Slashdot Mirror
Big Brother Wants Into VoIP At Any Cost
wallaby fly-half writes "An amendment to the CALEA law would make it easier for the government to monitor calls made over VoIP and even temporarily store some packet traffic. Ars Technica reports that the 'bill will put the technology in place to buffer packet streams, and places the job of filtering those streams under government control. We know from the NSA warrantless wiretapping program that the government is not limiting itself to access to under court orders, and the CALEA bill must be considered in light of the capacity it generates.'"
Raise your hand if you thought VoIP was a really neat idea when it first came out.
Now raise your hand if you still think it is.
Granted it's not really too different from recording Voice, but now you could expect yourself to be extraordinarily rendered if you choose to encrypt your converstations because you have the gall to actually believe the government has no right to recording and storing your conversations, Dub's dirty tricks or not.
Hell, they'll probably outlaw encrypting your own phone calls, next, because (the flag waving) it's (an eagle poses rampant) in (strains of The Star Bangled Banner) the (In God We Trust) best(the blue angels fly overhead) interests (cascading images of Washington, Jefferson, Lincoln, etc.) of (Betsy Ross adds another star to her handicraft) America (fanfare of fife and drum) and everybody knows the real patriots don't question any of this.
"sir, you served potential enemies of uh-merika with strong encryption" and we can't be having that.
Ebay constantly in hot water would probably love to score some points with Washington, they're probably already serving tea and crumpets with the NSA right now, along with a side order of Skype backdoors.
dangerous times call for dangerous laws
A feeling of having made the same mistake before: Deja Foobar
Haven't we learned any lessons from the hideous Bolsheviks?*
____________________
* Peter Holquist, "'Information Is the Alpha and Omega of Our Work': Bolshevik Surveillance in Its Pan-European Context," Journal of Modern History, 69: 3 (September 1997), pp. 415-450.
From the FCC Mandate: From Phil's site: The stupid part of this is that we shouldn't have to do this
You are innocent. You have done nothing to give the government the right to investigate you or collect your phone records with the intent to prosecute you. If you're an American, take a few hours to protect what so many people have fought and died for: your rights to privacy and being innocent until proven guilty.
What next? Is the King of England going to be able to listen in on my VoIP calls?
My work here is dung.
I assume VOIP can be encrypted just like anything else. So once again this will do nothing towards preventing terrorism, but everything to alienate The People.
Argh.
The biggest downside is that in just two short years, George Bush will no longer be president and we won't get to hear such cerebral commentaries any longer.
Right. In two short years, Hillary will be taking her turn with all of the expanded executive powers that Dubya is indulging in. Then it'll be your turn to stammer, "Uh, hey, wait a minute, guys, this executive-dictatorship thing isn't so cool."
The worm will turn. It always does.
Remember Clipper chip? Yeah ole Sammy wanted in then too but they changed their tactics by using patent law when that initiative failed.
/. geeks, create a solution.
For those who don't know, the DES patent is owned by N.S.A. so when you see that Verizon's latest gadget that is triple DES encrypted don't be impressed, Uncle Sammy can get right in.
Seems like what we need at this point is OSS encryption that can't be so easily cracked by N.S.A. It's just a matter of time before Skype/Vonage, etc are required to change their encryption to DES or something that the government can read.
It used to be that the government had better technology always, not so true anymore. So
Big brother is already into my credit card records, phone call records, credit and purchase history and library records. Why would anyone think VOIP would get a break?
Weaselmancer
rediculous.
More punishment for Americans who obey the law. As if a criminal would be stupid enough to not use private encryption or alternate communication channels that the government didn't have a listening ear to. Why don't they go all the way and pass an amendment to the constitution that prevents citizens from protecting themselves from government monitoring? Isn't that what they really want?
I could be wrong, but I am not aware of any vulnerabilities in SpeakFreely - http://www.speakfreely.org./ So, if you are worried about people intercepting your calls .. there are solutions. And, yes, it does run on Linux, or, if not, the source is there ...
"Consistency is contrary to nature, contrary to life. The only completely consistent people are the dead." A. Huxley
then I will be setting up a script to make VOIP calls into Saudi Arabia and Iraq at 4am every morning, and have a text-to-speech program start reading off an Arabic or Farsi translation of Dr. Seuss. Let the NSA have fun with that one, 'cause I know I will.
There is no mod option "-1: Disagree" for a reason. "Overrated" is not an acceptable substitute. Post something instead.
You got modded flamebait, and I think rightly so, but I think you deserved a real reply anyway.
First, dumping Israel will not protect us from terrorists. You must remember that al-Qaeda attacked Saudi Arabia, even though Saudi Arabis is the guardian of the Islamic holy cities. But they weren't idealogically pure enough, they crossed one of al-Qaeda's lines, and they got hit anyway. So if we were to totally stop supporting Israel, would that buy us protection from terrorist attacks? No. There would be some other issue - we were still selling products to Israel, or buying from them, or something. Are you prepared to write a blank check of concessions to every set of idiots that are willing to use violence to accomplish their goals?
Second: Israeli terrorism??? Hello?
Imagine that the Mexicans, instead of just flooding across our borders in insane numbers, were firing homemade rockets into downtown San Diego and El Paso. Imagine that this had been going on for two years. And imagine that the people doing this (the Zapatistas, say) won the next Mexican presidential election. Now they're the Mexican government. Then they fire some more rockets. Since they're the government, that's now an act of war.
So we go after them. After all, enough is enough. And, though we try to avoid it, there are inevitably civilian casualties. Does that make us terrorists? Or are the terrorists the people who were firing rockets into our cities for two years, deliberately targeting civilians?
Third: Enabling Israel to keep going after the people who are targeting their civilians is a good thing. There cannot be peace while Hezbollah and Hamas continue firing missiles into Israel, and neither of them seem willing to stop, ever. So they have to be stopped. That means that Israel is doing the right thing. But sometimes doing the right thing - or helping someone else to do the right thing - upsets people who are doing the wrong thing. We should help them do the right thing anyway.
Yes, I think they can't break AES256. But I also think they can break the PK that is used to transfer the AES session key. Why? Because Skype is not intended to be secure for the users. Skype uses Skype as the trusted introducer for the PK negotiation. If the FBI tells Skype to implement a MitM attack, then Skype can do it.
The proper way to implement VoIP or any other internet communcation, is to let people be their own PK introducers/certifiers. And let them use OTPs in situations where it is feasible, which just happens to be pretty common (e.g. your phone and your wife's phone probably spend several hours in the same room together, every night).
As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
Pretty much everybody without his/her head up his/her ass knows that "fighting terrorism" has very little to do with this.
But then, spying on and harrassing political opponents a la Nixon may not be the main motivation behind it, either.
The BIG concern within the Bush Administration is the threat from people inside of it. They need their own people to know that if they divulge any embarrassing or incriminating information, even anonymously, that they will be tracked down and punished. The war is against potential whistleblowers.
Ever wonder why you never hear interviews with anybody who knew Dubya back in his wild days before he became governor of Texas? Every college friend of every other president had stories to tell, some positive and some not, but not so with George II. Why is this? Well, pretty much everybody with an embarrassing story to tell about cocaine or girls or his desertion from the National Guard now has a cushy high-level job in the government or the energy industry. Better jobs with more power than they'd ever dreamed they'd have, and jobs they're not going to jeopardize by telling stories.
That's how you go from being a horse show official to being head of the Federal Emergency Management Agency with zero experience. Anybody who works in Washington knows there's hundreds - maybe thousands - of 'em.
Without the extensive eavesdropping powers Bush claims, these people would be free to contact reporters or blog information anonymously. By advertising these "powers" via carefully planned "leaks", Karl Rove is letting insiders know that they're taking a big risk if they spill any beans.
And you can bet they'll know who I am as soon as I hit the "Submit" button...
The reason our phones are vulnerable to these kinds of attacks, is that we view phone service as .. um .. well, I just used the word: service. You use a "service provider's" network. I'm not talking about your ISP.
But with IP, you don't need to use a "phone service provider" except to interface with POTS. Have your phone contact my jabber server to start a conversation, and we'll use PGP on top of that. Now there isn't any "provider" to regulate and force to implement MitM attacks. They would have no choice but to regulate the users themselves, and we've seen how great that works with the War on Drugs. I guess it'll be another excuse to throw people in jail, and another way to make good people live in fear of their government, but one thing you can be sure of: it won't work for anything else. It won't prevent the behavior that they're trying to suppress.
Death to "service providers." We just need open phone hardware (that we can install our own application on) and a network connection.
As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.