FBI Head Wants Strong Data Retention Rules
KevHead writes "Speaking at a conference of international police chiefs, FBI Director Robert Mueller called for strict data retention guidelines for US ISPs. Echoing DHS head Michael Cherthoff's assertion that the Internet was enabling terrorists to telecommute to work, Mueller went further and said that the US needs stricter data retention guidelines. '"All too often, we find that before we can catch these offenders, Internet service providers have unwittingly deleted the very records that would help us identify these offenders and protect future victims," Mueller said. The solution? Forcing ISPs to retain data for set periods of time.' If that happens, how long before the MPAA and RIAA start asking to take a peek at the data too, as they have in Europe?"
A broken solution for a non-existent problem.
I used darkstat once on 2 T1's for a 24 hour period just the URL log was over 500MB, no packet captures, no session data.
Just imagine an OC-3, you are talking about a lot of storage space.
Despite all the statistical evidence that this does NOT work to PREVENT any "terrorist" acts ... they will attempt to use this to intimidate people into voluntarily restricting their actions.
... but you will not have access to their's. Asymmetrical. And because they are the government, they can release only the information they want from your records. Only the information that shows that you are really a wannabe child molesting, America hating, terrorist loving, Communistic, gay atheist.
When every search / posting / IM / etc from you is available to elected officials (and may be accidentally "leaked"), they hope that most people will self-censor their activities to only items that would be "appropriate".
Should you ever take a stand against the elected officials, they will have access to your records
It's all about maintaining power and control.
Since the terrorists will be using encrypted messages or coded messages which don't appear to be anything special (you know those -1 Slashdot comments are for something), this will help retrace the terrorist's online activities after people have died in a terrorist attack. My guess: lots of porn and a few messages to E-mail accounts which no longer exist.
It's just that there are so many disposable E-mail accounts available and the easy access to Internet cafes. If someone is using a disposable E-mail account and an Internet terminal which is paid for in loose change (usually used in airports), how are you going to track that person down one month later? What if the terminal is outside the United States?
Not to mention free Linksys brand wireless Internet access which is available in most areas.
Any government fighting terrorists needs to setup its own terrorist propaganda websites which make use of Microsoft Internet Explorer's many vulnerabilities. Spyware for the spies. Microsoft's poor security practices not only hurt you, they also hurt the terrorists. Of course terrorists using Firefox screws us all.
Here's the trick. Don't scare your population with too many moves at once. Take away their freedoms one by one, starting with the ones no-one really cares about. Let other countries take one step too far, and if their populations don't squeal, make a further step yourself.
So the EU enacted its spy state law last year, while people said, "even the states does not go that far". The EU Data Retention Directive wants (it needs to be ratified by individual countries) to track every phone call made, every email sent, every web site visited, every cell phone location, and hold this data for over a decade. The data would be available to non-governmental organisations (private firms). Anonymous internet usage would be banned. Anonymous prepaid mobile phone cards would be banned. All this, of course, to save us from terrorism and organised crime.
And the UK has constructed a surveillance system that beats anything ever built by the soviet spy states. Every public urban space is monitored, recorded, tracked. The only privacy you have is in your home, where you are safely under house arrest, unable to do anything to damage the interests of the state.
It was just a matter of time before the FBI asked for the same powers. What police force would not? It's a copper's wet dream. Every one of us stinking criminals-in-waiting tracked like cockroaches in a pen. No more crime. No more disorder. No more rebellion.
My blog
First, the practical:
:p
I'm sorry, but I am not going to waste my resources storing every email every one of my customers has received from now until kingdom come. Unlike Google, I don't have the spare cash sitting around for that kind of storage space. Make it a law and I bet you see a surge of ISPs basing their servers offshore to protect their investment (customer privacy mainly).
Secondly, the privacy concern
So the FBI reading my sarcastic emails to friends and family is going to help us catch a bunch of terrorists who, last I heard, had one webmaster who was stupid enough to get himself arrested in Germany? I've got news for you guys: Teenagers, CEOs, and computer enthusiasts coordinate things through the internet. I imagine terrorists prefer suicide bombing training camps or mountain hideaways for their secret conferences. Besides, we haven't heard anything of Al Qaeda declaring Jihad on Microsoft over Netmeeting or even MSN Messenger, so it is highly doubtful that they have tried to use them.
As far as 'terrorist websites' go, the FBI just needs to get some of their buds at the CIA to break into the server and plant a basic hit reporter. Figure out who is logging in and making changes, and you've got your man.
Exactly! If the terrorists use encryption and anonymizers (like TOR) it's going to be impossible to track them. They don't even have to go that far, I'd like to see the FBI track a terrorist planning session going on in a lvl 60 raid in World of Warcraft (Al-Qaida, the guild!). You can always hide online, and the damn feds are too stupid to realise it.
I don't think the vile Cardinal had to convince a jury of his peers, and answer endless appeals through several levels of appeals courts.
No, he probably just could detain them without trials, access to an attorney, letting them know what they are accused of, or any evidence against them. Maybe he labeled them "enemy conbatents" or something.
Finkployd
So, it's not just Terrorists (TM) anymore, it's the "disaffected" they're after.
And if you're not with us, you're "disaffected."
KFG
Operationally, a covert attacker would be an idiot to use any sort of electronic communications media. The 9-11 attackers observed complete e-silence, and communicated face-to-face. Bin Laden as well.
And I must challenge this constant assumption of cell of killers surrounding you and plotting your deaths.
WHERE ARE THEY? It's been five years, for chissakes. On 9-11 itself, they could only get enough manpower to take 4 planes instead of the 12 they wanted. And they can't ever pull that trick again.
Occam's razor, kids. They aren't there. There are no "terror cells" full of brown people saturating the country. It's a truthy crock. The "terrorists" we've kidnapped gave us nothing but lies under torture, which gave us endless terror warnings.
They ain't there. Stop snivelling! BUSH IS LYING. He has no intel at all. We have no humint in these groups, the people we're torturing are nonentities or innocents that we've used as proxies for our anger. All the "facts" Bush has sold us on, from the "terraist cells" to the Iraq terror to Iran to Korea were garbage. We got hit with a simple trick on 9-11. That's it. We don't have to stop the planet to find the evildoers. They are DEAD. We however are making millions of people who hate our guts on a daily basis in Iraq, so I guess it's a goddamned self-fulfilling prophecy after all.