Slashdot Mirror


Inside Comcast's Surveillance Policies

Monk writes "The Federation of American Scientists has obtained a recently disclosed Comcast Handbook for Law Enforcement which details its policies for divulging its customers' personal information. (Here's the handbook itself in PDF form.) All of Comcast's policies seem to follow the letter of the law, and seem to weigh customer privacy with law enforcement's requests. This is in apparent contrast to AT&T and a number of other telecommunication companies, which have been only too happy to give over subscriber records. According to the handbook, Comcast keeps logs for up to 180 days on IP address allocation, and they do not keep all of your e-mails forever (45 days at most). VoIP phone records are stored for 2 years, and cable records can only be retrieved upon a court order. The document even details how much it costs law enforcement to get access to personal data (data for child exploitation cases is free of charge)."

8 of 134 comments (clear)

  1. How much it costs? by aeschenkarnos · · Score: 4, Interesting

    That's odd. I'd have thought it cost "do it or be fined/arrested".

  2. Misleading article by Anonymous Coward · · Score: 5, Interesting

    Complying with requests from "Law Enforcement" is quite a bit different from complying with requests to assist a US government agency with an anti-terror program. Local law enforcement is far removed from the latter.

    Is this an attempt to improve Comcat's poor reputation among /.'ers? They still haven't changed thier undocumented policies related to bandwidth limitations on "unlimited bandwidth" accounts.

  3. comast high speed by gadzook33 · · Score: 5, Funny

    Internet, Voice, TV. All on one subpoena.

  4. Re:Secure your email by spud603 · · Score: 5, Insightful

    There's a strong argument to be made to encrypt specifically because you have nothing to hide.
    This is similar to the idea that you should not let the cops search your home without a warrant even though you don't have anything illegal inside. The more it becomes assumed that only the "bad guys" that are asserting their rights and/or privacy, the more likely such assertions will be thought of as indicative of bad behavior in and of themselves. If the feds assume I'm a criminal simply because I encrypt my email, then they are not doing their job effectively.

  5. Re:Secure your email by Ucklak · · Score: 4, Insightful

    Do I have anything incriminating in my email?
    No

    Do I care if they snoop in my email?
    Yes

    Will I encrypt my email because they're snooping?
    No - in the case of confidential messages, they have always been dealt with cryptically.

    Can I do anything about them snooping in my email - regardless if it's encrypted or not?
    Absolutely not

    Can we do anything about them snooping in my email?
    We can try

    I am such a low priority for them that as long as it doesn't disturb my day to day routine, I really don't worry about it. I don't even notice if they are even sniffing my packets.

    It's like being robbed in your home when you're out. It doesn't matter if you have an alarm system or not, if someone wants property of yours, they will get it.
    You can double lock your doors, put bars on the windows, pay for a monitoring service, or whatever, it will not stop a determined person from getting whatever they want to get.

    That hassle of behavior is not worth it to me. Supporting a group or honest politician to stop the snooping is worth the hassle.

    I'm not going to go downtown and walk across the street out of my way just to avoid the town crier (you know, every town has one, a crazy coot parked in the center of town that says the end of the world is coming). I will confront him if he confronts me.

    --
    if you steal from one source, that is plagiarism, if you steal from many, well, that's just research.
  6. Quick and Dirty Summary by value_added · · Score: 4, Informative

    Interesting read, especially considering the "Comcast Confidential" footer at the bottom of every page. That said, it's informative only insofar as it states there's laws to be considered, and makes clear the folks at Comcast insist on following them. Nothing in that document is very different than a typical publically-available TOS. Here's an excerpt:

    Generally, the following information, when available to Comcast, can be
    supplied in response to the types of requests listed below. Each request
    is evaluated and reviewed on a case by case basis in light of any
    special procedural or legal requirements and applicable laws. The
    following examples are for illustration only.
     
    - Grand Jury, Trial, or Statutorily Authorized Administrative Subpoena
    - Judicial Summons
    - Court Order
    - Search Warrant
    - Preservation Request/ Backup Preservation Request
    - Pen Register / Trap and Trace Device
    - Foreign Intelligent Surveillance Act of 1978
    - National Security Letter
    - Child Abuse
    - Emergency Disclosure

    As for the email policies referred to in the summary, Comcast does not store emails any longer than the subscriber chooses keeps them.

    Comcast's Webmail service permits customers to change their email
    deletion policies, but the current default settings are described below.
     
    - Inbox (Read Mail No automatic deletion policy)
                        (Unread Mail 45 day retention period)
    - Trash (Read Mail 1 day retention period)
                        (Unread Mail 1 day retention period)
    - Sent Mail (Read Mail 30 day retention period)
                        (Unread Mail 30 day retention period)
    - Screened Mail (Read Mail 3 day retention period)
                        (Unread Mail 3 day retention period)
    - Personal Folders (Read/Unread No deletion policy)
    - Popped Mail (Deleted immediately from web mail servers)

    Put another way, Comcast doesn't store your emails. You do.

  7. Re:Secure your email by ArcherB · · Score: 4, Funny

    There's a strong argument to be made to encrypt specifically because you have nothing to hide.
    This is similar to the idea that you should not let the cops search your home without a warrant even though you don't have anything illegal inside. The more it becomes assumed that only the "bad guys" that are asserting their rights and/or privacy, the more likely such assertions will be thought of as indicative of bad behavior in and of themselves. If the feds assume I'm a criminal simply because I encrypt my email, then they are not doing their job effectively.


    Sure, but that is because having the police enter my house is intrusive. They track mud in, can drop anything anywhere and say that they found it there. That can't be done with email. Also, a warrant specifies exactly what they are looking for. Finally, items found in a house search is enough for prosecution. A quote from an email is not. Besides, these guys are not looking for prosecution, they are looking to identify and bust terrorism cells. They are looking to stop the next terrorist attack. They are looking to intercept supplies such as bomb making materials and replace them with something inert. Yes, an email will be evidence, but when it comes to terrorism, they require a open and shut case with multiple arrests. They don't want to pop you for looking for weed.

    If the feds assume I'm a criminal simply because I encrypt my email, then they are not doing their job effectively.

    I never said that. I said they would take a close look, wasting their time and doing MORE of what you didn't want them to do in the first place. If they can't get your email, they may listen to your phone calls. They may start tailing you. They may start investigating the people you email. Why? Because you thought it would be super cool spy stuff to encrypt your email to keep the evil G-Men out.

    Besides, even the SS didn't really need to evesdrop. If they wanted information, they'd kick down your door, torture your little girl until YOU cracked, and put you on a train somewhere with a bunch of people with stars sewn into their clothing.

    --
    There is no "I disagree" mod for a reason. Flamebait, Troll, and Overrated are not substitutes.
  8. Re:Secure your email by Technician · · Score: 4, Insightful

    There is nothing incriminating in my email beyond sending stupid YouTube links to a buddy or bitching to the wife about who chooses whats for dinner.

    My stock trades are not incriminating either, but they are not sent plaintext. They are also not sent on my ISP mail servers. Sometimes data security is simply data security to prevent mis-use in the wrong hands. There is nothing incriminating, but my credit card order details is not to be made public.

    There is a reason to encrypt some sensitive data. ID theft of credit card information is just one of the many reasons.

    --
    The truth shall set you free!