - Hominidae is 3 millions years old
      2. Geological Time Frames perspective
      3. A machined 3D relief map 120-million years old in a 1-ton stone, with inscriptions. WTF?!

    4. Re:For more information: by nelsonal · · Score: 2, Informative

      The milk law is only for unpasteurized raw milk, I think it's a holdover consumer protection law from days when unethical businessmen would try to save money by not pasteurizing milk. The wheat board is a collective monopoly sponsored by the government, it's an easy way to boost prices without a direct subsidy. For some goofy reason politicians see farming as a noble profession that makes them worthy of huge amounts of governmental support. I really don't understand this but it's pretty common in the developed world.

      --
      Degaussing scares the bad magnetism out of the monitor and fills it with good karma.
    5. Re:For more information: by VE3MTM · · Score: 1

      IAC (I am Canadian!)

      Yes, hemp is a wonderful plant -- not just nutritionally, but it's also strong as hell. People make rope out of it and whatnot. Even clothes, such as jeans, that last a long time.

      But, there are lots of legal problems with it. The plant looks nearly identical to its cousin, the marijuana plant, so what's to stop a hemp farmer from (knowingly, or unknowingly) hiding some marijuana plants in his field for a little extra profit.

      "It's hemp, officer, I swear!" Suuure...

      I agree that they should take a close look at the laws governing hemp... and some of the other stupid laws you mentioned.

      --
      09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0 Whoops, silly middle mouse button...
    6. Re:For more information: by JWeinraub · · Score: 1

      Actually the hemp plant and the marijuana plant are the same plant, both are Canabis sativa. The difference in industrial hemp and marijuana is the THC content. And in the United States of America it is illegal to grow the hemp plant because the silly controlled substances act wrongfully classifies hemp as a drug.

  15. 5 years from now... by Anonymous Coward · · Score: 0

    "The USA has declared all sorts of encryption illegal because too many people are using encryption to encrypt their VOIP sessions. President Bush ( :'( ) says the only way to fight terror is through banning encryption... Everywhere!"

    10 years from now i bet we all have an embedded chip that allows the government to "tap" our thoughts in case we are thinking about doing something illegal...

  16. Uhh, "snoop" ain't good enough? by Anonymous Coward · · Score: 0
    Let the feds put the stream back together...

    Of course, if you tunnel it through SSH they have to crack the encryption.

  17. Data. Voice. What's the Difference? by Zan+Lynx · · Score: 5, Interesting

    What's going to happen as voice service becomes more and more decentralized? What about Skype? AIM? Streaming ogg files over a SSH tunnel or IPsec?

    What about open source VoIP packages? Is anyone who sets one up suddenly a "provider?"

  18. Voice Chat over AIM / MSN Messanger by yotaku · · Score: 4, Interesting

    Does voice chat over AIM / MSN messanger need to be tappable yet? How long till they go after this.

    Is it illegal to write a small voice chat application with some encryption without a backdoor for the feds?

    I'm sorry but there is no way to stop people from comunicating privately over the internet if they want to. Its a losing battle, thats costing companies that do fine work, such as VoIP far too much money.

    1. Re:Voice Chat over AIM / MSN Messanger by peculiarmethod · · Score: 1

      It's already pretty garunteeed that if there's a problem, the Intelligence community will make an excuse, or just plain bully Microsoft or Aol into cooperating with an investigation about the use of their systems for evil doings. The already have prior rulings.. so, not much need to work hard at making aim / msn 'tappable.'

      pm

      --
      ** "It's not my job to stand between the people talking to me, and the ones listening to me." -- Pego the Jerk
    2. Re:Voice Chat over AIM / MSN Messanger by Anonymous Coward · · Score: 1, Informative

      Is it illegal to write a small voice chat application with some encryption without a backdoor for the feds?

      From a cursory glance at the article, it says nothing about what the user can do with their client-side computer. This ruling is basically for the backbone/network.

      It's worth noting that VoIP has a small market through the PC, and most likely they're not referring to people who use Voice over Instant Messaging. Much more people use VoIP through telephone services, and perhaps in the future, in embedded technologies.

    3. Re:Voice Chat over AIM / MSN Messanger by Anonymous Coward · · Score: 1, Informative
    4. Re:Voice Chat over AIM / MSN Messanger by dasheiff · · Score: 1
      Does voice chat over AIM / MSN messanger need to be tappable yet? How long till they go after this.

      If you do the math, it seems like a trivial job for AOL/Yahoo/MS to be logging every IM all the time.

    5. Re:Voice Chat over AIM / MSN Messanger by Lehk228 · · Score: 1

      there is an encryption plugin for GAIM, now i wouldn't trust it's implementation for a terrorist plot but it will keep any AOL admin from trying to blackmail me with chat logs

      --
      Snowden and Manning are heroes.
    6. Re:Voice Chat over AIM / MSN Messanger by myowntrueself · · Score: 2, Insightful

      "Is it illegal to write a small voice chat application with some encryption without a backdoor for the feds?"

      Presumably, if you live in the USA, land of the free, it is or soon will be illegal. Just like it would have been under Saddam Hussein or is under Col. Gaddafi or Dear Leader in North Korea.

      You gotta appreciate the freedom that this sort of thing gives you; if the feds couldn't tap your phones how would they be able to protect you???

      --
      In the free world the media isn't government run; the government is media run.
  19. Oh well.... by Anonymous Coward · · Score: 0

    Glad I don't live in the states, will just have to stengthen the old cypher text.

    Tell me how can they be sure in their efforts to sniff packets away merrily like the junkies of privacy invasion they are that all those packets belong to US citzens or are intend to for US citzens?

    Did old Abe really want to be remember as the father of Big Brother?

    1. Re:Oh well.... by temojen · · Score: 2, Interesting
      Tell me how can they be sure in their efforts to sniff packets away merrily like the junkies of privacy invasion they are that all those packets belong to US citzens or are intend to for US citzens?

      My understanding is that there's no restriction on intercepting communications between non-citizens under american law.



      Disclaimer: I'm neither american nor a lawyer

    2. Re:Oh well.... by Anonymous Coward · · Score: 0
      If I recall correctly, there are legal issues involved in intercepting U.S. communications that simply aren't involved in foreign communications.

      It's that way in many countries, who understandably have a greater concern about their own citizens' rights than others, but sometimes wierd things happen as with Canada forbidding satellite reception of foreign-originated signals not intended for Canadian reception (people buying American DirecTV receivers and using them up north).

  20. Pointless? by Anonymous Coward · · Score: 0
    Isn't this rather pointless? Of course, no one can prevent them from doing traffic analysis, but end-to-end encryption should be relatively easy to set up (tunnel over ssh, for example).

    Or, are the protocols for VoIP being engineered to make it hard to do this (in a similar way to how WEP was designed to make it hard to secure wireless networks)? If so, how exactly?

  21. Monitoring happens at the switch by HBI · · Score: 4, Informative

    ...which in this case is the VoIP provider. For example, let's say you have Vonage - the taps would occur there. They aren't going to bother sniffing packets, they're going to tap the stream at the CO, same as they would do with a landline.

    Ditto for Nextel's PTT stuff.

    Of course, you could use a VoIP provider that is based outside the US. That is going to present a problem for law enforcement.

    --
    HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    1. Re:Monitoring happens at the switch by dgatwood · · Score: 1
      Of course, you could use a VoIP provider that is based outside the US. That is going to present a problem for law enforcement.

      Nothing a $30 mini-FM transmitter hacked into your phone's handset while you're at work won't fix.

      --

      Check out my sci-fi/humor trilogy at PatriotsBooks.

    2. Re:Monitoring happens at the switch by JesseL · · Score: 2, Insightful

      Aren't you assuming that all calls will be VOIP > POTS? What about VOIP > VOIP? There may be no switch. And if they decide to tap your ISP? What do they do when you have an encrypted tunnel to another location ( VOIP > Tunnel....Tunnel > Abu Dhabi > VOIP > POTS )? They won't even be able to tell that you're using VOIP at all.

      --
      "Prefiero morir de pie que vivir siempre arrodillado!"
    3. Re:Monitoring happens at the switch by HBI · · Score: 1

      Ultimately the VoIP provider going to have a CO somewhere. Admittedly peer to peer VoIP links are possible (and happening) too, but this would take the provider out of the equation and then how do they make money? That is why no one is commercially popularizing this idea yet.

      Leaving the obvious dodge of the peer to peer link out of this, my point was "What if the CO isn't in the US?". I see visions of a "Great Firewall of China" for the US when I think about this.

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    4. Re:Monitoring happens at the switch by wfberg · · Score: 3, Insightful

      In Europe there's tapping legislation that forces each and every provider of a "public network" to provide tapping capabilities. That means that tapping might occur at any hop along the way that is in the EU, be it the DSL or dialup connection (btw, that also ends up in a traditional, yet modernized, CO), the DSL provider, your ISP, their backbone, etc. etc.

      Probably the CO where the DSL line is hooked up to is the preferential point-of-tapping, since that way you also catch packets that might go astray (e.g. spoofed packets).

      Tapping software is advanced enough (and why shouldn't it be) to filter out and reconstruct VOIP streams.

      It's unlikely that the authority to tap is used sparingly (i.e. used only on one end of the conversation). For example, in The Netherlands a warrant to tap a line extends not to just one phone line, but any one that calls that phone line can get tapped as well, regardless of suspicion (so, if you call Don Vito, and his line is tapped, your line will now also be tapped, just to see if you'll call any other mobsters).

      This of course results in masses of data (much of it duplicated) that the police would have to sort through - that is truly a growth market. Write software for it and become rich.

      Also, ISPs are increasingly willing to supply data without a subpoena or warrant.

      Using codes and stegonagraphy won't always be much help. For example, a Dutch blackmailer was arrested when he looked at a car-ad that contained coded information about the drop-off point of the money he'd demanded. Turned out that the ad was only clicked on about 3 times (he should have picked a more popular model), so placing an ad wasn't really that "broadcast" as he'd thought. Also, the anonymous proxy service that he paid for ratted him (or at least his credit-card number) out immediately.

      The bottom line is that the internet is FAR from a safe haven for terrorists, or even common criminals. Actual real life terrorists are far more likely to use 50 year old spying techniques that still work well (like deap-drop boxes, placing ads in papers, etc.).

      Of course, the more people come to realise this, the less useful all these measures become; to get a bit political, the potential for abuse is enormous. The EU is considering making it mandatory for ALL communications (of ALL citizens/companies, no due cause) to be stored for seven years, "just in case".

      Just think what a political/economical opponent could do with seven years' worth of your most intimate communications (while terrorists are happily communicating using WWII spying techniques). A bit more than that Nixon dude could ever have achieved with those pesky tapes.

      --
      SCO employee? Check out the bounty
    5. Re:Monitoring happens at the switch by The+Vulture · · Score: 3, Informative

      I can't speak for how this would work over DSL, but I can tell you how this will work over cable modems. Note: I haven't read the PacketCable spec in a few weeks, so my memory might be a bit hazy.

      If you happen to get a cable modem with an MTA (Multimedia Terminal Adapter) built-in (which would serve as your VoIP box), then your ISP will configure two streams for you, one for data, one for voice. (This is where using cable modems for VoIP is truly superior, I think, in that you have a dedicated stream that is prioritized, rather than trying to use the priority bits in the IP headers, which although I may be wrong, is how I understand that regular VoIP is done).

      The dedicated stream for your voice goes through a centralized server, which if the police get a warrant, etc., will log every packet, as well as who the call was made to, and for how long. Clearly CableLabs was planning for this requirement even before it became official.

      More information here (PDF file, PacketCable Electronic Surveillance Specification).

      -- Joe

    6. Re:Monitoring happens at the switch by karmatic · · Score: 1

      > Nothing a $30 mini-FM transmitter hacked into your phone's handset while you're at work won't fix.

      Then why bother sniffing in the first place?

    7. Re:Monitoring happens at the switch by HBI · · Score: 1

      I think you give national authorities far too much credit for competence in the IT arena. I cannot relate much in real data unfortunately except to specify that a data center that I once worked in was host to a couple of FBI data taps. This was about 3 years ago, just before 9/11. It wasn't real well done in my opinion, relying on some pretty clunky equipment.

      I would also state that Nixon's taping didn't bring him down as much as John Dean did with his testimony. Imagine the President's counsel turning on him - how devastating! Haldeman and Ehrlichman being taken down shortly thereafter, mostly on Dean's testimony, didn't help either. Oh, and the bunch of burglars who busted into the Watergate not once but twice, got caught, and then started singing when they weren't paid their hush money. Well, except for Liddy, but his silence didn't buy him much but a long prison term.

      The tapes were a bunch of horseshit that didn't have much relevance, but made for good serial journalism and SNL jokes about "Throw another tape on the fire!".

      --
      HBI's Law: Frequency of calling others Nazis is directly correlated with the likelihood of the accuser being Communist.
    8. Re:Monitoring happens at the switch by wfberg · · Score: 1

      I think you give national authorities far too much credit for competence in the IT arena.

      Heaven forbid! They are massively incompetent. But that doesn't prevent them from agressively (over)using laws to tap willy-nilly. They will use pretty dinky equipment, due to their fudged up procurement procedures, but in the end it will get the job done, usually by indiscriminately intercepting way too much traffic, rather than too little.

      (Also consider that your data center likely didn't provide any CALEA equipment themselves; a CO owned by a telecomms provider will have dedicated tapping ports for voice and modem traffic, and more than likely DSL lines also have these dedicated tapping ports).

      To give an example of government incompetence; Dutch tapping equipment and software, which when installed can tap all data traffic at an ISP and is relied upon to only store the information identified by a warrant, is made by an Israeli company. The software cannot be maintained easily, because the entire interface is in Hebrew, and it's all closed source anyway. There is no way to check for backdoors in the software. Israel by the way, has one of the most agressive foreign intelligence/security agencies in the world..

      If governments were less incompetent, it would also be easier to trust them to keep abuses in check. As it is, if they will be storing all communications for 7 years, you can trust them to give access to their databases to a host of minimum wage workers, eager to be corrupted.

      --
      SCO employee? Check out the bounty
    9. Re:Monitoring happens at the switch by maximilln · · Score: 1

      If you happen to get a cable modem with an MTA (Multimedia Terminal Adapter) built-in (which would serve as your VoIP box), then your ISP will configure two streams for you, one for data, one for voice

      My cable modem provider and my VoIP provider are two different entities. VoIP is segregated from other network transmissions by ports.

      I'm pretty sure this legislation/article is referring to VoIP providers that give you a standard telephone number along with your VoIP service such that you can talk with all your non-tech buddies without having to kiss up to AT&T.

      --
      +++ATHZ 99:5:80
    10. Re:Monitoring happens at the switch by jovetoo · · Score: 1
      Also, ISPs are increasingly willing to supply data without a subpoena or warrant.

      Very interesting. Can you tell me where you find proof or numbers to back this up?

      The EU is considering making it mandatory for ALL communications (of ALL citizens/companies, no due cause) to be stored for seven years, "just in case".

      Same here. Haven't heard a word of this.

      What is more important: seems rather unlikely/unfeasable to me. I have a quota of 10 Gb per month. I frequently use it all. That would add up to 840Gb for seven years, for me alone (and then I am only counting my internet traffic).

      I know at least one large company that does nightly partial and weekly full backups from their Belgian offices to their Paris headquarters. Capturing that data would run into several Gbs a day.

      And then, off course, I am not talking into account traffic from mirroring sites, indexing pages and so on (good luck on people who wish to capture/log googles traffic). Storing all data from all users/companies might be theoretically possible, but practially it is unfeasable.

      Let's consider that filtering software you were talking about. It would have to be capable of realtime filtering. Determining whether transfered data is known must be done with hashes (since your database is way too big to search in realtime) thus you can only determine it after the transfer is complete (if not, I would just hide the message in the last few kb of say... a linux kernel download). You would have to know or store all media file transfered in p2p networks since they can all contains hidden messages. All encrypted traffic has to be stored (even trivially encrypted data since I seriously doubt you'll have enough processing capacity to break any encryption in realtime). You would even have to store, not only the data that is transfered, but the raw packets of the transfer too since those too contain bits that can be used to transfer data. As seen on slashdot a while back, you would even have to store all dns requests since they too can contain hidden messages. You would also have to store any packets containing unknown or unsupported protocols.

      Even if what you say is true, this will just be a huge waste of money. It will only make the game more interesting for those so inclined.

    11. Re:Monitoring happens at the switch by wfberg · · Score: 1

      Also, ISPs are increasingly willing to supply data without a subpoena or warrant.

      Very interesting. Can you tell me where you find proof or numbers to back this up?


      Well, numbers are rather hard to come by as these unofficial requests happen quite unofficially. There is more mention of companies turning over records in the new reports (which I don't keep pasted to my door), but if you put me on the spot I'd be hard pressed to quantify it.

      On the other hand, ISPs refusing the police's polite requests to turn over information without a warrant is usually an argument politicians use to want to introduce PATRIOT-ACT style no-warrant secret third-party searches..

      To my knowledge there is only one ISP in the Netherlands that is unwilling to turn over information without a warrant (xs4all). Some have stated in public they will do their unquestioning best to comply with police requests (e.g. wanadoo/euronet, KPN/planet/hetnet, tiscali).

      The EU is considering making it mandatory for ALL communications (of ALL citizens/companies, no due cause) to be stored for seven years, "just in case".

      Same here. Haven't heard a word of this.


      Just google for it.

      The UK already keeps 7 years worth of actual recordings (not just traffic information) of all international voice calls, which is how the 7 year term came into the proposal - it's now being weakened down to 2 years, mostly over concerns of costs, rather than privacy.

      Let's consider that filtering software you were talking about. It would have to be capable of realtime filtering.
      Not really, they just store all packets headed to/from a particular customer in a giant-ass log and figure it out later, just like you would using ethereal.

      There are real-time, hardware based filtering solutions, but those are mostly used by spooks, and hardly likely to be effective, given how much words like "bomb" and "terrorist" crop up in conversations these days.

      The focus is on retaining data so you can later sift through it to confirm suspicions that hadn't formed at the time. From there you can reconstruct suspect's networks etc.

      I think I saw some of that hardware referenced on cryptome.org years back, but I'm too lazy to look it up.

      Even if what you say is true, this will just be a huge waste of money
      Indeed. If you're into programming network sniffers, some of that money might be headed your way.

      Some interesting resources are "privacy international, echelon watch, epic, etc.

      --
      SCO employee? Check out the bounty
  22. No problem here :) by Duncan3 · · Score: 2, Informative

    Voice Encryption Tools

    I still like PGPfone tho... for pure historical reasons.

    --
    - Adam L. Beberg - The Cosm Project - http://www.mithral.com/
  23. Good (in appropriate measures)... by SPYvSPY · · Score: 5, Insightful
    Listen, there's no question that bad people are going to exploit digital technologies to tragic ends. (If you have a shred of doubt about it, read this excellent article on how terrorists use the Internet to develop more and more insane ideologies and strategies.)


    Nevertheless, we also have a compelling public interest in keeping Big Brother from using the backdoor to enforce stuff that goes beyond keeping the peace and encroaches on our fundamental (and hard earned!) liberties.


    The bottom line is that blocking all law enforcement access to these technologies is going to cost people their lives, but letting the pigs sniff around where they don't belong is going to ruin everyone's life. This is just another balancing act in the giant circus we call a democratic society.

    So, rather than moaning about one side of this argument or another, doesn't it make sense to focus on getting just the right sweet spot in between?

    1. Re:Good (in appropriate measures)... by Anonymous Coward · · Score: 1, Insightful

      The sweet spot is no regulation. How many nations have been oppressed to the point of disintegration by terrorism? Now how many have been oppressed to the point of disintegration by their own government? Terrorists don't even show up on the list of serious threats to a society like ours.

      And if they did, the ideal way to deal with it would be to STOP PISSING THEM OFF. They are hardly civilized, but they aren't random either. They wouldn't die trying to kill us just because we read Playboy magazines. They do it because we actively interfere with their nations and their religion and we support their mortal enemies.

      As for someone getting a hold of a nuke, well, in a world where that is possible I'd rather have less enemies than have the ability to tap their phones. If someone really wants to nuke New York, it *will* happen. The only way around it is a truly Orwellian society, or worse. Since I would rather die than live in a society like that, the choice is pretty clear cut for me.

    2. Re:Good (in appropriate measures)... by IamGarageGuy+2 · · Score: 1

      Unfortunately - that "Sweet spot" is the one that will slowly erode the civil liberties of the public. The right place for the line to be is when it infringes upon the right of the public. My personal freedoms when not infringing on anothers rights is all that matters. When you decide these matters using other factors, like technology that is currently popular, it is easy to get from the basic premise of personal rights.

      --
      Stay tuned for new sig...
    3. Re:Good (in appropriate measures)... by Tackhead · · Score: 4, Insightful
      > The bottom line is that blocking all law enforcement access to these technologies is going to cost people their lives, but letting the pigs sniff around where they don't belong is going to ruin everyone's life. This is just another balancing act in the giant circus we call a democratic society.
      >
      > So, rather than moaning about one side of this argument or another, doesn't it make sense to focus on getting just the right sweet spot in between?

      There is no sweet spot.

      Technology levels the playing field. Technology is an equalizer. A little over a century ago, "God made all men. Sam Colt made them equal." Today, most democracies and representative republics, even the US, have gun control.

      If you and I can encrypt our conversations using a microphone, a computer, some Free client-side software, and some TCP/IP packets, then so can the bad guys. We're all potential providers of VOIP service. ("When outlaws have strong crypto, all crypto ends up outlawed!" :)

      In an age where technology equalizes citizen adn terrorist, there's no balancing act to be had: Choose - security or liberty - because you can't have both.

      So we bring out Ben Franklin - fine. But it's been three years. The people have spoken, and made it pretty clear that they neither want nor deserve either liberty or security.

      And if the job of a representative is to respond to his constituents' wishes as best as he can, then our reps are doing a pretty good job of it: Deny liberties to all, and protect the security of those whom they can protect. (Namely themselves and their future lobbyist careers. But it's better to see that secure than nothing secure. :)

    4. Re:Good (in appropriate measures)... by Anonymous Coward · · Score: 0

      "In an age where technology equalizes citizen and terrorists, there's no balancing act to be had: Choose - security or liberty - because you can't have both."

      Sweet. That is an excellent statement.

    5. Re:Good (in appropriate measures)... by bckrispi · · Score: 3, Insightful
      Nevertheless, we also have a compelling public interest in keeping Big Brother from using the backdoor to enforce stuff that goes beyond keeping the peace and encroaches on our fundamental (and hard earned!) liberties.

      The issue isn't the fact that the FCC has mandated that a back door be installed to monitor VoIP traffic, but how the government uses this. If a law enforcement agent has probable cause and can get a legal warrant to tap someones VoIP communication, I'm all for it. My concern is the kind of "warrantless" searches that legislation like the Patriot act provides. If the power is used in accordance with the Constitution, it is protection; if not, it's tyranny.

      --
      Xenon, where's my money? -Borno
    6. Re:Good (in appropriate measures)... by argent · · Score: 1

      "In an age where technology equalizes citizen adn terrorist, there's no balancing act to be had"

      And therefore the government is forced to tip that balance in favor of the terrorist, since they are the ones with the most incentive to break the law and deploy strong crypto.

      "When outlaws have strong crypto, all crypto ends up outlawed!"

      When outlaws have strong crypto, only outlaws have strong crypto?

      Do not meddle in the affairs of terrorists, it makes them soggy and hard to light.

    7. Re:Good (in appropriate measures)... by Caseyscrib · · Score: 1
      And if the job of a representative is to respond to his constituents' wishes as best as he can, then our reps are doing a pretty good job of it: Deny liberties to all, and protect the security of those whom they can protect. (Namely themselves and their future lobbyist careers. But it's better to see that secure than nothing secure. :)

      Thank God we have good people in congress protecting the McDonalds in America to make sure we have a place to eat! After all, you don't want to have people starving do you, you terrorist!

    8. Re:Good (in appropriate measures)... by Pyromage · · Score: 1

      "If the job of a representative is to respond to his costituents' wishes"?

      You do realize, I hope, that this is in no way whatsoever the job of a rep? The job of a representative to the government is this: to protect his constituents' best interests the best that he/she can. The difference is small, but extremely important: very often the WISHES of the constituents (i.e. no taxes) conflict with their INTERESTS (paying for enough of a military to not be bombed back to the stone age).

      I don't see any reason to think that there's no balance to be had. Maybe I'm just optimistic. I'm not sure if there's a reason (beyond technical feasiblity) to suggest that phone calls whose endpoints are on the internet should be regulated any differently than POTS calls. I think this whole terrorist is just a red herring.

    9. Re:Good (in appropriate measures)... by Anonymous Coward · · Score: 0
      > The people have spoken, ...

      But the people haven't spoken. There hasn't been an election since the 'war on terror' started, so the government hasn't really been called to account. The people will speak in November.

    10. Re:Good (in appropriate measures)... by NormalVisual · · Score: 1

      The bottom line is that blocking all law enforcement access to these technologies is going to cost people their lives, but letting the pigs sniff around where they don't belong is going to ruin everyone's life. This is just another balancing act in the giant circus we call a democratic society.

      I'll consider a sweet spot when we get a government that will accept responsibility for its actions. As it is, neither law enforcement nor anyone else in the executive branch is legally responsible for anyone's safety. We lost thousands of people and billions of dollars on 9/11, yet no one who allowed it to happen by failing to do their job will be held accountable in any meaningful way. Why should I let the government erode yet more civil liberties when it refuses to accept responsibility when it screws up? Sure, we can vote new people into office, but the vast majority of the folks we really have to worry about are appointed, and thus more or less untouchable by the public. Look at Lon Horiuchi, who carelessly shot and killed Vicki Weaver during the Ruby Ridge standoff, and the way in which the federal government prevented the state of Idaho from bringing him to justice. Fuck those who feel they need more power just to do their jobs - if they can't do them with the vast resources already at hand, get them out and get people in who can.

      --
      Please stand clear of the doors, por favor mantenganse alejado de las puertas
    11. Re:Good (in appropriate measures)... by Anonymous Coward · · Score: 0

      > even the US, have gun control

      Isn't the ban on assault rifles about to expire? Correct me if I'm wrong but congress looks like its not going to reinstate it. Where I live there are a lot of people who have assault rifles anyway. Ya know for "hunting deer" and such.

    12. Re:Good (in appropriate measures)... by YellowBook · · Score: 1

      Well, there's the associated issue that a backdoor usable by law enforcement may well become useable by other, less well-intentioned people, as well. Organized crime and industrial espionage operators are the likeliest examples that come to mind. Fortunately or unfortunately, reliable security has to be secure against everyone.

      --
      The scalloped tatters of the King in Yellow must cover
      Yhtill forever. (R. W. Chambers, the King in Yellow
    13. Re:Good (in appropriate measures)... by maximilln · · Score: 1

      but letting the pigs sniff around where they don't belong is going to ruin everyone's life.

      As much as I agree I have to start wondering...

      While the Constitution guarantees you the right to free speech, secure in your person, etc. etc. etc.

      Where does it say that you have the right NOT to be monitored? Amendment IV gives you the right to be secure against unreasonable search and seizure, but since when is listening to a conversation at another table an unreasonable search?

      There's always the argument about Amendements IX and X which are supposed to lock the government into aims specifically stated in the Constitution and reserve everything else for the states and individuals but (sadly) no politician has given a flying rabid badger's tail about Amendment IX or X in nearly 200 years.

      --
      +++ATHZ 99:5:80
    14. Re:Good (in appropriate measures)... by bckrispi · · Score: 1

      We take that risk with every piece of personal data we leave in someone else's hands. How hard would it be for a disgruntled DBA to rip dozen's of credit card numbers out of his own company's database and sell them to the highest bidder? Last I heard, about 70% of all corporate fraud is done internally.

      --
      Xenon, where's my money? -Borno
  24. Do try harder by GoClick · · Score: 4, Insightful

    Oh there are plenty of ways to get around that sort of stuff, besides I wouldn't think most terrorists are using one of the big 5 american ISPs atleast not on both ends.

    How about encrypt and encode your messages into images and then post them on places like fark or deviantart? Simple enough. I'm not stupid why would a terrorist be?

    How about our good friends in the government get off their lazy asses and start passing legislations that will make people hate us less not more?

    1. Re:Do try harder by Skavookie · · Score: 5, Insightful

      Not if you've been raised from birth to believe that the result of said action will be that you'll go to heaven and get seven virgins. What seems stupid to us is not neccesarily stupid to others, and there's probably plenty that is not the least bit stupid to us but the rest of the world sees as incredibly stupid (I'm sure you can all think of examples).

    2. Re:Do try harder by Marxist+Hacker+42 · · Score: 1

      [SARCASM][IMMORALITY][CRUDE]Only 7 virgins in heaven? That's good for what, about 2 hours and 20 minutes? What do you do with the rest of your eternity?[/CRUDE][/IMMORALITY][/SARCASM]

      --
      SJW: a person who perceives an injustice, and while correcting it, commits a greater injustice.
    3. Re:Do try harder by Anonymous Coward · · Score: 1, Insightful

      Stupid would mean they didn't know what they were doing.

    4. Re:Do try harder by PolyDwarf · · Score: 3, Funny

      The thing is, why would I want seven virgins?
      I'd much rather have seven porn stars.. I'm thinking that'd be much more fun down the stretch of the eons...

      Yeah, yeah, it's rude and crude. Sue me.

    5. Re:Do try harder by Anonymous Coward · · Score: 0, Offtopic
      I wouldn't think most terrorists are using one of the big 5 american ISPs atleast not on both ends.

      One end is sufficient.

      How about encrypt and encode your messages into images and then post them on places like fark or deviantart? Simple enough. I'm not stupid why would a terrorist be?

      Well, you did suggest encrypted email until the problem was pointed out to you. A terrorist might also not realize these pitfalls.

    6. Re:Do try harder by Anonymous Coward · · Score: 0
      Why would you want a pornstar?

      Here's the dirty little not-so-secret about pornstars and hookers: THEIR PUSSIES ARE LOOSE.

      These chicks go in for boob jobs but there's still no procedure to tighten up that snatch? Come on!

      Ima gunna git me a virgin if it kills me!

    7. Re:Do try harder by shut_up_man · · Score: 4, Funny

      I think seven porn stars in the bodies of seven nubile virgins would be the optimal solution.

      Shouldn't be too much of a stretch for an omnipotent creator, either.

    8. Re:Do try harder by Kenja · · Score: 4, Funny

      You can teach a virgin to be a porn star, but you cant teach a porn star to be a virgin.

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    9. Re:Do try harder by JivanMukti · · Score: 2, Funny

      A man died and went to hell. There he saw a huge bar with all these bottles of liquor, and beautiful women everywhere. "This is awesome," he said. "I thought I was going to Hell!"

      The Devil appeared and said with a sly grin, "You did! The bottles have holes in the bottom and the women don't."

    10. Re:Do try harder by tsm_sf · · Score: 5, Insightful

      I'm not stupid why would a terrorist be?

      The only quality that a terrorist has in spades is FANATICISM. Did Timmy McVeigh sound all that intelligent to you? Do Bin Laden's broadcasts show an analytical mind? Does the IRA really seem to have it together, organizationally speaking?

      Why then the assumption that they're magnitudes of times more intelligent than the rest of the lusers out there?

      --
      Literalism isn't a form of humor, it's you being irritating.
    11. Re:Do try harder by Anonymous Coward · · Score: 0

      Here's the dirty little not-so-secret about pornstars and hookers: THEIR PUSSIES ARE LOOSE [sic].

      These chicks go in for boob jobs but there's still no procedure to tighten up that snatch? Come on!


      http://feeltight.healthstop.biz/

    12. Re:Do try harder by NanoGator · · Score: 4, Insightful

      "I'm not stupid why would a terrorist be?"

      To be fair, fingerprints are a well known aspect of catching criminals. Despite that, people are still busted because they left fingerprints behind.

      Think about that a bit before going into the "This is easy enouhg to bypass" rationale.

      --
      "Derp de derp."
    13. Re:Do try harder by Anonymous Coward · · Score: 0

      we are the big bad US, we will always be hated.

      (doenst mean we should try to get that result either)

      just like everyone hates Walmart and Starbucks and the big companies. why because they are big.

    14. Re:Do try harder by Anonymous Coward · · Score: 0

      Well at least he's still got oral sex.

    15. Re:Do try harder by Anonymous Coward · · Score: 0

      I'd go the virgins, as they've probably been hanging for it for a loooong time.

    16. Re:Do try harder by moof1138 · · Score: 3, Insightful

      While I am sure that you would like all terrorists to be idiots, it is pretty clear from the methods of operation of past attacks that terrorist minds can be clever. Sept. 11 had a fair amount of planning and coordination involved. An organization that had resources to get that many members up to speed on how to fly jumbo jets could get members to learn how to effectively use a computer to communicate in clever ways.

      --

      Hyperbole is the worst thing ever.
    17. Re:Do try harder by JustinMWard · · Score: 2, Funny

      Terrorists may not be too smart. But tell me, how disorganized do you consider organized crime?

    18. Re:Do try harder by tsm_sf · · Score: 1

      While I agree that booking coordinating flights can be pretty tricky, I really think that should fall under the 'patient' rather than 'clever' dept.

      Flying is complicated ONLY if you:
      1) care what all the dials mean
      2) plan on landing

      --
      Literalism isn't a form of humor, it's you being irritating.
    19. Re:Do try harder by mcpkaaos · · Score: 5, Insightful
      I'd much rather have seven porn stars.. I'm thinking that'd be much more fun down the stretch of the eons...


      Sure, but then you have seven women endlessly telling you how they've had bigger.
      --
      It goes from God, to Jerry, to me.
    20. Re:Do try harder by rthille · · Score: 3, Insightful

      Yeah, that's what I want, someone who's taken a wonderful recreational activity and turned into a job. Don't you know the fastest way to turn something fun into drudgery is to make it your job?

      --
      Awesome furniture, accessories and cabinetry in Santa Rosa, CA: http://humanity-home.com/
    21. Re:Do try harder by BlueCup · · Score: 1

      Ha, this is how I keep all of my CD-Keys, rather than keep all of the cd cases, stickers, instruction manuals and boxes, I one day wrote a program that just scans a line on an image I uploaded, where different pixel colors represented different colors. To anyone who see's it it looks like a normal picture, but, for me I can extract any cd key I have from it. Easy, and portable.

      --
      WANNAWIKI Wannawiki WannaWiki WANNAWIKI!
    22. Re:Do try harder by Xabraxas · · Score: 0, Offtopic

      Yeah and the planes just navigated themselves into the trade center and the pentagon.

      --
      Time makes more converts than reason
    23. Re:Do try harder by Xabraxas · · Score: 1
      To be fair, fingerprints are well known aspect of catching criminals. Despite that, people are still busted because they left fingerprints behind.

      No one argued that all criminals are smart. It's obvious that Al Qaeda has some intelligent people involved though, considered everything they have accomplished. Unfortunately for the rest of us intelligence and depravity are not mutually exclusive.

      --
      Time makes more converts than reason
    24. Re:Do try harder by Xabraxas · · Score: 3, Insightful
      we are the big bad US, we will always be hated.

      Maybe if we stuck to being big and not bad we wouldn't be so hated. The United States is not nearly as bad as a lot of other countries but the difference is that we stick our heads in everywhere while most of those little dictatorships only terrorize their own people. Hegemony will always create ill will. No one likes to be dominated, especially the US. Just look at the relationship between the US and the UN. The US doesn't want the UN to make any decisions that directly affect the US economically, politically, or criminally. Other countries feel the same way about the US, considering the US's incredible influence, as the US feels about the UN. It's not that they hate our freedom or our economy or our way of life in general. Those who suggest that are living outside of reality.

      just like everyone hates Walmart and Starbucks and the big companies. why because they are big.

      Actually I hate Walmart because they pay low wages, overwork their salaried managers, demonstrate sexist practices, are unethical, and drive small businesses out of town. I hate starbucks because all I want is a fucking large coffee, not a grande house blend or whatever the hell they call it. To be honest I don't actually hate starbucks, their actually a pretty good company but the pretentious fuckers who frequent/work there really put me off.

      ...oh and no corporation should have personhood. That idea is just ludicrous.

      --
      Time makes more converts than reason
    25. Re:Do try harder by Minna+Kirai · · Score: 0, Offtopic

      Yeah and the planes just navigated themselves into the trade center and the pentagon.

      Considering that those buildings were very nearly the largest possible man-made targets on the whole continent... they weren't that hard to hit.

    26. Re:Do try harder by Anonymous Coward · · Score: 0

      Hey this is slashdot. We want 7 web sites of virgins and because its heaven;...no popups, no redirects, no banner farms, no enter credit card to view....

      Ahhh heaven.

    27. Re:Do try harder by Anonymous Coward · · Score: 0

      Sucks to be them, I guess . . .

    28. Re:Do try harder by Xabraxas · · Score: 0, Flamebait
      Oh I didn't realize they were already on the flight path towards those buildings. From what I read they actually had to turn the planes around to hit their targets.

      This seems like another attempt to make ourselves feel better about the situation by belittling the enemy. It may help psychologically but it's still bullshit. It reminds me of people calling the terrorists cowards right after 9/11. Because cowards often give their lives for their beliefs..err...not. Demented? Sick? Perverse and evil? Sure, all of those things, but not stupid and cowardly.

      --
      Time makes more converts than reason
    29. Re:Do try harder by Minna+Kirai · · Score: 1, Offtopic

      Oh I didn't realize they were already on the flight path towards those buildings.

      I've spend a few minutes at the controls of 747 simulators. It's true what they say: if you're already safely airborne, and you don't care much about your own survival, it's easy to turn a plane.

      Both the target buildings were on the coastline, near a very distinctive river pattern. They really just had to follow the waterline, and then turn towards the giant building. If you check out the recorded flight paths, you can see this is what they did.

      Teaching the required amount of flying is trivial in comparison to (a) getting a healthy young man willing to kill himself & others and (b) teaching him to function in US society without raising too much fuss.

      (Condition B is easy on its own, but not in conjunction with A)

      It reminds me of people calling the terrorists cowards right after 9/11.

      Bill Maher was completely right.

    30. Re:Do try harder by Anonymous Coward · · Score: 0

      Dude.. .hate to break it to you... their box isn't too big, your dick is too small.

    31. Re:Do try harder by Xabraxas · · Score: 0, Offtopic
      That's funny, because I did see the flight paths and they weren't along the coastline at all, ok maybe one was close but the other two contradict your story.

      The real issue here anyway is that terrorists aren't dumb. We can argue all day long whether the ones that piloted the planes were dumb or not but the fact is that Al Qaeda is already using encryption and other schemes to hide their transmissions. They do have technologically sophisticated people working for them. It's just a copout to call them idiots.

      Your reference to Bill Maher should have been a reference to Bill Hicks. It was Hicks' line as your link illustrates but also, Hicks is much funnier.

      --
      Time makes more converts than reason
    32. Re:Do try harder by nettdata · · Score: 2, Informative

      I hear ya... people tend to over-complicate air navigation a lot.

      When I got my pilots license, in the Toronto / Central Ontario region, THE best navigation aid was a plain old road map.

      Depending on the purpose of the flight (screwing around or actually going somewhere), and where you were going, it was generally easier to follow the 401 (4 lane highway) than it was to figure out a bearing/heading. That part of the province has got a whack of highways that are pretty easy to distinguish from the air.

      It would have been quite trivial for them to figure out where they had to go from visual cues... as long as they knew roughly where they were in relation to where they were going. (roughly north-west, etc.).

      --



      $0.02 (CDN)
    33. Re:Do try harder by nettdata · · Score: 2, Informative

      I think it's also important to keep in mind that not all terrorists are the same... there are some that are the planners, and some that are the implementors.

      In this case, the morons (or fanatics, or whatever you want to call them) are the ones that actually DO THE DEED.

      When did Sadaam or Bin Laden ever actually DO the deed? They generally thought it out (with lots of staff/assistance, I'm sure) and took credit for it after the fact.

      And don't kid yourself... as has been mentioned in the news over the past few days, terrorist intel-gathering and communication skills seem to be quite excellent.

      There's also been discussions of how they use various international ISP's for email addresses, where the addresses are used once or twice, and there's still the element of "old school" physical delivery of messages involved.

      --



      $0.02 (CDN)
    34. Re:Do try harder by killjoe · · Score: 1

      By all accounts Bin Laden does indeed speak in extremely intelligent manner and is of above average intelligence. We are just hearing lame english translations (supposedly) of what he says.

      --
      evil is as evil does
    35. Re:Do try harder by DunbarTheInept · · Score: 1


      This seems like another attempt to make ourselves feel better about the situation by belittling the enemy.

      It is not belittling to honestly point out how easy a task is. The 9/11 plot in general was very complex and well ordered. Just the task of picking the right flights so their normal path wouldn't be too far from New york, and getting the timing right, and keeping the groups of people organized, was very hard. But, the part that involved hands on the controls flying a jet to the tallest buildings in the biggest city in the vacinity, that you can see from a great distance in the air was the easiest part of that whole plot. It wouldn't even require navigational instruments of any kind.

      What makes a pilot's license hard to get is not the basic flying stuff. Just like a driver's license, the majority of the time is spent on the legal stuff and the prep stuff (and unlike a car there's a lot to learn about how to navigate). The actual act of pointing the plane in the direction you want it to go isn't hard. A few weeks playing in a simulator would be enough for that.

      --

      Don't label something "offtopic" unless you know the topic well enough to tell what's on topic.

    36. Re:Do try harder by DunbarTheInept · · Score: 2, Insightful


      We can argue all day long whether the ones that piloted the planes were dumb

      If you are under the impression that this is what the conversation was about, you are mistaken. Not once has your oponnent made this claim. You claimed that the ability to fly those jets like they did is proof of their intelligence. He was pointing out that this is actually not as hard as you are making it out to be. That doesn't say anything about how dumb or smart the terrorists were - just that you can't make that judgement based on this particular task.

      --

      Don't label something "offtopic" unless you know the topic well enough to tell what's on topic.

    37. Re:Do try harder by Anonymous Coward · · Score: 1, Insightful

      Maybe if we stuck to being big and not bad we wouldn't be so hated ...

      Actually I hate Walmart because they pay low wages ...

      ... deserve to be insightfully moderated, please and thank you.

    38. Re:Do try harder by ptbarnett · · Score: 1
      Depending on the purpose of the flight (screwing around or actually going somewhere), and where you were going, it was generally easier to follow the 401 (4 lane highway) than it was to figure out a bearing/heading.

      Yup, that's what "IFR" means: I Follow Roads.

      (Pilots will get the joke. Non-pilots may or may not).

    39. Re:Do try harder by Anonymous Coward · · Score: 0

      Uh, what did Saddam Hussein have to do with the 9/11 plane thing?

      just asking, 'cause this Bush guy, like, went and invaded a whole country and killed thousands of innocent buggers and is gonna tank my economy by occupying this bloody place like for years, and, well, to put it simply, Hussein had FUCK ALL to do with it.

      Peace.

    40. Re:Do try harder by Xabraxas · · Score: 1

      It seems I did get a little off track. All the posts bleed into each other when you've had a long day.

      --
      Time makes more converts than reason
    41. Re:Do try harder by tsm_sf · · Score: 1
      --
      Literalism isn't a form of humor, it's you being irritating.
    42. Re:Do try harder by tsm_sf · · Score: 1

      yeah, i couldn't really think of a good example offhand, and I like the symmetry of threes. I've done worse, and I'm sure you have too =p

      --
      Literalism isn't a form of humor, it's you being irritating.
    43. Re:Do try harder by rickbrodie · · Score: 1
      To say that criminals are stupid because some of them still leave their fingerprints despite the well known danger is terribly naive. The simple fact of the matter is that smart criminals, who do understand fingerprints, just do not get caught.

      To assume that one's opponent is always stupid because he sometimes appears to be is foolish in the extreme...

    44. Re:Do try harder by Markus+Landgren · · Score: 1
      Flying is complicated ONLY if you:
      1) care what all the dials mean
      2) plan on landing


      Likewise, using a computer to communicate is complicated ONLY if you:
      1) care about what big/little endian is
      2) plan on disassembling all software you use to see what it really does
    45. Re:Do try harder by Anonymous Coward · · Score: 0

      You are very close to getting what Darwin's dangerous idea is all about.

      Being "bad" and big goes hand in hand. If the US stopped being "bad", they would also cease to be big.

      There are only two rules;

      The only true goal of any system is to preserve that system

      The only true goal of any participant in a system, is to reach the top of the system

    46. Re:Do try harder by andr0meda · · Score: 1

      Yeah, that's what I want, someone who's taken a wonderful recreational activity and turned into a job. Don't you know the fastest way to turn something fun into drudgery is to make it your job?

      Hmm, except for sex maybe ? :)

      --
      With great power comes great electricity bills.
    47. Re:Do try harder by gnu-generation-one · · Score: 1

      Does anyone remember the documentaries on old East Germany, where they revealed the buildings-full of telephone recording equipment, and said that the communist government had spent more money on equipment for monitoring telephone conversations than they did on the network itself?

      People were shocked at how bad a government would have to be to do that to its people. The consensus amonst people who watched the program was that it showed how much better our society is than theirs. "What an evil place to live that must have been..."

    48. Re:Do try harder by gnu-generation-one · · Score: 1

      "Depending on the purpose of the flight (screwing around or actually going somewhere), and where you were going, it was generally easier to follow the 401 (4 lane highway) than it was to figure out a bearing/heading. That part of the province has got a whack of highways that are pretty easy to distinguish from the air."

      So is there a campaign to get road-signs which are visible from the air? "M1 North -->" drawn in a field with a crop-circle or something?

    49. Re:Do try harder by sglane81 · · Score: 1

      Yup, that's what "IFR" means: I Follow Roads.

      For those not in the know... IFR stands for Instrument Flight Rules. Used when flying in low visibility conditions like night and weather. In other words, you use your Instruments instead of external visuals.

      Call me dense, but I don't get the joke.

      --
      This is the Internet. You can say "fuck" here. - AC
    50. Re:Do try harder by schon · · Score: 1

      Bill Maher was completely right.

      Well, yes and no.

      First off, I think Bill is a pretty smart guy, and he usually makes a ton of sense.. and I loathe Shrubya - the faster you get him out of office, the better, IMHO.

      On the face of it, what Maher says is correct - being willing to die for what you believe is pretty much proof that you're not a coward - but what Shrubya said, and the response from Maher (if it was a response to him, and not to someone else) isn't quite right.
      From Shrubya's comment, it's not clear exactly who he's calling a coward - it could be argued that he's calling the higher-up members of the terrorist group cowards (which would be correct, IMHO, as they weren't willing to do it themselves.) The link you provided had one quote, but mentioned that Shrub used the word 'coward' more than once - if he used it to describe the hijackers themselves, I'd like to know about it (and not just because it would vindicate Maher :o)

      If Shrubya is referring to the hijackers themselves, then he's completely wrong, but I'm not sure that's what he meant (good god, does anyone know what he means when he speaks?) But if he meant the people who sent the hijackers, then he's correct.

      The hijackers were not cowards - but the people who planned the attacks certainly are.. as much as Shrubya himself for sending troops into danger he himself would avoid at any cost.

    51. Re:Do try harder by schon · · Score: 1

      A recent poll by CNN suggests that 50% of Americans believe that Saddam was involved in the Sept. 11 terrorist attacks (contrary to the fact that 'nobody' in the White House has ever 'said' this was the case.)

      I'm guessing you just encountered one of them.

    52. Re:Do try harder by Anonymous Coward · · Score: 0

      their actually a pretty good company

      "they're".

    53. Re:Do try harder by LoudMusic · · Score: 1

      I think most people corilate terrorists with the mind of Dr Evil. They expect them to be smart. How else do you get three airplanes to crash into buildings and no one gets caught for the act?

      --
      No sig for you. YOU GET NO SIG!
    54. Re:Do try harder by Anonymous Coward · · Score: 0

      I've spend a few minutes at the controls of 747 simulators. It's true what they say: if you're already safely airborne, and you don't care much about your own survival, it's easy to turn a plane.

      And hit exactly at the precise spot to fataly damage the building and make sure it collapses as fast as possible? I guess you havent been reading about the specifics of operation 911.

    55. Re:Do try harder by Minna+Kirai · · Score: 1

      That's funny, because I did see the flight paths and they weren't along the coastline at all,

      That map doesn't show rivers! (The ocean isn't the only thing with waterlines, you know)

    56. Re:Do try harder by Minna+Kirai · · Score: 1

      The hijackers were not cowards - but the people who planned the attacks certainly are

      But if coward means "not brave", and brave means "willing to take risks for your beliefs", then the planners were certainly taking risks, because directing that attack hugely increased the chance of US soldiers coming to kill them. It was enormously less risky than actually being a suicide-pilot, but ticking off the USA is far from safe.

    57. Re:Do try harder by Minna+Kirai · · Score: 1

      And hit exactly at the precise spot to fataly damage the building and make sure it collapses as fast as possible?

      But they didn't do that. If they had hit lower, the collapse would've been faster (and more importantly, a greater percentage of occupants would be trapped inside, above the fire).

      A solid hit on the building almost anyplace except the very top would've been enough for an eventual collapse.

    58. Re:Do try harder by Anonymous Coward · · Score: 0

      Would you go to theatres watch movies, would you drink coffee, would you head your car to the highway during rush hours? Be careful when calling people stupid.

    59. Re:Do try harder by Anonymous Coward · · Score: 0

      You leave your fingerprints all around the place. Just wait till they call you a criminal, then you will become stupid.

    60. Re:Do try harder by Guppy06 · · Score: 1

      "the difference is that we stick our heads in everywhere while most of those little dictatorships only terrorize their own people."

      And how will all those little dicatorships cease to be if somebody else doesn't stick their heads in there? What's more important to you: stopping a murderer or keeping your hands clean of blood?

    61. Re:Do try harder by ptbarnett · · Score: 1
      Used when flying in low visibility conditions like night and weather.

      Technically, IFR is required in IMC, or Instrument Meteorological Conditions. It is also required in Class A airspace (above 18,000 feet).

      By itself, "night" does not constitute IMC. Under some conditions, nighttime actually increases visibility of illuminated objects. However, the same weather conditions might constitute IMC at night, but be marginally VMC during daylight hours.

      Call me dense, but I don't get the joke.

      A road map is sometimes called a "Student IFR" map, because it is the last resort when a pilot gets lost because they cannot (or never learned) to navigate properly by dead reckoning or with radio-navigation aids.

    62. Re:Do try harder by Anonymous Coward · · Score: 0

      SEVEN VIRGINIANS YOU ASSHOLE!

    63. Re:Do try harder by Xabraxas · · Score: 1
      That map doesn't show rivers! (The ocean isn't the only thing with waterlines, you know)

      ...but it is the only thing with a coastline and that is exaclty what he said.

      --
      Time makes more converts than reason
    64. Re:Do try harder by Xabraxas · · Score: 1

      That's actually not correct at all. If you read anything about how the towers fell you would know that the main reason was that the ignited jet fuel weakened the structure and caused it to fall on top of itself, from the top down. The other obvious point is that it's a little difficult to get an airliner much lower than they were in NYC.

      --
      Time makes more converts than reason
    65. Re:Do try harder by Xabraxas · · Score: 1

      Thanks asshole. I know my grammar. It was a mistake, but at least you feel better about yourself.

      --
      Time makes more converts than reason
    66. Re:Do try harder by Xabraxas · · Score: 1
      What's more important to you: stopping a murderer or keeping your hands clean of blood?

      That's all well and good if that's the way it happens but it isn't. Instead we prop up dictators and attempt to dislodge democratically elected governments because they don't agree with our economic policies.

      --
      Time makes more converts than reason
    67. Re:Do try harder by Minna+Kirai · · Score: 1

      If you read anything about how the towers fell you would know that the main reason was that the ignited jet fuel weakened the structure and caused it to fall on top of itself, from the top down.

      Yes, I know all about it. Do you think you're contradiction me somehow?

      The collapse was caused by fuel burning through supports. That would've happened almost anyplace the plane hit, except right on the side (where the plane would've smashed a corner and fallen to the ground, rather than embedding inside)

      There was no special precision needed to hit well enough to collapse the building. In fact, the attackers didn't even know it would collapse!

      The other obvious point is that it's a little difficult to get an airliner much lower than they were in NYC.

      Yes... and that supports my position too. It was claimed that the hijackers were skilled pilots, because they hit in the precise place to cause fast collapse. But to do that, you'd have to hit low. And because of the other buildings around, hitting low would be hard unless you're a good pilot who can "dive bomb" accurately from a steep angle. Since the terrorists didn't do that, it seems they weren't good pilots.

    68. Re:Do try harder by nettdata · · Score: 1

      I didn't say he had anything at all to do with it. I made a general statement about the heads of terrorist groups.

      The 911 incident had nothing to do with the war in Iraq, but there are similarities between the two leaders and their actions.

      For instance, Saddam told all his followers to "fight the US troops to the death! Die for the cause!" and yet when he was found he was cowering in a dirt hole in someone's back yard. Not just a LITTLE hypocritical.

      --



      $0.02 (CDN)
    69. Re:Do try harder by Xabraxas · · Score: 1
      The collapse was caused by fuel burning through supports. That would've happened almost anyplace the plane hit

      Nope, not true at all. It couldn't possibley fall on top of itself if it was from the bottom up. Those very words imply that it is hit from the top. The weakened structure at the top caused the floors to fall on top of each other, further weakening the structure and causing the buildings to fall.

      There was no special precision needed to hit well enough to collapse the building. In fact, the attackers didn't even know it would collapse!

      Prove it.

      Yes... and that supports my position too. It was claimed that the hijackers were skilled pilots, because they hit in the precise place to cause fast collapse. But to do that, you'd have to hit low.

      Obviously...since they hit high and they still fell down. Your statement makes no sense and you still don't understand what caused the towers to fall.

      --
      Time makes more converts than reason
    70. Re:Do try harder by Minna+Kirai · · Score: 1

      It couldn't possibley fall on top of itself if it was from the bottom up. Those very words imply that it is hit from the top.

      Are you ESL? Those sentences aren't comprehensible at all. I suggest you learn about "pronouns", and try again. Or if you can't handle pronouns, then just repeat the statement with each word "it" replaced with the actual noun you meant.

      Prove it.

      Prove that the terrorists didn't know the buildings would collapse? Sure, read their own words. They were pleasntly suprised at the total destruction.

    71. Re:Do try harder by Xabraxas · · Score: 1

      Are you ESL? Those sentences aren't comprehensible at all. I suggest you learn about "pronouns", and try again. Or if you can't handle pronouns, then just repeat the statement with each word "it" replaced with the actual noun you meant. Are you fucking retarded? What kind of question is that? "It" refers to "the building". I did make one mistake which of course makes me some kind of idiot. I should have said "if the attack was from the bottom". Get a clue.

      --
      Time makes more converts than reason
    72. Re:Do try harder by Minna+Kirai · · Score: 1

      I should have said "if the attack was from the bottom"

      So with corrections, your sentence becomes equivalent to "The building couldn't possibley fall on top of itself if the attack was from the bottom"

      So now, instead of being incomprehensible, the claim is simply wrong. It absolutely could've fallen. In fact, there's no reason the WTC couldn't have been brought down by a bomb in the basement (although to do that, you'd need an engineer to select the placement).

      A large, fueled airplane striking at any floor aside from nearly the top would've taken down the entire building. The lower the impact, the faster it would happen, although that's a minor and unimportant effect considering that the lower collision would trap a greater proportion of victims in the building.

    73. Re:Do try harder by Xabraxas · · Score: 1
      The lower the impact, the faster it would happen

      It's obvious that you still do not understand what made the towers fall. The WTC was built to withstand a plane crashing into it. It was not the plane that caused the towers to fall. Without the fuel raining DOWN on the building it would have never fell. That wouldn't have happened if the plane hit low.

      --
      Time makes more converts than reason
  25. For privacy, we'll hafta do what the Mafia does... by vudufixit · · Score: 1

    Have one-on-one discussions with no one else around, preferably in a windowless room, randomly picked in an abandoned or seldom-used building. But the way things are going, those sorts of conversations will become illegal or monitored, too.

  26. This is stupid by namidim · · Score: 1

    Who says I'm going to call my friends using VOIP in the future anyway? What stops me from writing an unregulated program that does the same thing and does it over an encrypted channel using openssl ? As mobile phones become more powerful and connected directly to high-speed internet what stops me from doing the same thing there? Furthermore is I'm serious about doing something illegal why am I not using pgp to talk about it?

  27. Oh well.... by Anonymous Coward · · Score: 0

    So much for VOIP. The FCC needs to be toppled.

  28. IPSec by Anonymous Coward · · Score: 0

    Nothing IPSec doesn't solve.

  29. solution by Triumph+The+Insult+C · · Score: 1

    tunnel it transparently over ipsec ala isakmpd or frees/wan and tell Reverend^H^H^H^H^H^H^H^HAttorney General Ashcroft to go fuck himself (but not anywhere near singing calico cats).

    <tinfoil hat>why? ipsec will give you maybe 30 seconds of chat before our buddies at ft. meade will be able to crack it </tinfoil hat>

    --
    vodka, straight up, thank you!
  30. Pardon, but suck me. by Anonymous Coward · · Score: 0

    You can "sniff" my VoIP all you like....when it is encrypted *before* and *after* transmission. Enjoy that.

    And pray tell, how might you being telling voice from data.....ah, catch, listen closely.....when it has all been encoded to text, encrypted and sent. Hrm..interesting. You say no non-vox=like transmissions? Yeah, ssh sucks a big one, i know - tough to use and all ;-)

  31. My Question Is... by ThePDW · · Score: 1

    Is it easy for your average hacker to tap VOIP?

    1. Re:My Question Is... by chill · · Score: 2, Informative

      Yes.

      TCPDump & VOMIT

      http://vomit.xtdnet.nl/

      Next question.

      --
      Learning HOW to think is more important than learning WHAT to think.
  32. VoIP-to-Phone needs another name... by LostCluster · · Score: 4, Insightful

    This keeps coming up here on /. whenever the FCC talks about "VoIP". They're not talking about all computer-to-computer peer-to-peer realtime audio connects, they're talking about VoIP services that result in a network of people you can "dial" that more or less resemble a phone network. It's those that they're regulating and basically putting on the same playing field as existing phone services.

    1. Re:VoIP-to-Phone needs another name... by drinkypoo · · Score: 1

      We kept asking them to make computer voice communications into telephony. Now they have, and people want to bitch about it :)

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:VoIP-to-Phone needs another name... by wfberg · · Score: 1

      This keeps coming up here on /. whenever the FCC talks about "VoIP". They're not talking about all computer-to-computer peer-to-peer realtime audio connects, they're talking about VoIP services that result in a network of people you can "dial" that more or less resemble a phone network. It's those that they're regulating and basically putting on the same playing field as existing phone services.

      Which would include Pulver's FreeWorldDialup by your definition, though the FCC isn't concerned with them in the slightest, since they don't terminate voice traffic on copper.

      While "voice-over-IP" seems like a broad term, it's come to mean (or rather, has always been taken to mean), well, exactly your definition (which is only partly regulated by the FCC), whereas people usually refer to computer-to-computer peer-to-peer realtime audio connects that don't conform to that definition simply as "voice-chat" (or audio conferencing). For example, nobody calls those XBox live voice features VoIP.

      On the flip side, nobody calls VoIP "streaming audio" even though it is. True, it's unicast and bi-directional, but even so.

      So the use of VoIP was actually almost spot on. The FCC is to impose tapping on VoIP providers, except those it doesn't regulate, which includes, but is not limited to pulver's freeworlddialup and foreign companies. I think the last part can be skipped for clarity since the FCC usually regulates only those it regulates, rather than those it doesn't.. do. that. to.

      (Ouch, that's a crummy sentence, time for bed).

      --
      SCO employee? Check out the bounty
    3. Re:VoIP-to-Phone needs another name... by milamber.net · · Score: 1
      For example, nobody calls those XBox live voice features VoIP.

      On the xbox all traffic is encrypted except for voice and player-text traffic. Any time you want to send traffic you must specifically say which bit is data and which bit is voice and the xbox automatically encrypts the data and leaves the voice alone.

      The xbox development documents state that this is to stop "criminal elements" from using the xbox as a means of secure voice communications.

      Before you submit a game for the xbox you must meet a list of requirements called TCRs (Technical Certification Requirements) and one of them states that voice and player created text must be sent in the clear.

      So even if nobody calls it VOIP (which I disagree with) it certainly has be designed to be wiretapped, even if it isn't being done at the moment.

    4. Re:VoIP-to-Phone needs another name... by wfberg · · Score: 1

      That's probably not an initiative by Microsoft itself to fight the good fight, but rather to ensure that the XBox isn't designated to be a cryptographic device, which would trigger numerous export/import restrictions (in the US, but also in Wassenaar agreement countries).

      Interesting that they would encrypt the game data itself though. You could use a game map as a Ouija board..

      --
      SCO employee? Check out the bounty
  33. Illegal to make your own communications equipment? by jameskojiro · · Score: 0

    Would this mean that if i want to make my own communications equipment, it would be illegal to use it without having a way built in for the government from listening in.

    Say I wanted to use a PDA with a 802.11b card to speak to other users using the same equipment, using my special program. Would this be illegal? What about the voice chat function in Yahoo chat?

    --
    Tsukasa: All I really want, is to be left alone...
  34. How about tapping this... by TJ_Phazerhacki · · Score: 2, Informative

    128 Bit encryption - easy to code your own algorythm, easy to impliment, and easy to use. Are the feds Reaallly gonna spend all that time breaking conversations? Cause I know if they were already breaking emails, theyd be awful busy...

    --
    Physics is nothing like religion. If it was, we'd have an easier time trying to raise money!
    1. Re:How about tapping this... by Goobermunch · · Score: 1

      Frankly, they're not likely to be tapping your phone for fun. If they legitimately think you've got a briefcase nuke or are about to fly a plane into a building, however, you bet your ass that they're going to spend the time to crack your conversation. And, at the end of the day, the rest of us should be glad that they did. I'd rather you suffer the partial loss of your privacy than a thousand people die, but I'm just pragmatic like that.

      --AC

    2. Re:How about tapping this... by Sibshops · · Score: 0

      The biggest concern about encrypted email, is that the powers-that-be know that you are sending an encrypted email. They can use that suspicion as a reason to monitor any other activities.

      Something would really be useful is an encryption scheme that changes an English message into a another natural sounding English message. The key is that the new message would have an hidden encrypted message that is not detectable by tapping.

    3. Re:How about tapping this... by Goeland86 · · Score: 2, Insightful

      there's a limit to pragmatism, and a beginning of moral. The constitution was set by people who fought, and yes, DIED for it. If now we're going to repeal that constitution 200 years later, then what did they die for? Weed? Please, if only we heard how many people were actually part of Al Quaeda that they caught with those measures it wouldn't be half as oppressing as it is now. With all these measures, and the law enforcement agencies behind him, Bush is creating a tyrannic government. I really, really hope that people will realize what an emperor he thinks he is by november, because if not, I'm out of the country for good. Besides, weren't Republicans the ones saying that less government was best for a country? Are they now reversing their opinions in a flash???

      --
      ---- I am certain of only one thing : I know nothing else.
    4. Re:How about tapping this... by Anonymous Coward · · Score: 0

      This is why the left is seen as unamerican. You don't get what you want in an election, so you say you are going to leave the country.

    5. Re:How about tapping this... by Goeland86 · · Score: 1

      no, I see the left as the last ditch of common sense in this country. If the right wins again, I'm out. I'd rather fight this government openly from the outside than covertly from the inside. that's called a moral principle. Something Bush and his cronies seem to lack entirely. In fact, in my opinion, the biggest terrorist threat in the world right now resides in the White House.

      --
      ---- I am certain of only one thing : I know nothing else.
    6. Re:How about tapping this... by Pantero+Blanco · · Score: 1

      Yes, they were. That's why I stopped considering myself a Republican shortly after September 11th. No, I don't consider myself a Democrat, because most of them support this crap too.

      The Republican Party appeals to (roughly) one half of America, the Democrats to the other half. When it really counts, they both act in the best interest of the Government.

      The freedoms that one party claims to idealize will be meaningless without the freedoms the other claims to idealize. Owning a firearm won't mean anything when there are cameras at every corner. Free speech won't mean anything if you can be whisked away the moment you seem like a real danger. Being able to say a prayer at work or school won't mean anything if what you're truly forced to place your faith in is the state.

    7. Re:How about tapping this... by Pantero+Blanco · · Score: 1

      During the Clintonista years I was hearing a similar message from my more "hard-core" right-wing friends....who were discussing becoming renegades. It's blustering, and most people that talk about it won't go through with it (much like suicide). The ones that actually think it's the solution go through with it quietly (Johnny Depp and his ilk don't count, they're just grabbing attention).

      I'm fairly disgusted with Washington DC right now, but I don't plan to leave. I'd be very surprised if someone could point out a nation to flee to that would actually be an improvement. I can only hope, and try to encourage, that we break out of this snare of a two-party system (and for the love of God, don't turn things over to the Greens).

  35. Time for encrypted phones? by nurb432 · · Score: 1

    At least when they tap it they wont know what you are saying..

    Its really none of their business that my wife called asking to pick up some milk on the way home..

    --
    ---- Booth was a patriot ----
    1. Re:Time for encrypted phones? by kryptKnight · · Score: 1

      I don't see why VOIP taps would be done differantly from normal phone taps. I think they will still need a warrant to tap some one.

      --
      Facts do not cease to exist because they are ignored. -Aldous Huxley
  36. ergh by Anonymous Coward · · Score: 0

    what a waste of time. i doubt terrorists are using cellphones anyways.

  37. dude......think. by Anonymous Coward · · Score: 0

    That sack of no-nutz is the most paranoid, anit-gov,anti-do-anything sack i've seen in years. EVERY story that sack posts is about security, government, aliens, privacy, and the like. Read and search and think a little, tool-sack. It'll do you some good: Michael is a liability and pain of Slashdot. Period.

  38. Good. And good Again. by reallocate · · Score: 2, Insightful

    I know this will upset the /. gang, but I have no problem with the FBI being able to monitor conversation between criminals.

    As the cliche goes, if you're not a criminal, you have nothing to worry about. If you're paranoid, I'd guess you shut up anytime a cop comes within hearing distance.

    Do we have a right to privacy? Sure. Do we have a right to keep criminal conversations private? No. Is this subject to abuse? Sure. Will we be abused by criminals who conspire in private? Of course.

    Given the choice between giving criminals the freedom to conspire in private or the ability of the FBI to wiretap criminals, I've no problem opting for the former.

    In any case, the net is a public place. Nothing there is private.

    --
    -- Slashdot: When Public Access TV Says "No"
  39. Good (in appropriate measures)...Middle wars. by Anonymous Coward · · Score: 0

    "So, rather than moaning about one side of this argument or another, doesn't it make sense to focus on getting just the right sweet spot in between?"

    Unfortunately the citizentry has neglected their government, and really don't know how even if they had the will. This whole mess didn't come about the past few years, but took decades. And it will take about the same to get it back, even with a bloody revolution.

  40. Get used to it by juggledean · · Score: 5, Interesting

    The police will get a warrant with your name on it and take it to your ISP and tell them to tap your VoIP traffic. Your ISP will recognize it the same way your receivers client recognizes it. If it's encrypted the police will know you are using encryption. If your worth enough to them, they'll crack it.

    They've had it all along for the landlines, there's no reason to think they'd change their mind at this juncture.

    1. Re:Get used to it by rainman_bc · · Score: 2, Insightful

      AFAIK with Patriot Act the police no longer need a warrant. Take that step out of the equation at least...

      --
      09 F9 11 02 9D 74 E3 5B D8 41 56 C5 63 56 88 C0
    2. Re:Get used to it by YellowBook · · Score: 1

      They still need a warrant, but the procedure for obtaining a warrant is changed. If the feds say a search or wiretap is related to national security, then they do not have to present evidence of probable cause to the judge. The judge then has only the investigators' say-so on whether to grant the warrant. Also, the person wiretapped does not need to be notified afterwards (as they would be under a standard wiretap).

      --
      The scalloped tatters of the King in Yellow must cover
      Yhtill forever. (R. W. Chambers, the King in Yellow
  41. Or else? by Telastyn · · Score: 1

    IIRC the FCC had no ability to enforce such a ruling, even if their rulings were actually law; which to my knowledge they're not.

    1. Re:Or else? by Goobermunch · · Score: 1

      Actually, the FCC is an administrative agency with broad rule-making power delegated by Congress to regulate Interstate Communications.

      That means, a) they do have the power to enforce such a law, and b) their rulings are laws (though they can be over ruled by Congress).

      --AC

  42. The name is Carrier-Grade Voice over Packet by Wesley+Felter · · Score: 1

    All the primary sources refer to it as Carrier-Grade Voice over Packet (CGVoP). Only the news articles (and people who rely on them) are confused.

  43. Combine this with 0 judicial oversight ... by Anonymous Coward · · Score: 0

    ... and the ability to declare anyone an 'enemy combatant' without access to a lawyer or any due process ...

    So let me get this straight: are republicans _for_, or _against_ intrusive government, cause at this point I just don't know.

    Man I'm glad I live in Canada.

    1. Re:Combine this with 0 judicial oversight ... by Goeland86 · · Score: 1

      I think on the open side they're against it, but since 9/11 they're for it. Or at least they say they are... Even though they're not supposed to be. The reps pushed it in, not the democrats. Damn bunch of religious zealots. Soon we won't have the right to flirt with girls without first signing a government list.

      --
      ---- I am certain of only one thing : I know nothing else.
  44. OK.. by bigattichouse · · Score: 1

    so, you just write your own packet VOIP and throw in some industrial grade encryption...

    --
    meh
  45. Exactly how would this work by HotNeedleOfInquiry · · Score: 2, Insightful

    If I were to set up a VPN link between 2 sites and and added VoIP phones on each end? Or used sound cards, for that matter? Seems like all they will be able to monitor is conversations through the big-name services, not anyone with the ability to buy and configure a pair of $50 routers with VPN.

    --
    "Eve of Destruction", it's not just for old hippies anymore...
    1. Re:Exactly how would this work by drinkypoo · · Score: 1

      How is this insightful? It's obvious. They're not worried about private phone networks, which are already difficult to tap. They're concerned about everyone going to VoIP, and not being able to tap them.

      --
      "You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
    2. Re:Exactly how would this work by Anonymous Coward · · Score: 0

      save yourself the 2x 50$ and download openvpn.sf.net

  46. -1, paranoid by Anonymous Coward · · Score: 0

    All the computers in the world working together cannot crack reasonable crypto.

  47. Criminal Privacy by ComputerInsultant · · Score: 5, Insightful

    If you criminalize privacy, only criminals will have privacy.

    --
    engineers are all basically high-functioning autistics who have no idea how normal people do stuff
  48. Re:Good. And good Again. by Skavookie · · Score: 1

    Two ears good, four ears better, eh?

  49. Re:Good. And good Again. by Anonymous Coward · · Score: 0

    I have no problem with them being able to, either. What I have a problem with is them restricting business adn free trade to *ensure* that they are able to do it.

    Oh, and I think you meant 'latter'.

  50. Re:For privacy, we'll hafta do what the Mafia does by kaligraphic · · Score: 1

    You don't think the FBI monitors the mafia? It's kind of, er, a pastime for FBI agents to spy on organized crime.

    --
    You are standing in an open server west of a blue house, with a boarded front door. There is an Exchange mailbox here.
  51. not new. by Anonymous Coward · · Score: 0

    This ruling probably sounds much more harmful than it really is. Your standard POTS line, for instance, is tappable. We've been living with this ruling all of our lives.

  52. "Bottom"-Tap. by Anonymous Coward · · Score: 0

    "FCC Rules VoIP Must Be Tappable"

    I'm not worried. The poor aren't worth tapping.

  53. Re:For privacy, we'll hafta do what the Mafia does by vudufixit · · Score: 1

    Actually, that is my point. They monitor the Mafia's phones and other communications. So they have to agree to meet in person at a random place, usually one they haven't been to.

  54. Why, a vote of FCC5-0Value? by OldHawk777 · · Score: 3, Interesting

    Why zero-value ... well when you are using a dedicated (real/virtual) circuit/channel, then wire tapping is no/little problem. However, encrypted virtual channel VoIP may not be easily tapped, and (I suspect) there are a few ways to very the path/packet. So, if you don't/can't tap the access/origination circuit and/or the destination termination, then .... VoIP in a sort of encrypt-jumping and path-hopping algorithm may be a little tough to tap.
    >
    Then again there is always PGP encrypted P2P ... pick your path through 37 points/jumps and you use radio-protocol (the Rogere-Wilco-Out stuff) for the time delay problem.
    >
    Controlling Technology is like fucking without a condom ... you might catch something horrible or there is a pregnant pause ... in technology innovation.
    >
    I am sure this will help monitor the common law abiding citizens. Just like Gun-Control keeps guns away from criminals and their organizations.
    >
    Then again maybe the above ain't no problem to tap. We should all always know that we are being monitored for the good of the nation and blessings of god.
    >
    OldHawk777

    --
    Unaccountable leaders are masters, and unrepresented people are slaves. How do US and EU fare?
  55. Wrong by Wesley+Felter · · Score: 3, Informative

    Obviously you aren't familar with the proposal. The tapping is done by VoIP service providers. They know what traffic is VoIP (basically all of it) and what is not.

    1. Re:Wrong by Thuktun · · Score: 1

      The Internet is not a closed medium. It would not be overly difficult to come up with a different, private protocol that masked or wrapped "normal" VoIP traffic as something else. Similarly, you could build end-to-end email using something different from SMTP to avoid anything sniffing for SMTP. Encrypt the traffic using a strong algorithm, but using a custom implementation that didn't have obvious headers and tags that would identify it easily.

      This ruling will only be a problem for the general public, along with stupid criminals and terrorists. Technically savvy ones won't be tapped so easily.

  56. The Police don't get to do this often . . . by Goobermunch · · Score: 4, Informative

    It's not like the FBI has an easy time of obtaining a wire tap. In fact, they've got to jump through a number of complicated hoops in order to get permission to do so.

    Under 18 USCA 2518, the FBI has to apply for a warrant from a court before it can obtain a wire tap. This isn't your ordinary search warrant either. In the criminal justice realm, it's referred to as a "superwarrant."

    There's a limit on how long the government can tap your phone for before it has to go back and re-apply. In addition, they've got to show a) the type of information the tap is going to obtain, and b) that there's no other way to get the kind of information they're looking for, other than a wiretap.

    There are a few caveats for situations involving national security, organized crime, and immanent danger of death or serious injury, but even there, the agency intercepting the wire communications has to apply for a superwarrant within 48 hours of starting the tap.

    Oh, and if they tap you, or try to get a warrant and fail, they've got to let you know within 90 days of ceasing surveilance (or of the denial of the warrant application).

    It's not like the government is running around tapping your phone lines willy-nilly.

    --AC

    1. Re:The Police don't get to do this often . . . by Trespass · · Score: 5, Insightful

      It's not like the government is running around tapping your phone lines willy-nilly.

      Look, I don't want to pander to the tinfoil hat crowd, but I'm old enough (barely) to remember the scandal that COINTELPRO under the Nixon administration caused. Basicly, the FBI was used to spy on and discredit people and organizations that were perceived as enemies of the administration. I'm not convinced things have changed enough to prevent that from happening again. Why make it easy on them?

    2. Re:The Police don't get to do this often . . . by Anonymous Coward · · Score: 0

      True enough.

      However, 733t kiddies and/or rival entities and/or organized crime never ask for permission. This makes it all the harder for someone to protect themselves against this: because now any company wanting to offer such protection has to either jump through 10^n government hoops to promise back-door keys to the Feds, or remove/weaken-to-uselessness the protection.

      Also, it must be said that there are the secret warrants a la Patriot Act or its predecessors, which bypass most or all of the protections you mentioned. There is also the "Carnivore" system - do you really think that they have a warrant for every person whose mail is intercepted thereby?

    3. Re:The Police don't get to do this often . . . by Anonymous Coward · · Score: 0

      Like Kevin Mitnick's phone hacking in the early 90's. When everything's on the Internet, it can only get worse.

    4. Re:The Police don't get to do this often . . . by Kenja · · Score: 0, Flamebait
      "Under 18 USCA 2518, the FBI has to apply for a warrant from a court before it can obtain a wire tap."

      And under the Patriot Act, they dont.

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    5. Re:The Police don't get to do this often . . . by pavese · · Score: 0

      Lol, I guess it's even worse... Since... if it's not really a one on one conversation (say with encryption), How the hell is it a private conversation in the first place, or how is it then not tapped by default or something?

    6. Re:The Police don't get to do this often . . . by Yojimbo-San · · Score: 5, Insightful

      It's not like the FBI has an easy time of obtaining a wire tap.

      But, as the First Circuit Appeals Court have recently ruled, store/forward data is not covered under wiretap regulations, so your example is invalid. See http://yro.slashdot.org/article.pl?sid=04/06/30/20 14242&tid=158&tid=123&tid=95&tid=1 7

      Oh, and if they tap you, or try to get a warrant and fail, they've got to let you know within 90 days of ceasing surveilance (or of the denial of the warrant application).

      Unless it's Patriot-related, in which case you'll never know. And it'll *all* be Patriot-related, won't it?

      --
      Quick wafting zephyrs vex bold Jim
    7. Re:The Police don't get to do this often . . . by NanoGator · · Score: 1

      "Why make it easy on them?"

      To roll the dice in favor of avoiding the falling of buildings.

      --
      "Derp de derp."
    8. Re:The Police don't get to do this often . . . by putaro · · Score: 4, Insightful

      It's been quoted to death, but you deserve to hear it again.

      Benjamin Franklin: They who would give up an essential liberty for temporary security, deserve neither liberty or security

      I would say that the "forces of security" are pretty much running free in Iraq. I'm sure they have no problems tapping whatever phone they like, surveilling who they please and Abu Ghraib showed that some use of torture was being done. This is not a state I would care to live in and neither would you in all likelihood.

      However, this is not enough to stop domestic terrorism there, is it? People are still getting their heads chopped off on a regular basis. Hussein ran the place like a prison camp and was able to keep order. We've set up a wishy-washy police state and that doesn't work.

      Increasing police powers in a mostly free state tends to lead to what Jerry Pournelle has taken to calling "Anarcho-tyranny". What is Anarcho-Tyranny? Well, basically the police have the power and the right to make any ordinary, law abiding citizen's life hell (witness the number of run-ins with the TSA of late) but not enough power or will to stomp down hard enough to eliminate terrorism, crime, etc. The police apparatus increasingly spends its time enforcing draconian and silly rules (don't take any pictures of that bridge son - http://www.brownequalsterrorist.com/artiststatemen t/) while failing in actually stopping real crime and terrorism.

      The police have more than enough resources and powers to fight terrorism. The lead up to 9/11 did not involve a valiant group of law enforcement agents fighting against evil, ACLU controlled judges putting legal barriers in their way. No, it involved interdepartmental politics, head office vs branch office nonsense, head in the sand denial and would not have been prevented with more wire-tapping.

    9. Re:The Police don't get to do this often . . . by Grizzlysmit · · Score: 1
      It's not like the government is running around tapping your phone lines willy-nilly.
      For now yeah, equally if their spying on me their being bored to death, but will it always be this way, there are always those who would advocate more and still more powers, just as the there are those who oppose even the most simple and sensible powers, the issue for a society is to keep the balance.
      --
      in my life God comes first.... but Linux is pretty high after that :-D
      Francis Smit
    10. Re:The Police don't get to do this often . . . by Okonomiyaki · · Score: 1

      But, in this case, are we really "giving up" any liberties? Are we really "increasing police powers?" Isn't this just a case of extending the existing powers of the police to the next technological level? I mean, if police already have the right to wiretap a standard phone line and VoIP is just the successor to old fashioned telephony, then isn't denying them the ability to wiretap VoIP basically like taking a capability of theirs away?

      Now, there may be a good argument for taking away the right to use wiretapping altogether and if there is, let's hear about that. But saying that they can wiretap one form of communication but not another seems a little weird.

    11. Re:The Police don't get to do this often . . . by putaro · · Score: 2, Insightful

      It will depend on just how far reaching they expect these powers to be. Wiretapping is an accident of the original phone system. It wasn't designed to be tappable but due to its basic design it was. As we move away from the old circuit switched, centralized architecture, and start to add things like encryption, tapping no longer "falls out" from the design but instead has to be designed in.

      Prior to the 1994 CALEA act there was no technological requirement for wire tapping. If a law enforcement agent showed up with a warrant, the phone company would help them set up a tap. However, there was no requirement that the technology being used by the provider support tapping. It just happened to.

      VOIP, running on a packet switched network, doesn't automatically support wire tapping. The VOIP "carriers" only "carry" those calls that terminate to one of their points-of-presence connecting to the regular phone network. For calls which are VOIP end-to-end, they only see the setup but the actual data never touches anything they own. So, what are you going to mandate support the tapping? It's can't really be the network because there is no VOIP network. So, tapping is going to have to involve the end point hardware or software.

      Now, the next question is: what is VOIP? If I write software that sends voice over the Internet is that now VOIP and do I have to include provisions for the government to listen in? What happens if I don't?

      So, are we "increasing police powers?" My original comment was in response to a typical "anything the police want to do to protect us against terrorism is good" post. You raise the larger question of is it ok to extend existing powers.

      I think that as long as it is a question of requiring access rather than trying to mandate technology I'm willing to listen to the arguments. However, I think that trying to mandate technology is a disaster and will lead to additional encroachments on a lot of basic rights. To sum up with a simple minded analogy - the police can get a warrant to search my premises. They can even get a warrant that allows them to search it secretly. Why should't we mandate that all locks be openable by a government master key?

    12. Re:The Police don't get to do this often . . . by Anonymous Coward · · Score: 0
      The police apparatus increasingly spends its time enforcing draconian and silly rules while failing in actually stopping real crime and terrorism.
      You know that violent crime in the US is near all time lows right? But hey, don't let facts get in the way of your self righteous rant.
    13. Re:The Police don't get to do this often . . . by Goobermunch · · Score: 1

      Well, not really. You're conflating stored data with transmitted data. A real time tap of VOIP data isn't stored data, so it's not governed by the First Circuit's ruling.

      Second, the Patriot Act didn't didn't change the rules for the Wiretap Act. What it did was expand the scope of FISA. The government has always had broad powers to intercept communications under the Foreign Intelligence Service Act. The only changes the Patriot Act did to FISA was permit the government to use the to investigate terrorists.

      The reason for this is that FISA was designed to deal with espionage committed by nations like the Soviet Union (and Great Britain), rather than small independant political organizations. Getting a FISA act still requires review by a judge and an application for a warrant.

      --AC

    14. Re:The Police don't get to do this often . . . by putaro · · Score: 1

      It's not everywhere yet. Been on an airplane lately? Been arrested for chewing on the subway? Welcome to anarcho-tyranny.

      Violent crime is down - is that due to sweeping increases in police powers and curtailment of civil liberties or is it because of either (a) common sense policing or (b) demographic trends (young men commit most crimes - the number of young men is decreasing)?

    15. Re:The Police don't get to do this often . . . by fubar1971 · · Score: 1

      Why should't we mandate that all locks be openable by a government master key?

      What do you mean, I thought they were....

    16. Re:The Police don't get to do this often . . . by Yojimbo-San · · Score: 1

      You're conflating stored data with transmitted data.

      Well, I basically don't trust the powers that be to differentiate between methods in the same way that we do. Every router on the planet can be described as a "store and forward" device if you want, because that's what they do - they just try to reduce the store time to a minimum. So there's a legal precedent for recording all traffic through a router without invoking the protections of Wiretap, and therefore not having to worry about extending Patriot over Wiretap.

      Now, obviously, the intent of a router is the same as a wired relay in a phone system - and quite possibly you could argue that a wired relay was a store-and-forward system, because it's not the same electron that comes out the other side, and that therefore Wiretap explicitly covers store-and-forward.

      But it seems like that would be too much to expect of the current, and all likely future administrations.

      --
      Quick wafting zephyrs vex bold Jim
  57. for some reason... by sinnfeiner1916 · · Score: 0

    for some reason i think i would be less offended if they just did it, rather than asking permission and GETTING IT!!!

    --
    The More Laws, the less Justice --Marcus Tullius Cicero
  58. Re:Good. And good Again. by nkh · · Score: 1

    Nothing on the internet is private until you decide you want to have a private conversation and use cryptography. Why don't you remove all your clothes and live naked? You could be concealing weapons after all!

  59. OT: Ebon Praetor by Anonymous Coward · · Score: 0

    Isn't that frickin' magic card?

  60. This will only stop dumb terrorists by Lord+Kano · · Score: 2, Interesting

    Just think, if you're a terrorist and you know thay any communication that you make is subject to tapping what would you do about it?

    You'd probably find a way to make your call blend in. I mean speaking in code.

    Take this example.

    "I just talked to mom. She said that she might need surgery on her colon. You should give her a call."

    Sounds harmless, but what if it means

    "I just talked to [the boss]. She[or he] said that [the time might be right to strike the power plant in city X]. You should [prepare and wait for the go signal]."

    LK

    --
    "Hi. This is my friend, Jack Shit, and you don't know him." - Lord Kano
    1. Re:This will only stop dumb terrorists by Shky · · Score: 1

      Does that mean they'd need to say they were preparing to blow up a building if they wanted to tell a family member that someone is ill? That's quite a hole in your argument, sir.

      --
      CC Licensed Serialized Story and Podcast: Ingenioustries
    2. Re:This will only stop dumb terrorists by Yobgod+Ababua · · Score: 2, Insightful

      The problem with a code like that is that it presumes that a secure communication (the information on the code itself) has already occurred, that the code has not been captured or compromised, and that the message you want to convey is within the scope of the code already exchanged.

      People have used codes in that way for thousands of years, and they still have the same weaknesses.

      It's much more powerful and effective to send a message encrypted with good asymmetric key cryptography.

    3. Re:This will only stop dumb terrorists by myowntrueself · · Score: 2, Informative

      "It's much more powerful and effective to send a message encrypted with good asymmetric key cryptography."

      which stands out like a dogs balls.

      steganography and platen codes are about the only way to convey information innocuously.

      About the only way for encrypted data to be transmitted innocuously is if it would be innocuous to transfer large amounts of 'static' (or noise or very large random numbers). But somehow I doubt that any covert listener would fail to notice, and be suspicious of such data transfers.

      'uh yeah me and my friend are exchanging humungous random numbers for our, uh, computer game. Yeah'.

      right.

      (one of the strengths of this sort of 'encryption' is that it is uncomputably strong; its simply not possible for a methodical (or algorithmic or computational) process to 'decrypt' a platen code).

      --
      In the free world the media isn't government run; the government is media run.
  61. No need to worry by bigHairyDog · · Score: 2, Interesting

    You can use VoIP with IPSec to secure your phone calls, as long as both sides have the right software installed. The IPSec encryption algorithms are up to you, so if you want to use Elliptic curve cryptography (as donated to OpenSSl by Sun), you can.

    --

    foo mane padme hum

  62. In a word.. by JPriest · · Score: 3, Insightful
    Duh.

    The feds have access to existing phone lines, they have access to internet traffic, why shouldn't they also have access to VoIP traffic?

    Eventually VoIP will be like email, with the option to use PGP or another form of encryption at both ends.

    --
    Saying Java is nice because it works on all OS's is like saying that anal sex is nice because it works on all genders.
  63. qui custodes custodiet? by Anonymous Coward · · Score: 0

    Want to know what's worse? Many phone companies outsource their wiretapping to... VeriSign.

  64. Slippery Slope by wayward · · Score: 1

    The idea that we should give up some of our freedoms to be safer is worrisome because it's a slippery slope. There's also discussion in the US of postponing elections because the terrorists might be planning to strike the polls. (Isn't this disturbingly similar to the way Hitler assumed power?)

    On one hand, who can argue with the idea that the government should be able to thwart terrorist attacks? One the other, where does the freedom-for-safety exchange end?

    1. Re:Slippery Slope by exp(pi*sqrt(163)) · · Score: 2, Informative
      where does the freedom-for-safety exchange end?
      When the voters say so. Pretty simple really.
      --
      Doesn't it make you feel good to know that our freedoms are protected by politicans, lawyers and journalists.
    2. Re:Slippery Slope by Anonymous Coward · · Score: 0
      Q: "Excuse me, but why is their flour in this voting booth?"

      "That's not flower! Ahhhhhh! freakout!"

    3. Re:Slippery Slope by geminidomino · · Score: 1

      Yup, you keep beleiving that...

    4. Re:Slippery Slope by wayward · · Score: 1

      Did you see Fahrenheit 9/11? There was one scene where Michael Moore was interviewing a congressman about how the Patriot Act had passed. The congressman pointed out that most lawmakers don't actually read bills before passing them. Do you think the voters read them either?

    5. Re:Slippery Slope by exp(pi*sqrt(163)) · · Score: 1

      Exactly. Once things swing too far from optimum people start making movies about how bad it is. That's why the US has a First Amendment (it's not there just to allow the download of pr0n).

      --
      Doesn't it make you feel good to know that our freedoms are protected by politicans, lawyers and journalists.
  65. FCC has no Jurisdiction by Anonymous Coward · · Score: 0

    The use of cryptography on the Internet is not regulated by the FCC as much as they would like it to be. In any case, administrative law is not binding here.

    No doubt the Feds will push it and we'll have to get a Supreme Court ruling.

  66. Its called CALEA... by Y! · · Score: 2, Informative

    If you are a service provider (read charge money) you have to provide the feds the ability to wiretap/look at email/im when they present a warrant.
    Nextel PTT has been CALEA compliant for years.
    http://www.askcalea.net/
    This is nothing new.
    From the FAQ:
    Who must be CALEA-compliant?

    All telecommunications carriers as defined by Section 102(8) of CALEA. Basically, this includes all entities engaged in the transmission of switching of wire or electronic communications as a common carrier for hire.

    Who must be CALEA-compliant?

    All telecommunications carriers as defined by Section 102(8) of CALEA. Basically, this includes all entities engaged in the transmission of switching of wire or electronic communications as a common carrier for hire.

  67. Tapping VOIP with Ethereal by freelunch · · Score: 5, Interesting

    I recently experienced some serious drop-out problems with my VoicePulse VOIP service.. So I decided to take some packet dumps and see what I could determine with ethereal.

    Well, the protocol analysis was excellent. And, sure enough, the dump of the data produced an audio file easily played with XMMS. I was shocked at how easy this was (and once again at how good ethereal is). I no longer have any illusions of privacy due to the 'obscurity' or complexity of the protocols.

    So, next time your VOIP provider plays dumb over drop outs, give them a protocol analysis and an audio record of the problem.

    1. Re:Tapping VOIP with Ethereal by Erwos · · Score: 1

      You should put up a HOWTO. I'd be interested in reading it.

      -Erwos

      --
      Plausible conjecture should not be misrepresented as proof positive.
    2. Re:Tapping VOIP with Ethereal by Requiem+Aristos · · Score: 1

      I agree with the other poster; it would be cool to see more information on this.

      Thanks!

    3. Re:Tapping VOIP with Ethereal by bkw.org · · Score: 2, Informative

      While I do trust you can dump the data and listen to it... Nobody ever said VoIP was secure. (At least not yet)

      If you have drop outs and use ethereal you'll notice that on the IAX side the packet timestamps will slip. This is caused by voicepulse not upgrading their servers. IAX should have consistent 20ms steps. While on the SIP side you should see 160ms steps with ZERO slips in time from packet to packet. ANY slipage causes audio drop outs.

      bkw_ @ #asterisk on irc.freenode.net

    4. Re:Tapping VOIP with Ethereal by Anonymous Coward · · Score: 0

      Since it's obviously impossible to have perfectly timed responses at exactly 20ms and 160ms intervals, what kind of uncertainty is allowed in the received time values to maintain audio quality?

  68. Good news everyone! by Saeger · · Score: 4, Funny
    --
    Power to the Peaceful
  69. Re:Good. And good Again. by Catamaran · · Score: 4, Informative
    As the cliche goes, if you're not a criminal, you have nothing to worry about. If you're paranoid, I'd guess you shut up anytime a cop comes within hearing distance.

    It's not paranoia. These days people are being arrested for carrying anti-Bush signs.

    --
    Test 1 2 3 4
  70. EU and Data retention by villoks · · Score: 2, Informative

    Tame.

    EU is currenly planning 1-3 year mandatory data retention for all Internet traffic data. The process is right now at the member states' goverments (E.g. the Finnish goverment just decided to support the initiative but the parliament has to still agree..) So for all Europeans, contacting your MP would be a very good idea..

    More info here:
    Statewatch - EU and Data retention

    V.

    1. Re:EU and Data retention by 42forty-two42 · · Score: 1

      Good luck. How much data passes through internet connections every second in the EU? How many hard drives would that need? Heck, hard drives might not be fast enough. There's no way to actually record all of that. And anything important should be encrypted anyway - there could be a sniffer on your cable modem local loop at any time, as it's a broadcast technology.

  71. Cryptography Confers No Right To Privacy by reallocate · · Score: 1

    Cryptography doesn't confer a right to privacy. It is analagous to hiding.

    Would you argue that the FBI should not be allowed to look for criminals who are hiding? Who use coded messages? If not, why would you assert that the use of cryprography to hide a message means the FBI has no right to see that message?

    --
    -- Slashdot: When Public Access TV Says "No"
    1. Re:Cryptography Confers No Right To Privacy by argent · · Score: 1

      Cryptography doesn't confer a right to privacy.

      That's not the issue. the question is: does Cryptography confer a right to Cryptography? And if not, how do you enforce a law against Cryptography? Didn't we just go through this with PGP and DES?

    2. Re:Cryptography Confers No Right To Privacy by reallocate · · Score: 1

      Use of cryptography does not confer a right to hide criminal conversations from legal authorities. Nothing confers a right to keep criminal conversations private.

      You don't enforce a law against cryptography. You enforce a law against conspiracy by not allowing criminals to hide behind cryptography. If that means cryptography is less cryptic, so be it.

      --
      -- Slashdot: When Public Access TV Says "No"
    3. Re:Cryptography Confers No Right To Privacy by argent · · Score: 1

      Nothing confers a right to keep criminal conversations private.

      I have not asserted that anything does, so this statement has zero semantic content. What I am asking, to put it bluntly, is that since in this instance you can't enforce a law against allowing criminals to hide behind cryptography without outlawing cryptography, do you support outlawing cryptography, and do you support outlawing open source software that implements cryptography?

      If that means cryptography is less cryptic, so be it.

      It doesn't merely mean cryptography is "less cryptic", it means cryptography is "illegal".

      To enforce that, you need to keep people from writing and publishing cryptographic software. This has already been tried, and the result was to promote the growth of cryptographic software companies outside the US without actually making it any harder to get cryptographic software. If they manage to prevent the USA's allies from allowing the sale of cryptographic software, then who will this kind of law enrich? Why, the USA's enemies! Is that really the goal you're shooting for? It seems a bit of an "own goal" to me, no matter what your motives.

    4. Re:Cryptography Confers No Right To Privacy by reallocate · · Score: 1

      >>"... zero semantic content..."

      Get an "A" in that class?

      >>"you can't enforce a law against allowing criminals to hide behind cryptography without outlawing cryptography, do you support outlawing cryptography."

      Don't believe I said anything like that. I said use of cryptography doesn't confer a right to privacy. If the FBI has reason to seek a tap on a conversation, they do not give up that right because the parties to the converstation encrypt their dialogue.

      I don't believe it is necessary to outlaw cryptographic software to achieve this. It does mean that the FBI needs the means to break encryptions. This can be done technically or by mandating the vendors of cryptographic tools provide the FBI with the means to break their encryption. Could this be reliably enforced outside the U.S.? No, but that's no reason not to enforce it where we can. Opposing such a law because it would "enrich" people in other countries is rather lack opposing a law banning trafficking in slaves because it will only shift the profits from the trade offshore.

      --
      -- Slashdot: When Public Access TV Says "No"
    5. Re:Cryptography Confers No Right To Privacy by argent · · Score: 1

      This can be done technically or by mandating the vendors of cryptographic tools provide the FBI with the means to break their encryption.

      Anyone with a soundcard and a compiler is a "vendor of cryptographic tools".

      that's no reason not to enforce it where we can.

      The failure of the ITAR to prevent the widespread use and distribution of strong cryptography demonstrates that there is no place where this kind of law can be enforced.

      This isn't like a law against trafficking in slaves, or gold, or drugs, or anything else that has a physical existence. This is a law against trafficking in information. THAT kind of law is only useful where there is a benefit to keeping the honest citizen from engaging in it, which by your own argument hardly applies in this case.

      It simply doesn't matter whether there's a right for criminals to own strong crypto or not, because at the very best the only people you can keep from using strong crypto by making it illegal are the honest citizens... and history has proven that you can't even do that much.

  72. I don't get it. by pclminion · · Score: 2, Interesting
    They can already tap your "regular" phone and you don't seem enraged by that... What's so different about VoIP?

    Or are you saying the government should not be able to collect evidence in criminal investigations, even with a warrant?

    1. Re:I don't get it. by argent · · Score: 2, Interesting

      If they have to be able to tap my VOIP phone, then I can't be allowed to have the source to the software for my VOIP phone, otherwise I could modify it so as to be untappable. If I can't have the source to my VOIP phone, then there can't be any open source VOIP phones. If there can't be any open source VOIP phones, then the VOIP protocol has to be protected. Not only that, but ALL VOIP protocols must be protected. Which means a free open source VOIP program becomes an illegal program, even if it doesn't interoperate with commercial VOIP...

    2. Re:I don't get it. by yeremein · · Score: 2, Informative

      a free open source VOIP program becomes an illegal program, even if it doesn't interoperate with commercial VOIP...

      We're not there (yet anyway). From the news.com article:

      the FCC did not grant the police agencies' request to extend CALEA to cover instant messaging and VoIP programs that are not "managed"--a reference to peer-to-peer programs like the original version of Skype and Pulver.com's Free World Dialup, which do not use the public telephone network.

      That doesn't mean they won't try in the future, of course, but voice chat in Unreal Tournament isn't illegal yet...

  73. Do try harder-Trail of fears. by Anonymous Coward · · Score: 5, Insightful

    "How about our good friends in the government get off their lazy asses and start passing legislations that will make people hate us less not more?"

    People have been hating us since the beginning. That King George was pretty pissed off. Then there's that whole Hawaii thing. Or the Phillipines. So what makes the present special?

    1. Re:Do try harder-Trail of fears. by Anonymous Coward · · Score: 0

      Um, the relatively recent development of accessible, fissile material?

    2. Re:Do try harder-Trail of fears. by irc.goatse.cx+troll · · Score: 1

      "So what makes the present special?"

      The fact that we're just passing worse and worse laws, not improving in any way?

      --
      Pain lasts, kid. Its how you know you're alive. Sometimes I think this growing up thing is just pain management-TheMaxx
    3. Re:Do try harder-Trail of fears. by Anonymous Coward · · Score: 0

      People have been hating us since the beginning. That King George was pretty pissed off. Then there's that whole Hawaii thing. Or the Phillipines. So what makes the present special?

      Um, because I think this time round, people think America is in the King George role.

  74. Cue Orwell by whovian · · Score: 2, Insightful
    Found this essay on RFID implants and the tracking of people. Excerpt borrowed without permission from Bill Hammack:

    But it isn't Orwell's Big Brother Police Force and their in-your-face technology that menaces us. Since World War Two we've moved step-by-step toward a system where a police state need no longer be brutal, or openly inquisitorial, or even omnipresent in public consciousness. Police have instead moved in the direction of anticipating and forestalling crime. So, the trend is toward tracking every citizen throughout his or her life - geographically, commercially, and biologically.

    This began soon after World War Two with records of fingerprints, extensive paper dossiers on citizens, and then computer punch cards to sort through files. It evolved into the electronic databases and biological profiling we have today. These new chips are just a way to quietly add a page to an electronic dossier.

    Still, the potential for abuse is enormous. In the future, perhaps, when someone approaches a sales desk their credit info would be displayed automatically for the sales staff. Or, the state could track the public movements of everyone. As a result people would be less likely to do public activities, to engage, for example, in protests that offend powerful interests.


    Good criminals and terrorists, as do spammers, will try to stay one step ahead of the countermeasures.
    --
    To-do List: Receive telemarketing call during a tornado warning. Check.
    1. Re:Cue Orwell by T-Ranger · · Score: 1

      Not that I dont agree with the general statement, but the Nazis were using computer punch cards in the 1930s to keep track of Jews. And, I suppose, you could say that the US Government was doing so as far back as 1890; that Czarist Russia was doing so in 1896, insofar as they were using punch cards in Censuses.

  75. Can you hear me now? by triffidsting · · Score: 1

    Good.

    --
    Non, je ne veux pas coucher avec toi ce soir.
  76. Cracking encryption. by dmaxwell · · Score: 5, Insightful

    I seriously doubt the government has some uber-leet technology that lets them crack any encryption. Encryption can do two things and two things only.

    1. Encryption can secure a communications link. Properly used Alice can talk to Bob with reasonable protection from Eve tapping the link halfway between them.

    2. Encryption can secure stored data. Properly used, Alice could protect the files on her keychain should Eve filch it out of her purse.

    Encryption will not:

    1. Secure the ends of a link. If Eve physically installs a keylogger in Alice's keyboard then it doesn't matter what crypto she uses. Come to think of it, the old saw applies: all bets are off if an attacker has physical access to a terminal.

    2. Preclude treachery and incompetence. Law enforcement may have threatened the other end of your link who is letting them see everything in return for light treatment. A while back, NPR ran a story about police officers who took over a kiddy porn website and roped in a pile of customers. Encryption doesn't help if the other end of the conversation isn't who you think it is. Maybe the other side left his passphrase taped under his keyboard. "Rubber-hose cryptanalysis" is what they call it when the police starting leaning on you.

    3. Prevent the government from taking an interest in you. Certain uses of it may even draw their interest. Staying out of view of larger predators is often the best defense.

    4. Conceal the existence of the link. Often the government only needs to prove Alice talked to Bob on 7/24/02 at 3:24p.

    5. Somewhat OT but something else encryption doesn't do: Allow Alice to share data with Bob while simultaneously preventing Bob from divulging it to Eve. Both #1 and #2 apply. Bonus points if you understand what this scenario applies to.

    What this all boils down to is that encryption is largely ineffective against old-fashioned police work. It is also worth noting that Al Queda and others are notorious for using low-tech communications and isolated organizational cells. Don't give those hunting you terminals and only the minimum in physical links to play with. If you're a criminal, try to work alone if possible and keep your mouth shut. If you are a crook or a terrorist, communications are the least of your problems. Your partners in crime and your own mouth are far more dangerous.

    1. Re:Cracking encryption. by wirelessbuzzers · · Score: 1

      I seriously doubt the government has some uber-leet technology that lets them crack any encryption.

      Especially as in that case all those math geeks they're hiring at NSA are a diversion. Of course, the conspiracy theorists wouldn't put this past them.

      Encryption can do two things and two things only.

      You're leaving things out if you're counting only symmetric crypto, used in a simple way. Crypto can do other useful things, such as allowing Alice to verify (beyond a reasonable doubt) that a document was unchanged, or that Bob or someone with access to Bob's computer has sent it, even though she may not have met Bob. Similarly, she can send Bob a message with reasonable certainty that Eve will not be able to read it passing between their computers, even if she has not met Bob.

      There are a number of other applications of encryption, from anonymous secure voting to anonymous (or, if you don't want money laundering and extorion, mostly anonymous) digital cash.

      Encryption will not:

      3. Prevent the government from taking an interest in you. Certain uses of it may even draw their interest. Staying out of view of larger predators is often the best defense.


      Right, of course. You might pull it off using steganography, but if they caught you with that, they'd really be suspicious.

      4. Conceal the existence of the link. Often the government only needs to prove Alice talked to Bob on 7/24/02 at 3:24p.

      Again, perhaps steg. There are also cryptographic protocols that are believed to be resistant to traffic analysis. IPSEC provides some resistance, and there are more obsessively anonymous systems such as FreeNet. MixMaster does a pretty good job for email.

      5. Somewhat OT but something else encryption doesn't do: Allow Alice to share data with Bob while simultaneously preventing Bob from divulging it to Eve. Both #1 and #2 apply. Bonus points if you understand what this scenario applies to.

      This is also true, but there are deniable signature schemes, whereby Alice can share data with Bob, who can choose to divulge that data to Eve, but can't prove that it's what you actually sent. If Eve can additionally tap the line, then you have to use data expansion (or a handshake in crypto hardware, if you can pull it off), but you can still render Bob unable to prove which of several messages Alice sent.

      If you are a crook or a terrorist, communications are the least of your problems. Your partners in crime and your own mouth are far more dangerous.

      Terrorists these days can be pretty zealous, and I would imagine that the chances of them ratting each other out are pretty small. Of course, the goverment may still trace out their networks (your #4), but this would fall under communications being a problem.

      --
      I hereby place the above post in the public domain.
    2. Re:Cracking encryption. by Perky_Goth · · Score: 1

      can i swap the points for a cookie?
      i'm guessing the answer to number 5 is CD/DVD/ebook/aac...

    3. Re:Cracking encryption. by magefile · · Score: 1

      Don't forget, it's in the government's interest that people think encryption will stop "everyone (IP thieves, oh no!) but the gov't". So since giving up informants (or other methods) doesn't do them any good, discrediting encryption *does*.

    4. Re:Cracking encryption. by dmaxwell · · Score: 1

      I should have been less categorical. I did indeed neglect verification applications of pubkey crypto. I believe the other applications you mention will still boil down securing links, data in place, or authentication. Nothing says you can't do combinations.

      Steganography can indeed mitigate difficuties but steganography isn't crypto although it is best combined with crypto.

    5. Re:Cracking encryption. by Baby+Duck · · Score: 1

      The most intelligent thing I've read on /. in a very, very long time!

      --

      "Love heals scars love left." -- Henry Rollins

    6. Re:Cracking encryption. by Zareste · · Score: 1

      If you're a criminal

      Which, in America, 99% of us are. Although this is coming from the Department of Redundancy Department, a month from now I won't be able to take a shit the wrong way without the cops busting down my door. Some good tips here.

      We all know this new wave of information control isn't going to catch anyone. A neanderthal could point that out. Al-Queda members will circumvent it, while people like me who are still bending over backward to avoid getting a ten-month sentence will just be brought in under suspicion.

      Once again it's just a new way for the real terrorists to keep us in their grip.

      I wonder how much longer the tinfoil hat scarecrow is going to stand now that the Big Brother stuff is becoming so painfully obvious that even the most conformed and obedient psychos are beginning to notice it.

      --
      I am NOT a number! I am a - oh wait, I'm number 761710. Look! 761710!
    7. Re:Cracking encryption. by Baricom · · Score: 1

      It sounds suspiciously like Palladium/TCPA to me.

      Alice == Corporations
      Bob/Eve == Consumers

    8. Re:Cracking encryption. by Alsee · · Score: 1

      can i swap the points for a cookie?
      i'm guessing the answer to number 5 is CD/DVD/ebook/aac...


      We will have to turn to out panel of judges to see if that answer is acceptable... ::Listens at earpeice::
      There seems to be some dissagreement among our judges, one moment please... ::Listens at earpeice::

      Oh! So close! But no cigar... err... umm... no cookie.

      I'm sorry, the answer we were looking for was DRM.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  77. Current Setup For Taps by natas802 · · Score: 1

    I know that some of these voip providers MUST be tapping lines already. maybe not on a large scale like the feds would want but im sure that theres no way that some voip lines arent tapped already. Does anyone know how theyre currently tapping these lines? Are they doing it on the PSTN gateways? On frames somewhere? On your Terminal Adapater even???! anyone know?

  78. Roll with the punches... by ryane67 · · Score: 2, Funny

    So we get a story saying the FCC says TiVO can be shared... then they come right back with tapping VOIP. I guess you just gotta roll with it. Score one for the bad guys.

    --
    ?SYNTAX ERROR IN LINE 42
  79. Re:Good. And good Again. by bvdbos · · Score: 0

    and again the same debate which has been held many times before. At the moment being a member of for instance greenpeace is not illegal. But what if they try to name stopping a shipload of illegal wood coming in the harbour and politicians start labelling this act as "terroristic". There's a whole bunch of activities which are morally right, but which certain governements could call "illegal". Though this bill is no problem at the moment, it's a small step to use it in a way nobody (except them of course) would want them too.

  80. What about IP to IP programs? by Anonymous Coward · · Score: 0

    What about a program like PicoPhone
    http://www.vitez.it/picophone/ or DharmaPhone http://www.datavoice.es/DharmaPhone/en/default.htm Would they still be able to tap these programs?

  81. Re:Good. And good Again. by Anonymous Coward · · Score: 0

    Many businesses use encryption to prevent commercial espionage.
    In some cases governments have intercepted commercial secrets from foreign business interests and passed them on to their local corporations to use for their advantage.

    Encryption is a vital tool of a free market.

  82. Software from abroad? by Eudial · · Score: 1

    *sigh* Looks like me and my al quaida buddies will have to start importing our VoIP gear ;)

    Damn, don't you just hate those shipping fees?

    --
    GAAH! MY PRINTER IS ON FIRE!!! PUT IT OUT! PUT IT OUT!
  83. Another issue too. by einhverfr · · Score: 4, Interesting

    We are only talking about centralized networks. This is not likely to pertain to or be enforceable regarding decentralized or private networks. So if my company has a voip tunnel with another company then it all works well.

    Why can't someone and his criminal buddies just set up a SIP-based VOIP channel between them and encrypt the traffic? Seems safer that way....

    Or better yet-- there are areas where VOIP would be *required by law* to be encrypted, such as between doctors discussing information protected under the HIPAA act.

    --

    LedgerSMB: Open source Accounting/ERP
    1. Re:Another issue too. by pavese · · Score: 0

      Lol, if it's not encrypted, the word "tappable" doesn't even apply in the first place, right?

    2. Re:Another issue too. by Minna+Kirai · · Score: 1

      Why can't someone and his criminal buddies just set up a SIP-based VOIP channel between them and encrypt the traffic?

      They can, easily. And that's what scares me.

      Because as you've noticed, these current laws are so easily circumvented as to be useless. The only way to make them useful will be to outlaw the private transmission of encrypted traffic, or possession of encryption software... and I wouldn't put it beyond Tom Ridge to attempt that.

      (I know the USA people would never let him suceed, but they may try)

    3. Re:Another issue too. by einhverfr · · Score: 1

      Because as you've noticed, these current laws are so easily circumvented as to be useless. The only way to make them useful will be to outlaw the private transmission of encrypted traffic, or possession of encryption software... and I wouldn't put it beyond Tom Ridge to attempt that.

      But you have a very interesting issue here and this is that according to HIPAA, any sensitive information (patient medical info, for example) transmitted over a public data network such as the internet MUST be suitably protected and encrypted. I believe that such a proposal would make VOIP for medical clinics fundamentally impossible to impliment legally if such a provision were to be passed. The other option is that HIPAA could be repealed in the name of national security.

      Even if they did, you have another issue. That is that there is no artifical boundary around VOIP. What about SSL, GPG, etc?

      Encryption is the *basis* of e-commerce. One cannot simply undermine it without destroying the whole foundation of internet commerce.

      --

      LedgerSMB: Open source Accounting/ERP
    4. Re:Another issue too. by FireFury03 · · Score: 1

      We are only talking about centralized networks. This is not likely to pertain to or be enforceable regarding decentralized or private networks.

      This is going a bit offtopic, but maybe you can explain why anybody even needs centralised VoIP networks? The nature of VoIP is that it is end-to-end - the only time you need middlemen doing any VoIP gatewaying is when you need to gateway VoIP traffic to the PSTN. You don't pay for an "email provider", you run your own server instead - how is VoIP any different?

      And if you're saying you need a VoIP provider to connect your phone to on a pay-per-minute basis and then they work out what needs to go over the PSTN and what goes over the internet (in a you-don't-need-to-know kind of way), that isn't at all the case - the ENUM system is designed to map normal phone numbers to VoIP servers using DNS. So your VoIP server can make a DNS lookup for the phone number you're calling - if it resolves then your VoIP server makes a direct connection (costing you only bandwidth) and if it doesn't resolve then you need to call over the PSTN, either by routing VoIP via a PSTN gateway (and paying them accordingly) or by having your VoIP server connected to the PSTN itself and paying your normal telco for placing the call.

      In the next few years, I think we can expect to see the PSTN slowly vanish in favor of doing everything over the internet - we probably need a bit more infrastructure such as MX-style DNS records, but in the long run I can't see how we will actually need any "telephone providers" - all calls can be made directly over IP without using any middlemen.

    5. Re:Another issue too. by Minna+Kirai · · Score: 1

      I believe that such a proposal would make VOIP for medical clinics fundamentally impossible to impliment legally if such a provision were to be passed.

      No. It would just mean that encryption is treated like a machinegun. The government can have it, and individuals can be permitted to temporarily have them for the purpose of following government instructions... but it's still not really legal.

      What could happen is the FBI/NSA randomly sniffs internet traffic. Anything they can't read, they track down the sender and check if he's approved for crypto- if not, then off to jail.

      Encryption is the *basis* of e-commerce. One cannot simply undermine it without destroying the whole foundation of internet commerce.

      Ban all crypto that the government can't break. That means mandated key-escrow backdoors.

    6. Re:Another issue too. by BBQKing · · Score: 1

      They'll just rule that encryption itself is a terrorist activity... and anyone who hides their messages will be arrested according to PATRIOT III.

    7. Re:Another issue too. by einhverfr · · Score: 1

      Ban all crypto that the government can't break. That means mandated key-escrow backdoors.

      If I were a bank, I would have a fit over any such proposed order. After all *they* bear most of the liability for fraud, and if the crypto is cracked they are the ones who are vulnerable. Key excrows are just another form of back-doors which add to the insecurity of such ecommerce.

      Also, I am not sure that the national security think-tanks would endorse such an idea. The problem with crackable encryption is that they couldn't use it either. After all who can be *sure* that there is not an enemy who is bribing someone who has read access to the key escrow service as well.

      A more likely scenario would be to require that *public* keys be escrowed not for the purpose of *breaking the encryption* but rather for the purposes of *identifying the users.* This information could then be the basis for search warrants, etc. (i.e. John Doe has had encrypted conversations with a known terrorists and we must have a search warrant to his office and home). The danger there is far more subtle (loss of privacy) but still equally great.

      --

      LedgerSMB: Open source Accounting/ERP
    8. Re:Another issue too. by 4of12 · · Score: 1

      What could happen is the FBI/NSA randomly sniffs internet traffic. Anything they can't read, they track down the sender and check if he's approved for crypto- if not, then off to jail.

      That'll catch the stupid terrorists, anyway.

      The smart ones will use stego to put the encrypted data into high order bits on pictures of Aunt Tilly's cat.

      As another poster so aptly put it: wiretapping was only an accidental byproduct of the old analog circuit-based phone system. Eavesdropping on voice communications was not such a convenient tool, nor should we expect such convenient tools to fall out of future technologies, any more than we expect political leaders of technologically advanced nuclear-armed countries to be paragons of wisdom.

      Trying to force fit such a capability onto new technology is a stupid and futile exercise that will make life miserable for the 99.99% of the law abiding public while not impacting the 0.01% super bad guys they intend to thwart.

      Believe me, if an economical and practical flying car were invented tomorrow, they'd insist there be an equivalent means for the police to stop such cars as the spiked belt provides for wheeled vehicles. Probably legislate that flying cars by equipped with automatic controls that limit elevation, can be remotely controlled by the police, whatever.

      --
      "Provided by the management for your protection."
    9. Re:Another issue too. by Minna+Kirai · · Score: 1

      That'll catch the stupid terrorists, anyway.

      No, it'll catch the amateur cryptographers. Who will be accused of supporting terrorists by promoting and distributing tools useful to evade law-enforcement.

      Eavesdropping on voice communications was not such a convenient tool, nor should we expect such convenient tools to fall out of future technologies,

      Law enforcement is addicted to the ability to wiretap. You should expect them to try to preserve this ability, by outlawing techniques that can circumvent it.

      That includes outlawing the possession of steganography software. Do I think they'll suceed? I hope not. But I think they'll try.

      Just go back to the same argument I just made, but with "steganography" in place of "cryptography": This news report demonstrates that the FBI/NSA wants to have wiretapping ability in the future. You have noted that steganography will make wiretapping powerless. Therefore, to preserve wiretapping, they will have to try to destroy steganography. They'll trot out the list of criminals and terrorists who've been arrested based on wiretaps, and then explain that if those evil men had known about crypto and stegano, they'd still be free to kill and abuse us.

      PS. They won't bother to suppress steganography until private-encryption is already mostly destroyed. Steganography has no real value if you have crypto (and if crypto is commonly used so that it's doesn't raise suspicions on its own)

  84. W-R-O-N-G by Safety+Cap · · Score: 5, Informative
    USA PATRIOT ACT, section 214-216 means that the boys in the black sedans don't even need to prove jack in order to tap your arse--all that is required is signoff from a govt. attourney. Oh, and you are prohibited from finding out if they've tapped you (unlike in the olden days) until they haul your yellow self off to one of their reeducation centres.

    Hope you feel safe, 'cause if you gave up all those rights for ... whatever it was you got, then you just got angloed down, mi amigo.

    --
    Yeah, right.
    1. Re:W-R-O-N-G by pavese · · Score: 0

      VoIP Must Be Tappable, or else... :P

    2. Re:W-R-O-N-G by Wateshay · · Score: 4, Interesting

      Not to say you're wrong, or that those things aren't in the Patriot Act (which I have some serious concerns about), but I read the sections you linked to, and I don't see what you're saying is in there. Could you point out sections/rules/items, where it says that the government's burden of probable cause for getting a wiretap is lowered (well, ok, it does take away some of the international terror requirements on investigations of non-citizens) or where the requirement to get a judge's signature for a wiretap is removed? I'm not saying it's not there, but I read it and I don't see that. It also seems like the gag rules on telling people about wiretaps are fairly limited in scope, too, and require someone to show a compelling reason to a judge, and provide for annual Congressional oversight of each and every gagged wiretap.

      I've been a fairly vocal critic of the Patriot Act, and have a lot of major concerns about it. I'm having a hard time getting all that worked up about what I read in that link you provided, though. If everything in the Patriot Act is really that tame, I'm going to go so far as to say that my worries were mostly unfounded.

      Of course, I didn't read through the link with fine scrutiny, so I will allow that I may have missed or misread something, but if I did, I'd be very interested to hear what it was.

      --

      "If English was good enough for Jesus, it's good enough for everyone else."

    3. Re:W-R-O-N-G by WindBourne · · Score: 4, Insightful
      This is exactly what the patriot act is about. If you think about it, it allows the feds to examine all wired transactions as well as all databases belonging to whoever they want. The interesting part about this, is how many terrorists would be dumb enough to use our systems in the clear. Keep in mind, this was geared towards Al Qaeda. Ronald Reagan approved the CIA training that we gave the Bin Ladin and ilk to take on the USSR in afghanastan. Now, he uses that same education against us. Part of that education teaches that you either
      • use the local system by encoded(encrypted) in a different way.
      • use a different means of communication.
      Al Qaeda has been using human carriers as well as encoding into messages on the internet with switching prearranged e-mail addresses. For all intense purpose, we have no means of tracking them. And the feds know that. Patriot act was not intended to be used against terrorists. Good example is that Ashcroft promised many times prior to pat I that it would only be used against terroists. Then to help push pat II, he made the argument that it had been used against a number of drug pushers, rapists, etc. Ok, so these are bad people. But how soon does it get used against everyday citizens. My guess it about 2.5 years, about 1 month after it was passed.
      --
      I prefer the "u" in honour as it seems to be missing these days.
    4. Re:W-R-O-N-G by Anonymous Coward · · Score: 0

      You didn't answer his question. Where exactly in the Patriot act does it say all this?

  85. Just imagine... by Gelfman · · Score: 4, Funny

    ...what will happen when major telcos start employing quantum cryptography...

    Ashcroft: All telecommunications are belong to us - intercept...intercept!
    Techie: But Johnny, you canna change the laws of physics
    Ashcroft (non-musically): Let the eeeeeagle soar!
    Techie: But...
    Ashcroft (in the style of Homer making a point): I said let ... the ... eeeeeagle ... soar!

    --
    ...and, on the seventh day, God switched off his Mac.
    1. Re:Just imagine... by T-Ranger · · Score: 1

      In this house we will OBEY the laws of THERMODYNAMICS!

  86. Uh-uh by melted · · Score: 1

    If I encrypt something with a 256 bit key not even lord almighty will be able to decrypt my babbling in a reasonable timeframe. :-)

    1. Re:Uh-uh by frizzbit · · Score: 1

      And when they notice you're using such a strong encryption they'll go back and use that as evidence that you've got something to hide and get a warrant and surrepticiously install a bug in your keyboard which will work around your encryption.

    2. Re:Uh-uh by Dean+Kusler · · Score: 1

      Hmm... That would probably be illegally circumventing the protection mechanism that you are using to protect your copyrighted material (speech and writings). Not that that would stop them...

    3. Re:Uh-uh by Overzeetop · · Score: 1

      There's your check & balance...they'll have to go back and get a warrant to install the bug. They're likely going to need more than a "he's using strong encryption" argument to get a warrant. And the system will work as intended again.

      --
      Is it just my observation, or are there way too many stupid people in the world?
  87. 48 hr. Summary: All your rights are belong to US by Proudrooster · · Score: 5, Insightful
    To summarize the past 48 hours of news:
    • The government should be able to secretly listen into all your voice communication and can do so via the Patriot Act.
    • The FCC will allow you to share freely available digtal TV shows with up to 9 friends with a TiVo as long as the shows are encrypted and use a cumbersome key system.
    • Fair Use copying of copyrighted DVD's is illegal.
    • Munich stopped deployed Linux because of "Patent Concerns"
    • The NTSB want's "black boxes" in all cars.
    • Your employer owns all your thoughts.
    • All the Euro countries and Australia are caving-in, errr, I mean harmonizing to screwed up US copyright and patent laws.
    • Microsoft is getting on the Patent train. (Just as ESR predicted)
    • Even with all this fussing and fighting over technology, the best anyone could do in the Darpa Grand Challenge (2004) was to get an unmanned vehicle to travel 7 miles through the desert before crashing or catching fire.

    Is anyone else out there starting to get angry? How long until the Deparment of Homeland Security implants RFID chips in our necks? How long until employees are forced to get their employer's logo tattooed on their face after changing their last name and waiving all of their human rights in the employment contract.

    Geeez..... what kind of America are we living in?

    America, previously land of the free, now home of the Corporate controlled puppet government run by lawyers with the best healthcare taxpayer money can buy.
  88. Only Worry: Spooks Must Legislate Hackability by reynolds_john · · Score: 1

    Am I the only one that's worried that VOIP must be deemed tappable in order to be implemented? It scares me that we must legislate something that simple into products. Are we that far behind - shouldn't the spook originazations already have such technology down cold, and have the ability to listen in without really trying?

    Hey world, please legislate your VOIP so that we can listen in because we're too technologically stupid to figure it out otherwise. We appreciate your support.

    1. Re:Only Worry: Spooks Must Legislate Hackability by 42forty-two42 · · Score: 1

      I doubt they have anything to crack the likes of 256-bit AES and 2048-bit RSA.

  89. Who's going to pay? by prrole · · Score: 2, Insightful

    You are. If they are really serious about this, it's going to mean massive investments for serviceproviders. One thing is collecting customer statistics about source/destination and type of traffic - actually sniffing it, and sending it to central location(FBI/CIA whatever) is an entirely different matter that requires special hardware. E.g. a Juniper monitoring PIC (special expensive linecard for special expensive routers used by serviceproviders) doesn't come cheap, and the money has to come from somewhere - either from increased ISP fees, or increased tax in the unlikely event that the government is going to foot the bill.

  90. Re:48 hr. Summary: All your rights are belong to U by argent · · Score: 1

    Speaking of countries caving in: don't forget the Australian Open Source electronic voting system isn't Open Source any more.

  91. Not under PATRIOT by Anonymous Coward · · Score: 0

    They can in fact tap your phone without a warrant as long as they file for one within three days of tapping the line. My question is what happens if it is denied?

    Also, the notice provision does not apply in national security cases. If it did then sneak-and-peak searches (for which you are never notified) would make even less sense. What cases aren't about national security these days? Drug pushers are terrorists, computer criminals are terrorists, money launderers are terrorists, charities are terrorist organizations and political dissent groups are terrorists trying to overthrow the government.

    And you also assume too much integrity in police departments. In California they recently admitted they did willy-nilly tap phones for nearly a decade by abusing warrants for public phones.

    1. Re:Not under PATRIOT by pavese · · Score: 0

      It's quite simple I guess... Osama != Saddam, and so if "Michael" is supposedly such a liability or something. Keep in mind: Michael != "Michael" ... Right?

  92. Remember the patriot act... by nurb432 · · Score: 1

    That negates the need for court orders, and opens it up for abuse..

    Thus my concern of my freedom of privacy.

    --
    ---- Booth was a patriot ----
  93. PGP too complicated? Try PCP(not drugs don't fret) by iamcf13 · · Score: 2, Interesting

    The Pure Crypto Project (based on Modular Exponentiation and RSA alone)

    The source code is in Python but a savvy programmer can port it to the language of their choice. For example, I recoded the 'windowed exponentation' routine in the SDLH function in C for use in some software I wrote a while ago.

  94. doesn't this help Skype over Vonage? by nusratt · · Score: 1

    Isn't Vonage a black-box turn-key solution?
    And so wouldn't it be easier for users to add encryption to Skype?
    And who would want to us VOIP *without* encryption after this news?

    1. Re:doesn't this help Skype over Vonage? by hedley · · Score: 1

      No need, its end-to-end encrypted today.

      So let me see...

      I am Joe Bad Guy, I can *pay* Vonage/8x8/ whoever
      with a traceable payment method and then be subject to CALEA wiretap provisions... OR...

      I can download the FREE program Skype and make encrypted calls over the same nets that pay calls scrutinized by CALEA go over....

      Yeah Joe Bad Guy will logically pay the fee and get tapped.

    2. Re:doesn't this help Skype over Vonage? by Anonymous Coward · · Score: 0

      how do You know that Skype calls are really encrypted?

    3. Re:doesn't this help Skype over Vonage? by maximilln · · Score: 1

      I can download the FREE program Skype and make encrypted calls over the same nets that pay calls scrutinized by CALEA go over

      Can you call a residential telephone number with Skype?

      That's what this is really addressing. VoIP networks that provide interfaces to the residential telephone networks.

      --
      +++ATHZ 99:5:80
  95. New attack: freedom of assembly. by Positive+Charge · · Score: 3, Interesting

    Frankly this wire tapping business has gone on long enough.

    Any time a person picks up a phone to call someone, there is a subtle change in his thinking if he thinks he might be surreptitiously monitored. There are certain things you just don't say.

    How is this different from meeting with someone on the street, perhaps to organize some political effort? If you think you may be overheard, it changes what you say.

    (Thinking from a two hundred year old perspective,) the difference is that on the street, you can see who is listening. You know what is being said.

    Secret wire taps by a third party subvert the entire process that granting the political freedom of assembly was intended to protect. If I want to speak to someone on the phone, law enforcement should be absolutely limited to compromising that other party in order to get in on the conversation. If there is a second party on the phone, I should get a little flashing light informing me that there is another listener.

    I would just switch to Skype, except I have no idea how secure their encryption is either.

    I wrote a really bitchy blog entry about this a while back right here, if you care.

    1. Re:New attack: freedom of assembly. by Anonymous Coward · · Score: 0

      We really need open standards for VoIP such that we can implement voice coder modules of whatever format we wish. If that be an encrypted link, so be it.

    2. Re:New attack: freedom of assembly. by maximilln · · Score: 1

      the difference is that on the street, you can see who is listening

      Unless they're hiding behind a corner or under the bushes.

      Frankly this wire tapping business has gone on long enough

      Amendment IV guarantees you the right to be secure against unreasonable search. If everyone is being monitored then it's not unreasonable to monitor. Amendment IV does not guarantee any right to absolute privacy.

      I'm not a proponent of these Big Brother efforts, mostly because they're a waste of my tax money and have no proven track record of effectiveness, but the Constitution doesn't do as much for us as we think it does. There's always the hitch in Amendments IX and X but no politician has cared a single hoot about those in 200 years.

      --
      +++ATHZ 99:5:80
  96. Law jumping through hoops? NOT by waspleg · · Score: 1, Troll

    its called the patriot act and all they need is suspicion

    in addition to that lets not forget they want an expansion of both power and time (right now the patriot act is set to expire in 2005, lessee how far that gets if bush/asscroft get re-elected) for said anti-constitution

    enjoy your police state and dont' forget you only get 3 national sick days per year and then we feed you to the matter disintegration chamber for spare parts so you aren't a drain on our perfectly civilized society.

    and for hte mods with itchy troll fingers try the reply button you half witted scum fucks =)

  97. It's not the FBI I'm worried about. by argent · · Score: 1

    I have no problem with the FBI being able to monitor conversation between criminals.

    How do you design the protocol such that the FBI can decrypt it but the voyeur down the hall can't? How do you design the protocol such that I can't write an open-source implementation that uses a slightly different encryption when talking to another instance of itself? Doesn't this bring back the whole "these three lines of Perl are a weapon of mass destruction" situation from the bad old days when "crypto was outlawed, and only outlaws have PGP"?

    1. Re:It's not the FBI I'm worried about. by reallocate · · Score: 1

      >>"How do you design the protocol such that the FBI can decrypt it but the voyeur down the hall can't?"

      I don't know, nor do I care. The same logic might be applied to baseball bats: How do you design a baseball bat that can't be used by a murderer to bash in someone's skull? A silly question, obviously. It isn't the technology, it's the behavior that's the issue.

      --
      -- Slashdot: When Public Access TV Says "No"
    2. Re:It's not the FBI I'm worried about. by argent · · Score: 1

      How do you design a baseball bat that can't be used by a murderer to bash in someone's skull?

      I don't know, you're the one arguing that we not be allowed to make baseball bats because some terrorists might use them. You tell me how it makes sense.

    3. Re:It's not the FBI I'm worried about. by reallocate · · Score: 1

      It is a deliberately absurd statement to highlight the equal absurdity of the post it answers.

      This isn't about technology. Freedom to use a technology -- cryptography in this case -- does not extend to using it to commit crimes. To continue the baseball analogy, you're free to use a bat however you wish, but that freedom won't protect you if you use it to murder someone.

      --
      -- Slashdot: When Public Access TV Says "No"
    4. Re:It's not the FBI I'm worried about. by argent · · Score: 1

      you're free to use a bat however you wish, but that freedom won't protect you if you use it to murder someone

      But the law is not saying "you can't murder someone with a bat". It's saying "you can't posess a bat with which it is possible to murder someone".

      They don't wait until someone is engaged in a conspiracy, then go in and replace their strong crypto with weak crypto. That would tip off their targets that the jig was up. No, they ban the use of strong crypto for everyone. It's the only way to be sure that the bad guys don't turn out to be using strong crypto at an embarassing moment.

      This has nothing to do with the rights of criminals, and everything to do with the technology.

  98. Re:For privacy, we'll hafta do what the Mafia does by crackshoe · · Score: 1

    try a windowless room - you can use a window as a microphone pickup if you're so inclined.

    --
    Don't worry - its just stigmata. Pass me a napkin and don't you dare tell my mother.
  99. Coding your own = Bad! by Anonymous Coward · · Score: 0

    ...easy to code your own algorythm...

    Whenever someone thinks that they can replace SSL/SSH with something much better that they designed this morning over coffee, their computer speakers should generate some sort of penis-shaped sound wave and plunge it repeatedly into their skulls until they achieve enlightenment.

  100. Great. by Anonymous Coward · · Score: 0

    So in otherwords, all the a-holes, dregs, and people with severe paranoia/infeiority complexes in society (corporations, collection agents, private investigators, etc) may also have access to all this since the Government doesn't do squat about them anyways.

  101. Gaming? by marco0009 · · Score: 1

    I admit that I am quite ignorant when it comes to VoIP, but what will this entail for games that have this capability? (UT2004, etc)

    --
    Physics makes the world go 'round.
  102. You mean they actually NEED to tap Nextel Two-Way? by Durandal64 · · Score: 1
    In addition, the FCC has decided that the push-to-talk, or walkie-talkie, functions available on phones from Nextel should also be subject to the same tapping regulations that regular phones are.
    What the fuck do you need to tap these people for? Just follow them around. Everyone within a god damn mile can already hear the conversation perfectly anyway.
  103. quantum communication by Fuzzums · · Score: 1

    No, no, no. The word you were looking for is quantum COMMUNIACTION.

    Using quantum communication has big advantages. Think about intercontinental calls. There no longer will be any delay in the conversation as quantum communication is done at lightspeed...

    Of course there is NOT intent WHATSOEVER to encrypt the communication.

    Hereby I claim a patent.

    --
    Privacy is terrorism.
    1. Re:quantum communication by Anonymous Coward · · Score: 0

      I can't tell if that was sarcasm/irony, but if it wasn't, the phrase GP was looking for was most definitely quantum cryptography.

  104. Re:Good. And good Again. by reallocate · · Score: 1

    "Morally right" is a cultural variable. In a democracy, it is the law that counts, not an individual's moral beliefs. If that individual holds to a belief that runs counter to the law, then that individual must expect to bear the cost of violating the law. No law-abiding nation can excuse criminality simply because the criminal asserts he or she believes the criminal behavior is moral.

    --
    -- Slashdot: When Public Access TV Says "No"
  105. Re:Good. And good Again. by tcopeland · · Score: 1

    > These days people are being arrested
    > for carrying anti-Bush signs

    From reading the article it sounds like he was arrested for disobeying the police.

  106. I can't say I have a problem by Ja�ana · · Score: 1

    If it makes Uncle Sam a little happier, it's not like I'm losing much to that new law, even besides the fact that I don't use VoIP. I'm quite used to using a line that can be easily tapped, and, as of right now, the most common phone I use is cellular, awesome privacy there, huh? While it's true that the government may as well have a probe up my ass 25/7 anyway, since I'm in the service, I'm not sure I would care about this if I were a civilian. Any time that this type of thing happens, the terrorists just find some way to work around it anyway, if they really don't want our intelligence agencies to know what's going on.

    --

    -- Napalm sticks to kids.

  107. Re:Good. And good Again. by reallocate · · Score: 1

    >>"Encryption is a vital tool of a free market."

    Yes, but use of it does not confer a right to privacy. It simply means you want to hide your information from everyone except the recipient. E.g., your encrypted email is no more private than your unencrypted email. It is just more difficult to read.

    --
    -- Slashdot: When Public Access TV Says "No"
  108. Old news? by Jedi+Holocron · · Score: 1

    Didn't we go through all this with Echelon? I mean, wasn't that already deemed legal and installed at all the ISP's point of entry onto the 'net? Maybe I'm wrong.

    CLICK! BEEP! BEEP! BEEP!

    Awe..there goes my little light on Ashcroft's desk again...Darn!

    1. Re:Old news? by Anonymous Coward · · Score: 0

      Echelon's capabilities have been way overstated by the Slashdot crowd and perpetuated by various kooks who actually believe that such a massive surveilance system could actually exist without the common person or network technican knowing

      (Oh yeah, I didn't know about this black box the FBI shipped to our ISP and had us plug into our router, along with the fiber link required for it to communicate back home while I had my job at MCI Worldcom)

      Its amazing what types of crackpot conspiracies people will actually buy into, hook, line, and sinker without as much as a modicum or shread of proof.

  109. Jurisdictional Creep? by macz · · Score: 3, Insightful

    Isn't the FCC appointed by the executive branch along with the bulk of the secretary level people at the DOJ? So the Executive branch is asking the Excutive branch to give the Executive branch the power to tap our phones... and the Executive branch unanimously approved it's own actions... The legislation that comes out of this will look seriously inbred... for good reason.

    --
    ...But I digress. TREMBLE PUNY HUMANS!ONE DAY MY SPECIES WILL DESTROY YOU ALL!
    1. Re:Jurisdictional Creep? by BCW2 · · Score: 1

      The FCC board is appointed by the President. Not all at the same time, as they have staggard terms. These terms are also for 6 years so that hopefully they will do a good job without having to kiss either Presidents ass, that they serve under. And yes, Congress will still have to pass a law to finalize it, but the FCC can act ahead of that. One of the few agencies that can.

      This whole thing just levels the playing field. A police force or the FBI still has to show probable cause and get a judges order for a wiretap, Just like landline or cell phones, they are all now equal.

      --
      Professional Politicians are not the solution, they ARE the problem.
  110. Re:Good. And good Again. by johne_ganz · · Score: 5, Insightful
    I know this will upset the /. gang,

    Possibly. But since you seem to acknowledge that a given population has a contrary view point, do they have a valid reason?

    but I have no problem with the FBI being able to monitor conversation between criminals.

    Sure. I'd venture that on a pure principle level, most people don't.

    The problems usually begin with what "criminal" means. The ones who write the law have a pretty good idea of how they want the law to be used, and at the start everyone thinks it's a super idea. "Criminal" is written pretty broadly, trying to cover "the bad guys".

    As the cliche goes, if you're not a criminal, you have nothing to worry about. If you're paranoid, I'd guess you shut up anytime a cop comes within hearing distance.

    Later on, however, the enforcers would really like to make use of this provision because it's pretty potent. So the definition of "the bad guys" shifts a little through any number of legitimate means, such as changing the scope of what a criminal is to adding new crimes that fall under the original scope.

    Then, a set of events takes place and all of the sudden it's really bad to be a "terrorist". And a terrorist is sort of loosely defined, but definitely someone who is against "the state" and what it represents, using any and all means at their disposal, including disinformation and propaganda.

    Do we have a right to privacy? Sure. Do we have a right to keep criminal conversations private? No. Is this subject to abuse? Sure. Will we be abused by criminals who conspire in private? Of course.

    What's a "criminal conversation"? Because history assures us with countless examples that those who make the decision on what a "criminal conversation" is rarely do it with YOUR best interests in mind.

    Is discussing with other like minded individuals your displeasure with the current George W. Bush administration and planning activities to educate the public on the facts and what they can do to kick him out of office a "criminal conversation"?

    Want an example? The PATRIOT act, which did away with such minor things like habeous corpus (considered by many to be the cornerstone of our justice system and made no one above the law, one of the fundamental checks and balances ) and passed to deal with "extraordinary threat" in these "extraordinary times"..... being used for a copyright case. Legislation that bypasses most of the fundamental US Constitutional rights would NEVER be applied to anything frivolous.

    Given the choice between giving criminals the freedom to conspire in private or the ability of the FBI to wiretap criminals, I've no problem opting for the former.

    This is the beauty of the whole thing right here. Trivial means in the form of encryption exist that totally negate any benefit law enforcement would gain from such legislation. Most likely, these days, all the necessary tools exist on your computer right now (openssl).

    The only people that this would be of assistance against are... well, idiots. Since you know you're going to be discussing things of particular interest to law enforcement, and they have the means to intercept it, it's in your interest to encrypt your communications. So, from a practical sense, the only information you're going to get out of this is that two people spoke to each other which is useless in court.

    So... now what? We now have a system in place that's capable of catching none but the most utterly incompetent criminals and can be abused by the government against law abiding citizens.

    I know! Let's outlaw encryption. That'll learn 'em.

    In any case, the net is a public place. Nothing there is private.

    This seems to be particularly specious reasoning. By the same token I can say that the entire planet is a public place, ther

  111. Are you blind? by Anonymous Coward · · Score: 1, Insightful

    Really, you watch too much tv.

    You are exactly the kind of citzen they want! You are afraid of your own shadow!

    Ask any dictator and he will tell you that the easiest way to control the people is by making them afraid. The goverment and the media is trying to do exactly that! They supersize the threats, so that you are so afraid that you are willing to give up your LIBERTY!

    I'm not saying that there isn't a threat, I'm just saying that it is WAY smaller than fox news makes it look like.

    You should watch some international news for a while. You would realize that there are many countries with a tiny crime rate, and most of them CARE A LOT about the civil liberties.

    Welcome to the land of the free.

  112. Re:48 hr. Summary: All your rights are belong to U by isbhod · · Score: 3, Funny

    and this is why i quit reading slashdot.

    ironic paradox intended

  113. Re:48 hr. Summary: All your rights are belong to U by LooseChanj · · Score: 1

    Americorp, duh.

    --
    Mix the failings of Usenet with the shortcomings of the World Wide Web and the result is slashdot.
  114. Re:Good. And good Again. by Anonymous Coward · · Score: 1, Informative

    As the cliche goes, if you're not a criminal, you have nothing to worry about.

    Of course you have something to worry about. It may not be criminal but can still be used for character assasination and misused in too many other ways.

    Do we have a right to keep criminal conversations private? No.

    You have a right to privacy, full stop. There is no clause stating I waive that right so somebody can judge the conversation's legality. You either have a right to privacy or you don't.

  115. No by beakburke · · Score: 1

    No it's not illegal, and if anyone RTFA they'd know that this FCC rule only applies to VoIP stuff that connects to the traditional phone network ala Vonnage.

    --
    ----- Question authority, but not ours. Hate the man, but we're not him.
    1. Re:No by myowntrueself · · Score: 1

      I'm gonna quote myself;

      "or soon will be"

      ok?

      --
      In the free world the media isn't government run; the government is media run.
    2. Re:No by Anonymous Coward · · Score: 0

      Your a Moron. Just thought i would provide a dose of "yer stupid"

  116. Re:Good. And good Again. by reallocate · · Score: 1

    What if, what if, what if. So many what if's...what if you built a scarecrow and then took it apart?

    I guess we better do away with all laws 'cause you never know: What if somone in the future abuses one of them?

    --
    -- Slashdot: When Public Access TV Says "No"
  117. Re:Good. And good Again. by reallocate · · Score: 1

    Silly argument. No right, including a right to privacy, extends to criminal behavior. If you conspire to commit a crime, you can hide behind a right to privacy.

    E.g., you have a right to free speech. However, libel and slander are crimes. Your right to speak freely will not protect you from charges of libel or slander.

    E.g., we have a right to assemble. If that assembly becomes a mob, we have committed a crime.

    So, no, rights are not absolute.

    --
    -- Slashdot: When Public Access TV Says "No"
  118. Notice how Quebec... by Anonymous Coward · · Score: 0

    ... has control over its own immigration, while the rest of the provinces take what the federal government (which is run by Quebecers, BTW) dishes out.

  119. I call BS by Anonymous Coward · · Score: 0
    Try reading your own link! The guy was arrested for disobeying a cop, and not complying with city laws.

    Who's the idiot who moderated this informative?

    --- good grief ---

    1. Re:I call BS by zymurgy_cat · · Score: 2, Insightful

      Try reading your own link! The guy was arrested for disobeying a cop, and not complying with city laws. Who's the idiot who moderated this informative?

      So when a cop says I'm being disorderly for speaking my mind, I'm arrested for "being disorderly" and not because of my speech? Suppose I'm walking down the street reading a book and a cop tells me to throw that book away. Under your logic, my refusal constitutes "being disorderly."

      Face it, bub. All speech is "disorderly" to someone. As long as it's not fighting words, libel, or slander, it's still protected. Arresting someone for "being disorderly" is a shitty excuse, and attitudes like yours only allow it to spread.

      If you disagree, please explain how all those people with pro-Bush signs were not "being disorderly." I'll give bonus Karma points if you can do it without mentioning how their political views were different from the guy who was arrested.

      --
      -- Fugacity: Confusing chemists since 1908
    2. Re:I call BS by Anonymous Coward · · Score: 0
      The guy was disobeying the cop who told him to go back to the licensed protest area. He refused to OBEY THE LAW. He was arrested. Simple as that. People (like yourself and the refered to website) love to take basic things and turn them into political grandstanding.

      P.S. I'll give karma points if you can tell me how any cop walking down the street can just tell you to throw a book away.

    3. Re:I call BS by Anonymous Coward · · Score: 0

      licensed protest area? so you need to license a protest area? does the protest need a separate license, and also one that says what banners you can carry, what you can wear, what you can say?

    4. Re:I call BS by Alsee · · Score: 3, Insightful

      The guy was disobeying the cop who told him to go back to the licensed protest area. He refused to OBEY THE LAW.

      Heay genius, if this guy violated the law then why the hell did the judge throw out the the case and scold the officer for the arrest?

      He was arrested. Simple as that.

      Yes, exactly! And it was an UNLAWFUL ARREST!
      It was the officer who failed to obey the law!
      The person who was arrested was a law-abiding victim of a false arrest.

      However we are not talking about some rouge cop who made a mistake. He was obeying directives given to the entire police force. The Whitehouse administration/secret dervice issued these orders.

      And if you keep reading you'll see we are hardly talking about a single arrest. We are talking about a multiple arrests at multiple places and multiple times. We are also talking about countless other people being intimidated and oppressed with threats of (unlawful) arrests. It has been a systematic willfull supression of speech and a violation of civil rights.

      I'll give karma points if you can tell me how any cop walking down the street can just tell you to throw a book away.

      Oh goodie! I get free karma points! Oh wait, I hit the karma-cap ages ago.

      Try reading the bottom half of page two of the link. The part where the Crawford police cheif says that you can be arrested for wearing a button that simply says "Peace". Presumably you'd be just as arrestable for prominently carrying a book with a big-fat "Peace" on the cover.

      -

      --
      - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
    5. Re:I call BS by zymurgy_cat · · Score: 1

      The guy was disobeying the cop who told him to go back to the licensed protest area. He refused to OBEY THE LAW.

      You seem to have no problem with having "licensed" protest areas. How is free speech free when you have to be "licensed"? The point here is that there is something fundamentally wrong when free speech is restricted because "THE LAW" pens people like sheep. "THE LAW" is patentally unlawful (ie, unconstitutional) in such cases.

      P.S. I'll give karma points if you can tell me how any cop walking down the street can just tell you to throw a book away.

      I'll be donuts to dollars that if I walked down the street while the President was holding a rally and held up a book critical of him, I'd be ask to put it away at the very least.

      --
      -- Fugacity: Confusing chemists since 1908
  120. Re:48 hr. Summary: All your rights are belong to U by Anonymous Coward · · Score: 0

    You can always say No.

  121. Quantum crypto for the masses by earthforce_1 · · Score: 1

    I expect it will be priced within reach in less than 5 years. When this happens, the spooks will be screwed. Anybody, and everybody will have secure, untappable communications.

    --
    My rights don't need management.
  122. Immunity for None by CristalShandaLear · · Score: 5, Insightful

    I wonder how many slashdotters are black?

    Black people have always known that our rights are revokable. It seems to me that only when it starts happening to white people that small things like "civil liberties" get to be a problem.

    I expect this post to be marked troll or flamebait at best, but it's truly not meant to be that way. It's just the way I see the world because my husband doesn't even tell me how many times he gets pulled over by the police anymore. It's a routine occurence, not worth notice anymore.

    Our church group is decidedly anti-Bush. I think most black folks are, despite the photo-op pics you'll see everywhere. Anyway, we had police officers taping our services now again because our preacher speaks out against the corrupt politics in our city and nation.

    There is no need to protest because no one in authority cares and is probably behind it anyway. We simply did the next best thing and got a local cable station to air our services. No more police, they can just set the VCR now.

    I see young men get harrassed by the police and their pockets turned out because their skin is dark. I know better than to go to the movies with a large purse or maybe even a purse at all on a crowded weekend day, because no matter how large the white woman's purse in front of me, mine will be the one to be searched.

    As far as I can see, white people for too long have thought they were immune from this type of thing. It's probably not even the slashdot crowd. It's be the parents and the grandparents of the slashdot crowd.

    I saw a post earlier here that asked, who will begin the revolution? I think it will begin right here.

    1. Re:Immunity for None by drunkenbatman · · Score: 1

      I wonder how many slashdotters are black

      As an aside, I have to say that the best thing about the status-quo Internet is that we don't know what color or gender the person on the other end of the words happens to be.

      Freeing, that.

  123. Tapping Push-to-talk? by Cranky_92109 · · Score: 2

    Do we really need legislation about tapping push-to-talk phones? I mean, if you really want to know what they're saying, just stand next to the jerk using push-to-talk. Or even in the next room.

    (Is it just me or do people using push-to-talk speak even LOUDER than when using the phone non Star Trek stylie?)

  124. Re:48 hr. Summary: All your rights are belong to U by Degrees · · Score: 1
    America, previously land of the free, now home of the Corporate controlled puppet government run by lawyers with the best healthcare taxpayer money can buy.
    It wasn't a /. article, but recently I received a piece of mail postmarked with an image of Shrek, coming from "Far, Far, Away".

    The U.S. Post Office became a shill for Hollywood.

    Pretty much sums it up, don't you think?

    --
    "The most sensible request of government we make is not, "Do something!" But "Quit it!"
  125. This is nothing to panic about... by KC7GR · · Score: 1

    PGP was available to protect sensitive text since at least 1991. I have no doubt that some variant of it, or perhaps an entirely new encryption scheme, will be developed for VoIP phones in response to this.

    If nothing else, the business world will probably demand it.

    Keep the peace(es).

    --

    Bruce Lane, KC7GR,

    Blue Feather Technologies

  126. VoIP needs to be IP on both ends by Skapare · · Score: 1

    VoIP needs to be IP on both ends. The PSTN (public switched telephone network) needs to be abandoned ASAP. Everything should eventually just be IP to IP. There would no longer be phone numbers; you reach people by a domain name and other mnemonic identity. But the important part is that all communications will then be strictly end-to-end, and to anything in between, will just be a bunch of scrambled bits.

    --
    now we need to go OSS in diesel cars
  127. There is no physical security from God by tepples · · Score: 1

    If I encrypt something with a 256 bit key not even lord almighty will be able to decrypt my babbling

    When dealing with God, consider your computer physically compromised. He can read the key from your computer's data bus. He can read all the adulterous jpegs on your computer's hard drive. You need help, and help is Christ.

  128. DMCA? NOT. by tepples · · Score: 1

    The DMCA's circumvention ban doesn't apply to law enforcement wiretaps. 17 USC 1201(e).

  129. The /. Rightwing Morons Will Now Applaud by Master+of+Transhuman · · Score: 1

    as more civil liberties are ripped away.

    As usual.

    --
    Richard Steven Hack - This sig is TOO GODDAMN SHORT TO DO ANYTHING USEFUL WITH! MORONS!
    1. Re:The /. Rightwing Morons Will Now Applaud by Anonymous Coward · · Score: 0

      so long as they have the right to have their arsenal of heavy weaponary in their homes they don't care.

  130. What, me worry? by hotspotbloc · · Score: 1
    --
    "I hate to advocate drugs, alcohol, violence or insanity but they've always worked for me" - HST
  131. X-Box games by Minna+Kirai · · Score: 2, Funny

    I'll love it when someday the FBI declares that all voice-chat applications must be tappable. So they'll insert backdoors into the next version of Tom Clancy's Splinter Cell, and their agents can sit all day and listen to teens discuss the sabotage of poison-gas canisters (in between homosexual puns)

  132. Another atrocity by Ignatius_VI · · Score: 1, Interesting

    Two problems with this...

    Firstly, the FCC, a self-appointed, non-elected staff brought this into law.

    Second, it was put up by the US Justice Department. The US Justice Department does NOT have the power to CREATE laws! It is the legislature's job to create laws. This completely offsets the balance of power and checks and balances.

  133. fuck this by Anonymous Coward · · Score: 0

    I wish I could make laws to make /my/ job easier too. They can go to hell, I'm so sick of this one-sided freedom BS.

  134. Re:Good. And good Again. by Lord_Dweomer · · Score: 1
    "Do we have a right to privacy? Sure. Do we have a right to keep criminal conversations private? No. Is this subject to abuse? Sure. Will we be abused by criminals who conspire in private? Of course."

    You forgot one more question.

    "Will we be abused by FBI, lawenforcement, etc. whenever they feel like it? Of course."

    You may not want your privacy, but don't ruin it for the rest of us. Its only a matter of time before things slide down a bit on the slippery slope and things that were once perfectly legal and necessary for this to remain the free country it is will become illegal. Its already started.

    --
    Buy Steampunk Clothing Online!
  135. The BSA works. by Anonymous Coward · · Score: 0

    BSA ppl don't get any trouble getting a warrant to dig through your data operating on the assumption that everyone uses unliscensed software.They're not even cops.
    How long before I can go get a wiretap on my neighbor? As a matter of fact - if they're going to be like this, then why not? As long as everybody can violate each other I don't mind.

  136. Still missing the point? by Anonymous Coward · · Score: 2, Insightful

    Isn't the point of this ruling that it is now easier to tap VoIP, no just legal? I mean, if they can get a tap, they can probably get a data tap, too. The point of this ruling was to make VoIP services make it easy to tap.

    Just trying to say that you didn't just lose more rights than you've already lost to the Patriot Act.

  137. It's the person behind the tool, stupid. by Dark+Coder · · Score: 1

    Guns don't kill people. Its the person that aims and/or pulls the trigger.

    Automobile don't kill people. Its the person behind the wheel.

    Planes don't crash. Its the engineer that designed the plane. (NO, its not the pilot error... it always boils down to the engineer during man-machine interface design stage and stress testing.)

    Food don't kill people. Its the food prep person.

    Face it... Tools will remain abundance and abound (even, shudder, the H-bomb), its the person behind the tool.

    Nothing to do with freedom here. Its personal responsibility toward society that we value here.

    1. Re:It's the person behind the tool, stupid. by reallocate · · Score: 1

      You're obviously an ideologue immune to logic. Try avoiding talk radio.

      --
      -- Slashdot: When Public Access TV Says "No"
  138. Re:Good. And good Again. by Anonymous Coward · · Score: 0

    Try reading a book called Nineteen Eighty-Four, or watch Demolition Man... Either extremes is possible in your what if, what ifs senario. You may not have any foresight into the implication of this new ruling, but at least I'll have privacy when you don't.

  139. Trust me.. by Mr.+Arbusto · · Score: 1

    "And really, isn't this 72 virgins thing just a little overrated? I mean, after three or four, doesn't the thrill kind of wear off? And by Virgin 23, you're going to be begging for a pro, someone who knows when and when not to use their teeth."

    --Dennis Miller
    5/31/02

  140. uh - gee by Anonymous Coward · · Score: 0

    How would they able to tap if VOIP is running over VPN?

  141. You too can use an unbreakable VoIP system! by 0x0d0a · · Score: 3, Interesting

    Whoever thinks that they are going to wiretap all VoIP networks at the FBI is living in dreamland. Let's take a brief look at a quick VoIP system that I'm going to design. I'll even publish the source code, right here on Slashdot. It will take me a few seconds to write:

    # smallvoip.sh
    # VoIP software capable of bypassing FBI wiretap regulations.
    # Warning: use or posession of this software may be a federal crime in the United States of America. Download this software at your own risk.
    # Copyright 2004, 0x0d0a, released under the GPL
    # Usage: smallvoip remote-username remote-ip-address
    # You must have a shell account on the remote machine.
    # Run on each of the two machines involved in the call.
    # Duplex audio support required.
    # TODO: pass through lame or oggenc for better bandwidth usage. This will make the second line slightly longer.
    # LIMITATIONS: only one user per host at once
    # I recommend setting up public-key ssh authentication with this software.

    nc -l -p 7001 >/dev/dsp &

    ssh -R 7000:`hostname`:7001 $1@$2 "cat /dev/dsp|nc localhost 7000"


    Hmm. My high-security, encrypted Internet phone doing VoIP.

    Now, I have to ask the people in charge of Homeland Security: do you really, truly, honestly think that you have *any* hope of keeping anyone from writing such a two-line program? Any *IX user with a bit of experience could write this piece of software. In addition, the fact that it contains voice data is completely undetectable to the outside world, so there is no practical way to "catch" someone using such a system.

    It is true that this is a very simple program, but it can also be very easily extended into a full-blown encrypted voice communication program, without the minor limitations here that make this annoying for day-to-day use. In addition, there are a vast number of extant Internet systems for communicating that cannot be wiretapped by the FBI -- PGP/GPG contains no back doors to allow wiretapping of email communications. Frost (on the Freenet platform) can disguise the very fact that an association exists between two users. These systems are rarely used, but they are also not hard to deploy, and if the FBI insists on forcing conventional voice communication to be breakable, there is little incentive not to use systems such as the one that I have demonstrated here.

  142. Re:48 hr. Summary: All your rights are belong to U by Anonymous Coward · · Score: 0

    Nah, that's just paranoid slashdot propaganda. Pay no heed to it. The sun is shining and life is fun.

  143. Re:Good. And good Again. by bvdbos · · Score: 0

    Of course you're correct in this in theory. But nowadays a lot of laws are made on a more or less ad-hoc basis. Something happens, ie the WTC-bombing, and politicians throw up one or more new laws. What is criminal and what is not is not only decided by the politicians but also by the flood of media-attention something gets. There's talk about making cryptography illegal, so should we just adhere to that law? The governement in Orwell's 1984 had the same opinion, if you're not doing something illegal why would you mind? I mind knowing the governement (or someone else) is watching my every move. In Holland where I live the governement is talking about instituting a new intelligence agency which has the right to spy on people even if they're not suspects of a crime. Also the governement is going to pass a law which obliges ISP's to record all email- and surfingtrafic and store it for a year. If that's going to be the "democratic moral" then I'd rather be someone who resists the "society". Last (cheap shot on /. of course), what if linux is stated as "criminal" because it infringes on patents, shouldn't we use it anymore and hand over our life to ie microsoft? And I'm not wearing a tin-foil hat (yet), I'm carrying my cellphone with me day and night, so every step I make could be tracked if the governement wants to. Sometimes though I start wondering if I should put my cellphone someplace safe or just get rid of it. The direction the whole law-making process is going is scaring me more and more.

  144. Re:Good. And good Again. by Mant · · Score: 1

    What if the FBI had a history of abusing powers to spy on people for polical reasons, not becuase they were criminals?

    Oh wait, they do. So why assume they will behave differently? Isn't suggesting they will only use it on criminals rather more speculative than assuming they won't, based on past experience?

    Or do civil rights activists, anti-war activists and those with socialist political beleifs not deserve privacy either?

  145. The terrorists have won by MemoryDragon · · Score: 1

    America has given up its freedom for a false sense of security...

    1. Re:The terrorists have won by dentar · · Score: 1

      We really gotta get rid of ashcroft.

      --
      -- I am. Therefore, I think!
  146. Re:Good. And good Again. by Alsee · · Score: 2, Insightful

    From reading the article it sounds like he was arrested for disobeying the police.

    Try FINISHING reading the article! Hell, try getting to the bottom of page one at least!

    A judge threw out the case because it was not a legal arrest and because the officer's order was not lawful.

    The arrest was an abuse of force and a violation of constitutional rights. The judge scolded the officer for trampling on free speech.

    If you get to page two there's a second arrest described: So, naturally, they arrested him. Asked why, the officer said, "It's the content of your sign that's the problem." Arrested solely for the content of his speech. That arrest was thrown out by a judge as invalid as well.

    When you have the government abusing false arrests to suppress speech, and using threats of false arrests to intimidate countless other people into "voluntarily" confinement in "free speech zones", that's a pretty serious problem. I know it drips of irony, but I'd call that UnAmerican. And it sure appears the judge in at least the first case agreed.

    If you make it to page three you'll see there are civil lawsuits underway for these ILLEGAL ARRESTS and violations of civil rights.

    And there's a lovely quote on page four from the spokesperson for the California Anti-Terrorism Information Center (a spinoff of the Homeland Security Department) who all but outright states that a peaceful anti-war speech is a terrorist act.

    -

    --
    - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  147. Copout I say by beakburke · · Score: 1
    Using that as the standard I can make pretty much any unsubstantiaed accusation I want, cause, you know, it MIGHT be true in the future. Who needs proof when you have wild, unsubstantiated accusations that cannot be disproven since they always posit their predictions to occur at some unknown future time. The point is you have no evidence to suggest any such development, being that these were excluded as being outside the range of the FCC.

    All that is happening here is that VoIP providers that connect to traditional networks are being forced to follow the same rules for wiretaps that regular carriers do. This isn't some vast expansion of wiretapping powers, this is equals being treated equally. VoIP that doesn't terminate on a POTS network isn't affected. Move along.

    --
    ----- Question authority, but not ours. Hate the man, but we're not him.
    1. Re:Copout I say by Anonymous Coward · · Score: 0
      Who needs proof when you have wild, unsubstantiated accusations that cannot be disproven since they always posit their predictions to occur at some unknown future time


      Okay, I'll throw in my 2c and put I timeframe on it: I predict that legislation to ban end-user controlled encryption will be introduced into your parliament/senate/congress/whatever-you-americans- call-it by the end of 2008. I make no prediction on whether it will pass - that depends on who you elect between now and then.

      If my prediction proves wrong by the end of 2008, you can flame me then.

    2. Re:Copout I say by myowntrueself · · Score: 1

      "Using that as the standard I can make pretty much any unsubstantiaed accusation I want"

      this is the internet, naturally I can make any unsubstantiated accusation at all. So can you. Its fun.

      --
      In the free world the media isn't government run; the government is media run.
  148. Why, it is tappable! by Anonymous Coward · · Score: 1, Insightful

    Just launch tcpdump or ethereal or whatever. You can get the whole conversation.
    What? You don't have a key to decrypt it? And how is it MY problem?

  149. serverless voice transmission by blackest_k · · Score: 1

    MsN messenger Irc and others basically use servers to relay messages, and I think I would be a fool to think tht MSN Messenger isn't capable of allowing someone to peek in to my private messages; perhaps 6.2 doesn't but 6.3 could do, couldn't it?

    does anyone know of a nonserver open source. method of connecting two or more people together for voice video and text, ideally cross platform which does not involve using a thirdparty such as MSN to make the connection.

    finally is there any way of securing the packets so even if you can detect that communication is going on between 2 nodes you still wouldn't know what is being said.

    1. Re:serverless voice transmission by Neduz · · Score: 1

      jabber (http://jabber.org/), does work with servers, but it's not with one big central server, but more like with email: a lot of independant servers. Jabber also allows encrypting your messages with pgp or http://gnupg.org/.

      --
      This is one lame signature, please read the message above instead.
  150. Re:Good. And good Again. by Alsee · · Score: 2, Informative

    Fine. Lets forget all the "What if's".

    The Patriot act is in fact being used in copyright cases and other trivial cases. Everyone swore up and down that these "extrodinary" provisions would only be used against terrorists.

    What about the numerous cases of people being falsely arrested (with judges throwing out those arrests as unlawful) merely for the content of their speech?

    What about the far larger number of people being intimidated and oppressed through threats of exactly those unlawful arrests?

    What about COINTELPRO and countless other cases of the FBI and others spying on law-abiding americans for purely political purposes?

    You know what I think? I think we needed a hell of a lot more "What if's" before the Patriot act was passed. I think we need a lot more "What if's" in general. Sure the government exists to serve and benefit us. Sure things are proposed for our benefit. But there is a general urge for the government to expand its power and control, and to use that power and control wherever convient. Just because they are the "good guys" don't mean it would be a good idea to, for example, exempt them from Bill-of-Rights restrictions. Sure it would help police catch criminals if they didn't have to get search warrants and whatnot. Hey, they're the goodguys and they are only trying to catch criminals, right? Why not let them search your house and anyone else's house at will without a warrant? Any problem with them coming in and trashing YOUR house is only a "What if", right?

    -

    --
    - - You can't take something off the Internet! That's like trying to take pee out of a swimming pool.
  151. Being Tough on Crime by iammrjvo · · Score: 1


    "Oh, yeah. We're tough on crime. We're so tough on crime that we're going to treat everybody as a criminal. Beat that."

    --
    Ha, ha! Nobody ever says Italy.
  152. $99 GPS by mks113 · · Score: 1

    A $99 handheld GPS with a single waypoint in memory would make finding the target trivial.

    Of course it would be smart to obscure that waypoint with a hundred or so red herrings.

    1. Re:$99 GPS by Minna+Kirai · · Score: 1

      A $99 handheld GPS with a single waypoint

      Interestingly, that same $99 GPS could've prevented Private Lynch's convoy from getting lost off-course and slaughtered.

  153. Counterpoints by nuggz · · Score: 1

    Milk and grain have regulated marketing bodies.

    As far as farming is concerned I think it is okay.
    Most first world countries have crazy subsidies to their farmers. If my tax money goes to pay your bills because you can't survive in the free market, I get to make the rules how you sell your product. Additionally certain important resources are important and regulated, drugs, medical care, energy, water.

    Secondly hemp is legal in Canada

  154. Stupidity in Suicide by nuggz · · Score: 1

    Sorry the 9/11 attack wasn't stupid.
    It worked pretty much as planned.

    The part you consider 'stupid' is they died, but by their logic this isn't a problem, they considered it a cause worth dying for.

  155. Walmart and Starbucks by nuggz · · Score: 1

    I hate Walmart because most of their products are low quality, it is messy and disorganized, and they have a poor selection.
    If you don't like your job quit.

    I don't hate starbucks, but I don't buy their products. They're good, but just overpriced for what you get.

  156. Sorry FBI by Anonymous Coward · · Score: 0

    But I won't be changing my networks for you anytime soon.

  157. How About PGP For VOIP or VOIPs:// by Junior+Samples · · Score: 3, Interesting

    VOIP services such as Jeff Pulver's Free World Dialup operate as a peer to peer connection. The server is only there to establish the connection. It should be easy enough to encrypt the end points.

    I personally use FWD to circumvent local toll charges from the money grubbing phone companies for calls made to a friend across town just outside of the localling area.

    Perhaps I'm parenoid, but I don't need Home World Security, the FBI, or anybody else having the ability to monitor my VOIP calls. I'm also disturbed by the extensive key stroke logging that takes place at FWD. Every call that I initiate or receive whether or not completed gets logged. I had thought of circumventing the logging by simply running my own server, in effect establishing my own private network.

    As far as making communications secure, I can do this now through an encrypted VPN connection. If VOIP wire tapping actually materializes, new secure protocols (VOIPs://, or PGP for VOIP) will surely rise to meet this challange.

  158. Re:Good. And good Again. by reallocate · · Score: 1

    Education by fiction or bad movies. You're doing well.

    No one has explained just how any of this would actually affect my privacy.

    --
    -- Slashdot: When Public Access TV Says "No"
  159. thats 70 virgins you ignoramus by Anonymous Coward · · Score: 0

    all who go to heaven get'em
    and yes, waging holy war will get you into heaven,
    BUT terrorism is not holy war, so
    all them terrorists is screwed

  160. Re:Good. And good Again. by reallocate · · Score: 1

    >> ...a lot of laws are made on a more or less ad-hoc basis

    Where? Last I heard they were made in the legislatures.

    >> Something happens, ie the WTC-bombing, and politicians throw up one or more new laws.

    And, your problem is...? Legislatures creating law in response to events. Imagine that.

    >> The governement in Orwell's 1984...

    There was no Orwell's 1984. It's a novel.

    Governments have always had the right, and the ability, to monitor people. That's what the police power is about. Technology makes it easier to do, but the fundamental right has been there all along. In a democracy, people can replace the politicians who made laws they don't like. Personally, I don't feel any loss of privacy or other threat from any of these developments. If the government wants to spend money watching me, fine, that won't affect my behavior.

    As for Linux and patents, well, patents are civil, not criminal , issues, so the worst that can happen is a bunch of lawsuits. Even then, if some people have knowingly inserted patented code or algorithnms in their Linux code, they deserve what's coming, especially for abusing the trust of the Linux community. Regardless of any individual's position on software patents, it is foolish to ignore reality.

    --
    -- Slashdot: When Public Access TV Says "No"
  161. MTA Proposed photography ban by Anonymous Coward · · Score: 0


    don't forget the MTA's proposed ban of photography on subways/public transport - except with for press/written authorization.

    The US is becoming an absolute disgrace.

    1. Re:MTA Proposed photography ban by Anonymous Coward · · Score: 0

      sorry, forgot the link!

  162. Re:Good. And good Again. by toriver · · Score: 1

    I know this will upset the /. gang, but I have no problem with the FBI being able to monitor conversation between criminals.

    I know this will upset the human rights crowd, but I have no problems with the Republicans being able to monitor conversations between Democrats.

    See, the problem with allowing more and more surveillance of "criminals" is that you cannot know beforehand that something you do will be termed "criminal" in order to eavesdrop on something the Government wants to monitor. Who watches the watchmen and all that.

    There was a story that claimed that Boeing won some airplane contract because someone among the "eavesdroppers" leaked Airbus bid information to them. Are you saying Airbus were "criminals"?

  163. Re:Good. And good Again. by reallocate · · Score: 1

    Are you saying that the FBI shouldn't be allowed to monitor criminal conversations because you're afraid a few non-criminals might be monitored? Are you will to give criminals complete freedom to conspire in secret?

    --
    -- Slashdot: When Public Access TV Says "No"
  164. Wrong by Anonymous Coward · · Score: 0
    If you use encryption it will be an admission of guilt in their eyes.

    The will not bother "cracking" the encryption. They will enter your home whether you are there or not, they will ransack your house and take any electronic equipment down to the smoke detectors. They will search this equipment with sledgehammers and crowbars, and, upon finding nothing, send you to Guantanamo to repent.

    You will whine to the media, but in their minds this only serves as a warning for daring to use encryption.

  165. Re:Good. And good Again. by maximilln · · Score: 1

    Do we have a right to privacy? Sure

    Amendment IV gives you a right to be secure against unreasonable search. That's no right to privacy. If everyone is monitored at all times then it's not unreasonable to be monitored.

    Velkome to zee United States, Komrade.

    --
    +++ATHZ 99:5:80
  166. Re:Good. And good Again. by tcopeland · · Score: 1

    Sounds like the truth is in the middle. He wasn't arrested simply for "carrying an anti-Bush sign", as the OP suggested. But the police weren't right in ordering him to move, either.

    I call "do over".

  167. Re:Good. And good Again. by reallocate · · Score: 1

    And, what grade are you in? Come back when you grow up.

    --
    -- Slashdot: When Public Access TV Says "No"
  168. Can you elaborate? by SPYvSPY · · Score: 1
    I know people continue to propogate the meme that the PATRIOT act is eroding their constitutional rights, but can you provide some substantive evidence of this? I've read the act. I've had dinner with its principal author. I don't see how it does much more than adapt outdated tapping laws to new technologies and streamline the process required to put a tap in place.

    You say the PATRIOT act allows for warrantless searches. Yes, it is true that judicial oversight for searches of your financial, library, travel, video rental, phone, medical, church, synagogue, and mosque records is *diminished* under PATRIOT. It's not at all clear to me how those searches relate to VoIP, although there may be ways to exploit the ditigal/analogue distinction there.


    The provisions that expand FISA searches are even less relevant to this discussion, since they require a foreign intelligence need to prompt a search and they sunset in 2005 anyway.


    You still need a warrant to operate a "sneak and peek" operation under PATRIOT. PATRIOT just says you don't have to tell the person they're being watched. (As far as I'm concerned, having to tell someone that you're going to watch them is as absurd as it gets in the espionage game.) Eventually, you have to be told about the search under PATRIOT anyway, and "sneak and peek" is not unconstitutional. So, no "warrantless search" issues there either.


    I suspect your beef is with Section 214 of PATRIOT, which adapt the rules for obtaining "pen register" and "trap and trace" wiretaps (NEITHER of which reveal the content of a conversation--only where the calls come from, and where they go). Before PATRIOT, FISA allowed the FBI to get these taps by showing a judge that the information would be relevant to an ongoing criminal investigation. No probable cause required there! Now, under PATRIOT, law enforcement can get these taps by certifying that the information would be relevant to an ongoing investigation into international terrorism. Whoa! Call off the Republic. America is DOOMED!! ;~)


    Oh, and I almost forgot the kicker!! PATRIOT also clarifies that pen register and trace and trap taps apply not only to telephonic devices, but to the Internet as well. So, it's a little hard for me to see how the FCC's ruling does much more than facilitate the tap rules that basically have changed incrementally (and not nearly as drastically as you are making out) since the passage of PATRIOT.


    Wait, I almost forgot the REAL kicker! The pen register/trace and trap rules SUNSET in 2005.


    I'm not even gonna get into roving taps and the rest of PATRIOT. I'd rather have you explain what exactly is so dire about PATRIOT, and show us all where it violates the Constitution and how it erodes our fundamental liberty. Or are you simply passing on a popular meme that you read about on some message board and seemed to fit your idea of a worthy outrage?

    1. Re:Can you elaborate? by maximilln · · Score: 1

      (As far as I'm concerned, having to tell someone that you're going to watch them is as absurd as it gets in the espionage game.)

      You know, if governments or other politically powerful people didn't have a 10000 year history misusing and abusing their power to place their personal interest above the interest of those they supposedly represent, I'd agree with you. But since greed is a fact of reality, I think that the PATRIOT Act and 99% of the government should be castrated and left as a historical monument to bad experiment in social engineering.

      For the greatest part the only thing that the PATRIOT Act does is ensure that my politicians can raise the % of my paycheck that they spend on their own interests. There is no track record of success for Big Brother style approaches. Murderers, rapists, baby-killers, mother-molesters, and thieves are still caught primarily by good old fashion footwork investigation. Unless you're ultra-fanatical about hunting down weed-smoking hippies there's little or no need for the extraordinarily expensive Big Brother movements. When are government officials going to be subjected to the same blistering performance/goals review system that the rest of American professionals have to deal with?

      --
      +++ATHZ 99:5:80
    2. Re:Can you elaborate? by bckrispi · · Score: 1
      Yes, it is true that judicial oversight for searches of your financial, library, travel, video rental, phone, medical, church, synagogue, and mosque records is *diminished* under PATRIOT.

      Bingo!! Thank you for answering your question for me. This is the exact issue I have a problem with. Without oversight, a critical check/balance between the judicial and executive branches vanishes. If a fed wants to look at my financial, video rental ...etc. records, he had damn well better have a warrant - sworn and signed. Now all he has to say is "I think bckrispi represents an immediate terrorist threat (or, as a more insidious example, engaged in copyright infringement); let me see all his financial records from the last year.

      Violating the constitution? Eroding rights?? I think "The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no Warrants shall issue, but upon probable cause, supported by Oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized" speaks for itself. My question to you and your dinner buddy is, how does this new power not violate the constitution and erode our rights!!!!

      I suspect your beef is with Section 214 of PATRIOT, which adapt the rules for obtaining "pen register" and "trap and trace" wiretaps (NEITHER of which reveal the content of a conversation--only where the calls come from, and where they go).

      You suspect incorrectly, my beef was with what you stated above.

      --
      Xenon, where's my money? -Borno
  169. That would only mean by melted · · Score: 1

    That I'm exercising my constitutional right to have privacy. If they want to plant a bug because of this, this country is in a DEEP trouble.

  170. In that case... by SPYvSPY · · Score: 1
    ...I have two points to make:


    1) How do these records relate to VoIP activity? I don't see it.


    2) Section 215 will be automatically repealed in 2005, and is already the subject of numerous amendments seeking to curtail the language of the act. The ACLU's current challenge against it is ongoing, AFAIK, and may very well result in curtailment or repeal. In any case, curtailment is likely to render Section 215 consistent with DoJ's stated purposes for the provision, which is over-broadly drafted.


    I'm no expert in this stuff, but I hardly lose any sleep over the FBI looking into my library or video rental records. I also suspect that this provision has a very short shelf life. Finally, I doubt there's any reading of 215 that could accomodate snooping on the contents of VoIP transmissions.

    1. Re:In that case... by bckrispi · · Score: 1
      How do these records relate to VoIP activity? I don't see it.

      I do recall reading articles about the FBI invoking (or trying to invoke) the Patriot Act in order to secure ISP records. Sorry I can't cite sources on this, so it's possible that VoIP is safe. But if the executive branch asks specificaly for this power, will congress give in again??

      Section 215 will be automatically repealed in 2005.

      ....unlessss congress votes to extend these powers beyond 2005. Asscroft and Dubbya are certainly lobbying for this to happen.

      --
      Xenon, where's my money? -Borno
  171. Re:Good. And good Again. by Anonymous Coward · · Score: 0

    I can't speak for Toriver, but my answer is yes, and unreservedly so.

  172. Re:Good. And good Again. by reallocate · · Score: 1

    I have to say, then, that you're a fool, and a dangerous fool.

    --
    -- Slashdot: When Public Access TV Says "No"
  173. Re:Good. And good Again. by Anonymous Coward · · Score: 0

    Funny, I'd say the same about you for your opposing viewpoint.

  174. Re:Good. And good Again. by Anonymous Coward · · Score: 0

    There was an Orwell's 1984. There was also a Tolkien's Return of the King. There was not an Orwell's version of the year 1984, but the statement that there was an Orwell's 1984 is entirely accurate.

  175. Re:Good. And good Again. by reallocate · · Score: 1

    Presumably, you are either an engineer or a wannabe engineer. Both are inclined to confuse facts with truth.

    The original post cited Orwell's 1984 as it it had been real. It is a work of fiction.

    --
    -- Slashdot: When Public Access TV Says "No"
  176. Mod parent as "Informative" by zooblethorpe · · Score: 1

    Methinks "funny" is the wrong category -- "informative" is much more on the mark. As the up-and-coming brownshirts of Middle America are fond of yelling, if you don't like it, leave. Frankly, I'm a bit too cynical to think it can be fixed, so ...

    --
    "What in the name of Fats Waller is that?"
    "A four-foot prune."
  177. That's not fair by Anonymous Coward · · Score: 1, Insightful

    You shouldn't make the assumption that most people of any world view, including religions like Islam or Christainity were raised from Birth to believe it. I was not raised from birth to believe anything, I feircly believe my religion and would give up my life for it, however my religion never asks me to take anyone else's life. My parents don't agree with my relgion my friend's don't agree with my religion it's different than what most people who have been around me my whole life have said, but I researched it and went into it with open eyes long after I'd grown up and I believe it all every bit, I believe when I die I'll go to heaven, death doesn't bother me anymore.

  178. Re:Good. And good Again. by Anonymous Coward · · Score: 0

    Presumably, you are in management or are a wannabe manager. Both refuse to acknowledge when they're wrong, and are then pricks about it. The original post cited Orwell's 1984 as a work of fiction - because the government in this work of fiction has an opinion similar to your own. Given an ambiguous statement, which you insist can be read in only one of two ways, you chose to read it in the way that covered your ass.