Slashdot Mirror
US Government: You Don't Own Your Cloud Data So We Can Access It At Any Time
New submitter jest3r writes "On Tuesday the EFF filed a brief proposing a process for the Court in the Megaupload case to hold the government accountable for the actions it took (and failed to take) when it shut down Megaupload's service and denied third parties access to their property. Many businesses used Megaupload's cloud service to store and share files not related to piracy. The government is calling for a long, drawn-out process that would require individuals or small companies to travel to courts far away and engage in multiple hearings just to get their own property back. Additionally, the government's argument that you lose all your property rights by storing your data on the cloud could apply to Amazon's S3 or Google Apps or Apple iCloud services as well (see page 4 of their filing)."
Anyone surprised?
Oliver's law of assumed responsibility: If you're seen fixing it, you will be blamed for breaking it.
Does this mean that my backups to Barracuda Networks cloud service are no longer mine? This would kill cloud services.
Sorry, teleporters just kill you and then make a copy. A perfect, soul-less copy.
Nice move government you just destroyed pretty much all of the cloud computing industry.
Huzzah.
Does this mean that all of those copyrighted works I am hosting "in the cloud" are no longer the property of their respected copyright holders? I can see this being argued in all sorts of funny ways.
>Additionally, the government's argument that you lose all your property rights by storing your data on the cloud
Bullshit. I don't lose the rights to my property if they are in the temporary posession of a third party. If it was so, then nobody could rent anythiing ever or even check a coat.
Hurr.
--
BMO
Shouldn't the EFF argue that a cloud service is the equivalent of a bank's safe deposit box? Someone else holds your property on your behalf. For SDBs, the government needs a warrant...just like if your stuff was in the cloud.
Does this mean that my backups to Barracuda Networks cloud service are no longer mine?
I don't get where supposed rational technical people on Slashdot of all places, think that any data they transmit over public networks NEVERMIND then storing said data on hard drives owned and physically controlled by someone else, was ever YOURS.
Forget law. The physical reality of the thing is that by definition, any data you are keeping on devices controlled by someone else is never really yours. You just might be able to access it, and even that is never guaranteed.
Cloud backups are great as a cheap last offsite resort but are not the same as backups that you physically control. You should never have data you care about recovering on a cloud service that you do not also have in multiple copies on devices you own.
Any other notion is just fantasy.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
The courts established a long time ago that you don't have the same property rights under the 4th amendment when it's stored with a third party.
I've raised this issue whenever I hear that a legal office has outsourced their mail service (do they still have attorney-client privilege if the information has been 'shared' with the ISP?)
There are two issues -- (1) does it require a warrant and (2) do they have to notify you of the warrant (so that you can contest it) or only the party holding the information?
There was an article on the topic in the Journal of Consitutional Law a couple of years ago. One of the key things -- ECPA considers any email stored for 180 days can be obtained from an ISP without notifying the user. There was a case in 2008 that found that argued against it and the court agreed, but the case was overturned on other issues so the decision never stood as a precident. It has some interesting things to consider, such as the issues with using a cloud-based thing client without knowing it (in the example, a kid setting up a computer for his uncle), and losing their fourth amendment rights.
Build it, and they will come^Hplain.
By your logic the money we keep in the bank isn't ours either.
or, for that matter, the skulls in my safety deposit box...
Dose it apply to http://aws.amazon.com/govcloud-us/
Of course it isn't. The banks can keep you from your money any time they want. They've actually done it in the past. The only thing keeping them from just right out claiming your money is a fragile social contract...
By your logic the money we keep in the bank isn't ours either.
Sorry to go all Eliza on you, but what makes you think it is?
If there is a run on the bank, and you are not fast enough - you do not get your money. Simple as that.
You may get re-imbursed by FDIC, but that doesn't change what happened.
There is a vast difference between what is yours by law and what you can practically access. All I am saying is everyone should realize there is a difference and be prepared.
In the case of the server I have zero pity for anyone who kept data only on the servers that were seized. Yes it is there data, but they also had responsibility if that data was important to keep it somewhere they controlled.
"There is more worth loving than we have strength to love." - Brian Jay Stanley
I don't get where supposed rational technical people on Slashdot of all places, think that any data they transmit over public networks NEVERMIND then storing said data on hard drives owned and physically controlled by someone else, was ever YOURS.
Depends on your definition of "YOURS". Most people in modern Western civilizations recognize a distinction between posession and ownership.
The physical reality of the thing is that by definition, any data you are keeping on devices controlled by someone else is never really yours.
Shall I assume, by that definition, that you never park your car anywhere except on your own property, and that you never leave it in the custody of an auto repair or maintenance facility? Similarly, have you never left your coat at a coat check, or let your dry cleaner have posession of your clothing?
Your statement is both valid and poignant regarding the risk of a custodian unlawfully distributing or granting access to your information. This argument, however, claims you have no legal standing regarding the information in the first place, like saying you no longer own your street clothes when you leave them in the gym locker.
Cloud backups are great as a cheap last offsite resort but are not the same as backups that you physically control. You should never have data you care about recovering on a cloud service that you do not also have in multiple copies on devices you own.
Your advice is sound, particularly in the current legally uncertain context. But it does not imply that the government's argument is reasonable or excusable. It is our responsibility to the future of our nation to protect its information security from these misguided government officials. We must raise our voices against this sort of behavior precisely because our legal right to our information is not yet rooted in statutory bedrock.
Stop-Prism.org: Opt Out of Surveillance
US Government: "You don't own anything stored in the cloud."
Kim Dotcom: "Sweet. The US government has declared cloud stored data is not 'owned.' If you don't own it, if it's not yours, how could you possibly be liable for it? Everyone please subscribe to my new service fuMPAAItsAllInTheCloud.com!"