Slashdot Mirror


Berners-Lee Says No To Internet Snooping

Jack Spine writes "The inventor of the World Wide Web has pointed out some of the dangers of deep packet inspection. Sir Tim said that ISPs 'snooping' on data was similar to the interception of mail. 'This is very important to me, as what is at stake is the integrity of the internet as a communications medium,' Berners-Lee said on Wednesday. TBL's comments come as the UK government is gearing up to intercept all web communications in the UK through the Intercept Modernisation Programme, and echo comments he made last year about Phorm."

113 comments

  1. Inventor of the world wide by ericrost · · Score: 5, Funny

    The inventor of the world wide what?

    1. Re:Inventor of the world wide by Anonymous Coward · · Score: 1, Funny

      I accidentally the whole world wide. Is this bad?

    2. Re:Inventor of the world wide by Godwin+O'Hitler · · Score: 4, Funny

      Its a typo. It should read "word wide". TBL invented the word "wide" because prior to then most things were narrow.

      --
      No, your children are not the special ones. Nor are your pets.
    3. Re:Inventor of the world wide by vishbar · · Score: 2, Funny

      There's a goatse joke to be made here. I'm just not quite sure what it is.

      --
      Ride the skies
    4. Re:Inventor of the world wide by Obfuscant · · Score: 1
      The inventor of the world wide what?

      Not the world wide what, the world wide has. If you elide the prepositional (of) clause, you get "The inventor pointed out...".

    5. Re:Inventor of the world wide by ccguy · · Score: 0

      The inventor of the world wide what?

      You'll probably find it interesting that google returns more than 500 entries for Berners-Lee goatse.

    6. Re:Inventor of the world wide by jslater25 · · Score: 0, Redundant

      You don't know what goatse is? Hi, and welcome to /.

  2. The dream of encryption by CRCulver · · Score: 5, Insightful

    I remember 10 years ago that every nerd had a PGP key and Schneier's Applied Cryptography was a standard text for our crowd. Now, the majority of even the hard-core geeks no longer have much interest in encryption. Somewhere along the way we forgot that every step forward on the net demands a way to guarantee privacy. Berners-Lee might regret the lack of privacy now, but he and other luminaries weren't vocal enough about the need for encryption and lots of it.

    1. Re:The dream of encryption by Anonymous Coward · · Score: 2, Interesting

      The promise of the internet is free and open data. Encryption is anti-everything the internet is about.

      The real death of the internet was ~10 years ago, when anonymous posting disappeared.

    2. Re:The dream of encryption by icebike · · Score: 3, Interesting

      PGP keys only help with email.

      Far better to move the entire web to ONLY ssl based servers, (after fixing ssl of course).

      --
      Sig Battery depleted. Reverting to safe mode.
    3. Re:The dream of encryption by Creepy+Crawler · · Score: 4, Interesting

      Where have YOU been living?

      1. I have _multiple_ active GPG keys. All Ubuntu has GPG on them by default.
      2. I use TOR regularly, which uses multiple levels of encryption.
      3. I use HTTPS sites regularly. Not the old dinky 40bit keys either.
      4. My filesystem on my laptops are encrypted via DM_CRYPT and Luks.
      5. Every machine I communicate with has SSH. Therefore, I also have encrypted data tunnels for everything.
      6. I use W.A.S.T.E.

      Yeah. That whole encryption thing died out a while back. Uh huh.

      --
    4. Re:The dream of encryption by FooAtWFU · · Score: 3, Funny

      Weirdo.

      --
      The World Wide Web is dying. Soon, we shall have only the Internet.
    5. Re:The dream of encryption by Anonymous Coward · · Score: 0

      Sure, you are right, but who would have guessed that western governments would come over more right wing than Hitler?

    6. Re:The dream of encryption by 0100010001010011 · · Score: 5, Insightful

      Because most of us came to this realization: http://xkcd.com/538/ or the fact that 90% of it doesn't matter.

      All of my Tax documents and other financial stuff is on a 256-bit encrypted disk image. But why the hell do I need to encrypt the message to my mom about my Easter plans? Furthermore, how do I explain to someone that just learned to use a computer that Obama wants to know if it's going to be Ham or Turkey.

      And the last time I planned something big and illegal we sure as hell didn't EMAIL each other about it, we met in person. (3 friends of mine all worked at Taco Bell through High School. Summer before college we planned a heist of the flags off the top. I still have a flag I fly on Rugby trips with the Taco Bell Dog.)

    7. Re:The dream of encryption by Anonymous Coward · · Score: 2, Insightful

      Well that's the thing. Anonymous posting provided one form of security that's no longer feasibly available. Encryption allows better privacy. As more and more cultures/subcultures/thought-pattern-sharers participate on the web, conflicts and clashes are more and more likely to happen. Opportunistic encryption, as long as it is controllable, will make the web a mutual haven for all cultures. One community can keep their convos/files/culture to themselves, while others can still broadcast theirs. The hearts and minds of people, no matter where they are geographically, are the final battlefield for a fight that should never take place, and encryption is one way to help ensure it never does.

      Posting AC because I have mod points and also I seem to have started rambling.

    8. Re:The dream of encryption by lenski · · Score: 4, Interesting

      the promise of the internet is free and open communications.

      What we do with our data is entirely up to us, and nobody else. Not "the government", not ISPs. This includes encrypting whatever is being transmitted.

      You may share any paper, report, program, comment that is yours to publish. Some communications using the Internet should be more like a phone conversation (before USAPATRIOT stupidity), in which a modicum of privacy is a reasonable presumption.

    9. Re:The dream of encryption by Creepy+Crawler · · Score: 4, Informative

      What do you mean "Weirdo"?

      Anybody that uses a Unix based system (BSD, Linux, Solaris) all use a variant of OpenSSH.
      Anybody that buys stuff on the net uses 128bit SSL.
      Even that child porn dude that's in the supreme court knew enough to use TrueCrypt.

      Or even another encryption used: WEP and WPA. There's 2 very standard, "non-weird" encryptions. They just arent terribly strong.

      --
    10. Re:The dream of encryption by Red+Flayer · · Score: 5, Insightful

      Because most of us came to this realization: http://xkcd.com/538/ or the fact that 90% of it doesn't matter.

      The problem with the xkcd cartoon is that it only applies if whoever wants your information knows that you have it.

      The point of general encryption is that fishing expeditions are impossible... so the "juicy" stuff that would warrant attention from the powers that be is hidden in the morass of all the other encrypted data.

      Yes, a ten-dollar hammer can be used to get my keys from me... but how do you know I've got the goods if you've never been able to read anyone's data?

      --
      "Trolls they were, but filled with the evil will of their master: a fell race..." -- J.R.R. Tolkien on Olog-hai
    11. Re:The dream of encryption by Amazing+Quantum+Man · · Score: 1

      Apparently, you've turned off your sarcasm detector.

      --
      Fascism starts when the efficiency of the government becomes more important than the rights of the people.
    12. Re:The dream of encryption by Anonymous Coward · · Score: 0

      But why the hell do I need to encrypt the message to my mom about my Easter plans?

      Because the phrase "mom" is a code-word for "Al-Quada" and "Easter Egg" is a code-word for "dirty nuke".

      So obviously you are not talking about Easter plans with your mother, you are running a sleeper cell intent on unleashing chaos & destruction.

      Expect to see some nice men in dark suits at your house shortly.

      Yes I phrased this with sarcasm, but I am indeed serious. All it takes is one criminal to use a coded conversation, and anyone holding a similar conversation becomes suspect as well.

    13. Re:The dream of encryption by Lord+Ender · · Score: 2, Insightful

      Key exchange is hard.

      If we had signed DNS, and DNS started distributing X.509 certificates ("type CERT queries"), then secure email really would hit the mainstream.

      --
      A slashdotter who didn't build his own computer is like a Jedi who didn't build his own lightsaber.
    14. Re:The dream of encryption by TrekkieGod · · Score: 5, Insightful

      Because most of us came to this realization: http://xkcd.com/538/ or the fact that 90% of it doesn't matter.

      All of my Tax documents and other financial stuff is on a 256-bit encrypted disk image. But why the hell do I need to encrypt the message to my mom about my Easter plans?

      Because if somebody's watching you send all those messages to your mom about Easter plans and then suddenly see encrypted traffic, they're going to know that the encrypted traffic must have been special and then come after you with the wrench?

      --

      Warning: Opinions known to be heavily biased.

    15. Re:The dream of encryption by 0100010001010011 · · Score: 4, Insightful

      The world has moved beyond simply sending encrypted e-mails back and forth. Steganography, torrents, tor, etc.

      If I REALLY wanted to coordinate killing the president or something big. I'd probably use YouTube or Craigslist where the Signal to Noise is infinitely small. I'd embed an encrypted stegano message inside video of a guy lighting farts on fire or 'casual encounter' ad. Heck, put up some eBay listings with big pictures. How do you know that latest version of Heroes you downloaded from Bit Torrent doesn't have a 5MB image embedded in it with the President's route on some foreign trip?

      How about those Spam messages that look like a ton of gibberish, do you know they're not some secret code?

      I'm sure if a few Slashdoters put their minds to it, they could come up with a bit more ingenious ways of sending messages than 'plain text' encrypted PGP e-mails.

      The next terrorist isn't going to suddenly start sending encrypted messages from a normal account.

    16. Re:The dream of encryption by Anonymous Coward · · Score: 0

      Because most of us came to this realization: http://xkcd.com/538/ or the fact that 90% of it doesn't matter.

      Yes, people - not their machines - are always the weakest link in the technology chain. (At least that's what I got out of reading Dune. :-)

      Plus, most of what you would protect has less value than you think.

    17. Re:The dream of encryption by broken_chaos · · Score: 2, Interesting

      Encryption works for very important data (that you would die to protect), less important data transferred over a network (moderately important e-mails), and unimportant data as a form of misdirection (if everything is encrypted, no one can tell what's important or not).

      Full disk encryption, while nice, is not a protection for your data from someone who really wants it, unless you will die to protect it. It is protection from casual thieves for things like passwords, credit card data, personal information (your contact lists, for instance).

    18. Re:The dream of encryption by Logic+and+Reason · · Score: 1

      Ooh, a sarcasm detector. That's a real useful invention.

    19. Re:The dream of encryption by Sloppy · · Score: 3, Insightful

      Now, the majority of even the hard-core geeks no longer have much interest in encryption.

      Then they're not hard-core geeks.

      Geez, they're not even soft-core geeks. In December 2005, paranoid what-if rants about theoretical risks, became mainstream knowledge. If you're awake (geek or not), you know we have to start encrypting.

      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    20. Re:The dream of encryption by Sloppy · · Score: 2, Informative

      PGP keys only help with email.

      Far better to move the entire web to ONLY ssl based servers, (after fixing ssl of course).

      And the way to fix SSL, is to switch to using PGP keys.

      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    21. Re:The dream of encryption by houghi · · Score: 1

      Yes, a ten-dollar hammer can be used to get my keys from me... but how do you know I've got the goods if you've never been able to read anyone's data?

      I hit the guy who gave you the goods with a ten-dollar hammer.

      --
      Don't fight for your country, if your country does not fight for you.
    22. Re:The dream of encryption by Sloppy · · Score: 4, Insightful

      A lot of very foolish people have overgeneralized the point of that cartoon.

      The $5 wrench attack does work to defeat encryption, but it only works when someone is specifically interested in you.

      The bad guys cannot put a $5 wrench on the backbone and slurp up everything. The only way they can do that, is if people agree to not encrypt.

      If you encrypt, you defeat massive-scale surveillance. And you are not defeating a theoretical attack; you're not even defeating a plausible attack. You defeat an attack that the US government is known to be using.

      You don't need to read phrack or 2600 to know about this; read the New York Times or turn on your TV and watch Frontline. Get your head out of the sand.

      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    23. Re:The dream of encryption by Hordeking · · Score: 1

      Where have YOU been living?

      1. I have _multiple_ active GPG keys. All Ubuntu has GPG on them by default. 2. I use TOR regularly, which uses multiple levels of encryption. 3. I use HTTPS sites regularly. Not the old dinky 40bit keys either. 4. My filesystem on my laptops are encrypted via DM_CRYPT and Luks. 5. Every machine I communicate with has SSH. Therefore, I also have encrypted data tunnels for everything. 6. I use W.A.S.T.E.

      Yeah. That whole encryption thing died out a while back. Uh huh.

      We Await Silent Tristero's Empire.

      --
      Disclaimer: The opinions and actions of the US Gov't are in no way representative of those held by this author or its ci
    24. Re:The dream of encryption by Sloppy · · Score: 4, Insightful

      But why the hell do I need to encrypt the message to my mom about my Easter plans?

      Because I might be looking for houses to burgle on Easter.

      Because privacy should be the default. Instead of asking why your plans should be secret, ask why your plans should be public. It's just as legitimate of a question.

      And the last time I planned something big and illegal we sure as hell didn't EMAIL each other about it, we met in person.

      Good for you. But there's more to life than planning crimes, and there are other threats than government law enforcement (they just happen to be the most high-profile). I know some people think that the only purpose of the internet is for pedophiles to trade porn, but really, people do have other uses for it. Most of those uses are nobody else's business. If you wanted the world to know your Easter plans, you could have posted them to Usenet. Instead, you chose email.

      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    25. Re:The dream of encryption by xmundt · · Score: 1

      Greetings and Salutations..
      Hum...this looks like an excellent proof of the observation that inability to detect sarcasm is an early sign of dimentia.
                G,D, R
                Dave Mundt

      --
      YAB - http://blog.beemandave.com/
    26. Re:The dream of encryption by knewter · · Score: 1

      Is W.A.S.T.E. still under active dev? I used that thing for around a year after aol killed it in ~2003/4, and then me and my cousin stopped sharing files as frequently (really the only person I shared files with via WASTE)

      --
      -knewter
    27. Re:The dream of encryption by Anonymous Coward · · Score: 0

      Hey! I think I need a refund! My detector didn't go off!

    28. Re:The dream of encryption by pilgrim23 · · Score: 1

      Ha! I always send text written with an Enochian font (look it up) after first translating into Voynich script! Now if only I could figure out how to decode it I would be able to read this shopping list....

      --
      - Minutus cantorum, minutus balorum, minutus carborata descendum pantorum.
    29. Re:The dream of encryption by noidentity · · Score: 1

      And the last time I planned something big and illegal we sure as hell didn't EMAIL each other about it, we met in person. (3 friends of mine all worked at Taco Bell through High School. Summer before college we planned a heist of the flags off the top. I still have a flag I fly on Rugby trips with the Taco Bell Dog.)

      Even better, you posted about it on Slashdot!

    30. Re:The dream of encryption by ClosedSource · · Score: 3, Insightful

      "The promise of the internet is free and open data."

      I thought the promise of the internet was free porn.

      Seriously, it started as a government program and open and free communications was not the goal.

    31. Re:The dream of encryption by severoon · · Score: 1

      If I suddenly had a need to send something encrypted, but I didn't want it to appear encrypted, I would take the encrypted block and bury it steganographically in an image attached to the email, an image relevant to the innocuous message about Easter dinner that is in the body of the message...like a picture of a ham or something.

      In fact, I suspect that most of the innocuous-looking traffic that's flying around the web right now is actually bearing a different encrypted message to the intended recipient as well. How do we know everyone's not already encrypting everything worthy of being encrypted? -X Files music-

      --
      but have you considered the following argument: shut up.
    32. Re:The dream of encryption by Anonymous Coward · · Score: 0

      It gets worse than that. I just asked the admin how the new encryption method at my work handled key distribution, he didn't know what I meant. Further conversation revealed he didn't know vpn was encrypted already, and had never heard of SSL.

      Posting AC because of an NDA

    33. Re:The dream of encryption by Anonymous Coward · · Score: 0

      Anonymity can still be had with TOR servers, anonymizer services, darknets, freenets, and MAC spoofing. Keeping data hidden requires either encryption, putting it in an unexpected context ("Why is the binary graphics data for that 10 minute powerpoint presentation 450 MB?"), or splitting it up into multiple pieces (like XOR'd diff files) that only make sense when put together correctly. Lots of messages got moved around before the advent of strong encryption, many using simple one-time pads.

    34. Re:The dream of encryption by Anonymous Coward · · Score: 0

      All that aside, how does the dog like the Rugby games?

    35. Re:The dream of encryption by Anonymous Coward · · Score: 0

      Or, with NO explicit steganography, (changing bits that "don't matter") to give away your message, you could have a set of messages. Each message would for each word, have several synonyms or replacements. Each of these could be considered bits, or sets of bits. This is still steganography of a sort, but not detectable without knowing the people involved intimately.

      To make it simpler, send a picture of a quilt. Each square could contain a series of "bits", (red, blue, stripped horizontal, vertical, both, diagonal etc) and how the bits were interpreted could vary randomly (one layout per X/Y position) to avoid a detectable pattern.

      This isn't new:
      THE WALRUS IS MASSAGING A PORPOISE WITH CHEESE
      (Weird Al video mocking high security)

      Uncle George is picking apples

      When, where and under what username you post may contain the message, with the literal message being completely innocent.

      This is why national eavesdropping makes no sense. You can't possible catch a professional.
      An amateur, worried will plan in advance, meet in person, and all they'll ever post is "go". Even if you suspect that means "attack", what does it mean to attack?

      True security can't come of paranoia and eavesdropping, it has to be based around one of two things:
      1. utter extermination of the threat and all who are believed to be harboring remnants (bad idea, the rest of the world will soon team up against you)
      2. removing the reasons of those who would attack you
      if for religious reasons, a blanket threat to destroy the meteorite, bomb a town with water balloons containing pig entrails etc so that jihad would result in their soul's destruction instead of automatic heaven (something similar is used in isreal to some success to stop bombings)
      if for political retaliation, apologize, make reparations and stop doing whatever you're doing (hopping out of Iraq, in response to some terrorism being political, after we pulled several coups in various middle eastern countries)
      if for political power, meet with those involved, set tough limits. If you do X, we'll do Y. We'll make sure you can't maintain a force large enough to run anything.
      if for financial gain, payments to key people for NOT doing bad that are lost upon any evidence of wrongdoing

    36. Re:The dream of encryption by hairyfeet · · Score: 2, Insightful

      And you just accidently hit on the reason why having that stuff can have you sent to PMITA prison. Did you catch it? Here I'll point it out-"Even that child porn dude that's in the supreme court knew enough to use TrueCrypt.". The simple facts are that law enforcement HATES encryption, because it means they have to bust their ass instead of running a simple scan for *.whatever. So I have no doubt you will see more and more prosecutors using "You know why he has that stuff and won't let us go through his files? It is because he is a child molester! Are you going to let him get away with that?" And sadly juries who think all the crap they see on CSI and Numbers is real will think you must be some "elite child molesting super hacker" because the cops can't crack your crypto and you will get to rot in jail until you let them go through your stuff because "If you did nothing wrong you have nothing to hide".

      I have had talks with a friend working state crime lab and believe me, they would love nothing more than to only allow crypto that had state approved back doors in it. He told me the reason the only "child pornographers" you see arrested is the loser in his basement whacking off to the same crap that has been floating around since the old BBS days is because the REAL bad guys are passing encrypted DVDs to each other through the mail. He said the few they have busted were because one of their victims talked but when they snatched all the data everything was so locked down with crypto there was no way to trace it back to their partners. And when a guy is already facing 400+ years good luck with getting him to rat.

      Sadly right there is the problem, good men that can not see the evil they are pushing. He and his friends in the lab see nothing wrong with demanding everyone's data be accessible because they are not evil men and would only use it to protect kids. What they don't see is that for every one of them there are a thousand Karl Rove style scumbags that would happily abuse any power they can get their dirty little hands on if it meant that their "enemies" got burnt. Just look at the spying on civil rights leaders in the 60s or warrantless wiretapping now. But how to convince the good men that allowing some evil doers to escape to protect us all is the dilemma that we all must face. Because with "child porn" being like the red scare of the 50s, with parents scared to death that pervos are hiding around every bush, it is simply becoming too easy to use that word and get any law passed that they desire.

      While I hope we don't end up with "Trusted Internet" or some other way to ensure that those in power can always access your data that certainly seems to be the way that those in law enforcement want it to go. We just have to find a way to convince people that defending the idea of privacy is not the same as advocating criminal sexual activity. Because ATM all it takes is for a prosecutor to bring up "those two words" in front of a jury and you're screwed, even if all you are doing is trying to keep Big Brother out of your data. Privacy doesn't really mean anything anymore as long as those two words hold so much power in the minds and hearts of juries. It is truly scary times we are living in.

      --
      ACs don't waste your time replying, your posts are never seen by me.
    37. Re:The dream of encryption by Anonymous Coward · · Score: 0

      The world has moved beyond simply sending encrypted e-mails back and forth. Steganography, torrents, tor, etc.

      If I REALLY wanted to coordinate killing the president or something big. I'd probably use YouTube or Craigslist where the Signal to Noise is infinitely small. I'd embed an encrypted stegano message inside video of a guy lighting farts on fire or 'casual encounter' ad. Heck, put up some eBay listings with big pictures. How do you know that latest version of Heroes you downloaded from Bit Torrent doesn't have a 5MB image embedded in it with the President's route on some foreign trip?

      How about those Spam messages that look like a ton of gibberish, do you know they're not some secret code?

      I'm sure if a few Slashdoters put their minds to it, they could come up with a bit more ingenious ways of sending messages than 'plain text' encrypted PGP e-mails.

      The next terrorist isn't going to suddenly start sending encrypted messages from a normal account.

      Wtf? I for one am not "the next terrorist." This isn't about trying to do anything illegal, it's about privacy. If I'm trying to send my lawyer some confidential files I don't want to direct him to find some image on facebook. I want to send him the file. And I want the communication to look no different than any other message I send him or my mother.

    38. Re:The dream of encryption by sortius_nod · · Score: 2, Funny

      It did, you just bought the Vista version...

      A slashdot poster would like to use sarcasm.

      [Cancel] [Allow]

    39. Re:The dream of encryption by Anonymous Coward · · Score: 0

      Tor is run at the disembarkation points by governments and private corporations....so how is it secure? (oh, and the routers are wide open)

    40. Re:The dream of encryption by Anonymous Coward · · Score: 0

      And you've just hit on one of the BIG reasons for encryption. Protection of SSN, credit cards etc. Every law that makes data "open" just opens the possibilities for identity theft. Everyone has something to hide, typically bank account routing numbers if nothing else.

      Encryption isn't for criminals (who don't need it if they arrange simple innocuous signals ahead of time), it's for those looking to protect themselves FROM criminals.

    41. Re:The dream of encryption by bob.appleyard · · Score: 1

      Back in your bin

      --
      How dare you be so modest!! You conceited bastard!!
    42. Re:The dream of encryption by tsotha · · Score: 1

      Bah. The Secret Service has a pretty easy job for the next four years. The president has the ultimate assassination insurance - Joe Biden.

    43. Re:The dream of encryption by Creepy+Crawler · · Score: 1

      What you underlaid was the idea that encryption is just a "Big Red Flag" saying something good is in here. Well, of course. It all comes down to that idea of plausible deniablity.

      If you use full disk encryption, its to encrypt my business and personal information. You prepare this partition as if somebody will look at it. The FDE is "just for looks". On the FDE level, you have most of your computing environment. You have your games, function apps, system stuff, database with receipts and business purchases. Put nothing really incriminating here.. Maybe a few movies and a bit of MP3s. They expect _something_ so give them something lame.

      Then comes that weird blank spot as if you forgot to extent a partition to the whole hard disk. There's no partition type.. Hell, there's no partition. Now, if you run a command, it makes a partition appear as a device on /dev. Hmm.. You mount it, and it's a partition image that's runnable within a VM. Running this image then asks for a boot passphrase. Game over if your forensics lab even got this far.

      Inside the VM is where the goodies are at. Basic install of Debian, with GPG, ToR and WASTE client. This is where you do your safe encryption stuff in:Encrypt, Decrypt, receive messages passed from ToRland (what? you dont use .onion domain?)

      And if there's any questions asked, just mix in TrueCrypt with the multiple-container mode. as said in Taken: Good Luck.

      --
    44. Re:The dream of encryption by geekgirlandrea · · Score: 2, Interesting

      We never went anywhere. I still read Applied Cryptography from time to time. I also:

      • Run a private XMPP server for me and my girlfriend which only accepts SSL connections.
      • Operate a tor exit.
      • Attach a PGP signature to every e-mail I send.
      • Still think anonymous digital cash schemes are a really cool idea.

      The problem is mostly that there are so few other people who seem to care. I send a digital signature on every e-mail, but as far as I know no one ever verifies it. I've sent and received maybe two *encrypted* messages in my life. I talk to my girlfriend through a private XMPP server, because she's a huge nerd just like me, but pretty much every other IM conversation I have goes out over the wire in plaintext and passes through some faceless corporation's servers. Anonymous digital cash is full of awesome, and I keep meaning to write a implementation of it one of these days, but there just don't seem to enough of us anarchistic crypto nerds around thinking that to make it economically viable. Of all the cool cryptographic tricks I've read about, the only one that seems to have gotten to the point of a practical, usable system is tor.

      I think part of that is that a lot of the existing cool ideas have had flawed implementations that impede practical use. I think PGP's web of trust is seriously flawed, for example. Most of the time the only thing about a key that I care about is whether the person that knows the private key is also the legitimate owner of the associated e-mail address, but in order to sign someone's key, I also need to assent to whole list of other, harder to verify statements about that key. It should have had people sign separate statements relating the key to some other form of identity rather than the key itself, so I could say "The person who knows the private key corresponding to public key ID 20344213 also has the e-mail address blah@blah.com" without also having to say, for every other bit of identity attached to their public key, "The person who knows the private key corresponding to public key ID 20344213 also has the legal name Blah X. Blahson" or even "The photograph attached to public key ID 20344213 is a photograph of the person who knows the corresponding private key".

      Somehow, I think if that issue went away, we wouldn't magically see everyone in the world suddenly using PGP, though. Fundamentally, the problem is that 99% of the people just don't give a damn about privacy. Out of the remaining 1%, most either still don't care enough to bother with cryptography, or don't understand how it works and are convinced the NSA has a secret backdoor in everything or something. Look at every Slashdot article about electronic voting. Everyone complains that, as actually implemented, it fundamentally depends on trusting the voting machines, and there is every reason to believe that they can't be trusted. Okay, that's pretty much true, but then the proposed solution is always "leave a paper trail", but that just requires you to trust a handful of corruptible humans instead of a machine. Maybe that's better, but it's not much better. No one ever mentions those all those lovely cryptographic voting protocols from Applied Cryptography, that, if implemented properly, could let you vote from your own machine using an open-source client speaking a standard protocol, and not have to trust *anyone*. Well, I guess for the mindless masses understanding cryptography like that is so far over their heads that they might as well just be blindly trusting the protocol designers, but I would have hoped for better from Slashdot geeks.

    45. Re:The dream of encryption by AmiMoJo · · Score: 1

      Actually, there is a much easier way to defeat what the UK government is planning to do. The key is that they require the ISPs to do all the logging, so if you run your own SMTP server or use one in a safe country (e.g. Russia) they they don't get to monitor you.

      Sure, your communications are not encrypted, but most people don't have PGP and wouldn't know how to use it anyway. It also breaks web mail (now there's a feature I'd like to see for gmail, don't know how it would work securely though). If you use Tor or a web proxy in a safe country it would be almost impossible for the government to tie you to the account anyway, even if they have access to the receiving party's account.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    46. Re:The dream of encryption by Anonymous Coward · · Score: 1

      but how do you know I've got the goods if you've never been able to read anyone's data?

      Just another use for a ten dollar hammer. Only people with something to hide use encryption and those packet headers weren't pointing to amazon.com. So that makes you a suspect and the shmuck at the other endpoint too.

      People tend to forget how much 'intelligence' can be gleaned from communications even though the content of the communications are encrypted. It doesn't take deep packet inspection to map interrelationships and mine the stored data for correlations between cause and effect.

      There is also geographical information contained within the communication - a trace route or reverse DNS of my IP address will place me within my county of residence - my ISP can supply the rest but even without going that far, adds another set of data points to the map.

      Then there is phone communication. Who do you call and who calls you, and when. How long do you talk. More data points to the map and a statistical model of your behavioral patterns can be built. Triggers can be assigned should you or someone you know break pattern. Maybe it was something you did. Perhaps it would be something you didn't do.

      Red light cameras record the movement of your vehicle should you have one. Just because you broke no law doesn't mean the information cannot be stored for later reference or made available to a greater database. And your friends and acquaintances... and theirs. More data points added to the map.

      It is a very useful map given information routinely available to governments as it is now and data miners need not know what you said or wrote. Indeed, they may not even care in a general context. Should attention be drawn to you the impetus changes obviously, your case handed off to more specialized agencies, some of who will pick through your garbage. Another well spring of information.

      Total Information Awareness: We can see where this is going and every time a new set of data points can be added to the map, intelligence increases. Right now efforts are underway to aggregate collections of public information with many eyes on the prize of access to private data as well. One example is a national database of everyone's medical records. A government sponsored program; a good friend is working on that now. The plum has to be credit/debit card transactions and other routine (or not) financial matters. There is mandated reporting of some transactions now but if capital flows could be tracked in near real time???

      A person cannot help but think that somewhere, someone working for a three letter acronym or derivative thereof is looking at the current global financial problems and thinking what a great opportunity this is. Given that, it probably won't be long before some Economic Recovery & Consumer Confidence Restoration bill is enacted that just so happens to include the needed data gathering and analysis provisions as required for hook, line and sinker conformance, with such bill safely protected within several layers of bacon wrap.

      In time, the evaluative algorithms of statistical analysis will be able to predict with reasonable accuracy events before they happen spawning preemptive detention, interrogation and arrest with corresponding remedial reforms should you cooperate and take the plea deal. If not then expect to be introduced to incarceration at any one of several detention centers within the greater complex of private prison industry and they don't care why your there just as long as you are. A buck fifty a day making shopping carts for WalMart at the end of a cattle prod. Enough money to supplement your daily allotment of Koolaid and Nutriloaf with a candy bar in support of America's hedge against imports from China.

      Unless or course you actually being worth a ten dollar hammer. On the other hand that tends to get messy. A few days shackled in a stress position much less so. Electroshock therapy seldom leaves visible marks when properly applied and then there is any number o

    47. Re:The dream of encryption by kinnell · · Score: 1

      But why the hell do I need to encrypt the message to my mom about my Easter plans?

      For the same reason people feel the need to send most written letters in envelopes rather than on postcards.

      --
      If I seem short sighted, it is because I stand on the shoulders of midgets
    48. Re:The dream of encryption by chappel · · Score: 1

      I've played around with FireGPG to encrypt gmail via firefox, and it's pretty cool, but I've been really disappointed at the total lack of gpg/pgp client software for 'smart' phones - I've got a work issued Blackberry with no gpg options, and I haven't had any luck finding anything that will run on an iPhone or android, either. What's up with that? Anybody know of a way to encrypt gmail (or anything else, for that matter) on a smartphone? I love 'email in my pocket' and would gladly start encrypting most of my personal email, but the two are apparently incompatible.

    49. Re:The dream of encryption by Anonymous Coward · · Score: 0

      Yes, a ten-dollar hammer can be used to get my keys from me... but how do you know I've got the goods if you've never been able to read anyone's data?

       
      I hit the guy who gave you the goods with a ten-dollar hammer.

      Ahhh ... Finally someone who gets it.

      There is just something about a suture needle stitching eyelids to eyeballs that has a tendency to get close mouthed people downright chatty.

      So we get your keys and look at your data. Then the next guy and the guy after that. Sometimes the simpler brutalities are the best. Timeless classics centuries old -- security theater enacted by practitioners of more medieval arts. (and this years golden scream award goes to..... Spain!.. again) Anyway... kinda hard to claim innocence when you signed the confession not that it matters. You'll serve sufficiently well as an example to others. Fear being suitable currency in trade for just about anything people might be worth, which isn't much by the way. As my father once told me; "don't get attached to the prisoners and slaves son."

    50. Re:The dream of encryption by VeNoM0619 · · Score: 1

      And the last time I planned something big and illegal we sure as hell didn't EMAIL each other about it, we met in person. (3 friends of mine all worked at Taco Bell through High School. Summer before college we planned a heist of the flags off the top. I still have a flag I fly on Rugby trips with the Taco Bell Dog.)

      But then you posted it on the net bragging about it... so you just technically submitted your confession. Let's hope this doesn't bite you in the ass now. Even if it does, maybe then you will understand a few things a bit better.

      --
      Disclaimer: I am not god.
      We may not be created equal
      But we can be treated equal.
    51. Re:The dream of encryption by Sloppy · · Score: 1

      If I suddenly had a need to send something encrypted, but I didn't want it to appear encrypted, I would..

      You've already lost me at the premise. Why wouldn't you want it to appear encrypted? Ideally, everything you ever do should be encrypted.

      How do we know everyone's not already encrypting everything worthy of being encrypted?

      That's really obvious: Because some people are still using plaintext for some things, and some people (such as Berners-Lee) are complaining about internet snooping.

      When you forward a lolcat email, if that's not encrypted, then we're not done yet.

      --
      As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
    52. Re:The dream of encryption by debrain · · Score: 1

      Wtf? I for one am not "the next terrorist." This isn't about trying to do anything illegal, it's about privacy. If I'm trying to send my lawyer some confidential files I don't want to direct him to find some image on facebook. I want to send him the file. And I want the communication to look no different than any other message I send him or my mother.

      I understand the GP's point to be that this invasion of privacy proposed by the U.K. government isn't an effective way to prevent, deter or intercept terrorist communications (i.e. because steganographic techniques on other sites such as YouTube and eBay would be considerably more effective).

    53. Re:The dream of encryption by Anonymous Coward · · Score: 0

      I thought the promise of the internet was free porn.

      Statistically speaking since most of the data on the internet is porn, we can apply Questionable Logic and determine that any piece of data is almost entirely porn.

    54. Re:The dream of encryption by Raul+Acevedo · · Score: 1

      Wow, clearly your individual example shows that every human being in existence does exactly the same thing. You really showed the parent poster he's been living under a rock...

      --
      In a real emergency, we would have all fled in terror, and you would not have been notified.
  3. pants by Anonymous Coward · · Score: 1, Funny

    world wide pants!

  4. At this point does it need to be said? by Anonymous Coward · · Score: 1

    Encrypt everything. Even if you have no reason to, encrypt everything, because someday it might bite you in the ass.

    1. Re:At this point does it need to be said? by Shakrai · · Score: 1

      Even if you have no reason to, encrypt everything, because someday it might bite you in the ass.

      Like when you forget your encryption key ;)

      --
      I want peace on earth and goodwill toward man.
      We are the United States Government! We don't do that sort of thing.
    2. Re:At this point does it need to be said? by Boomerang+Fish · · Score: 2, Funny

      Yeah, I used to do this...

      Then I lost the key due to a hard drive and floppy disk failure within the same week (wow, that dates this a bit...)

      Now I have these wonderful encrypted documents that contain proof of alien intervention with the history of our planet and I can't get at it anymore...

      D*MN YOU GRAYS!!!

      --
      I drank what?

    3. Re:At this point does it need to be said? by Obfuscant · · Score: 5, Funny
      Now I have these wonderful encrypted documents that contain proof of alien intervention with the history of our planet and I can't get at it anymore...

      Just mail a copy of each one to yourself at another account and someone will decrypt them for you. I can't tell you who, I've already told you too much and I'm afraid awi3qu91 108OI)

      [NO CARRIER]

    4. Re:At this point does it need to be said? by Obfuscant · · Score: 3, Insightful

      Not because it will bite you in the ass, but because by encrypting everything you 1) give them more stuff to look at and if they are looking at you they aren't looking at me, and 2) it won't be obvious that you are trying to hide something when you DO encrypt that particularly incriminating file. They'll have to spend time decrypting your email to Mom as well as the picture of cousin Julie when she was 4.

    5. Re:At this point does it need to be said? by Anonymous Coward · · Score: 0

      the picture of cousin Julie when she was 4.

      Anonymous Pedobear likes...

    6. Re:At this point does it need to be said? by element-o.p. · · Score: 2, Interesting

      I'd encrypt everything simply to protest the big-brother mentality that seems to be taking over here in the U.S. >:]

      --
      MCSE? No, sir...I don't do Windows. Yes, I am an idealist. What's your point?
    7. Re:At this point does it need to be said? by Anonymous Coward · · Score: 0

      ...I've already told you too much and I'm afraid awi3qu91 108OI)

      [NO CARRIER]

      What I want to know is how did he "Preview", enter a CAPTCHA, then "Submit" after the carrier dropped?

  5. Freedom to Conspire by MarkvW · · Score: 4, Funny

    Which side are you on: CONTROL or KAOS? That is the question. The Government can only answer that question if it can intercept your communications. Are you going to let them? Can you stop them? Do you care?

    All I can say is that you should Get Smart!

  6. This is good by damburger · · Score: 5, Insightful

    People like Sir Tim need to speak out on such issues, because their contributions to science and technology are touted by our leaders as 'proof' of Britain being a modern, forward thinking society - rather than the withered, reactionary, largely technophobic old empire we in fact are.

    --
    If we can put a man on the moon, why can't we shoot people for Apollo-related non-sequiturs?
  7. About mail by rogere · · Score: 1

    Is normal paper mail 'snooped' nowadays? Big box mail usually is, but envelopes? Sensible question, but if it is... in that sense snooping packets would make sense.

    1. Re:About mail by Anonymous Coward · · Score: 0
      UK postalfag here. We don't currently intercept mail; packages are (selectively) electronically sniffed for drugs and explosives and probably a few other things. If they're damaged and something illegal falls out, it gets reported, but otherwise stuff is not opened. However, the facilities exist to do so - most of the major sorting offices have intercept rooms where a percentage of mail can be pulled off the lines, opened, checked, and replaced. Most haven't been used for a very long time (within institutional memory, where I work) but they are still there and procedures are in place and in the manual for their use.

      For specific individuals, such as terrorist suspects, their mail is opened at the branch that does the final delivery.

  8. Use an envelope by Anonymous Coward · · Score: 0

    'snooping' on data is NOT similar to the interception of mail.

    It is similar to the postman reading the information on the postcard. For people who do not like that the envelope was invented.
    Encryption is your envelope.

  9. HTTPS by Anonymous Coward · · Score: 0

    That's it. https.

    Server operators that care for it will have it. Stupids will be snooped on. We do need some substitute for natural selection, after all.

    Nothing to see here, move on.

  10. Privacy for the rest of us by schwaang · · Score: 5, Insightful

    Encryption gives a sometimes false sense of security, and the technology is a hassle. It's better to reinforce societal expectations for privacy where it is due, and let social mechanisms (like laws and market reputation) do the job.

    Consider e.g. that if you use https from your workplace and see the happy little lock icon in FF or IE, you probably feel safe.

    But some workplaces insert a proxy in between you and gmail (or what have you), having stuffed the proxy's certificate on your (their) work machine through local policy. Unbeknownst to you, your employer then sees the communication which you thought was totally private. Now imagine if an ISP could do that and get away with it.

    The point is that even if you do *care*, the technology is hard to keep track of, and there is an arms-race ladder of one-upmanship that makes this a never-ending game, which some nerds can win, and most of us will lose.

    What will really keep you safe is to stand up for a reasonable expectation of privacy where it should exist, and create norms and laws that protect this. Saying "NO" to Phorm or other invasions by ISPs is part of that approach, and creates legal and commercial consequences that are more effective than asking every grandma to mess with PGP.

  11. Re:Providence, Miracle, or What Really Happened by mcgrew · · Score: 1

    Dude, there are these things here at slashdot called "journals" where you can post any damned fool thing you want without wasting your sock puppet's karma on needless "offtopic" mods.

    I usually write about hookers and other women (oddly, people actually read them!). You could post your Israel trolls.

  12. bad long-term solution by a2wflc · · Score: 5, Interesting

    When governments start snooping on everything they make it harder to snoop on criminals in the future. This makes lots more people want secure networks, which makes more people create tools to make it easy to send/receive encrypted data, which makes even the people who don't know about the issues aware of the issues and tools. Once the tools/protocols become normal, police won't be able to snoop on suspected criminals even with a court order because everything is encrypted.

    That'll just make them pass more laws and restrict ISPs so that unsnoopable content isn't allowed. Which will make people start creating stenogrphy tools so things look snoopable, which will make other people aware of the issues and wonder why the gov't is so concerned and start using them.

    Then people start using those tools and snooping becomes more expensive (trying to detect stenogaphy) and still useless. But it will get lots of otherwise innocent people in trouble for using encryption or stenography to do something unimportant like send email to their mother.

    If police stick to treating everyone as innocent until they had a valid reason to think otherwise and then got a court order they will have a lot more ability to snoop in the future.

  13. Re:What a fucking fantasy land Sir Timmy lives in. by Anonymous Coward · · Score: 0

    It's fucking sad to read this, and think you actually believe what you're writing.

  14. Re:What a fucking fantasy land Sir Timmy lives in. by Timosch · · Score: 4, Insightful

    So basically the consequence of what you're saying is "Ban encryption, because those bloddy terrorists/chinese spies/pedophiles/software pirates might use it to do something evil"? Yeah, good idea. Tomorrow on CNN: Door locks banned. They prevent police from entering criminals' homes, police say.

  15. Re:What a fucking fantasy land Sir Timmy lives in. by DMUTPeregrine · · Score: 2, Insightful

    Lack of QoS is not a good thing. I want routers to respect the IP TOS field. It's there for a reason. Lack of non-standard QoS is the bad thing. With QoS I can use bittorrent and play games at the same time, without it there's no prioritization and the game lags. It's the deep-packet inspection that's intrusive crap.

    --
    Not a sentence!
  16. Post office also ask about the content in mail by Anonymous Coward · · Score: 2, Interesting

    >> Sir Tim said that ISPs 'snooping' on data was similar to the interception of mail

    Actually, if you think about it, the Post Office also ask about the _type_ of content in your mail: document (letter) ? CD/books ? or fire arms ? ;-)

    i admit Post office does not read the words in your letter.

  17. Re:What a fucking fantasy land Sir Timmy lives in. by rogere · · Score: 1

    Is this a reply for another parent? I'm not implying anything, I want to know if there are countries where envelope mail is opened for 'snooping'.

  18. Re:What a fucking fantasy land Sir Timmy lives in. by GPLDAN · · Score: 1

    Did I say ban encryption? No, I don't think I did.

    Investigate encrypted IP streams from US IP ranges to Chinese ones? You betcha.

  19. In Soviet UK.. by Anonymous Coward · · Score: 0

    ..Internets browse you!

  20. NP by Anonymous Coward · · Score: 0

    Encrypt, encrypt, encrypt. Strong encryption. Nothing more to say.

  21. He's lying! by KiwiCanuck · · Score: 1

    Everyone knows Al Gore invented the www. ~:-)

  22. TBLs personal view by Anonymous Coward · · Score: 1, Informative

    Sir Tim, posted his personal view to #swig on irc.freenode.net [1]

    http://www.w3.org/DesignIssues/NoSnooping.html

    [1] http://swig.xmlhack.com/2009/03/11/2009-03-11.html#1236787895.276276

  23. I'd like to know by Slumdog · · Score: 1

    What Al Gore thinks of this.

  24. Obscure reference by ClosedSource · · Score: 1

    That's like asking Al's father what he thinks of the CHP or state troopers.

  25. Heh. by Kingrames · · Score: 1

    The internet then defiantly turned around and screamed, "YES!"

    --
    If you can read this, I forgot to post anonymously.
  26. Just curious by Anonymous Coward · · Score: 0

    "No Carrier" to you is purely a Slashdot meme, right?

  27. No he's not! by Anonymous Coward · · Score: 0

    That was David Letterman!

  28. So just like the US but late to the game by Anonymous Coward · · Score: 0

    The ability to intercept and scan all of a users incoming internet traffic --isn't that exactly like what the US has been doing for years and years with Carnivore, Omnivore (the windows version), Packeteer, etc. for years and years... excpet that Britain is about 10 years behind in their draconian tactics. Its good to see that others can be as draconian as the US.

  29. Re:What a fucking fantasy land Sir Timmy lives in. by geekgirlandrea · · Score: 1

    So helping Chinese people get around the Great Firewall should get you investigated by a bunch of Gestapo wannabes? That's idiotic.

  30. Sweden beat you to it! by Anonymous Coward · · Score: 0

    This already happens to every electronic transmission in Sweden - in full violation of EU laws because inter-border transmissions are the target. Denmark and Finland protested..Norway said less than it could have, but by-and-large, this was brushed aside and the EU just kept quiet about it. Now it is spreading. It's no coincidence

  31. This is intellectually dishonest. by rindeee · · Score: 1

    Even thinking that this is reasonable is amazingly foolish. If you are concerned that Internet snooping is a problem, then the solution isn't to demand that it not take place. The solution is to nullify it. You can only be assured that it won't happen if it cannot (technically) reasonably happen.

  32. Re:Providence, Miracle, or What Really Happened by Philip+K+Dickhead · · Score: 1

    Yeah.

    But... FP! ;-)

    --
    "Speaking the Truth in times of universal deceit is a revolutionary act." -- George Orwell
  33. Re:Providence, Miracle, or What Really Happened by mcgrew · · Score: 1

    I never could understand why everyone wanted to drink that frosty piss. There were times I'd have something funny or informative to say, and got modded down (initially, anyway) just because it was FP.

    I hate getting first post.

  34. Re:What a fucking fantasy land Sir Timmy lives in. by Anonymous Coward · · Score: 0

    If door locks actually prevented police from entering homes, you can bet they would be banned.

  35. Write to your MP by AlexanderHanff · · Score: 1

    Good to see Slashdot has finally picked this up. I sent them the press release about the event last week and as one of the organisers of the event and founder of NoDPI.Org I am pleased to say the event went incredibly well and the press coverage has been amazing. Now would be a good time for people in the UK to write to their MP's directly to discuss the event and make it clear to them that you expect them to research the issue for the purpose of parliamentary debate or you will not be voting for them in the next election. Alexander Hanff NoDPI.Org

  36. What's in YOUR packet...??? by bratwiz · · Score: 1

    So does anybody believe they don't already do that here in the U.S.A?

  37. www by Anonymous Coward · · Score: 0

    World Wide Weiner Dog

  38. Re:What a fucking fantasy land Sir Timmy lives in. by GPLDAN · · Score: 1

    You have no idea how the world works.

  39. Re:What a fucking fantasy land Sir Timmy lives in. by Timosch · · Score: 1

    Yes, it's a reply to somebody else who has been modded -1, so you don't see his comment. Hence my comment appears to be a reply to yours although it isn't. Weird but true :-)