Slashdot Mirror


Court To Reconsider Decision On ISP Mail Snooping

thpr writes "In June, Slashdot reported that ISPs can read email (according to a decision by the 1st circuit court of appeals). In short, the court felt it was not a violation of U.S. wiretap laws. Last month, the Justice Department asked for the full court to reconsider the decision. C-Net now reports that the court will 'reconsider its June 29 decision'. Arguments are scheduled for Dec 8."

186 comments

  1. Kind of link not having curtains by stecoop · · Score: 4, Interesting

    I would tend to agree with this ruling. I believe that an individual should protect her property as it's kind of like leaving a sofa on the curb not expecting it to be removed or like not having curtains on your windows and expecting people to not look in as the drive by. The property owner of the email should be protecting it via encryption or its there for anyone to read.

    I like double rot-13; if it is encrypted and someone cracks it than I guess you should find a better encryption algorithm.

    1. Re:Kind of link not having curtains by garcia · · Score: 5, Insightful

      The property owner of the email should be protecting it via encryption or its there for anyone to read.

      Laws like the ones are talking about will eventually cause the population to do exactly that but it's not exactly as if the criminals weren't doing that already.

      You will be labelled a traitor if you protect yourself and [tinfoil warning] you could eventually be held against your will for crimes against the government for protecting your personal privacy [/tinfoil].

      Remember that anyone who encrypts their email obviously has something to hide and doesn't support their government and their own freedom!

    2. Re:Kind of link not having curtains by stecoop · · Score: 4, Insightful

      Remember that anyone who encrypts their email obviously has something to hide and doesn't support their government and their own freedom!

      There are so many sides to a coin - case in point you brought up a very good flip side.

      But lets say that enough people started recognizing that email isn't *gasp* private and, visioning everyone knowing email isn't private; that all email (lets extend it to internet traffic) became encrypted. This ruling only helps the civil libertarian groups on getting the word out to protect the civil liberties at an individual level.

    3. Re:Kind of link not having curtains by Kenja · · Score: 2, Interesting

      So you dont mind if I go though your mail in your curb side mail box? After all, that letter from your sister wasn't encrypted, nor was your paycheck.

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    4. Re:Kind of link not having curtains by kfg · · Score: 1

      Remember that anyone who encrypts their email obviously has something to hide and doesn't support their government and their own freedom!

      And in future putting snail mail in an envelope will be defacto evidence of criminal intent.

      At that point the Post Office will only deliver mail contained in government certified lock boxes for which they hold a master key.

      KFG

    5. Re:Kind of link not having curtains by maxpublic · · Score: 3, Insightful

      Or, let's recognize that email is just the 21st century version of paper mail, and should be treated as such. There's no logical reason why mail transmitted electronically should have less protection than mail transmitted by post.

      Max

      --
      My god carries a hammer. Your god died nailed to a tree. Any questions?
    6. Re:Kind of link not having curtains by verzonnen · · Score: 1

      Yeah, I would tell my bosses that I am legaly allowed to read their emails. However in order to prevent me from doing so they should use encryption. Since it would be illegal for me to decrypt anything encrypted. (Even if it is only rot 13)

    7. Re:Kind of link not having curtains by humuhumunukunukuapu' · · Score: 1

      that mailbox is my property, and it has a door. it is not the same as an email sitting on server someone else owns.

      --
      i saw the baby, and the baby looked at me
    8. Re:Kind of link not having curtains by rackhamh · · Score: 2, Insightful

      But you don't own the postal service mailboxes. So in that case, you don't mind if they rip open your envelope (don't worry, they'll tape it back up), to see what's inside? Maybe photocopy it and store it in their records? Share it with a few people?

      I can see the utility of "wire tapping" email, but I can also see how people have an expectation of privacy when they send an email. They expect those "To" and "From" fields to mean something.

    9. Re:Kind of link not having curtains by KarmaMB84 · · Score: 2, Informative

      Correction, a mailbox you're paying for that someone else owns. I don't "own" the physical box at my local post office, but they aren't allowed to read all my mail on a whim either.

    10. Re:Kind of link not having curtains by Anonymous Coward · · Score: 0

      Doubtful. It's easy enough to steam open an envelope and reseal it afterwards.

    11. Re:Kind of link not having curtains by stanmann · · Score: 2, Insightful

      it is, except that most e-mail is equivalent to a postcard since without opening the envelope it is possible to read... BTW it is legal to read a postcard addressed to someone else, it is illegal to open or even destroy a stamped envelope intended for someone else including your spouse, parents, roommates or children.

      --
      Food not Bombs is a nice platitude but it breaks down when you notice that the Bombees are usually well fed
    12. Re:Kind of link not having curtains by Kenja · · Score: 2, Interesting
      "that mailbox is my property, and it has a door. it is not the same as an email sitting on server someone else owns."

      Not true. In many instances the postal service owns the mailbox just as the garbage service owns the cans. Even if they dont, most people rent their home and so still dont own the box.

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    13. Re:Kind of link not having curtains by stanmann · · Score: 2, Insightful

      yes, any encryption like rot13 is comparable to an envelope and demonstrates intent. ease of contravention is irrelavent making it "non-trivial" to access should be sufficient.

      --
      Food not Bombs is a nice platitude but it breaks down when you notice that the Bombees are usually well fed
    14. Re:Kind of link not having curtains by simcop2387 · · Score: 1

      thats why you lace the letter with some sodium or potasium, they'll destroy the letter trying to open it!

    15. Re:Kind of link not having curtains by humuhumunukunukuapu' · · Score: 1

      i own my mailbox. i bought it. i dug a hole. i put it in the ground.

      --
      i saw the baby, and the baby looked at me
    16. Re:Kind of link not having curtains by Anonymous Coward · · Score: 0

      I hope you have a waterproof mailbox!

    17. Re:Kind of link not having curtains by KarmaMB84 · · Score: 2, Insightful

      Post cards do not have envelopes and so can be unintentionally viewed. An e-mail would require the sysadmin or employee to actually intentionally retrieve it from their system to read it.

    18. Re:Kind of link not having curtains by Anonymous Coward · · Score: 2, Informative

      Read The Original Article.

      At issue here isn't just "anyone" reading the e-mail--it's the ISP. Also, the people who were snooped were not the SENDERS of e-mail--they were the recievers. You can't encrypt someone ELSE's mail to you. Finally, this wasn't a case of "well, potentially anyone can read your e-mail," this was a case specifically of data mining e-mail for commercial purposes.

      The original case had someone who ran a bookstore and also provided e-mail service to customers. He then SCANNED THEIR INCOMING E-MAIL for messages from Amazon, to see what they were reading. Not as a random snoop, but SPECIFICALLY to give himself a business advantage by knowing what his potential customers were interested in.

      Consider the reprecussions if this is legal. Microsoft (or GMail or Yahoo) would be within their rights to 1.) ready your incoming e-mail, 2.) look for commercially useful data about your shopping habits or personal preferences, and 3.) act on that information.

      So, under the original decision, it would potentially be available to scan your e-mail looking for, say, a confirmation for a flight you booked, then sell that information to a third party (let's say a travel provider), who could then start sending you e-mails about taking tours or booking hotels at your desitnation. As long as they copy your e-mail off a server our out of memory (read: don't intercept it DIRECTLY from the TCP/IP packets), this is LEGAL.

    19. Re:Kind of link not having curtains by Llynix · · Score: 1

      that mailbox is my property, and it has a door. it is not the same as an email sitting on server someone else owns.

      Actually, as far as I know _ALL_ United states mailboxes are property of the USPS. Even when you go to the hardware store and buy one it is still the governments.

      When we were delivering newspapers we could not simply put the newspaper in the mailbox. We had to attach a tube under the mailbox. If not, the postman would have a citation issued.

    20. Re:Kind of link not having curtains by mdfst13 · · Score: 1

      "An e-mail would require the sysadmin or employee to actually intentionally retrieve it from their system to read it."

      What if they are using a network sniffer? Email is passed in plain text. Further, a lot of info about the email is stored in the logs (e.g. sender and subject). For example, when I worked at a university, there was a faculty member who required 80 MB of space (default was 10; anyone could get 20 by asking; 80 required special permission) to get emails from the gay.black.male mailing list (I knew this because if he took a day or two off without reading his email, his account would overfill and clog up the incoming mail queues; yes, it was enough mail to make a difference even with 30,000 active mail users).

    21. Re:Kind of link not having curtains by kfg · · Score: 1

      It's easy enough to steam open an envelope and reseal it afterwards.

      You are laboring under the misapprehension that such a structure would have the trivial intent of simply insuring the physical ability to read mail.

      In fact, it's function would be an overt and highly visible application of governmental powers. i.e., making sure you were keenly aware of your place.

      KFG

    22. Re:Kind of link not having curtains by mdfst13 · · Score: 2, Insightful

      What if they read the mail while it is still in the truck? Or at the post office? What if a piece of your mail drops on the sidewalk? Can anyone read it now? The side walk is public property?

    23. Re:Kind of link not having curtains by Kenja · · Score: 1
      "i own my mailbox. i bought it. i dug a hole. i put it in the ground."

      You may have bought your mail box. But acording to US law you do not own it. Do a google search on the subject. So how about answering the question I asked? Are you OK with people going through your mail?

      --

      "Have you ever thought about just turning off the TV, sitting down with your kids, and hitting them?"
    24. Re:Kind of link not having curtains by Anonymous Coward · · Score: 0

      What sort of pathetic pseudo-Darwinism are you advocating?

      But lets say that enough people started recognizing that mail isn't *gasp* private and, visioning everyone knowing mail isn't private; that all mail (lets extend it to newspapers and magazines) became encrypted.

      If there was justice in the world, I would know your physical address. Extending your logic, it would just be your own darned fault if evil-me photocopied/photographed every piece of incoming and outgoing communications from your postbox. Nevermind that the people SENDING you mail are even less likely to encrypt the things that they send TO you than you are to encrypt things that you send TO them.

      But for some utterly silly reason, objective people seem to believe that it is unreasonable to permit private individuals or government agents to rifle through personal communications without some sort of consent. I suggest that you remedy this situation by presenting your well thought out argument to your local postmaster, preferably by scrawling it on the back of all the mail destined for his or her home address.

      Idjit.

    25. Re:Kind of link not having curtains by shawn(at)fsu · · Score: 1

      You can't encrypt someone ELSE's mail to you. And I think this is one if not the key point. I wish more people would RTFA. I can be as causios as any tin foil hat crowd but that wont do me any good when someone sends me an unencrypted email.

      --
      500 dollar reward for tip(s) leading to the arrest of the person(s) who stole my sig.
    26. Re:Kind of link not having curtains by the_weasel · · Score: 3, Insightful

      Hardly true. The postal service is government run - the laws that make it illegal to read sealed mail are part of the system of trust that allows us to place our private corrospondence in the hands of the government. It is part of the service you purchase when you buy your stamps.

      E-Mail is not run by the government. It is run mostly by private industry - though anyone can set up thier own mail server no one can argue that private industry does not own the vast majority of hardware and resources that process and transmit the bulk of email.

      So - the question to ask yourselves is - do you believe it is the governments job to legislate how a company or even private individual uses and handles data that is hosted and or transferred through their property?

      I don't really have an answer, but I find it a fascinating question.

      By all means - encrypt your email if you feel the need, but lets not get the government into the habit of legisating the Internet.

      --
      - sarcasm is just one more service we offer -
    27. Re:Kind of link not having curtains by screenrc · · Score: 1
      Perhaps, but that is not the point. Because
      according to your logic, a citizen has no
      right to life either unless you protect yourself
      against others attacking you. You should wear
      body armor, buy guns, and train on martial arts;
      just like using encryption for email.


      The main issue is how should citizens behave
      towards one another by default, and spare us
      the incovenience of having to protect ourselves
      from one another.

    28. Re:Kind of link not having curtains by ViolentGreen · · Score: 1

      Correction, a mailbox you're paying for that someone else owns. I don't "own" the physical box at my local post office, but they aren't allowed to read all my mail on a whim either.

      The USPS is a government institution and the government does not own the physical letter. Once it gets in the government's hands it ceases to be your property and becomes the property of the addressee.

      With electronic mail, the physical medium that on which the message is located is owned by the mail provider. Thus they should have the rights to do whatever they please with it. It should be up to them to provide a policy saying that they will not scan, read or disclose your message to anyone else.

      --
      Not everything is analogous to cars. Car analogies rarely work.
    29. Re:Kind of link not having curtains by rebel47 · · Score: 2, Insightful

      Yeah, great. How would you feel if this was extended to snail mail? Think it couldn't happen....think again. How soon before the FBI etc. decides that terrorists are communicating by snail mail and seek powers to intercept and read mail from people they *think* could be, might be sending/receiving mail to or from suspected terrorists or terrorist orgnizations.

      --
      One day I woke up and saw all my rights had disappeared, that's the day I knew the terrorists had won.
    30. Re:Kind of link not having curtains by antiMStroll · · Score: 1

      This is nothing like having no drapes. If you want to persue that analogy, think drapes the contractor can open any time without your permission, or even without your notice, and every time you upgrade them it's within their legal right to attempt a circumvention. Finish off with the government considering a law preventing you shutting the drapes in a fail-safe manner because they want a peek too and you're getting close. It's been obvious to anyone bothering to look that the world is shifting entirely to electronic communications. Guaranteed protection against goverment and private intrusions are essential. Why would anyone want to give those up? It's incomprehensible.

    31. Re:Kind of link not having curtains by Anonymous Coward · · Score: 0

      He owns his mail too; the physical paper and ink.

    32. Re:Kind of link not having curtains by William+Tanksley · · Score: 1

      Consider the reprecussions if this is legal. Microsoft (or GMail or Yahoo) would be within their rights to 1.) ready your incoming e-mail, 2.) look for commercially useful data about your shopping habits or personal preferences, and 3.) act on that information.

      They do all that already -- GMail admits it and is open; the other can and probably do, and are secretive about it. The real question is what, precisely, is allowed in step 3 (Act on That Information).

      -Billy

    33. Re:Kind of link not having curtains by Anonymous Coward · · Score: 0
      Actually, as far as I know _ALL_ United states mailboxes are property of the USPS. Even when you go to the hardware store and buy one it is still the governments.

      Well, that's news to me. I have a mail slot, so I guess they own my living room.

    34. Re:Kind of link not having curtains by Anonymous Coward · · Score: 0

      If you use even the weakest level of encryption, and devise a way to be alerted if it's read by your ISP, could you prosecute for the ISP violating DMCA?

    35. Re:Kind of link not having curtains by humuhumunukunukuapu' · · Score: 1

      i own the mailbox, the gov't owns the space inside, if that makes any sense.

      but no, i don't care if someone goes through my mail. there isn't much that is interesting in there.

      and it's not like the law is going to stop somone who wants to look from looking, i don't have a mailbox-guard dog or anything.

      --
      i saw the baby, and the baby looked at me
    36. Re:Kind of link not having curtains by lew3004 · · Score: 1

      Great....now we'll have to pay $0.37 for each email. I KNEW that would happen someday.

      --
      I still can't get the screen shots of Castle Wolfenstein for the Apple IIe out of my head.
    37. Re:Kind of link not having curtains by Anonymous Coward · · Score: 0

      Remember that anyone who encrypts their email obviously has something to hide and doesn't support their government and their own freedom!

      Yeah well this is basically a symptom of a cause.

      Cause is the use of the word PRIVACY. If the government thinks PRIVACY should not apply to citizens you have a big problem.

    38. Re:Kind of link not having curtains by DM9290 · · Score: 1

      No. It is kind of like kind of like the post office having the right to open and read your mail.

      --
      No one has a right to their *own* opinion. They have a right to the TRUTH.
    39. Re:Kind of link not having curtains by FLEB · · Score: 1

      ...and all that's physically protecting your postal mail is an envelope.

      Although I can understand that there are reasons to emphasize that email isn't secure, there are also some very good reasons to place legal restrictions on reading other people's email without their consent. It's in the same vein as the "legalized security" of postal mail.

      Sure, you still have to worry about getting hax0red, just as you have to worry about people swiping your mail or beige boxing your phone. With laws on the books, though, it means that people who do it will be held responsible, and (more importantly) that the "good guys" won't be able to indescretely watch your email.

      --
      Information wants to be free.
      Entertainment wants to be paid.
      You just want to be cheap.
    40. Re:Kind of link not having curtains by Anonymous Coward · · Score: 0

      I for one welcome our new email-reading masters.

    41. Re:Kind of link not having curtains by droleary · · Score: 1

      Laws like the ones are talking about will eventually cause the population to do exactly that but it's not exactly as if the criminals weren't doing that already.

      There's a really interesting paradox in that. By protecting the rights of the majority of citizens, it actually makes law enforcement easier than if you universally clamp down on freedom. It's just like illegal search; a cop might think their job is easier if they can search everyone at will, but in reality it makes it harder because it makes harmless people into criminals (i.e., they take steps to make such casual searches much harder) and diverts the cops attention from the real troublemakers. Likewise, if you want to be able to easily read email when it is legally justified, you don't strip users of any implied/understood privacy. Because, if you do, then you just turned your problem from one of getting a simple court order to grep some text to one of having to crack AES-128 encryption before you can even scan the stuff.

    42. Re:Kind of link not having curtains by Anonymous Coward · · Score: 0
      I believe that an individual should protect her property as...

      You mean his property.

    43. Re:Kind of link not having curtains by jdbartlett.com · · Score: 1

      It is kind of like kind of like the post office having the right to open and read your mail.

      Exactly! (Apologies, I just posted almost exactly the same comment as this, not having seen your own response -- still, good to know someone's on the same wavelength!)

    44. Re:Kind of link not having curtains by DM9290 · · Score: 1

      It is illegal to go through someone elses mailbox and read their post cards.

      Even if you are the post master.

      And post cards are hand delivered and consequently have a low expectation of privacy. Email is not hand delivered.

      --
      No one has a right to their *own* opinion. They have a right to the TRUTH.
    45. Re:Kind of link not having curtains by stanmann · · Score: 1

      Yes, but it isn't illegal for the postman to go through his bag and read your postcards, only once it is placed into the mailbox is the expectation of privacy renewed.

      --
      Food not Bombs is a nice platitude but it breaks down when you notice that the Bombees are usually well fed
    46. Re:Kind of link not having curtains by DM9290 · · Score: 1

      Yes, but it isn't illegal for the postman to go through his bag and read your postcards, only once it is placed into the mailbox is the expectation of privacy renewed.

      Do you think the postman is permitted to make a copy of your postcards?

      I ask, because using a computer system to "view" a document requires making a copy. And I think there is a reasonable expectation that the ISP should/does not commit copyright infringement against its customers. And consequently can not normally "View" the email unless that is a necessary operation in the transmission (in which case could be consteud as implied consent), and from that point there is a reasonable expectation that the email will not be copied to a video display (in violation of copyright) and therefore will not be read by a human being and not be recorded or otherwise put on display.

      --
      No one has a right to their *own* opinion. They have a right to the TRUTH.
  2. Well, if they want to snoop... by Pig+Hogger · · Score: 5, Funny

    All they need is to declare that the FBI is an ISP... Voilà, problem solved!

    1. Re:Well, if they want to snoop... by Anonymous Coward · · Score: 0

      So I can finally get my fbi.gov e-mail address?

  3. Let me get this right by Sqwubbsy · · Score: 3, Interesting

    John Ashcroft is fighting for greater privacy for email?
    Wonder how the groupthink will justify this.

    1. Re:Let me get this right by MikeMacK · · Score: 1

      Well, they still have the Patriot Act, at least for now, so if he wants to look at someone's email he still can. They just need to be someone he considers a person of interest.

    2. Re:Let me get this right by twiddlingbits · · Score: 2, Insightful

      The Gov't can read your email if they wish anyhow. This would prohibit private citizens from doing so by closing the loophole that said "if the read it while it's on the mail spooler and NOT right off the wire it's OK". It's a bad loophole, it should be closed and closing it doesnt hurt Homeland Security any. The Gov't is only going to be reading your email if you are a "bad guy" anyway. They are more likley to snoop on your cell phone calls than your email. Of course if you ARE a bad guy and give out your email addy on the cell phone you are in double trouble.

    3. Re:Let me get this right by eSims · · Score: 2, Interesting

      " John Ashcroft is fighting for greater privacy for email?"

      Of course. If everyone realizes how insecure email really is then encryption will become more prevalent . More ecrypted traffic means a lower singal to noise ratio and much harder to find those conversations that the Feds want to snoop on.

      Don't kid yourself. When the Federal Government wants to read your encrypted email they can. But finding what email is worth decrpyting is much harder when everyone is encrypting their email, but as it stands now so few do that an encrypted email is like a red flag saying "Hey! I am important enough to bother decrpyting!"

      --
      I .sig therefore I am!
    4. Re:Let me get this right by Sqwubbsy · · Score: 1

      But the Patriot Act merely extends investigatory rights based on supposed terrorism similarly to how RICO works for racketeering.
      The threat to individuals is no greater and no less than it was previously, and the threshhold for proving racketeering is a lot lower than terrorism.
      I can't figure out why people get so bunged up about this.

    5. Re:Let me get this right by kfg · · Score: 4, Insightful

      Wonder how the groupthink will justify this.

      They wish to consolodate the power of surviellence to themselves, and themselves alone.

      That way they can not only snoop on the people, but on the snoopers as well; and all without having to worry about being snooped on.

      Pretty slick setup really, if they're allowed to pull it off.

      KFG

    6. Re:Let me get this right by AviLazar · · Score: 1

      It's an election year

      --

      I mod down so you can mod up. Your welcome.
    7. Re:Let me get this right by Stile+65 · · Score: 2, Insightful

      Ashcroft was one of the lead opponents of the movement for key escrow/Clipper chip when he was a Senator. Kerry was one of the lead proponents of it.

      Ashcroft had a great pro-privacy record in the Senate; now that he's AG, a different faction pulls his strings.

      --
      I claim first use of "Error No. 0B" - or "No. 0B error." It'll be the new ID 10T!
    8. Re:Let me get this right by Anonymous Coward · · Score: 0

      omfg groupthink, so silly!

    9. Re:Let me get this right by Alien+Being · · Score: 1

      "But the Patriot Act merely extends investigatory rights based on supposed terrorism "

      Gee, when you say it that way it doesn't sound so bad.

      "I can't figure out why people get so bunged up about this."

      Then try thinking about *how far* it extends investigatory rights and what the meaning of "supposed" is.

      Don't you understand that the government had all the info it needed to prevent 9/11 even without the so-called Patriot act?

    10. Re:Let me get this right by Anonymous Coward · · Score: 0

      Perhaps Ashcroft is worried about embarassing emails turning up, say, conversations between Enron, Halliburton, the House of Saud, Robert Novak and highly placed government officials.

    11. Re:Let me get this right by bnenning · · Score: 1
      Ashcroft had a great pro-privacy record in the Senate; now that he's AG, a different faction pulls his strings.

      Exactly. This really isn't a Democrat/Republican issue. Whichever party is in control wants more power for the government at the expense of civil liberties, because they're the ones that get to wield that power. Kerry on the Patriot Act:
      "You can sum up the problems with the Patriot Act in two words: John Ashcroft... The real problem with the Patriot Act is not the law, but the abuse of the law."
      No Senator, the problem *is* the law, because I don't trust either Ashcroft or you to not abuse it.
      --
      How to solve most of our problems: 1.Lots of nuclear plants. 2.Cure aging.
    12. Re:Let me get this right by Nyder · · Score: 1

      twiddlingbits said: "...The Gov't is only going to be reading your email if you are a "bad guy" anyway...."

      no. The government wants to read EVERYBODY'S email to find the "bad guys".

      and please note, "bad guys" is wrong also. You are innocent until proven guilty is supposed to be the american way. of course, only money gets you off.

      but then, we are talking terrorism here, and it seems they are guilty and have no rights.

      not my opinion, but fact in how our government treats these terrorist. though I don't recall any trials yet proving they are terrorist, so I'm not really sure.
      I recall when the lame ass american guy blew up the oklahoma place, he got a trial and was proven guilty. I liked that. Made me feel like some sort of justice was done.
      The way we've handled 9/11 makes me feel unsafe, from both terrorist and my government.
      It's a shame.

      --
      Be seeing you...
    13. Re:Let me get this right by Methlin · · Score: 1

      Or pictures of calico cats, or instructions on how to breed more of them.

  4. This seems like a Reversal of the usual policy by Anonymous Coward · · Score: 1, Interesting

    It seem like a reversal of policty for the DoJ, but perhaps it is because they want to be the _only_ group to be able to snoop mail.

  5. ISPs can read email? by Anonymous Coward · · Score: 0

    Well, sure they can. Oh! You meant legally.

  6. There's an issue here? by CSG_SurferDude · · Score: 5, Funny

    There's an issue here?

    I read my users' email all the time, to, uh, ummmmm, help tune my, um, spam filters.

    Yeah, that's it, to tune my spam filters.

    1. Re:There's an issue here? by darkpixel2k · · Score: 1

      When I worked at an internet provider, we actually had a script which would make a copy of any MPG, MPEG, AVI, etc... file attatchments and toss them in a directory for us to watch.

      Most of the humorous video clips I have on my computer came from this script...

      --
      There's no place like ::1 (I've completed my transition to IPv6)
  7. Why is ISP mail readding bad? by Theobon · · Score: 3, Insightful

    ISPs can read mail. It is rather impossible to stop them from being able to read plain text data. It is a matter of if they choose to not do so.

    If I placed a confidential document on the street with no protection can I arrest you for reading it?

    Allowing Email to be read would help prevent spam and other illegal activities.

    If you want to protect your Email you can encrypt it using one of the many available free applications/protocals. Which I recommend you do anyways!

    1. Re:Why is ISP mail readding bad? by paradizelost · · Score: 3, Interesting

      How would this help prevent spam, with all the spam filters, etc... already in place, your ISP isn't going to read your email and delete all of the spam for you, especially not if it is getting past their spam filters.

      it is an invasion of privacy, they are service providers, not regulators.

      Either way, carnivore sees everything you do anyway, but being from a small town with a small town ISP, i'd rather not have my neighbor who works at the ISP reading my email.

      Especially since there may be usernames,passwords, etc.. emailed from institutions like my bank contained in those emails, and no, the bank doesn't give the option of the emails being sent encrypted.

      --
      "In a world without walls and fences, who needs Windows and Gates?"
    2. Re:Why is ISP mail readding bad? by Anonymous Coward · · Score: 1, Informative

      Say you're an ISP sysadmin, and you have a long time customer that you *strongly* suspect is a (very slick) spammer. After hours of googling, you manage to trace this individual all the way back to Spamford Wallace. We are talking about a VERY big fish here. They are not spamming from your systems or even using you as a drop box; rather, they have a shell account that they use to run a bunch of lynx processes that they use to monitor their spam sites and alert them when one is shut off.

      Do you read his email to prove it? I did!

    3. Re:Why is ISP mail readding bad? by Roxton · · Score: 1

      That's not true. Surely you must agree that anyone who reads mail is doing so consciously. Your only defense is in saying that the ruling is unenforceable, given that just about any employee could peruse the plaintext database.

      I think it's very enforceable. Server software could easily make it difficult for casual employees to view customer mail, and ISPs could be compelled to have such software under due diligence of the law.

      So are you going to argue that the fact that a few select administrators or an employee with a packet sniffer can read your e-mail makes the ruling unenforceable? Hell, then we might as well toss out half the SEC regulations.

      Nobody's saying that automated processes can't analyze the plaintext, Theobon.

    4. Re:Why is ISP mail readding bad? by Hatta · · Score: 2, Interesting

      My question is, what makes an ISP? If I give
      my roommate a shell account does it become illegal for me to view certain sectors of my hard drive? Does there have to be some sort of consideration?

      --
      Give me Classic Slashdot or give me death!
    5. Re:Why is ISP mail readding bad? by AviLazar · · Score: 4, Insightful

      If the document was labeled confidential - yes. Poor security measures do not invalidate your right to privacy. Why?: One of the reasons for this is because some people can't afford high security measures, second security measures may fail, three security measures can be broken, and a few other reasons i cannot recall.
      A great example I received from a law class I took (I am no legal expert, but my professor is) was a hypothetical situation: If I leave my car engine running, with the windows open and ten thousand dollars on the seat... Would someone who took the car and/or money be liable both criminal and civil courts? Yes.
      Fast forward to computer: If I send a text email and at the top of the email it says "the following message is intended for John Schmoe ONLY", anyone reading it is in violation of privacy acts (unless they are authorized to do so by groups like the proper authorities, or contracts.)

      --

      I mod down so you can mod up. Your welcome.
    6. Re:Why is ISP mail readding bad? by Anonymous Coward · · Score: 0

      Ok, I know I'm going to catch hell for this and probably have to turn in my geek membership card, but could someone point me to a good reference for using encryption in email? Not the theory of it mind you, I understand that, but actual how-to's for various mail applications? For example, I use AOL (it's free for me and I've had it for years so please don't tell me to get with the program). Short of writing an email in notepad, etc. and then encrypting it with a third party software and pasting the encrypted garbage into the mail form, how could I use encryption? Conversely, if someone sends me an encrypted email, how can I then encrypt automagically without having to cut and paste that as well? How will the people I send to/receive from know to encrypt/decrypt messages? Is there an autodetect kind of thing or do we have to work this out ahead of time? And lastly, and most importantly, I know the theory of public and private keys and such, but how do people transmit public keys so the sender can encrypt using the correct key? Is there a (many?) master list where people can post their keys, kind of like a phone book? Sorry to be so naive, but no one ever explained this to me and I'm trying to learn. Also, if the answer is that AOL can't do this, then are people sending to/from AOL addresses stuck with plaintext or cut-n-paste? Thanks for any useful information. :)

    7. Re:Why is ISP mail readding bad? by Anonymous Coward · · Score: 0

      I should add that even after I verified my suspicions, I could not take any overt action for political reasons (among other things, what he was doing did not technically violate the TOS, plus he was friends with the founder of the company from college).

      So, every so often I would just kill -9 all his processes.

    8. Re:Why is ISP mail readding bad? by Anonymous Coward · · Score: 0

      if the document is on the street it is publically displayed. It no longer matters what you say or have it marked as.

  8. email should have the same standard by SpamKu · · Score: 5, Insightful

    of privacy as phones.

    why sould it be that once I use a computer and/or the internet I must see my rights go down the tubes?

    Hopefully, this is part of the reason why the Court is reconsidering its decision

    --
    If I had a real .sig, it would go here.
    1. Re:email should have the same standard by Anonymous Coward · · Score: 0, Insightful

      Sorry, but it's MY server your email is stored on.

      It's MY property and I can capture it, log it, and read it to people on the street if I want to.

      you dont like that? go to anyother ISP.

      Cripes, nothing like morons that have no clue or anything being used by others to bitch about it.

      Encrypt your email if you do not want me reading it.

    2. Re:email should have the same standard by david+duncan+scott · · Score: 2, Insightful

      Do you feel that way about your phone calls, which after all travel over phone company wires using their electrons?

      --

      This next song is very sad. Please clap along. -- Robin Zander

    3. Re:email should have the same standard by shawn(at)fsu · · Score: 2, Interesting

      How about if I don't want you reading it don't read it... Why should I have to encrypt it to keep your snooping eyes away. If I have a post office box does that mean the any tom fool that works for the post office should be able to read my mail? Does that mean that the phone company can liosten to my voice mail?

      What if you do encrypt it and they break the encryption? What need could you have to read
      my mail, it's not like your law enforcment your a ISP. Just because it's your property doesn't give you unlimeted rights to do what you please, a business can't put up camera's in the womens lavatory and for good reason. The ISP wanting to read my email is like a digital voyorism.

      And this whole spam thing is absolutly bollocks, if I have spam in my mailbox I can rpeost it to you as an ISP as spam. How do you know that it is spam anyway untill I tell you. Maybe I actually did want an email for herbal viagra.

      --
      500 dollar reward for tip(s) leading to the arrest of the person(s) who stole my sig.
    4. Re:email should have the same standard by Anonymous Coward · · Score: 0

      Read the parent post again, you moron, and you'll see the issue (s)he was referring to is that of RIGHTS. Probably in this case, privacy rights.

      Or do you think tapping a phone is so easy without a court order?

    5. Re:email should have the same standard by ender81b · · Score: 2, Insightful

      To be honest, I wouldn't worry about anyone reading your email. After working at an ISP i've realized that 99.9999999% of all email is the most banal, trivial, boring shit you will ever see in your life. You would probably have a better time memorizing all the digits of PI.

      Note: Obviously never read anybodys email just to snoop, usualy involving hte tech support of some kind (i.e. why won't my email work? Well you have a 9 megs of photos you're trying to pull down over a 56k modem in a rural area where the phone lines haven't been touched in 60 years..)

    6. Re:email should have the same standard by i_r_sensitive · · Score: 2, Interesting
      Yes but whose rights have primacy?

      The ISP owns the connection, the hardware, and yes, all the files that reside therein. In the absence of some contractual obligation, they should have the right to read *any* file on their systems, including your mail. When you talk about your privacy rights you are talking about infrigning on the property rights of the ISPs.

      An NA pal of mine who works for a local ISP confirms that his employer takes the same stand. But it is worthwhile noting that they have a policy in place prohibiting their staff from so doing without the customer's approval.

      Really this is not something the government needs to get involved in, it properly left to the ISPs and their customers to deal with contractually. Legislation in this area is not likely to improve the "traditional" situation...

      --
      "Talk minus action equals nothing" - Joey Shithead, D.O.A.
      "Talk minus action equals /." -
    7. Re:email should have the same standard by timeOday · · Score: 2, Insightful
      Insightful? Surely this was meant to be funny.

      Some people will fall for any argument if you couch it as an issue of property rights.

      Like when political protest was supressed this summer in the name of protecting grass.

    8. Re:email should have the same standard by david+duncan+scott · · Score: 1
      Good to see AC stepping up -- "moron" indeed!

      The earlier AC (call him AC1, which makes you AC2) asserted his right, as a putative ISP, to handle client email pretty much any way he saw fit:


      "It's MY property and I can capture it, log it, and read it to people on the street if I want to."

      His basis for this was,

      it's MY server your email is stored on.

      AC1 was hardly defending privacy rights, unless you think that an ISP's privacy is somehow compromised by not reading and then disseminating their clients' emails. I was simply inquiring as to his feelings about a morally similar position based on similar thinking.

      Moron.

      --

      This next song is very sad. Please clap along. -- Robin Zander

    9. Re:email should have the same standard by stanmann · · Score: 1

      If it is a postcard, they can and do. intent is key. they cannot open an unsealed envelope and read the contents the envelope speaks to intent under the law. But a postcard states that you don't care who reads it. If e-mail worked the same way "do-not-read" might be viable, but it doesn't so if you don't want your mail read, stick it in an envelope and if you don't want your e-mail read encrypt it. even rot-13 or mirroring or a simple reverse is sufficient to make intent clear ... Of course you still have to find out it was read in order to act,

      --
      Food not Bombs is a nice platitude but it breaks down when you notice that the Bombees are usually well fed
    10. Re:email should have the same standard by Anonymous Coward · · Score: 0

      You're right. It IS your property (at least the hardware) and if I can find out who you are because you post AC, I'll make sure the entire world knows it. That way you won't have to worry about your server; unless it's getting hacked.

    11. Re:email should have the same standard by Anonymous Coward · · Score: 0

      You never had the right to privacy on your emails.
      Where did you get the assumption that no one could read your mail.
      ISP's need to be able to 'read' mails to keep mailspools free from clutter, and to support it's userbase, and to fight spam.
      And are your emails really that interesting?
      You might want to investigate encrypting them.

    12. Re:email should have the same standard by SpamKu · · Score: 1

      Why is is that every short-sighted "property owner" thinks their ownership of said property/service gives them the right to do whatever they want? Please show me the contract I signed indicating that the ISP is free to read all of my mail by virtue of my using their service.

      Lets take a look at the United States Post Office. Their "property" and their "service", right? Even they have to follow rules and regulations regarding the snooping of mail.

      Then there is the phone company. "I'm using their electrons", right? Their phone lines, right? Well, last time I checked, they and/or the the law enforcement/investigating body needed a wiretap order to listen in. The only exception being the customer asking and giving explicit permission to monitor the lines because of threats/harassment to the customer.

      I'm not advocating that the rights of the user is absolute with email, but common sense dictates a level of privacy. You appear to miss this point completely; hence the use of the word "moron."

      There may not be law (yet) against ISP owners who believe they "can capture it, log it, and read it to people on the street if I want to," because "it's MY server your email is stored on." but I'd love to see you, or the person you are advocating for, try it and see if you don't get in very hot water for excercising your very intersting belief that you can do whatever you want because it is "your server." The odds of your ass ending up on a legal flagpole here would increase exponentially if you tried this on a famous/rich/powerful person with a good lawyer or a public figure who had any significant stature.

      Sometimes the law (and people like you, apparently) take a while to catch up with the advances in technology and the responsibilities it entails. Hopefully it won't take too long for either of you.

      And since I didn't post AC this time, you now know who the other "moron" is.

      .

      --
      If I had a real .sig, it would go here.
    13. Re:email should have the same standard by david+duncan+scott · · Score: 1
      Hmmm...I'm thinking you need to read back over the various posts in this thread. The original AC post asserted an ISP's property rights over email. I asked if he felt that way about phone calls as well, being reasonably certain that, in fact, he'd yell blue murder if his phone company did any such thing. In other words, and work through this as slowly as you need to, you and I were agreeing on this point, except for the part where you called me a moron.

      Perhaps I should just make it completely explicit: I DISAGREE with the premise that an ISP has ownership over email passing through their servers, and I attempted to show a similar, older, set of circumstances, namely phone calls and the phone company, in which few would argue that the conversations are company property.

      Thanks for not being AC this time, BTW. Nice to meet you.

      --

      This next song is very sad. Please clap along. -- Robin Zander

  9. Read my mail by Anonymous Coward · · Score: 4, Funny

    I'm going to email myself the Goatse image 1000times/day from now on so whenever they read my email they get my opinions stated to them bluntly.

    1. Re:Read my mail by Anonymous Coward · · Score: 0

      So THAT'S the excuse you will give your mother when she finds your Goatse collection...

    2. Re:Read my mail by rts008 · · Score: 1

      This could be the beginning of something..."Goatse Encryption"...You have to be SICK ENOUGH to stare at goatse long enough to "CRACK" the encryption. Should sloww down/dicourage a lot of cracking(I'd be SCARED if it did NOT)

      --
      Down With Slashdot BETA!!! I've been around the corner and seen the oliphant; you can only abuse me from your perspecti
  10. Seems to me... by xstonedogx · · Score: 5, Insightful

    ...using the wire-tapping law seems like trying to fit an oblong peg into a round hole. Close, but no dice.

    The solution here is either to encrypt your email or to create a new law specifically forbidding ISPs from reading your email.

    I prefer the former method to the latter. Laws forbidding an ISP from reading your email don't protect your email. They can act as a deterrent, but first you have to find out it occured, and then you have to prosecute. And then your email has already been read.

    1. Re:Seems to me... by Tyndmyr · · Score: 3, Insightful
      I don't see a reason to create a law for it at all. Sure, none of us want others snooping through our mail... encryption exists for a reason. Also, if a company gets a reputation for snooping in customers mail, what do you think that will do for their business?

      Let the free market deal with it.

      --
      Support more choices in goverment-Vote 3rd party.
    2. Re:Seems to me... by KarmaMB84 · · Score: 1

      Like letting the free market deal with white only restaurants and white only employers. The free market is the answer!

    3. Re:Seems to me... by Llynix · · Score: 1

      ..using the wire-tapping law seems like trying to fit an oblong peg into a round hole. Close, but no dice.

      Why.. what is this coming out of the back of my computer? It's a wire.. hmm.. looks like the same exact one that comes out of my phone!

      Hmm.. both have the same wire, both have to dial to connect..

      Apples and Oranges! Grrr..

      I prefer the former method to the latter. Laws forbidding an ISP from reading your email don't protect your email. They can act as a deterrent, but first you have to find out it occured, and then you have to prosecute. And then your email has already been read.

      First I want to know. Why are they reading my email? Obviously if a buisness (ISP) is looking through my personal email. They have one of three things in mind.

      A) They are out to cause you personal malicious damage. (I can imagine what would happen if the small ISP in my grandparents town read the email. The lady at the post office would tell everyone in the city who gets what porn.)

      B) They are trying to "catch" me doing something illegal. (Isn't that law enforcements job?)

      C) They are trying to harvest my personal information for buisness.

      Now.. I have a huge problem with A. I think anyone who has ever lived in a small town (pop 0 - 1000) would agree that privacy is very important. Suddenly BOFH takes on a whole new and personal meaning.

      B.. well I whole-heartedly agree that an ISP should report illegal activity to the proper authorities. However, I do not think they should go out of their way to "catch" people in this situation. Not only does this create unhealthy paranoia but it's bad for buisness.

      C) I'm a spam/telemarketing/advertisement hater. But I'll put up with a very limited (such as google) amount of ads for a free service. As I understand it google scans the emails with a program and displays ads bassed on that. One big point here though, I knew well beforehand what google was doing before I signed on.

      The problem here is that without ANY law the potential for abuse is unlimited.

      Plain and simple it is spying. It's no different then someone reading your mail out of your mailbox, listening to your phone conversations, or putting their ear against the wall. It's just plain wrong.

    4. Re:Seems to me... by Anonymous Coward · · Score: 0

      Laws forbidding a person from holding me up on the street don't protect my wallet, but the deterrent effect seems to fulfill some sort of useful role.

      Thanks to your penchant for encrypting email, I shall just have to satisfy myself with not-illegally accessing your gmail account and reading all the non-encrypted email that everyone sends to you (which will never include quoted/copied sections that have been decrypted to plaintext). Thanks to your preference, there is f*ck-all that you will be able to do about it.

      But 'tis only a wee flaw...

    5. Re:Seems to me... by antiMStroll · · Score: 1

      Why is it either/or?

    6. Re:Seems to me... by goodydot · · Score: 1

      We should have both. If there is no law against ISPs reading emails, and one of them follows your discussions of smoking grass, then decides to tell the cops, you will have NO legal recourse against the ISP as they haven't done anything wrong. If there is a law, at least the 'evidence' submitted by the ISP won't be admissible. Do you currently encrypt your cell phone calls? Would you be happy knowing your cell phone provider was listening in on all of your calls?

    7. Re:Seems to me... by William+Tanksley · · Score: 1

      Bad analogy, I think. In particular, no segregation is being practiced; anyone can get an ISP that offers reasonable non-snooping promises. In fact, an ISP without non-snooping policies seems to be valued very low by the free market -- there are free ones out there.

      -Billy

    8. Re:Seems to me... by ComputerSlicer23 · · Score: 1
      I'm sure you meant to say:

      "Create a new low specifically forbidding anyone from reading my mail, without my express written permission or a court order".

      The reason I like it violating the Federal Wiretapping laws, is that I believe those laws are binding to the Federal Gov't also. I like it when the JD argues that it should be given less ability to intrude on a private citizens privacy.

      The one thing I have against encryption, is that it's not terribly graceful in the face of an error. If my disk has a bad sector, I might lose a mail message or two in the worst case with clear-text. In the case of encryption, that's a lose everything proposition. That's the one true fear I have of encryption is that it's error modes generally aren't very graceful. If they are graceful, in most cases, that means the encryption loses it's strength. Flipping a single bit should have a dramatic outcome on the decryption of the file.

      I've recovered from enough disk corruption issues, that the prospect of having a non-clear text version, scares me to no end.

      Kirby

    9. Re:Seems to me... by antiMStroll · · Score: 2, Insightful
      "Let the free market deal with it."

      This is a goverment canard pulled out when the issue is protecting consumers and citizens from corporations. Corporations however get shrink-wrapped EULAs and DCMAs when their 'free market rights' are endangered. http://en.wikipedia.org/wiki/Corporatism

    10. Re:Seems to me... by Rares+Marian · · Score: 1

      The free market allows big shots to buy laws from the gov't why can't we make laws?

      --
      The message on the other side of this sig is false.
  11. What if you use hotmail? by jellybear · · Score: 2, Informative

    Or gmail? Or yahoo mail? You CAN'T send/read encrypted mail. Sure, there's husmail, but they only give 32 megs. Versus 1 gig on gmail.

    1. Re:What if you use hotmail? by crimethinker · · Score: 1
      Or gmail? Or yahoo mail? You CAN'T send/read encrypted mail.

      That's funny, I just sent a PGP-encrypted e-mail from my gmail account a few days ago. It seemed to work fine, including the encrypted response I got from the recipient (or a man-in-the-middle gov't snoop). Just because there isn't a "Click here to PGP encrypt your e-mail" button in gmail, doesn't mean you can't do it externally and paste the ciphertext into the nice little box.

      -paul

      --
      Pistol caliber is like religion: everyone has their favourite, and theirs is the only right choice.
    2. Re:What if you use hotmail? by Tenebrious1 · · Score: 2, Informative

      Or gmail? Or yahoo mail? You CAN'T send/read encrypted mail. Sure, there's husmail, but they only give 32 megs. Versus 1 gig on gmail.

      Sure you can. PGP can encrypt the contents of the clipboard. It's a manual process, selecting the text, encrypting (manually selecting the recipient's key), then pasting the encrypted text into your browser, but it's easy enough to do. You can encrypt anything with this method, including posts to message boards.

      --
      -- If god wanted me to have a sig, he'd have given me a sense of humor.
    3. Re:What if you use hotmail? by thiophene · · Score: 1

      I encrypt all of my posts to slashdot!

      -----BEGIN PGP MESSAGE-----
      Version: GnuPG v1.2.3 (Darwin)

      hQIOA8JUAVUNMckjEAf/dzxt7bRFqLKlXSqovADP5c65OLPL lH qw3mNm5W7WYFLp
      DNIV42dGRl5HixP0iWK02GZf/whh7qscMa atrCUTJLi9+rb3/0 L7I0turoPBI++r
      ToNCdOO8MLeNK8Avk/CF0C+lGsCxVCrNRR lBjEYuTq03BfIGrE dJBuXWQ+6rpCUH
      vmBS/5RbmHdgw/EQO4gTe/dG3VU+cvO01X rqJF9l+Pa84aa7Wa M5m5xzf5BUWX2V
      Q4VSB5hmnAX/4hMAPQ399+HL0NqX8z/Ffv 1Ec6W6w0RrWUFt+1 Oo4EOVtdiiN2vY
      yIUDODEndGG2ckdsf2EW1iVkesGiIP9h+j QmP+k0Ugf/WtZTP3 R7f6VhC7uuPnny
      YRIChHyomNejn/hz20eLMhd9SC/ja9hVB8 B4gsPLd50LJ0h7Fs EBYYjUvgHV4Z5p
      p6XEEPmz4qaZRWcCRhrmmSHJolTlxzZ9po Zi4NQL9dwVCxu4US 7iu+YjdBpdi+Qh
      W6XBXCDULtA3xwObIrwfzkKDzxIISkGJrM vXXXQT5f1sMxFkZg s9q5BzNuAMW6Ow
      Ru2sVEvTjprPnDb4d74PRHNsYOui6W5WR4 kQX90NtCQK7enbu5 FlmRCSrqKquQ7U
      3ZazndcqZNFfvKqTEt3ODlvDji381txx7a FFESnypkLmvexIxr d2B1/nckk6fIw7
      CtJXAZzRFCMgVowY8GFwJQ2T6uO7+VeAk/ 9R652aZ+W/J32xO4 mVpSsFRtB+fZ2w
      Ys1s7y3Px2meRMEYwxMFXJJgmRvqA4tpja 7cQq4y1gHKdiRAj1 z+ZjF/
      =Zol/
      -----END PGP MESSAGE-----

  12. Stored Communications Act? by spiritraveller · · Score: 4, Informative
    You can read the June opinion here.

    You can read the order for an en banc rehearing here.

    One of the questions they ask the parties to argue for the rehearing is "Whether the conduct at issue in this case could have been additionally, or alternatively, prosecuted under the Stored Communications Act?".

    Hmmm, I wonder what the Stored Communications Act is? It seems the court might be worried that the SCA (whatever it is) already applies to email-snooping, so that the Wiretap Act should not apply.

    1. Re:Stored Communications Act? by kmanq · · Score: 1

      http://assembler.law.cornell.edu/uscode/html/uscod e18/usc_sup_01_18_10_I_20_121.html see volutary and required disclosure of customer communications or records. Aswell as the unlawful access to stored communications.

    2. Re:Stored Communications Act? by pdcryan · · Score: 1
      The Wiretap act has three separate levels of protections... the two important ones (for the purposes of this question) are "intercepted messages" and "stored messages."

      Intercepted messages - messages captured and read in real time, require warrants (basically).

      Stored communications - think voicemail (basically). These messages do not get as strict of a protection as intercepted messages.

      Councilman said that because emails were being "stored" - even for a split second, in a router or in a server, while they were being passed along are not protected as interceptions - but only as stored communications. Dangerous stuff. Basically, under Councilman anything that is stored, while it is being sent out (think every message on any packet switched networks) does not get the strict wiretap protections.

      As prisoner Stewart would say - "unsending" this email decision "is a good thing."

      --
      Ryan Kennedy opposes comm
  13. Re:Why is ISP mail reading bad? by King_TJ · · Score: 1

    Well, for one thing, nobody is saying ISP's can't technically (and easily) read plain text emails stored on their systems.

    The purpose of such a law would be to allow penalties/punishment in situations where it can be proven that an employee of an ISP read someone else's mai and used the information in some sort of harmful manner.

    We've already got plenty of laws in place that work the same way. For example, there are laws against eavesdropping on cellular phone conversations, yet hundreds of thousands of police scanners are out there which let the user listen to these calls anyway. I don't think the intention of the law was to hunt down people listening to cellphones on their scanners, and arrest them. Rather, it gives the legal system a tool to use against someone who broke another law and used his/her eavesdropping abilities as part of the crime.

    (I could see this coming into play in a blackmail case, among other possibilities.)

    The argument that letting ISPs read mail helps fight spam is probably valid - except we don't allow mailmen to open up letters to help fight junk mail. (I don't know about you, but I've gotten quite a bit of sneaky postal junk mail guised as important letters....)

    Ultimnately, I think this is honestly going to be one of those legal issues where the individual's ability to retain privacy while exchanging email won't really change either way. If ISP's are legally allowed to read your mail, then sure - you need to encrypt it somehow if you're afraid they might see something you don't want them to see. If they're not allowed to read your mail, then the same rule applies. (Most of us would rather prevent a problem from coming up in the first place than having to fight in court to correct it after the fact.)

  14. If you do not encrypt your email by humuhumunukunukuapu' · · Score: 1

    No law will stop someone from reading it. It is still transmitted in a format anyone can read. Laws miss the point when it comes to this aspect of privacy. Not that I care if someone reads my email - I know it is not secure when I send it!

    --
    i saw the baby, and the baby looked at me
  15. 18 USC 2701 by thpr · · Score: 1

    The SCA is here.

  16. Ohh what a problem by Anonymous Coward · · Score: 0

    See the mail is stored on the ISP's server. It's their equipment, they pay for it. So they can do what ever they want with it.

    To be perfectly honest this is a waste of time. Who has time to go plundering through mailboxes? And even if someone does, well if you wanted to make sure it was read by a particular person it shoul have been encrypted.

    I would guess it is rather Ashcroft and his buddies don't want to let someone else have more information than they have.

    1. Re:Ohh what a problem by ksa122 · · Score: 1

      Does this give a landlord the right to install secret security cameras in all the properties they rent (say in the bedrooms or bathrooms)? It's their property, and they payed for it.

    2. Re:Ohh what a problem by Anonymous Coward · · Score: 0

      No, but that is a totally different situation. Since the physical property isn't in the users direct control.

      The data resides on the ISP's system. In most cases the EULA references it, and it is known that the ISP can read the email.

      Bottom line is that if you wish for your email to remain private you need to take steps to make it private. To expect otherwise through passage or enforcement of laws is plain stupid on everybody's part and on whole is a waste of resources and time.

      cheers

  17. full story on SecurityFocus by goalive · · Score: 1
    The full story for this was written several days ago by Mark Rasch on SecurityFocus, and it goes into much more detail than the CNet article. Mark Rasch is a former head of the Justice Department's computer crime unit.

    Disappointing to see Slashdot is mostly just mainstream big media news now.

  18. Thank you, patriot act ! by Anonymous Coward · · Score: 0

    Everything is in the topic :)

  19. I disagree. by pavon · · Score: 1

    The telephone network and internet have very different makeups, and what makes sense for one does not necisarrily make sense for another.

    With the telephone system, you only have a handfull of companies which have control of and legal access to the communication lines. They are tightly regulated by the government, and thus laws are fairly effective at protecting your privacy. With the telephone system, up until the 1950's, there was no method of encrypting conversations, and it was much later until these technologies were developed enough to be available to the public. Laws and physical security were the only means available to protect your privacy, and thus they were employed to do so.

    The internet is designed to be distributed in nature, and thus far more people have legal access and control over the lines and servers through which you information passes. With the internet it has been anticipated from the beginning that encryption would be used for any sensitive communication. Furthermore, what entails a wiretap? Parsing mail to improve a spam filter? Caching user data to improve performance? The internet was designed to not be secure without encryption, and unenforcable laws are worthless. Why do you want the government to give you a false sense of privacy and security when you could have real privacy and security right now on your own?

  20. This is a good reason why ISPs are private groups by ShatteredDream · · Score: 3, Insightful

    Imagine if we go the route that many groups want which is to have local and state governments provide their own taxpayer-subsidized WiFi internet access, as is being talked about for Houston. It would be a disaster for civil liberties. It would be so much easier for the government to spy on you under the guise of the law and you'd have no recourse but to pray that private ISPs are still in business in your area, which they very well might not be with a cheap state-sponsored competitor.

    There are of course limits that have to be placed on how private your messages are on an ISP's network. I personally have no problem with somebody that the ISP has detected has been systematically, egregiously violating state and federal laws with the ISP's resources getting spied on a bit to cover the ISP's ass. The ISP has a right, if it **happens** to find you systematically violating the law and putting it in any way at risk to see what you are up to. The only alternatives are a world where criminals have complete freedom of movement and the other is where the police actively spy on the public. I happen to like neither, but that's just me.

    You also have to wonder why someone who is sending stuff that is so sensitive that they wouldn't want anyone but the recipient seeing it, wouldn't encrypt the message first. If nothing more write a little script that that scrambles the message based on some hack algorithm you come up with and send it via another email account to the recipient. It's not REALLY secure, but it's a little better than nothing.

  21. Notice it was DOJ asking for reconsideration? by jordandeamattson · · Score: 3, Interesting

    All -

    With the tinfoil hat paranoia running at all time highs, it is interesting to note it was the DOJ, not the EFF or ACLU, that asked the full Appeals Court to reconsider this decision.

    I guess that the nasty, civil rights stomping Ashcroft DOJ feels that wiretap laws apply in this situation. Curious.

    Yours,

    jordan

  22. What is different? by tecman84 · · Score: 1, Informative

    This opens allot of questions in mind how. Is this different from wire taping? We say that is legal as long as the partly gets a court order. Read this http://www.technewsworld.com/story/34965.html The First Circuit Court of Appeals in Massachusetts held that it was not a violation of federal, criminal wiretap laws for the provider of an e-mail service to monitor the content of users' incoming messages without their consent. I do not see a problem as long as they have a valid reason to do such a an act for the good of the people There needs to be laws on the net just as there are in real life

    1. Re:What is different? by chris+mazuc · · Score: 1

      Please define "the good of the people."

      --
      E pluribus unum
  23. Why was this passed to begin with? by DroopyStonx · · Score: 1

    I think we're going through a time when others are using loopholes in the law to get their way...

    For example, the Patriot Act. The govt gets to do all kinds of crazy shit knowing that they'll have a year or two to do whatever they want until it's passed through courts and is ruled unconstitutional.

    Knowing that it will eventually float back through the courts and be ruled out, this little time frame gives them enough time to do anything they please without repurcussions.

    Instead of having this take time, it should be put the the very front of the queue, especially when it comes to privacy and your basic rights. That way, there's no way this shit could ever get pulled off.

    What's scarier is how this even got passed to begin with. What dickhead Judge would rule in favor of an ISP snooping through people's email? One that shouldn't be in office, that's who.. and one that is a threat to everything this country stands for.

    --
    We have secretly replaced these Slashdot mods' sense of humor with a rusty nail. Let's see if they notice!!
  24. Re:It's not that the ISP can't read your e-mail. by Anonymous Coward · · Score: 0

    The ISP will now not be able to use your e-mail as evidence against you having gathered it illeagly. Fruit of the poison tree defence.

  25. spammer approved by slashpot · · Score: 2, Insightful

    I'm a sys admin for an ISP for the last eight years. Do I read customers' email? Yes. Every single email that comes into our servers is "read". Not personally - but by scripts and filters.

    The real effect (if this is passed) would be that some spammer gets a bounce message from a spam filter, sues a major ISP for "reading his email" and wins, and then ISPs drop spam filtering to keep from getting sued for privacy violations.

    1. Re:spammer approved by egomaniac · · Score: 1

      The wiretap laws make it illegal for a human to listen in. Your spam filter argument is just a straw man. If it were illegal for a machine to "read" the email, it wouldn't even be possible for the email to be received in the first place!

      --
      ZFS: because love is never having to say fsck
    2. Re:spammer approved by slashpot · · Score: 1

      A telephone doesn't "read" the analog signal coming in from the wire. A machine doesn't "read" email that it receives.

      Once content is analyzed in some way, then your into the "reading" ballpark. Like tapping a line, or reading emails to yourself, or -arguably- passing the email content onto any program that then analyzes it (like a spam filter). Currently tapping a line is illegal, analyzing content in an email is not. If analyzing content in an email becomes a privacy violation, and an ISP gets sued (which spammers would do), then ISPs would drop spam filtering. That's the risk I see with this legislation.

    3. Re:spammer approved by Anonymous Coward · · Score: 0

      No! That's not what would happen! Because a customer can give you the right to run those filters for him. He can say "you, my ISP, has the right to run this script that does this and only this on my mail, but nothing else." Once that message gets to your servers, if it's for your client, it's the client's message, not the spammers.

      Example: I have a secretary. All of the mail coming into my office with my name on it is given to her first. I tell her she can look at the envelope, and if it is obviously an ad, she can throw it away. If it's obviously business, she can open it and determine how/when it needs to be handled. If it's neither of those, she gives it to me. Yes, she's reading my mail, addressed to me, but because I allow her to, it's not a crime. But if she reads my personal mail (which she's not allowed to) then it is.

      Privacy: Intact
      Filters: Intact
      BOOM!

    4. Re:spammer approved by slashpot · · Score: 1

      uh.. ok - but postal mail is governed by a completely different law set... No company owns your mailbox. No company owns the envelopes that get stuck in your mailbox. No company owns the paper your personal mail is printed on.

      Email is different. For the government to tell an ISP it can not read one of its customer's emails would be the same as the government telling any corporation that it could not read files on the servers that company owns.

    5. Re:spammer approved by sfsp · · Score: 1

      Actually, I believe that:

      1) The inside of the mailbox is OWNED by the US government;

      2) The envelope is owned (sometimes jointly) by the sender and the recipient of the letter;

      3) The paper is owned (sometimes jointly) by the sender and the recipient of the letter.

      That's why it takes a warrant to intercept mail, and interference with the mails is a Federal offense.

    6. Re:spammer approved by slashpot · · Score: 1

      Those are interesting beliefs, but after trying tons of google searches to come up with a source to support those beliefs (especially 1) - I got zilch.

      I own my mailbox. I don't see how the US government could own the empty space inside of it but not the container itself. The US government doesn't own the postal system. I know their are federal laws protecting the postal system, but they're a specialized set of laws... or something like that.

  26. Yeah by starbuck8968 · · Score: 1

    Makes a case for universal PGP...

  27. cox required smtp is- smtp.west.cox.net by Anonymous Coward · · Score: 0

    thought they were already reading it............

  28. GMail ads? by theguru · · Score: 2, Interesting

    Would the affect Google's ability to scan GMail messages in order to place context ads?

    1. Re:GMail ads? by kermitron · · Score: 1

      Probably not. I'm sure there is probably some loophole regarding google being primarily a search engine and gmail being search based.

      --

      Every 90 seconds, somewhere in the world, a woman is gving birth.
      She must be found, and stopped.

  29. Virus/Malware Scanning by BaldingByMicrosoft · · Score: 1

    I thought that this issue was directly related to activities such as machine scanning of emails for viruses and malware. Gmail added the twist of machine scanning for the display of relevant ads.

    I suppose that the tricky part is making the above activities legal, while humans reading another's email becomes illegal.

  30. Re:This is a good reason why ISPs are private grou by Tenebrious1 · · Score: 1

    It would be so much easier for the government to spy on you under the guise of the law

    Yes, of course. You expect that from the government, and luckily we have checks and balances in the government. We have watchdog groups. We have the FOIA. We have none of these covering private businesses; the only way we'd know an ISP was reading mail is if they did something stupid, or a whistleblower speaks out. We have no checks and balances with private businesses.

    I personally have no problem with somebody that the ISP has detected has been systematically, egregiously violating state and federal laws with the ISP's resources getting spied on a bit to cover the ISP's ass.

    So you'd accept the ISP coming over to your house in the middle of the night with a team of thugs to beat you into confessing? You say it wouldn't happen because you don't do anything illegal... what if your system was zombied, or if your email address was used in to send spam. Instead of following the law and conducting a full investigation, they just kidnap you and hold you in the basement w/o food or water.

    You also have to wonder why someone who is sending stuff that is so sensitive that they wouldn't want anyone but the recipient seeing it, wouldn't encrypt the message first.

    It doesn't matter if what we send isn't that sensitive enough to encrypt. It doesn't matter if we're just chatting about the weather. What matters is that these conversations should be private, and there's a reasonable expectation that they will be private. We know that from end to end there are points where messages can be spied on, but we have the right to expect that no spying will be done without due process.

    --
    -- If god wanted me to have a sig, he'd have given me a sense of humor.
  31. Re:This is a good reason why ISPs are private grou by Deagol · · Score: 1
    Imagine if we go the route that many groups want which is to have local and state governments provide their own taxpayer-subsidized WiFi internet access, as is being talked about for Houston.

    I look a my typical phone bill, and I see all sorts of taxes, levies, and surcharges. I'd say that the telephone infrastructure is indeed subsidized a good deal by us tax-paying folks already. That doesn't even include the subsidies that aren't so overt, like those many businesses get, the quasi-monopoly status of the regional telcos, etc.

    At least, we can rightfully sue the govnerment for the breach of due process. Private companies are pretty much excluded from those protections, and they roll over like submissive dogs when the Feds come knocking. They don't want to bite the hand that feeds them those subsidies.

  32. PGP still a myth for most ! by dindi · · Score: 1

    Do you use pgp? me neither..

    Not because i am an idiot like others .. because others are idiots.

    No, seriously, using pgp would put a point on all that crap, it is just the ignorance of the masses that prevent me and others to start using it....

    Of course do not pgp everything, but stuff you care about should be protected.

    And tell you what, I was admin at ISPs with thousand accounts, and while I never read mail I know it was common to search info in mails (not private stuff, but some people figured, it was sometimes more interesting to "grep keyword /var/spool/mail/* " then google for it .....

    How can you really prevent your isp to see your mail file ? With laws ? HAHAHA ...

    PGP IT if it is important, educate your friends. If in US, use weak encription (if you care), elsewhere 2048 bits or more ....

    anyway... usually like talking to a wall ....

    On the other hand: when you see people (company ceo) discussing confidential company info, and passwords/accounts over msn and aim, what do you expect from the everyday johndoe who discusses his sexual discoveries or last night's pot-smoking adventures to his buddy via email? Nothing: other than clear text ....

  33. If I had something sinister to hide... by Chocolate+Teapot · · Score: 1

    ...I would not be using email in the first place.

    --
    Modest doubt is called the beacon of the wise. - William Shakespeare
  34. Unencrypted Email = Snail Mail Postcard by TheSpunkyEnigma · · Score: 1

    Right now all email is essentially postcards. There is no envelope (i.e. encryption) on most email.

    Would anyone here be upset if the mailman read a postcard that they sent from Paris to their friend back home?

    1. Re:Unencrypted Email = Snail Mail Postcard by pdcryan · · Score: 1
      Not yet it's not. Privacy is a function of reasonable expectation. So long as it's reasonable to expect that emails are private - generally, they should be considered so.

      /.ers are quite a bit more educated than the average public - it wouldn't be fair to hold everyone to our higher standard.

      Also - don't forget that this case is about a specific statute, the Wiretap Act. The Councilman court incorrectly ruled that the statute did not protect emails as strongly as Congress intended it to. We're as protected as Congress or the Constitution say we are - whichever is greater. In this case, Congress gave us greater protection - the court just misinterpreted it.

      --
      Ryan Kennedy opposes comm
    2. Re:Unencrypted Email = Snail Mail Postcard by TheSpunkyEnigma · · Score: 1

      Privacy is a function of reality, not expectation. If you don't want people looking in your windows, you put blinds up, if you don't want the post office casually reading your mail, you put it in an envelope, if you don't want people on scanners listening to cell conversations you use a land line.

      I know that peeping toms, reading others mail, and scanners are illegal in most places, but you can't rely on laws to protect you from these things, you still have to be prudent in your own actions. Also, these laws only help you after the fact, once the cat is out of the bag, you can't get it back in.

      Just because the average Joe is currently ignorant of the ramifications of clear-text doesn't mean we should legislate around ignorance, it means we've failed as an IT community to educate the masses.

      I feel my analogy still holds.

    3. Re:Unencrypted Email = Snail Mail Postcard by Chris+Burke · · Score: 1

      Yes, but privacy law is a matter of expectation. The question here is not whether ISPs are physically capable of spying on email, the question is whether they are legally allowed to.

      From a practical standpoint, an email is more like a letter with a thin envelope. You don't have to do much to read it (browse mail server log, hold the envelope up to a light) but it still requires some positive action as opposed to a postcard which can essentially fall message-side-up in front of you. But enough of the analogies.

      Practically, we should be encrypting -all- our email, and demanding end-to-end encryption in our phone conversations (which I would never trust without an open source phone). Pragmatically, until we all are, at least saying that such snooping is not allowed is a good step. I would still like it to be illegal for my ISP to snoop on me if they are able to break the encryption I use.

      --

      The enemies of Democracy are
  35. Next up... by hkb · · Score: 1

    grep outlawed, labeled a "munition". New program, "grap", to replace. Will only search files if the "public" bit is set on a file.

    --
    /* Moderating all non-anonymous trolls up since 2004 */
  36. Oh please, like you have 'checks and balances' by ShatteredDream · · Score: 1

    You expect that from the government, and luckily we have checks and balances in the government. We have watchdog groups. We have the FOIA. We have none of these covering private businesses; the only way we'd know an ISP was reading mail is if they did something stupid, or a whistleblower speaks out. We have no checks and balances with private businesses.

    You really haven't been paying attention to politics lately. Ever heard of the USA PATRIOT Act or the foreign surveillance courts and laws? Puhlease, private business are now more accountable to you than your own government. The checks and balances are almost dead entirely.

  37. The problem is... by Local+ID10T · · Score: 1

    Sometimes, I need to read your e-mail.

    Its not that I care what your e-mail says. I just need to inspect the data flowing across my network in several ways.

    Does the anti-virus software I implemented count as reading your e-mail? How about the anti-spam filters? Most filters are automated, but questionable messages are quarrantined for (potential) human review. What about when I am monitoring packet traffic (load balancing/troubleshooting hardware/tracking viruses/etc) and your plain-text e-mail scrolls by on my screen?

    At what point am I reading your e-mail?

    --
    "You want to know how to help your kids? Leave them the fuck alone." -George Carlin
  38. Well... by Anonymous Coward · · Score: 0

    He's not as "evil" as slashdot groupthink would seem to indicate.

    Yes, I disagree with him on a number of points *cough*thePATRIOTActisBAD*cough* but that doesn't make him some kind of archfiend, no matter how his actions are portrayed by some.

  39. The EFF WAS involved as was... by pdcryan · · Score: 2, Informative

    ...the CDT, EPIC, and the ALA. Here's their brief (in PDF).

    --
    Ryan Kennedy opposes comm
  40. Re:This is a good reason why ISPs are private grou by William+Tanksley · · Score: 1

    Yes, of course. You expect that from the government, and luckily we have checks and balances in the government. We have watchdog groups. We have the FOIA. We have none of these covering private businesses; the only way we'd know an ISP was reading mail is if they did something stupid, or a whistleblower speaks out. We have no checks and balances with private businesses.

    Wait. NONE of that is true. We have all of those things covering private businesses; we also have one other critical thing: with a private business, we have the ability to refuse to do business with them. With the government, we have no such right.

    If the gov't sets up an ISP offerring free wireless broadband, you MUST participate -- the gov't doesn't ASK you whether you want to pay taxes to support it. If they later decide to use their rights as an ISP to monitor everything, again we have no right to prevent that -- it's their property, even though they took it from you by force.

    Actually, I would say that if the gov't were to set up any such system, the only way to legitimately apply property rights would be to either allow EVERY taxpayer the right to view all the data, or allow nobody (including the FBI and the system administrators) the right to view the data. The second choice is impossible using current technology, and the first choice is kind of ugly but honest (it would work and be useful -- it would make the system a kind of bulletin board).

    So you'd accept the ISP coming over to your house in the middle of the night with a team of thugs to beat you into confessing?

    Um... No? That's a stupid, stupid question. He's saying that an ISP has property rights in their servers; so long as they don't violate their contracts, there's no injustice done. There's nothing at all in the property rights argument to indicate anything about giving ISPs or anyone else licence to violate your property and personal rights.

    What matters is that these conversations should be private, and there's a reasonable expectation that they will be private.

    Now this is fair, and I agree with you in essence. Not everything must be explicitly mentioned in every contract; some things are reasonably assumed. I personally wouldn't expect my emails to go 100% unread unless the contract specified that (and I personally would be suspicious of such a claim, since it's unenforcable), but I would expect (for example) that people in the ISP wouldn't use information from them to (for example) compete against me. If they did, I'd throw an unfair competition or misappropriation of trade secrets lawsuit against them, claiming that I used their company to deliver a message not knowing that some of the employees were competing.

    There are other examples to support parts of your case, and most of those examples can be worked very well with current laws. In no case, however, does it make sense to claim some kind of absolute right to privacy aside from consideration of property rights.

    -Billy

  41. Like a phone call? by izomiac · · Score: 1

    The way I see it, e-mail is like a phone call. Most of my day-to-day conversations aren't particularly confidential and I don't really care about the lack of security. That said, I also wouldn't want someone outside tapping my phone line, and thankfully there are laws against that. On the same note, I would prefer if there were similar laws to prevent random people from reading my e-mail. Encryption isn't really an option because most of the people I communicate with have probably never even heard of encryption and certainly wouldn't know how to decrypt a message. This includes semi-formal e-mails I send to my school. The lack of security simply does not imply that I consent to a third party reading my e-mail (just as I wouldn't consent to a third party tapping my phone even though I don't use encryption there either).

    1. Re:Like a phone call? by TheSpunkyEnigma · · Score: 1

      Is it alright for an operator to listen in? I know I've been able to get an operator to listen on a line that had been busy for several hours to see if someone was on the line or the phone was off the hook. There's times when it's appropriate for the operators to take a look and sample what's going on.

      As an email admin I've taken a look at emails in accounts that were getting excessive amounts of mail to find the source of the mail. Once it was somebody being mail-bombed, and another time somebody had an article published with their email on it. I blocked the first case, and let the second one through.

      If you feel an ISP is reading mail, switch ISPs. Thank god we live in a country of choices.

  42. super-duper patriots by Anonymous Coward · · Score: 0

    but u could choose to read the mail if u wanted-yes? and probably to do just kill time and have a few laughs and also if the last name looks middle eastern or islamic-----------yes??

    there's probably a bunch of "super-patriots" doing their own snooping!.... or wanking which ever is the case.

    1. Re:super-duper patriots by slashpot · · Score: 1

      I can see your point. But - from experience - it just doesn't work that way. System Admins have a whole lot more on their plate than a bunch of free time to sit around and read other people's email (like trolling on slashdot for instance... :)

      And most the email admins I know fit more in the anti-goverment long haired dead head pot smoking hippie stereotype than the small dicked republican "super-patriot" islamic name snooping eighty year old neihbour stereotype.

    2. Re:super-duper patriots by Anonymous Coward · · Score: 0

      cool, so if sent an e-mail titled great, great weed availiable - e-mail me. i might get a response?

    3. Re:super-duper patriots by slashpot · · Score: 1

      you might
      if used better key words
      like kind, diggidy, or dank

  43. Stored Communications Act is N/A by Anonymous Coward · · Score: 0
    Ok, 18 USC 2701, Stored Communications Act is linked and has been commented on. Did anyone RTFA?
    Brief [IANAL]: If you do not have authority to read stored communication, it's a crime to do so unless you are authorized by the ISP or the intended recipient. While section (c)(1) says the code does not apply to those authorized by the ISP, who is authorized is not addressed, thus could be an agent of the ISP. - the proverbial fox is guarding the henhouse. The code is pretty straightforward. ISPs are not restricted by this law. Or does this hinge on what the meaning of the word is, is? =P

    (a) Offense.-- Except as provided in subsection (c) of this section whoever--
    (1) intentionally accesses without authorization a facility through which an electronic communication service is provided; or
    (2) intentionally exceeds an authorization to access that facility;
    and thereby obtains, alters, or prevents authorized access to a wire or electronic communication while it is in electronic storage in such system shall be punished as provided in subsection (b) of this section.

    However:

    (c) Exceptions.-- Subsection (a) of this section does not apply with respect to conduct authorized--
    (1) by the person or entity providing a wire or electronic communications service; [in other words the ISP.]
    (2) by a user of that service with respect to a communication of or intended for that user; or
    (3) in section 2703, 2704 or 2518 of this title.

    So if this fellow did not have permission from the ISP or the recipients, he's pretty much SOL.

    ,

    Otto

  44. ISPs should be forced to read! by Anonymous Coward · · Score: 0

    I think they got the decision all wrong. They should force the ISPs to read all the email. This will have a number of effects:

    1. It will reduce the amount of spam emails, as ISPs become more proactive in filtering at the incoming end.
    2. It will spur the tech-economy, as ISPs are then forced to hire more tech-readers to process the email.
    3. It will cut the amount of outsourcing, as spammers add more verbosity to the emails to get them past the filters, and ESL-applicants just won't cut it.

    My proposal involves having the e-mail readers at the ISP set up like "A Clockwork Orange", complete with the toothpicks to make sure they don't miss a thing!

  45. Re:Why is ISP mail reading bad? by fazzumar · · Score: 1

    I believe you are confusing theft with invasion of privacy. The email was not "stolen", it was read and maybe copied.
    A (potentially) more applicable scenario would be if someone left a letter laying around and someone came by and read it, or maybe took pictures of it that would allow it to be read later.
    I believe better questions to ask yourself are:
    Was the letter on private property of the reciepient of the letter?
    Should the ISP be held to the same level of privacy as the companies that carry our voice and postal services? (Even though voice communications are not encrypted and could be listened in on anyone that lines that carried a particular conversation, a judge must issue permission for a wiretap before it could be used as evidence (Well.. pre PATRIOT act that is)) It's a slightly different case with our postal mail because that is in a sealed container that must be violated before the letter could be read.

    I believe the wiretap law is exactly what we're talking about here. The main difference is the internet is much more diverse than our telephone service providers and a much larger number of companies and individuals have the potential to read email passing over their connection, but why shouldn't they be expected to heed the same privacy rights of the end users that telephone companies do?

  46. Re:Why is ISP mail reading bad? by AviLazar · · Score: 2

    While the analogy was not perfect, information "theft" happens the moment unauthorized persons read the document. Even if it was on private property (i.e. i have a confidential letter in my briefcase, and it falls out in your office) the persons finding the document do not have an inherent right to read the letter. You see cases of this when a company sends a fax, at the bottom they include the blurb should the fax be sent to someone else by accident.
    While e-mails are not in a sealed container (unless encrypted) a person has to go out of their way to inspect the e-mail. They have to, at the very least, double click (opening) the e-mail. The physical aspects of it are not really the issue, so much as the intent - the right to read someones messages.
    I think every person and organization should be expected to follow the same privacy rights of the end users as the telephone companies. My reasoning goes to a much simpler level then things like someones "right" to privacy...my reasoning goes to this: I do not want people to read my private letters, so I realize that people do not want me to read their private letters (unless sent to me). I guess the Golden Rule applies here (for me at least).
    Now since we live in a world of crime, if the gov't needs a legitimate reason to read my letters then so be it....unfortunately "legitimate" is a negotiable term.

    --

    I mod down so you can mod up. Your welcome.
  47. Making the FBI.... by $raim_n_reezn! · · Score: 1

    ...an ISP does not automatically grant any ISP the powers of the FBI...you probably need to read up your philosophy again. Arguments and fallacies would probably make a good start

    --
    All straight things must come to a bend
    1. Re:Making the FBI.... by magefile · · Score: 1

      No, he's saying making the FBI an ISP gives the FBI an ISP's new wiretap-type privileges/powers.

  48. Is he arguing the DOJ shouldn't have the power? by Chris+Burke · · Score: 1

    If not, then while curious, the fact does nothing to change Ashcroft's appearance.

    What part of not wanting others to have spying rights is inconsistant with Ashcroft as a rights-stomping totalitarian?

    --

    The enemies of Democracy are
    1. Re:Is he arguing the DOJ shouldn't have the power? by jordandeamattson · · Score: 1

      Hi Chris -

      My reading of the DOJ arguments is that such activity, Patriot Act aside, would require a warrant for the FBI/NSA/etc., as much as it would for anyone else.

      Yours,

      Jordan

    2. Re:Is he arguing the DOJ shouldn't have the power? by Chris+Burke · · Score: 1

      Point taken; that is how it should be. Though Ashcroft doesn't want to lay PATRIOT aside, as he's appealing the court decision that lets him get away with spying on financial records without a warrant.

      --

      The enemies of Democracy are
  49. Default Encryption by argoff · · Score: 1

    It seem like a reversal of policty for the DoJ, but perhaps it is because they want to be the _only_ group to be able to snoop mail.

    Also, if everyone _assumes_ someone is reading their email, then it might lead to real efforts to use encryption by default in email clients - exactly what the DoJ doesn't want.

  50. You ocassionally have to.. by BitwiseX · · Score: 1, Insightful

    I run a small ISP. 75% of my customer base is dialup.

    Quite often DialUpUserA will call and say they can't get their email, nothing is coming in!

    Mailbox size? 5megs. This is because BroadbandUserB sent them a funny movie, or pictures off of a digital camera, etc., something that took them 30 seconds to send on DSL/Cable.

    So I have to open the mailbox, verify there is a large message. Then I'm asked Who is it from? What is it? What is the subject?

    Getting them to delete it through webmail is always a pain, 9 times out of 10 OE is downloading in the background locking their mailbox, so when they can't download or delete it via webmail they STILL call me!

    Laws to prohibit ISPs from reading other users email is a good idea, I don't LIKE to do it! I feel like I'm violating someones privacy.

    However, the ISPs also need to be protected from DialUpUserB, who would do anything to sue someone and retire claiming that THEY READ MY EMAIL!

    ISP tech support often requires the reading of a users email, as long as there is protection built into the laws that let's me still do my job without the worry of being sued, I'm all for it.

  51. Wrong story dude... (parent offtopic) by Anonymous Coward · · Score: 0

    The email decision came out YESTERDAY, making it impossible for Mark to have written something about it last week.

  52. If you don't want your email to be read... by Anonymous Coward · · Score: 0

    ...don't use usernames like "sluttygirl232" and "sexyteen69". 'Cause I'll betcha that those mailboxes get read about 10 to 100 times as often as those for "tcpgeek1980" and "fatslob44". :)

  53. Paper mail is hardly safe from intrusion by Julian+Morrison · · Score: 1

    Why does the government not merely carry letters, but monopolize that service? If it were merely about delivery to remote and uneconomic places, why wouldn't the government remove its monopoly and do only those deliveries nobody else bothers with? If it were about money, why not carry far more lucrative parcels? Because it wants the opportunity to steam your letters open, snoop through them and censor what you say.

    In that regard, email is already better.

  54. If your ISP can't read email... by blair1q · · Score: 1

    If your ISP can't read users' incoming email, it can't know what is and is not SPAM.

    If your ISP can't read users' outgoing email, it can't know who is and who is not a SPAMMER.

    The question isn't the act; it is the intent.

  55. Email is not, and will never be private by Anonymous Coward · · Score: 0

    For many years I used to work for ISP's as an admin. It never ceased to amaze me that people actually think email is a private communications tool.
    People do not seem to get the idea that these are messages stored on a server, waiting to be retrieved. Very unlike phone calls or letters in a sealed envelope.
    And now some people want turn their ignorance into reality, making it illegal to read mailspools.
    The world never ceases to amaze me...

  56. Re:This is a good reason why ISPs are private grou by Tenebrious1 · · Score: 1

    Wait. NONE of that is true. We have all of those things covering private businesses;

    No, we do not. As an investor to a company, you don't have any rights to see ANY confidential corporate memos. You don't have rights to see much more than released financial statements. And if you do, and you act on that information, you get charged with insider trading.

    If you want high speed digital service, MOST people in the US do not have a choice, it's the cable company or no one. In cities, you have a choice, but it's between Cable or DSL; and remember the latter forces you to own an otherwise unused and uselss land line. You can choose, but aside from financial statements and hearsay, you don't have rights to access any of their records to see how well they actually provide service, how oversold their service might be, how many complaints their helpdesk gets a month. No, you can get much more information out of the government that from a private company.

    If the gov't sets up an ISP offerring free wireless broadband, you MUST participate -- the gov't doesn't ASK you whether you want to pay taxes to support it.

    Nobody *has* to use a goverment ISP. Just like nobody has to use Time Warner Cable. If you want to be online, then that may be your only choice to get online, but you are not forced to be online.

    As for having to pay for it through taxes, that's a moot point. You have to pay for the post office, pay to have roads built, pay for support of the arts, to provide police protection for KKK marches, to build a new sports stadium. You pay for a lot of things that you don't agree with, or don't derive any beneifts from, the gvmt spends money for everyone, so skip it.

    If they later decide to use their rights as an ISP to monitor everything, again we have no right to prevent that -- it's their property, even though they took it from you by force.

    The ISP has rights to monitor data traffic, but does not have rights to look into the contents; the email data is not their property. If it were, then the ISP could be held financially responsible for all illegal file sharing, for child porn illegally stored on their servers, for SPAM coming from their systems. They fought hard not to be held responsible.

    They, be it a government or private ISP, cannot consider all email stored on their servers as their property, otherwise it would violate the copyright laws. It could also then be ruled that anything that's stored on my systems is my property, which would include software, and any music played through my system. So no, the government can't arbitrarily make that judgement.

    --
    -- If god wanted me to have a sig, he'd have given me a sense of humor.
  57. Kind of not like not having curtains by jdbartlett.com · · Score: 1

    It's kind of like leaving a sofa on the curb not expecting it to be removed or like not having curtains on your windows and expecting people to not look in as the drive by.

    I disagree. An ISP is a company that has agreed to provide the user a service, therefore it's more like having a mail man and expecting him not to open your mail... except, of course, that the mail man gets in trouble, deep deep trouble, if he is caught.

  58. that makes no difference by DM9290 · · Score: 1

    So if Fed-ex or UPS wants to open and look through your parcels... I guess that is just fine by you.

    --
    No one has a right to their *own* opinion. They have a right to the TRUTH.
    1. Re:that makes no difference by Methlin · · Score: 1
      So if Fed-ex or UPS wants to open and look through your parcels... I guess that is just fine by you.
      And yet they, FedEx/UPS, can do just that, and so can the USPS, if they believe what is contained in the package is something that cannot be shipped legally.
  59. Re:This is a good reason why ISPs are private grou by William+Tanksley · · Score: 1

    No, we do not. As an investor to a company, you don't have any rights to see ANY confidential corporate memos.

    Whoops, I missed one thing -- we don't have FOAI. That's the ONE safeguard you mentioned that we can't get from corporations that, in theory, we can get from our government.

    Unfortunately, there's two problems with this.

    First, the information you'd be asking for is something like "did you ever read any of my emails?" That sort of info is easily hidden, to say the least, and trivial enough that it would almost never be demanded (from government OR corporations).

    Second, making FOIA or anything like it apply to anything other than government and at the miniscule scales you're asking for would be the opposite of what you want (privacy).

    You don't have rights to see much more than released financial statements. And if you do, and you act on that information, you get charged with insider trading.

    Nonsense. The only sort of action that could recieve that charge involves /trading/ (buying or selling stock). Informing the public is neither trading nor insider; nor is refusing to be a customer; nor are lawsuits. All are powerful actions against a private company; the second (refusing to be a customer) is the useless against the gov't, and the third (lawsuit) is only mostly effective against the gov't (remember, they can write themselves exceptions to their own laws).

    If you want high speed digital service, MOST people in the US do not have a choice, it's the cable company or no one.

    Yes, if you restrict yourself enough you can find yourself with only one option (and you might decide that it's not an acceptable option). So stop restricting yourself. Move, or use lower-speed access. Whatever floats your boat.

    Nobody *has* to use a goverment ISP. Just like nobody has to use Time Warner Cable. If you want to be online, then that may be your only choice to get online, but you are not forced to be online.

    I didn't say "use"; I said "participate", and I immediately explained what I meant. But thank you for expanding on my rebuttal to your claim that people could be forced to use bad ISPs.

    As for having to pay for it through taxes, that's a moot point. You have to pay for the post office, pay to have roads built, pay for support of the arts, to provide police protection for KKK marches, to build a new sports stadium. You pay for a lot of things that you don't agree with, or don't derive any beneifts from, the gvmt spends money for everyone, so skip it.

    I'm not complaining about "not gaining benefits". I'm complaining about not having the total capital available to make private ISPs successful. I definitely don't like being taxed; but I'm pointing out a different fact now, that this tax both reduces the amount of capital available AND reduces the demand level enormously, so that you and I would almost certainly not be able to find ISPs that offer privacy-favorable contracts for any price.

    The ISP has rights to monitor data traffic, but does not have rights to look into the contents; the email data is not their property.

    A brilliant argument (seriously). Unfortunately, it doesn't conform to current laws, and any laws that would make it conformable would also be extremely deadly to freedom of information in general.

    The problem is that information/data isn't property. It's in a category of its own. Some people are attempting to make old laws apply to it by calling it "intellectual property", but the old laws tend to be bad fits. New theories will have to be constructed on this; until they are, I'll use the analogy of me standing in your backyard. You have every right to look at me while I'm there and collect all the information about my appearance (where I am, what I'm holding), even if you gave me permission to stand there -- unless, of course, we have some kind of agreement that you won't.

    If it were, then the ISP could be held f

  60. Oops by SpamKu · · Score: 1

    I appear to have completely misunderstood you and the target of your reply.

    Please accept my apologies.

    Nice to meet you as well :/

    .

    --
    If I had a real .sig, it would go here.
    1. Re:Oops by david+duncan+scott · · Score: 1

      No sweat. It's not hard to lose track of who said what and in what order amidst the elemental chaos that is slashdot.

      --

      This next song is very sad. Please clap along. -- Robin Zander