Slashdot Mirror


Wiretapping the Web Easier Than Ever

theodp writes "All the trends are toward easier to tap, says an EFF attorney in MSNBC's recap of last week's 5-0 FCC vote to require broadband and VoIP providers to provide Uncle Sam with wiretapping backdoors and a recent Court decision that stored e-mail is not protected under a strict reading of wiretap laws. Civil-liberties concerns aside, MSNBC notes the FCC is also exploring its Internet regulatory options, including placing tariffs on online newspapers and requiring e-tailers to process 911 calls."

40 of 180 comments (clear)

  1. You called the internet the web by Anonymous Coward · · Score: 3, Funny

    How did I know the submitter was an AOL user before even doing a mouse over of their name...

  2. GnuPG by skrysakj · · Score: 5, Informative

    I recommend everyone look into it, install it, and use it. All emails go
    plain text without encryption, so it's the least you can do to enhance your privacy.
    As for VoIP, I don't know.

    http://www.gnupg.org/

    1. Re:GnuPG by McDutchie · · Score: 5, Insightful

      GnuPG, PGP, and the like are only useful for communication between nerds. Mere mortals have no idea what public key encryption is, never mind how to use it. Nor do they want to bother.

    2. Re:GnuPG by MillionthMonkey · · Score: 5, Funny

      GnuPG, PGP, and the like are only useful for communication between nerds.

      But why would you want to talk to anyone else?

      Oh yeah... girls!

    3. Re:GnuPG by Short+Circuit · · Score: 2, Interesting

      How about a really cheap encryption for VoIP services: Modem communication.

      Many winmodems are essentially sound cards attached to phone lines, and there's been a lot of work getting those devices to function as useful modems under Linux. As a result, there's probably a lot of Free code out there that handles encoding the data stream to the audio samples that are sent over the phone line.

      Why not adapt some of this code to perform such communications over the VoIP audio stream? The data source could be a low-bitrate MP3 or ogg stream piped through handshaking and encryption code adapted from OpenSSH.

      An excellent example of the adaptability of F/OSS.

    4. Re:GnuPG by gnu-generation-one · · Score: 3, Interesting

      "GnuPG, PGP, and the like are only useful for communication between nerds."

      That does seem to be the case. I've never received a PGP communication where I didn't personally guide the sender through key-creation. I don't think that should be an accepted limit though -- it's still useful to get through to people that if they don't use GPG, their emails will be read.

      In some cases it can be very easy. For example if you work someplace with a nasty "email isn't private" policy, it can be quite easy to convince your friends and family to encrypt when they hear that your boss and the IT department will be reading their emails. For some reason people don't bother because they don't believe it'll really "happen to them", and they become quite different when they realise that an actual person is reading the email that they just sent.. they just assume it's as secure as postal mail, and if anybody doesn't encrypt, it's because they have no idea whatsoever of what's actually happening to the email.

    5. Re:GnuPG by ticktockticktock · · Score: 2, Insightful

      You taught someone about using GPG including the concepts of key expiration, key signing, how to deal with key compromises, and what to do if some third party pretending to be someone else claims their key changed in a mere 5 minutes? Properly using encryption is more than just "hit a button to encrypt."

    6. Re:GnuPG by maximilln · · Score: 2, Insightful

      Alternatively, you could elect to not use your work e-mail for personal correspondence. Too radical?

      I don't buy into that separation of work and home junk. Corporate masters know EXACTLY what they're doing with those policies, and it's not just covering their legal angles.

      Communication is a basic human function just like using the toilet. Does your company provide toilet facilities only to hang a sign on the door saying,"Only to be used for the processing of water and food consumed at lunchtime"?

      Ideally: no one uses work e-mail for anything but slave-driven work. REALITY: The CEO has no qualms about getting the grocery list on his work account, why should anyone else?

      --
      +++ATHZ 99:5:80
  3. That's it... by MrDomino · · Score: 2, Funny

    I'll see you all in Canada.

  4. what about voicemail? i.e. stored or not by way2trivial · · Score: 4, Interesting

    if you use verizons voicemail service, they store the calls, does that mean verizon can listen if they want to?

    --
    every day http://en.wikipedia.org/wiki/Special:Random
  5. This will.. by baryon351 · · Score: 4, Insightful

    MSNBC notes the FCC is also exploring its Internet regulatory options, including placing tariffs on online newspapers and requiring e-tailers to process 911 calls."

    This will move online newspapers & the like away from FCC regulatory effect.

    In other words, more offshoring forced by regulation. Wonderful.

  6. Easiest Solution... by Short+Circuit · · Score: 5, Informative

    ...for those of you worried about your email getting read:

    Don't use IMAP or webmail services. Have your POP client poll servers frequently, and delete messages after they've been retrieved..

    Most small to medium-sized ISPs don't archive email messages, due to the costs involved. (Particularly because of SPAM.)

    1. Re:Easiest Solution... by linuxpyro · · Score: 2, Interesting

      What about those of us who run our own mail servers? Is the government going to demand to have a back door into my Linux box in the basement, or am I safe?

      --
      Saying "I'll probably get modded down for this" in a post is the best way to get it modded up.
    2. Re:Easiest Solution... by ScrewMaster · · Score: 2, Informative

      Well, I run my own server that polls my ISP's POP3 mailboxes. Those messages are then made available through my system via IMAP, Webmail, or whatever I need. I poll my ISP every sixty seconds and download new mail so it doesn't stay there very long.

      --
      The higher the technology, the sharper that two-edged sword.
  7. So how do we get around it? by c0dedude · · Score: 3, Insightful

    What modern encrypted VoIP options are there? I know pgpfone, but that's old, and I know PGP for email. Is there a OSS group working on this? "...[T]he FCC is also exploring its Internet regulatory options, including placing tariffs on online newspapers and requiring e-tailers to process 911 calls." Also, how the hell do those ideas make any sense? Tarriffs on online newspapers? To do what? e-tailers to process 911 calls? I don't even know what they mean by that.

    --
    Since when has this country used intellectual elite as a pejorative term?
  8. FCC Power Grabs by Anonymous Coward · · Score: 2, Insightful

    All they want to do is expand their sphere of influence and further gouge Americans in true Big Government style while controlling with an Iron Fist. VoIP annoys them because they are not getting a piece of the pie they made *NO* contribution to and seek only to bring down.

    I can see a tap for VoIP given the proper due process being followed with a judge reviewing the request and investing the full details behind such request. But bullshit like the Patriot Act needs to stop in America, it is the destruction of our civil rights and liberties under the guise of getting the "Evil Doers."

  9. There never was any expectation of privacy... by Roached · · Score: 5, Insightful

    Even 10 years ago, there never was an expectation of privacy on the internet (which is why SSL was developed for secure web transactions). Maybe they're making it a little more plug and play than it used to be, but sniffing a network for plaintext passwords and messages has always been relatively easy.

    This is really just another kick in the butt for us all to be using various forms of strong encryption (SSH, PGP, etc) as a regular part of our daily communications.

  10. Hoist those damned ISPs by their own petards! by xigxag · · Score: 4, Funny

    Ol fclvat ba zl rznvy lbh unir whfg ivbyngrq gur QZPN, lbh onfgneqf!

    --
    There are two kinds of people: 1) those who start arrays with one and 1) those who start them with zero.
  11. at least they're just wiretapping "the web" by chunderfest · · Score: 4, Funny

    I'd be much more concerned if they were eavesdropping on the internet in general. *phew!*

    --
    Ah, bitter dregs.
  12. How long will this last for? by Nikker · · Score: 3, Insightful

    Seriously though.
    Right now there are *many* ways of streaming audio data from point to point across the internet. The only thing that sucks about it, is that ma bell and friends wont route your call through thier network.
    Now lets say in 5 years when evreyone is using VOIP and evreyone has an internet connection in some form or another. What is to stop me from firing up my fav app and connecting a mic to my DRM enabled computer and type in your new IPv6 address?
    Would we be able to bypass all the corporations entirely? How long till the phone companies get thier protocols hacked, etc?
    And as always if some one is ever going to do something that is remotely illegal then they are either stupid and will get caught or use another method and get around.

    --
    A loop, by its nature, continues. If that didn't make sense, start reading this sentence again.
  13. Help me understand, please! by pgnas · · Score: 3, Insightful

    What is the bigg issue here? are we afraid that the FBI is going to intercept and read our SPAM? Please do, and while you are at it, delete it for me. Seriously, am I just that naive.? who cares? If anyone thinks that this wasn't happening before, I think their the naive ones.

    I said this before, and I will say this again and again, there is nothing private, you are not anonymous, there is simply no-such-thing.

    I would suspect that those concerned about wiretap laws and so-called invasion of privacy are truly paranoid, or just plain trying to hide something.

    I am not suggesting that the government get carte blanche access to everything, there does need to be some oversight. I know, I know, the oversight commitee will be corrupt, right? (I think that they make pills to ease paranoia).

    so, Someone, please draw me a picture, how is this so bad, what the hell is so private, they are not putting cameras in our houses...wait, are they?

    1. Re:Help me understand, please! by einhverfr · · Score: 2, Interesting

      In the US, there are supposed to be certain 4th and 14th ammendment rights which guarantee that the states and the federal government can't randomly start collecting information on someone for politically motivated persecution and prosecution.

      Unfortunately these rights have been slowly being undermined in part because we have never seen a supreme court opinion (IANAL) which clearly states exactly what is protected against here. One of my real gripes in Roe v Wade (yes, I am pro-choice) is that the Supreme Court never actually stated what the right to privacy meant. The closest they got was to state that not everything one does to one's own body was protected, but that abortion within certain limits was. This was, in my opinion inadequately explained and left a huge amount of gray area for privacy rights in general.

      In my opinion, 4th amendment rights (and hence 14th ammendment rights, which use mostly the same language but directed at the state rather than the federal government) are the most nebulous rights we have, but I don't think that they should be. The idea seems clear-- that the government should not be allowed to do arbitrary surveilance for the purpose of arbitrary persecutions or prosecutions. I.e. such surveilance should have judicial oversight, except where there is a compelling interest (perhaps for example airport security) to do otherwise.

      --

      LedgerSMB: Open source Accounting/ERP
    2. Re:Help me understand, please! by wintermute1000 · · Score: 2, Insightful

      This attitude drives me nuts. Just because you're not doing anything wrong doesn't mean it's okay for the government to listen in on your phone calls/read your e-mail/whatever else, and not wanting total strangers to know all your business isn't paranoia. Clearly, oversight is needed, but there seems to be no such thing in the continued erosion of privacy American citizens are experiencing right now. I just hate the argument from "duh, this is happening, get used to it." Just because it's already going on doesn't make it fair or right.

    3. Re:Help me understand, please! by Anonymous Coward · · Score: 5, Insightful

      >they are not putting cameras in our houses...wait, are they?

      Not yours, don't worry. You aren't, let's see, both of Chinese/MiddleEastern/Jewish/FlavorOfTheWeek ancestry and working in the high tech industry. So no worries, mate.

      But pre-9/11, if they had wanted to put their own cameras and microphones in your house, they would have needed a court order, signed by a judge, who would actually (all counter-claims aside) review the evidence supporting the request.

      Now, post-9/11, they don't need a court order at all.

      Now you ask, how is this bad, what is so private? Gosh. How do I explain to you. It's like explaining water to a fish. But in this case, maybe an IQ challenged fish.

      I'll tell you what. I'll do a study whereby you can sign up to have devices hidden in your house. These devices may or may not be active microphones and cameras, and they will be well hidden from you. If you participate, the devices may or may not be installed. If you look for them, you will be mocked on the internet.

      The audio and images collected by the devices may or may not be, at some point in the future, released and or leaked onto the internet. You and other adults in your household, by participating in this study, take responsibility for the fact that any minors under your guardianship may have embarassing childhood episodes revealed on the internet in the future. Of course, they may or may not care, but you can decide for them since you are their guardian.

      I will hire qualified personnel meeting stringent background requirements (physically strong, young, graduated high school) to protect any information collected, and let them work in offices with minimum wage clerical staff who are given large binders containing writeups that mention protecting the information. We will protect your information from release unless there is a mistake or unless we decide, or any future custodian of the information, or anyone who steals the information, decides, at any time, for any reason, to release it.

      If you are interested in participating in such a study, just reply here with your active email addresses, phone numbers, your home address, your mother's maiden name, the maiden name of your spouse and your spouse's mother, the names of your closest neighbors, the names of five friends, your complete school transcripts, a transcript of a recent intimate pillow talk conversation with your spouse, and the names, addresses, and social security numbers of your family members and any relatives through previous marriages. For any private information of others that you do not have, just provide what you do know and we will find the rest.

      I know, it's still hard for you to understand. Re-read the part about them no longer needing a court order. Now think about it, 'them' could be local police, sheriffs, almost anyone.

      You know what? I actually don't believe you. I think you do understand.

      Want to prove me wrong? OK, then just post your information, go ahead.

    4. Re:Help me understand, please! by tomhudson · · Score: 2
      ... they are not putting cameras in our houses...wait, are they?
      Look at what's already happened with the government wiretapping OnStar to listen to you while you drive.

      Fast-forward a decade. Every cell phone has a camera, and they decide to turn it on and see what you are doing without you knowing.

    5. Re:Help me understand, please! by HeghmoH · · Score: 3, Insightful

      Government tyrrany has killed far, far more people than criminals or terrorists ever have. Tens of millions of people in Germany, the USSR, China, and many other places. Tell me, then, why exactly should I be more worried about terrorism and crime than about overpowerful government?

      --
      Mod down posts with a "Free Mac Mini/iPod" sig, they're spam!
  14. Is it so bad? by t_allardyce · · Score: 2, Insightful

    wiretapping at the end of the day isnt really an issue online, its so easy to encrypt and its just going to get easier as more and more programs build functionality in for the average user. Although there is the problem of tracing, you cant exactly hide where your packets are going (unless you used an elaborate distributed system of people taking your packets and secretly passing them on while generating random traffic to other places) and you could also have a man-in-the-middle attack if you have no other communications channel to send keys. The point is, if everyone enctrypts, key-word flagging will be out and wiretapping will only be used in cases where its absolutely needed because only those cases will have the resources to spend time cracking encryption or tracing things or waiting for a new key to be given. Still it doesnt mean it should be a green light for tapping, but it already is, the patriot act sorted that out years ago.

    --
    This comment does not represent the views or opinions of the user.
  15. VoIP Tapping by Judg3 · · Score: 2, Insightful

    Even after all the news surrounding the recent VoIP problems, wiretapping, TOS agreements, etc I still just signed up for Vonage, the $30/month for unlimited local and long distance was to good to pass up (Not to mention my great dislike for my current telco and the fact that I can't get another one unless I lived on the other side of the street).
    My question though about wiretapping is: Is it that big of a deal? From what I've read the same rules apply, so they can't just tap into you for no reason at all. So it just seems sort of like a moot point to scream and yell about VoIP tapping, since landlines have already had that for quite some time. Where's the "This is bad because" deal? Are we worried that because now that there's a wiretapping rule in place that it means that there's the potential for hackers to exploit it? Something else?

    --
    Looking for hardware (Currently need: Large Etch-a-Sketch) Have one? See my journal!
    1. Re:VoIP Tapping by maximilln · · Score: 2, Interesting

      so they can't just tap into you for no reason at all

      That's the arguable point. They can tap you for no reason at all. They just can't do anything official with it.

      Where's the "This is bad because" deal?

      It's not about catching bad guys or fighting crime. It's about harassment. You're not like them. They are not like you. Look back over history. People with power derive buttloads of amusement from watching plain citizens get run in circles. It's _FUN_ to drive somebody nuts. It is much easier to drive someone nuts if you can wiretap them.

      --
      +++ATHZ 99:5:80
  16. Two old answering machine messages. by Stephen+Samuel · · Score: 4, Funny
    1. 1989(in russian accent) -- Due to recent budged constraints, this call is not being surreptitiously recorded....
      Please leave name and phone number for future reference.
    2. 1999 -- Hi. You've reached the phone number of Stephen and Regan. Our answering machine is broken -- but that's OK. Because our line is being tapped.
      Please speak clearly and we'll get the transcript from our lawyers.
    The shocking thing about the second message is the number of people who took it seriously. Regan's mother, left a very motherly message ("Just who do you have for roommates, and are you sure you can trust them???) that had me rolling on the floor laughing.
    --
    Free Software: Like love, it grows best when given away.
  17. The police are our founders' "standing army" by ShatteredDream · · Score: 5, Interesting

    As I have said before on my site, there is ample reason to believe that the police are the "standing army" that our founders warned us of. Let's look at what our founders worried about, what the police and military are today

    Standing army of our founders' day and age:

    • Enforced many of the laws. Remember the infamous Star Chamber courts for history classes? Military courts for civilians, often American colonists.
    • Frequently violated the rights of the people, often in the name of law and order.
    • Could basically do what they wanted when it was convenient for the state; not held to the strict standard that you have to disobey an illegal order.

    The police of our day and age:

    • Frequently take on what were once military jobs such as detaining unlawful combatants, fighting those who come to our soil to blow up your women and children (hey that was warfare, not terrorism just 30 years ago....)
    • Frequently disregard the civil liberties of the public, including going so far as to try to instill the attitude that anyone more concerned with civil liberties than fighting crime is "pro-crime."
    • Frequently disregard the rule of law when it means that one of their own will get "ratted out." The boys in blue are notorious for taking the attitude that a cop can "screw up" because "they are human" even when a civilian doing the same thing would get locked up. Ever heard of cases where the police didn't get busted because none of them would speak ill of even their corrupt comrades?

    No knock raids, unprecedented surveillance, military grade equipment, they are a paramilitary, not "peace officers" anymore. Don't ever, ever make the mistake of assuming that they are peace officers anymore. Between their militarization in tactics/armament, and the legal powers that put us at a distinct disadvantage, they are closer to an occupying army than what they were originally created to be.

    If you think that gun control is "common sense" yet you are worried about issues like police powers then ask yourself who you would really trust with a gun. The police, many of whom are neurotic, egotistical control freaks (that's why they are attracted to positions of power, surprise, surprise....) or your neighbor? How about your own family and friends. People you can trust.

    See I trust the latter, because I come from a law enforcement family that has former law enforcement from both the state and federal agencies. I have seen many more law enforcement officers in personal settings than the average person so I have a good idea of what the personality types are. Trust me, people, especially those who think gun control is a good idea, these are often some of the last people that deserve a state sanction to abridge your liberties while carrying a firearm.

    The best thing that could happen to our civil liberties would be for the average citizen to be able to own any weapon that the cops can use, for the government to not be able to register those weapons and for the people to have a right to use force to resist unlawful arrest. Oh wait, unlawful arrest basically doesn't exist anymore because who are you to tell a cop that they don't have a legitimate reason to detain your unconvicted (probably felon) ass? See my point?

    1. Re:The police are our founders' "standing army" by maximilln · · Score: 2, Insightful

      And it's no small surprise that you were modded "troll". We can't have people like you upsetting this delicate social order.

      --
      +++ATHZ 99:5:80
  18. Re:I have seen the light! by maximilln · · Score: 2, Insightful

    As soon as the government governs without the consent of the people, and the people say NO MORE then the government legally has no power

    That's a real good joke. Ideally, you're right. Now, back to reality, when the people say "NO MORE" that's when they become inmates.

    --
    +++ATHZ 99:5:80
  19. Tin foil hats... by dmayle · · Score: 2, Interesting

    I know I'm paranoid, but that doesn't mean they're not out to get me. I sometimes wonder about the delays with IPv6. It's got built-in point to point encryption that can be enabled by default at the IP level, rather than having to support it at the application level. It would make any point-to-point connections secure, and I'm afraid we'll start seeing government mandated proxies so that wiretapping can be insured. Unfortunately, as soon as that happend, we will have lost...

  20. Parent is not Off Topic! by Brian+Puccio · · Score: 2, Informative

    Whoever modded the above as off topic clearly hasn't heard of ROT13. Who doesn't have ROT13 for their webbrowser and mail/usenet client?

  21. Re:what about voicemail? i.e. stored or not by osobear · · Score: 2, Informative

    it's rarely a question of whether they have the ability to, but more about the manpower. Even if they can listen to your messages, but unless you are attracting attention from them, they probably aren't. It's the same idea as with MS reading my hotmail account's email: sure, they COULD, but out of their tens (hundreds?) of thousands of accounts, why yours?

  22. Can we say Police State? by morleron · · Score: 4, Insightful

    I think that it's becoming more clear every day that the U.S. is headed in the direction of becoming a police state. The threat of "terrorism" is being used by the governemnt to expand its police powers in the name of "defending liberty." This is as good an example of double-speak as I can think of. Every step the government has taken since 9/11 has seen a reduction in the liberty of Americans to have privacy, be free from unwarranted intrusions and searches, etc.

    Unfortunately, I do not think that John Kerry, if elected, will stop this trend. He has not made protection of civil liberties, except for abortion, a major issue in his campaign. He voted for PATRIOT and, AFAIK, has made no calls for it to be repealed, re-examined, sunsetted, etc. He has given me no reason to vote for him.

    On the other hand, the Libertarian candidate, Michael Badnarik http://www.badnarik.org/index.php is calling for a halt to the expansion of the government's police powers. I intend to vote for him as I don't accept that a vote for a third party candidate is a wasted vote. I urge anyone concerned about the growth and misuse of governemnt power to consider a vote for Badnarik.

    Just my $.02,
    Ron

    --
    Impeach Barack Obama for violating the Constitutional requirement to be a "natural born" citizen to hold the office of P
  23. This makes no sense by MobyDisk · · Score: 3, Insightful
    ...the FCC could, if it wanted to, place tariffs on online newspapers or require that online retailers be able to process 911 emergency calls. "It's sort of a lighthearted footnote," she says. "But for me it suggests the FCC has power over all online services and it's just going to decide what services it's going to act on.

    1) You cannot place a tariff on a newspaper. That would be one of the most obvious violations of the first ammendment I've ever seen. "Oh, you can criticize the government, but there is a tariff on that." riiiiggghhht....

    2) Online retailers process 911 calls? Huh?

    From: reader@slashdot.org
    To: sales@niftystore.com
    Subject: Help!

    Someone is in my house, they are coming upstairs! Help!

    3) The last one is the scariest part. The US government has basically found a way to get around the constitution. They don't have the power to do something, but they can set up an agency that claims the power. But this agency can bite them back by doing things the congress doesn't want.

    Does the charter for the FCC state what it can and cannot do? The FCC is the greatest example of a regulatory agency that expands it's own powers based on it's own decisions. I begin to think that the entire purpose of the FCC should begin to be questioned, and maybe the charter that established it should be rewritten.

  24. IPv6 by wytcld · · Score: 2, Informative

    Um, guys, doesn't IPv6 require encryption? So as IPv6 is rolled out, and IPsec becomes the default way to go (certainly for business use), what exactly is the FCC-mandated access going to buy them?

    Of course, with an administration opposed to science, it might be a small step to also oppose foundational technology like IPv6. But can they do that without creating a lot bigger fuss - what with that leaving our infrastructure open to terrorists and hackers, and impeding sale of already-engineered American products?

    --
    "with their freedom lost all virtue lose" - Milton
  25. Re:what about voicemail? i.e. stored or not by TheOtherChimeraTwin · · Score: 2, Funny
    It's the same idea as with MS reading my hotmail account's email: sure, they COULD, but out of their tens (hundreds?) of thousands of accounts, why yours?

    Well, in my case, it would be worth Microsoft's time to read email from my hotmail account. I, unlike most people, get many unique offers:

    • Prestigious university University degrees at a discount
    • Great mortgage offers
    • Numerous software packages at reduced prices
    • Some rather personal services and medications
    • And an offer from Nigeria that is going to make me rich!