Slashdot Mirror


Amazon Vows To Fight Government Requests For Data

itwbennett writes "Speaking at a cloud panel discussion hosted by Reuters on Wednesday, Terry Wise, head of global partner ecosystem for Amazon Web Services, explained how the company handles government requests for data stored on Amazon's cloud: 'If a U.S. entity is serving us with a legally binding subpoena, we contact our customer and work with that customer to fight the subpoena.' But Wise's best advice to customers is to encrypt their data: 'If the data is encrypted, all we'd be handing over would be the cypher text,' he said."

28 of 104 comments (clear)

  1. Silence is Golden by Anonymous Coward · · Score: 2, Insightful

    I can foresee a time when it won't be safe to even talk among ourselves. We'll need to send encrypted text messages to the person next to us.

    1. Re:Silence is Golden by noh8rz10 · · Score: 4, Funny

      I can foresee a time when it won't be safe to even talk among ourselves. We'll need to send encrypted text messages to the person next to us.

      lxkvz;j;ldfkja;lskdfjas;lkfja';ldf'DJFAS;LDFNASLKBF.A,EMFNW;OIHZPIVBWEF !

    2. Re:Silence is Golden by FuzzNugget · · Score: 2

      Nah, we'll just have to start speaking Klingon

  2. You Brave Companies, You by RyoShin · · Score: 4, Insightful

    How nice that, after these revelations, suddenly all of these companies are coming forward with data and vows to fight or announcing requests to reveal information, etc. Where were these Brave Defenders of Consumers^H^H^H^H^H^H^H^H^HCitizens before Snowden?

    (Of course, without the public knowledge it would be a lot easier for the government to silence businesses or influential people who did try to fight this stuff, but something tells me that all of this is about trying to re-establish consumer trust and loyalty, and is shit-all about trying to protect our Fourth Amendment rights.)

    1. Re:You Brave Companies, You by Ziest · · Score: 4, Informative

      Once again we prove the principle, Sunlight is the best disinfection. These guys, the NSA and the big internet companies, were happy to share your data UNTIL the light was shone on them. Then they scattered like cockroaches when you turn the lights on.

      --
      Another day closer to redwood heaven
    2. Re:You Brave Companies, You by stephanruby · · Score: 3, Interesting

      How nice that, after these revelations, suddenly all of these companies are coming forward with data and vows to fight or announcing requests to reveal information, etc. Where were these Brave Defenders of Consumers^H^H^H^H^H^H^H^H^HCitizens before Snowden?

      In the case of Amazon, it cut off its services to Wikileaks at the request of Sen. Joseph Lieberman (Chairman of the Homeland Security and Governmental Affairs Committee). That's what Amazon was doing before Snowden. They didn't wait for an injunction, they didn't wait for Wikileaks or Assange to be brought upon charges (they've helped the US government deal with Wikileaks, without having to enter the messy US court system and all the rights that could possibly imply for the defendant).

      And now suddenly, Amazon is getting this big fat 10-year contract from the CIA for a private cloud (that IBM is challenging every which way). Oh thanks Senator Lieberman!! And thank you US taxpayers!!! Amazon may not like to pay taxes, but it sure likes benefiting from them!

    3. Re:You Brave Companies, You by Drakonblayde · · Score: 2, Insightful

      I too have my doubts about the sincerity of corporate entities who are in the business of relieving folks of their money. I also think they're in spin control mode.

      But, when you get right down to it, their advice is not wrong. It behooves us brainy type peoples to ignore the political and social connotations that prompted such announcements and distill the subject matter down to it's essence and ultimately determine whether or the information is correct or not.

    4. Re:You Brave Companies, You by im_thatoneguy · · Score: 2

      Many companies had appealed and had lawsuits. The difference is that now that the program is public their lawyers are letting them talk about the lawsuits. Yahoo for instance it was revealed had a 3 year long lawsuit fighting it.

    5. Re:You Brave Companies, You by RyoShin · · Score: 2

      From what I've read, Google is the only one claiming to have tried to fight these before the reveal. Everyone else is playing damage control.

    6. Re:You Brave Companies, You by sociocapitalist · · Score: 3, Funny

      Once again we prove the principle, Sunlight is the best disinfection. These guys, the NSA and the big internet companies, were happy to share your data UNTIL the light was shone on them. Then they scattered like cockroaches when you turn the lights on.

      Don't you mean Snowlight?

      --
      blindly antisocialist = antisocial
    7. Re:You Brave Companies, You by jez9999 · · Score: 4, Funny

      Excuse me, but WHO'S data?

      An android character on Star Trek.

  3. Don't make promises you can't keep by wickerprints · · Score: 5, Interesting

    Amazon's position may be principled, but it won't do any good to fight the subpoena. We have already seen that the FISC (FISA court) is just a rubber stamp operation, and that the legislative, executive, and judicial branches of the government want ever greater power and authority under the guise of the "war on terror." Indeed, according to the government, it would be illegal for Amazon to inform the individual(s) whose information is being requested that a request even exists.

    The problem isn't merely that warrantless surveillance exists. The problem is that there are no checks in place, no means by which the people themselves, can directly hold the government accountable for such programs. Constitutionality is a farce, easily overcome in the name of "national security." And this is precisely what the terrorists hope to achieve--the use of guerrilla tactics to provoke a government to enact increasingly draconian laws and curtail basic civil liberties, until the government becomes the oppressor against its people. Their eventual goal is to cause the collapse of that government. To this end, such surveillance programs play into the hands of the terrorists.

    Also, the proper word is "ciphertext." Not "cypher text."

  4. Damn right.. by RoknrolZombie · · Score: 2

    ...you only get data from Amazon if you PAY for it!!!

  5. Re:In Contrast... by NoNonAlphaCharsHere · · Score: 3, Funny

    The Millenium Falcon, because Han would shoot first.

  6. Ahem... by SJ · · Score: 4, Insightful

    This is the same Amazon that just won an $800m bid to host the CIA's cloud computing system?

    Uh huh.

  7. Re:Mostly Harmless by Thantik · · Score: 2, Interesting

    Just a heads up, if you buy that much lube, they don't arrive like the lube you'd buy in a tube. They come as a dry powder with mixing instructions....

  8. This is truly the problem with NSA spying.. by HerculesMO · · Score: 3, Insightful

    It tells the rest of the world that your data is not safe in the USA, and our cloud service providers are not to be trusted (along with our banks, our ISPs in general, our telecom companies, etc).

    There will be a boom to companies who are situated in more open societies in the next few years providing these services without the watchful thumb (presumably) of the NSA and other organizations. Right now Amazon and everybody else, even if they didn't cooperate with the NSA, are now subject to the US government's stupidity in proposing big brother and not realizing how it may harm our trade.

    But you know... freedom rah rah rah.

    --
    The price is always right if someone else is paying.
    1. Re:This is truly the problem with NSA spying.. by Anonymous Coward · · Score: 2, Insightful

      I'm going to go out on a limb, post as AC, and ask: what open societies?

      If you put servers in China, you KNOW they do the same thing as the NSA, not to mention worse (Great Firewall of China.) In fact, China, by law, owns 51% of any extension of a firm doing business there.

      Russia? Perhaps, except the shadow of the old Soviet Union still is present.

      Europe? Right now, they are the pinnacle of global civilization and freedom now, but who knows how long that will stand. Germany is subject to Russia's whims, since if the gas gets turned off, they will freeze to death in the thousands (as they gave up their sovereignty in return for being able to be nuclear-free.)

      Sweden/Norway/Finland as a subset of Europe? Probably the best place to open a business in the world as it stands now... who knows in the future.

      Africa? No real infrastructure, and most of the continent would not even have a stable government to protect a data center from guys with technicals and machine guns from raiding the place on whims.

      India? These guys broke the back of Skype and RIM demanding eavesdropping points.

      Middle East? Perhaps Israel, but anywhere else, one goof, and all the equipment would be seized.

      I'm going to also go further out on the limb and state this:

      I have a few co-located servers behind a decent firewall and IDS/IPS. I constantly get barraged by hack attempts from China, India, and Russia. The SSH daemon gets slammed even with sshguard in place. I looked at locating servers in China, and they demanded a local firm there own them, giving me a minority stake.

      So far, the NSA has been the least of the threats to what I'm doing. In fact, SELinux has probably saved the hide of my webserver a few times. If the NSA gets my business records, who the fuck cares. They don't share them even with domestic firms, while if the PLA gets anything, they will become Chinese property, just like the blueprints for PV panels did (which allowed them to dump panels for cheaper than the rare earths needed until Congress finally tacked on a tariff.)

      I'm far more worried about a burglar attacking the co-loc I have my stuff at than anything the NSA does. In fact, the NSA has -helped- my little business's operational security, so even though this is unpopular, I will say that the NSA is not on my worry list whatsoever.

      Locating servers in the US, I really don't have much to be afraid of. The NSA may get access to something I have at the worst, but I won't have my servers shut down, and some US company start making my exact product.

      So, choose your evils wisely.

    2. Re:This is truly the problem with NSA spying.. by Drakonblayde · · Score: 2

      The irony is that back when cloud storage started to become a big buzzword, folks were worried about things like their data coming to rest in China.

      Honestly, the NSA scandal just provides me with some vindication when I argue for encrypting all data, no matter how inconvenient it may be, and to avoid the cloud unless it's a cloud you built and control yourself.

    3. Re:This is truly the problem with NSA spying.. by turp182 · · Score: 3, Interesting

      The rest of the world has known for a long time that their data isn't safe in the US, in fact they legislate that personal data cannot be stored in the US (various data privacy acts relating to multinational corporations).

      When I worked at a multinational insurance company our international data storage was in Canada, UK (we served data to/from India from the UK, insanity from a performance perspective), South Africa, and Australia. No data regarding foreign citizens could be stored in the US.

      This has been the case for at least 7 years or so, probably longer.

      --
      BlameBillCosby.com
  9. Re:In Contrast... by Anonymous Coward · · Score: 4, Funny

    It's "smelt", not "smelled". Now go away or I shall taunt you a second time!

  10. Re:Now all I want is by Nerdfest · · Score: 3, Interesting

    Thunderbird and EnigMail actually work very nicely as well. Someone has mentioned that there is actually a browser add-on or something that will allow you to do it with webmail as well, but I'm not familiar with it. K9 supports encryption on Android as well. Using encryption is really not that much trouble. The only inconvenient part is getting non-techies to set up their keys.

  11. Bite the Hand that Feeds You? by Jah-Wren+Ryel · · Score: 4, Informative

    The CIA is one of Amazon's biggest customers.

    After what they did to the CEO of Qwest for refusing to cooperate I doubt Bezos is going to put those big contracts and his personal freedom at risk.

    --
    When information is power, privacy is freedom.
  12. Re:Yeah, this is normal by Drakonblayde · · Score: 4, Interesting

    It's news for nerds because the government paying attention to electronic data has been in the limelight for awhile now.

    Since we nerds are the kinds of folks who are tasked with the implementation and maintenance of the systems that store and process said electronic data, this is the kind of thing that could have an effect on our livelihoods.

    Sure, it's obvious that you should encrypt your data, especially if it's at rest on equipment you don't personally control. It's also somewhat of an unmitigated pain in the ass to actually setup and maintain, especially if you inherited infrastructure that you didn't build from the ground up. Or maybe you're a lazy sumbitch.

    In the same vein, it's obvious that if you eat a shit load of junk food, you'll get fat and have health issues. Despite the fact that it's obvious, there's a severe problem with obesity in the US, hence we have health groups trying to spread awareness, whether it's through scare tactics or just trying to inform people and at least get them to acknowledge a problem they pretend doesn't exist.

    In the same vein, the folks who post about this kind of thing are treated somewhere between polite acknowledgement, with nods of 'yup, he/she's right, we should do that', or viewed as the mad prophet raving in the town square. In both cases, folks pretty much forget about it after theyr'e done and go back to the status quo.

    While I'm not in the habit of defending large corporations, I understand why they put out stuff like this. On the one hand, if they want to legally continue to do business without suffering censure by local governments, they have to comply with legal requests for data. If they simply do it, they're viewed as being in collusion by the general public. If they try and provide the information to their customers on how to mitigate their risk, their words tend to fall on deaf ears.

    While I'm certain Amazon probably doesn't give a shit about handing over a customers data, they recognize that it's a touchy subject, and a potential PR nightmare, hence they spend some time trying to encourage their customers to do what's in their own best interests. I don't think it's a good idea to try and curb that.

  13. Re:Mostly Harmless by Jah-Wren+Ryel · · Score: 2

    I'm pretty sure the government doesn't care about your purchase history of... an inflatable love goat and a 55 gallon drum of lube. Nice. Your file still says "Mostly Harmless."

    Until that day comes that they DO care. Like say, you end up a prominent civil rights leader.

    Ever wonder how much of the Occupy movement was derailed by quiet government pressure on key people?

    --
    When information is power, privacy is freedom.
  14. Great if true ... by MacTO · · Score: 2

    ... I can't speak for everyone, but I find that the books I read are amongst the most private things in my life. It would be nice if the websites that I read were private, but the fact is that involves so many third parties that it's absurd so privacy isn't an expectation. It would be wonderful if my search queries were private, but I recognize that the businesses involved make their money by selling my data (such is the perils of demanding a service for free). But books I obtain from a limited number of sources, and I pay for directly or through my taxes. They are also, in a way, more intimate. So it is nice to think that my reading of books is private.

    Then again, I choose my book vendors carefully and purchase with cash when I expect it to be private.

  15. Mobile morals by boundary · · Score: 3, Insightful

    All of a sudden these huge companies that own all our data are vowing to fight this, divulge that, release this, resist that. Shame they weren't willing to do all that ethical shit before the middle of last week when they were all caught with their pants down.