Microsoft's Cooperation With NSA Either Voluntary, Or Reveals New Legal Tactic
holy_calamity writes "When Microsoft re-engineered its online services to assist NSA surveillance programs, the company was either acting voluntarily, or under a new kind of court order, reports MIT Technology Review. Existing laws were believed to shelter companies from being forced to modify their systems to aid surveillance, but experts say the Foreign Intelligence Surveillance Court may now have a new interpretation. Microsoft's statement about its cooperation with NSA surveillance doesn't make it clear whether it acted under legal duress, or simply decided that to helping out voluntarily was in its best interest."
Don't use US services.
It could be 'voluntary' complience, with the quotemarks. The classic offer-you-can't-refuse approach. Perhaps a government representative just explained that one way or another the NSA was going to get total access, but if MS (or any other company) complied now they could at least deign the taps in a way suited to their infrastructure, whereas resisting the request would result - after a couple of sessions of congress - in a new law mandating an NSA-designed system be installed and probably break half their well-designed systems by forcing centralisation.
In the UK we used the same approach to compel ISPs to install anti-child-porn filters: The government never actually passed a law mandating ISPs install filtering, they just made it quite clear that they would pass a law if the industry didn't collectively do so 'voluntarily.' This suits the govermnent very well, because it means the filtering list can be maintained by the IWF, an ultra-secretive unaccoutable non-governmental organisation with all the procedural transparency of a lead brick. If they screw up and block wikipedia, no government department gets the blame and no embarassing enquery is launched.
I'm expecting exactly the same tactic will be used within a few years to pressure ISPs into blocking regular adult pornography too - there's already a major tabloid and a couple of MPs campaigning for it. To protect the children, of course.
Remember "national security letters" that were created as part of the "USA Patriot Act"? These were the special kind of fake warrants that were never approved by any judge, but any person or organization who got one wasn't allowed to tell anyone about, including a court of law (preventing anyone from saying "Hey, Fourth Amendment anyone?"). That would explain everything: why FISA didn't stop it, why the companies are cooperating with the NSA, and why they aren't including references to such things in their privacy policies.
Bless you, former senator Russ Feingold, for having the guts to stand up for the Constitution when the entire rest of the Senate ignored it.
I am officially gone from
http://www.guardian.co.uk/world/2013/jul/11/microsoft-nsa-collaboration-user-data
"Microsoft has collaborated closely with US intelligence services to allow usersâ(TM) communications to be intercepted, including helping the National Security Agency to circumvent the companyâ(TM)s own encryption, according to top-secret documents obtained by the Guardian.
The files provided by Edward Snowden illustrate the scale of co-operation between Silicon Valley and the intelligence agencies over the last three years. They also shed new light on the workings of the top-secret Prism program, which was disclosed by the Guardian and the Washington Post last month.
The documents show that:
* Microsoft helped the NSA to circumvent its encryption to address concerns that the agency would be unable to intercept web chats on the new Outlook.com portal;
* The agency already had pre-encryption stage access to email on Outlook.com, including Hotmail;
* The company worked with the FBI this year to allow the NSA easier access via Prism to its cloud storage service SkyDrive, which now has more than 250 million users worldwide;
* Microsoft also worked with the FBIâ(TM)s Data Intercept Unit to âoeunderstandâ potential issues with a feature in Outlook.com that allows users to create email aliases;
* In July last year, nine months after Microsoft bought Skype, the NSA boasted that a new capability had tripled the amount of Skype video calls being collected through Prism;
* Material collected through Prism is routinely shared with the FBI and CIA, with one NSA document describing the program as a âoeteam sportâ."
And you STILL want to do business with them? You STILL want to trust their OS with your personal files and/or communications?
What more do you need?
As an American, as an American who loves my country, I need to have the courage to face the reality --- that my country has ceased to be the land of the free, the home of the braves, but has turned into an empire which is moving towards oblivion
Muchas Gracias, Señor Edward Snowden !
"If the courts uphold them, they aren't illegal"
This is unfortunately a common misunderstanding.
=-=-=-=-=-=-=-=-=-=-=-=-=-=-
Friends don't let friends enable ecmascript.
The purchase of popular Skype and modification of supernode to ease snooping now makes perfect sense. MS is just a front for NSA spying!
Yeah, put Linux on it.
For your reading amusement during the installation:
http://www.redhat.com/workshop/defense/agenda/
Panelists:
Neil Ziring: Technical Director, NSA Information Assurance Directorate
Al Holt: Technical Director, NTOC, NSA
Terry Sherryl: DISA FSO
David A. Waltermire: Security Content Automation Protocol (SCAP) Architect, NIST
It's weird that no one on /. seems to be curious if a corporation that is a leading contributor of OSS sofware with over a billion in revenues each year and a cozy relationship to the US defense sector has been pressured, like Microsoft, to put in backdoors/exploitable vulnerabilites into the Linux kernel or any of their other products. Yes, it's open source, but who audits the code? Supposedly each commit is signed off by another kernel dev. However, in most cases you have one developer signing off on commits of another developer from the same organization. Most times its just rubber-stamp procedure. Given that Linux is used across the world, it seems highly unlikely that the US government would only put pressure on proprietary software and services companies to comply with its demands to make their products easier for them to bypass?