Slashdot Mirror
Web Hosting For Privacy Activists?
BritishColumbian writes "I'm thinking about setting up a Web site driven by user submissions. I was wondering which locations have the most liberal (i.e., libertarian) privacy laws. There are some great hosts in the US, however there have been so many FBI requests for user data that I don't want a server hosted under US jurisdiction. Does anyone have any thoughts/suggestions as to a suitable jurisdiction? It doesn't look like Sealand's HavenCo is guaranteed to be privacy-friendly any more."
Well basically nowhere!
Let's say you find a hosting company in a country that is very libertarian and will not comply with any request for info.
The routers to that place can be sniffed here in North America (or anywhere along the route) and voila the trick is done. Not as easy as getting logs but...
If your subjects are that hot, then an easy break-in into the premises of that hosting company. (or a bribe). Remember Watergate?
hosting in another country won't save you. if they find out who you are the government will just arrest you anyway, they don't even need a real reason these days.
If you mod me down, I will become more powerful than you can imagine....
If your server is hosted in a safe area but you (the owner/responcible operator) reside in the US. Can the FBI contact or require you to provide that info?
Having it hosted in a safe are only protects the hosting company. The FBI will not get anything from them, the next step is for them to contact you (if they can figure out who you are).
Atleast that way, you know when the FBI is trying to get info about you or your users.
Im a gamer, not a grammer major. This post is full of spelling and grammer mistakes.
Have you ever heard of SSL?
Do you always click on "OK" when a bad certificate warning comes up on your browser?
Frankly I doubt that you will find anyplace more liberal than the US.
A lot of countries in the EU will bust you for anything that they consider "hate speech" not that I wouldn't mind never having to see it myself it is still political speech. Considering Europe's history I can understand why they are more than a little sensitive over hate speech. Canada also has hate speech laws last time I checked. I am not sure about all the countries in Latin America but most get a little bent over criticism of their governments and or the Catholic Church.
The middle east? Well just don't make fun of Islam and you will be just fine. Africa? Well that probably depends on the nation. Not a great history of Human rights in most of those Nations.
Asia? Well China is a big no. Japan, and Taiwan I have no idea. Austriala and New Zealand maybe a as liberal as the US but I think they are closer to most EU nations according the Wikipedia they are.
Switzerland maybe?
The US does tend to be more strict on sexual content but is probably still one of the most free when it comes to Political speech. Of course an anti-war protester being asked to go to a free speech zone or get a permit really doesn't care about an neo-nazi in France being put into jail for wearing a patch.
See my blog http://ilovecookes.blogspot.com/ for light hearted technical information.
And you might consider consulting one (if you have the money). You might also consider exactly what sorts of liability you'll be exposed to and search for jurisdictions with the most lax regulations in that area. You say that your site is going to be driven by user submissions . . . are you worried about copyright? You say you're worried about the FBI requesting user data, is there any particular reason you think the FBI will ask for your user data (that is, will you be requesting submissions on political/revolutionary/Islam topic areas? I suppose one could even piece together a user submission website dedicated to the discussion of criminal activity and how one might go about practicing crime . . . clearly an exposed place to be).
Also remember it isn't only the FBI that can compel disclosure of user identities. The Think Secret/Apple, Inc. lawsuit proved that. A foreign jurisdiction might make it really hard for the government to get at user data, but make it really easy for private parties to do so in a lawsuit. Also consider, however, that if your servers are in a foreign jurisdiction then U.S. constitutional guarantees may not apply (you might say that they don't apply here anymore, but I would submit that they protect you at least a little bit). That could mean that if the government wants your user data, and the servers are outside the U.S., they could tap/hack/physically break in and get the data they want w/o even the pretense of judicial sanction, and w/o even the possibility of court action for you.
My point here is that jurisdictions treat privacy differently across subject areas and differently depending on who's asking or taking the data. Find the subject area that your website most squarely fits under, and then find a jurisdiction with the most protective privacy laws, on the whole and against everyone you're scared of, for that subject.
Nazi Germany 1933-1945. Thanks for playing!
Singapore?! The you-must-register-to-buy-chewing-gum country? I don't think so.
The masses are the crack whores of religion.
If I were you, I would first recognize that no matter how careful you are, there will always be a chance of someone (the govt, your web host) with the authority to take down the physical server hosting your website. So I would physically host the site in at least 3 different countries. Use DNS to spread the load on the different locations (all are active at any point in time). If one of them get taken down, update the DNS accordingly to redirect traffic to the other locations, and start setting up one more server in another country (have the technical procedure clearly described and easy to follow so multiple people you trust can follow it). Of course you need to have the user content posted to any location automatically replicated to the others. (Notice how this sounds much like NNTP).
If someone succeeds into getting administrative access to your DNS records, register a new domain name and get the word out to communicate it (IRC channel where you guys usually hang out, a post to some other forum, etc). Or just communicate the IP addresses prominently.
Good luck to someone trying to take down something hosted as described above ;-) Choose the right 3 countries and, because of red tape, no governments will ever be able to successfully cooperate to take down the 3 physical servers at the same time.