Slashdot Mirror
EFF Asks How Big Brother Is Watching The Internet
MacDork writes "The EFF filed a FOIA request yesterday with the FBI and other offices of the US DOJ regarding expanded powers granted by the USA PATRIOT Act. The EFF is making the request in an attempt to find out whether or not Section 216 is being used to monitor web browsing without a warrant. The DOJ has already stated they can collect email and IP addresses, but has not been forthcoming on the subject of URL addresses. It seems the EFF is seeking any documentation to confirm such activity is taking place. One can only hope the automated FOIA search doesn't produce any false negatives or cost the EFF $372,999."
I don't like the idea of them monitoring web browsing, URLs, content, etc, without essentially a "warrant". I also think ISPs should not store any sort of historical browsing information. The fact there is no response as to whether or not this occurs is also disconcerting, because not only are they probably doing it, but they don't even care if we know or not.
We are one consciousness experiencing itself subjectively. Back to you with the weather, Bob!
...if all our monitors turned out to be "telescreens"?
The coolest voice ever.
Porn browsing.
My right to privacy. Seriousely. If the FBI suspects someone of terrorist activity, it shouldn't be hard to get a warrant to monitor their internet traffic.
It's the whole "those who are willingly to sacrifice freedom for security deserve niether" bit.
WWJD.... for a Klondike bar?
Whatever they get will likely be 80% redacted. How is that useful? How is that freedom of information? You ask for info and they black out much of the useful stuff.
NPR's On The Media program (aired yesterday in these parts), talked about ACLU requests in 2003 regarding Iraqi prisoner abuse (well before Abu Graib broke), and the docs they did receive -- after lengthy expensive lawsuits -- was mostly (80%) blacked out.
The EFF filed a FOIA request yesterday with the FBI and other offices of the US DOJ regarding expanded powers granted by the USA PATRIOT Act.
Dear EFF,
With regard to your surv^H^H^H^Hcustomer service (ref: EFF-KEYLGGR-SECRTRY), we're happy to preempt your request.
The automated reply to your inquiry is:
NO MATCH FOUND
We sincerely hope your request has been fulfilled. We stay at your disposition for further inquiry.
Regards,
Joe Snoop, Dept. of Homeland Security.
"A door is what a dog is perpetually on the wrong side of" - Ogden Nash
Regarding the "false negatives" bit in the summary:
The story is that an individual made an FOIA request to the FBI for some specific information.
The FBI claimed that no such information was available.
The claimant found out in the meantime that such information WAS available and had been previously provided by the FBI as the result of another FOIA request, and, as such, requested a court order the FBI to provide it again.
The FBI is arguing that its search was reasonable within department regulations and guidelines, and that it cannot and should not be expected to always undercover every single possible document in response to every request. And documents being indexed electronically doesn't make it as easy as one might think: it's precisely because documents are indexed electronically that is creating the difficulty: the FBI is claiming, essentially, that it can't predict every possibly keyword it should associate with a document for search purposes, and therefore shouldn't be held accountable if it misses documents during a good-faith search.
Whether or not the FBI was intentionally hiding OKBOMB memos, etc., is another story altogether.
Additionally, the article summary is awfully pessimistic: we don't yet know how DOJ will respond to this request. Perhaps it itself hasn't determined whether or not it considers "URLs" to be subject to pen-trap regulations. Additionally, for those who didn't RTFA:
At issue is PATRIOT Section 216, which expanded the government's authority to conduct surveillance in criminal investigations using pen registers or trap and trace devices ( "pen-traps" ). Pen-traps collect information about the numbers dialed on a telephone but do not record the actual content of phone conversations. Because of this limitation, court orders authorizing pen-trap surveillance are easy to get -- instead of having to show probable cause, the government need only certify relevance to its investigation. Also, the government never has to inform people that they are or were the subjects of pen-trap surveillance.
Remember, pen-traps were already allowed before PATRIOT. At issue is what exactly PATRIOT's expansion to these provisions further allows. It clearly has been determined to allow email addresses and IP addresses. However, whose IP addresses? The suspect, or a host the suspect is visiting? It would seem clear to me that, virtual hosting aside, if the a target host's IP may be logged, and since DNS names, embodied here as "URLs" and IP are very obviously interrelated, again, virtual hosts aside, it seems this argument is somewhat of a smokescreen to force debate on whether or not pen-traps in general should be allowed.
And since they were allowed before PATRIOT, the answer seems clear: if PATRIOT's expansions to the existing statues to accommodate new communications technologies were appropriate, all that's left is determining what exactly is included. And if "IP addresses" are included, which would logically include target hosts, it would seem that DNS names used to arrive at said IP addresses are intrinsic to the nature of their usage. So disagree with pen-traps if you want, but don't rant and rave about PATRIOT, because it's not about that (though many would desperately want you to think so).
Not quite. IP addresses will only give you slashdot.org. URL's can tell which stories you went to/posted to.
Laws are horrible moral guides, moral guides make even worse laws.
... Have to say "Big Brother"? That just sounds like typical /. paranoia. Before you mod me, consider this: By its very nature the internet is insecure. Any email you send passes through and is temporarily stored on at least several computers before reaching its destination. It's not just "Big Brother" who's watching, it could be anyone with an interest in you, really. I'd say it's more likely that a corrupt server admin, or a large corporation is more likely to read your email than the goverment. In the end the answer is simple: Use any of the myriads of free encryption programs!
The difference between freedom and opression are the rights of privacy afforded to us as citizens. The idea that monitering could POTENTIALLY come up with valuable information in fighting terror is outweighed by the individual's right to maintain one's items private. I mean, if you can't even come close to a hit, is the cost of jeopardizing our freedoms worth it? Remember, under our government, even criminals have rights afforded to them that can not be revoked without due process.
Is that nearly every single packet that flows on the internet is routed through a facility in Virginia. At that facility, the print out each packet and examine it for illegal activity. They then copy the packet in triplicate, fax one copy to a vault in Colorado, and file the rest in the file of whoever originated the packet. Interesting or suspicious packets are emailed to the CIA and occasionally to the Mosad for further examination.
Its servers and clients are connected to others around the world. How people decided to do credit-card commerce there is still beyond me, however revolutionary or secure it is now. While there are fair uses of information and rights to privacy, "Internet privacy" still feels like an oxymoron, and technology like quantum computers may soon crack encryption like SSL, so I'm doubting we can stay private for very long. (Please correct me if SSL/other forms of "https" can never be cracked.)
You can hold down the "B" button for continuous firing.
Terrorist Attack? Put this in perspective. As a symbol and a demonstration of the relative laxity of certain aspects of the American security net 9/11 was devastating. But statistically 2,000 people is fewer than we lose on a monthly basis to car accidents. If there's one thing that past governments have demonstrated (not to invoke Godwin or anything) it's that if you give them the power, they will take it, and hang responsible use *cough*McCarthy*cough*. The more America lets itself quietly give up civil liberties--particularly on the domain of the internet, where the only parties with a vested interest in covering their activites for the sake of a conspiracy will find relatively easy ways around surveillance, the more this country ceases to be worth living in. Who wants absolute security at the expense of being arrested and helf without charges indefinitely? (which is now legally feasible at the government's discretion. Taking reasonable precautions in the name of security is common sense, but with the best military in the world and more security legislation than is healthy already passed, this is nothing we need, not now, not ever. I'd rather sacrifice the perceived security bonus and instead continue to live in a country worth ilving in with unrestriced access to a venue whose primary purpose is free discourse--exactly what the First Amendment is meant to protect.
Not quite. IP addresses will only give you slashdot.org. URL's can tell which stories you went to/posted to.
And a single IP address can resolve to tens of thousands of hostnames/urls by using virtual hosts.
URLs contain several things.
1. The protocol.
2. The domain name.
3. Port numbers.
4. Page addresses.
5. Data, such as login names, page parameters, and so on.
The last item, in particular, has far greater scope than an IP address. It's much more like content; it can contain data that you provide for, say, addressing an email, or adjusting an account balance. (Just extemporising here. The actual usage varies enormously.)
So no, URLs are very different to IP numbers.
For those of you that missed it the other day, some guy was arrested because of his buying habits at the grocery store - tracked by his frequent flyer card (or whatever they call them - I don't use em) from the same store.
Evidently months ago he bought the same kind of lighter fluid that was used to light his own house on fire with his wife and kids inside. He was pretty much going to 'pound me in the ass prison' until someone else 'fessed up to lighting the fire (the family didn't get hurt in the fire, IIRC.)
If you think for 60 seconds you aren't being watched - ask that guy.
Glonoinha the MebiByte Slayer
We can see you through your monitors. You have mussed up hair, thick glasses, and no girlfriend. You are currently picking your nose thinking that nobody can see you.
You self gratify in front of your computer at least 3 times per week.
And now you are looking at the back of your monitor to see how we did it....
If 49% had tried to make a difference, who did they vote for?
/frank
As has been pointed out multiple times, in the grand scheme of things the difference between R's and D's is miniscule in this country. BOTH parties believe in bigger government, BOTH parties believe in more control over the lives of citizens, BOTH parties are willing to sell you down the river in a heartbeat.
If 49% had tried to make a difference, they would have brought in new voices to the political scene.
And the worms ate into his brain.
Someone at FBI watching ...
Joe#23153445 : URL http://www.*censored*.com
FBI guy : Great p0rn!
Joe#23153445 : URL http://www.*censored*.com
FBI guy : Damn, that user got tastes!
Joe#23153445 : URL http://www.*censored*.com
FBI guy to others FBI agents : I will keep watching user Joe#23153445 for a while, his activities seem suspecious. I will need extreme concentration, you can dismiss now.
Terrorism is a real threat.
You still stand a greater chance of dieing in a car crash or being shot by someone you know than getting killed in a terrorist attack.
Terrorism does *NOT* justify the abridgement of civil rights. *NOTHING* justifies the abridgement of civil rights.
Microsoft is to software what Budweiser is to beer.
Yes, because only by monitoring everyone's porn browsing can we stop terrorists. But you raise a good point! So along the same lines, I have a question of my own.
Which is more important:
Not being raped by a herd of goats
or
The lives of thousands or even millions of Americans that could be slaughtered in a terrorist attack?
Obviously the later is more important. So down on all fours, bucko. No, no, too late to protest now. We have to Fight Terror!
The enemies of Democracy are
If a terrorist attack occurs killing millions of people, the people would have been wise to reflect upon their actions. What suffering they must have caused to fuel such an attack.
Facing the idea that Terrorism is just an artifact of the way global politics are handled will be tough for America. Given a seat at the negotiating table, and an honest ear to hear their side, who would choose terror ?
Taking away my freedom will not change global politics, and will not reduce the root causes of terrorism.