How Silicon Valley Helped the NSA
theodp writes "The U.S. tech giants' pledge to up their privacy game in the wake of reports that all-your-data-belong-to-the-NSA rings a little hollow to Abraham Newman, who reminds us that such protections run counter to the business model and public policy agenda that tech companies have pursued for decades. 'For years,' writes Newman, 'U.S. information technology (IT) firms have actively backed weak privacy rules that let them collect massive amounts of personal data. The strategy enabled the companies to work their way into every corner of consumers' lives and gave them a competitive edge internationally. Those same policies, however, have come back to haunt IT firms. Lax rules created fertile ground for NSA snooping. In the wake of the surveillance scandals, as consumer confidence plummets, technology companies' economic futures are threatened.'"
How all of us were "ok" with the companies collecting this information. When an intelligence agency combines this info, we suddenly scream for privacy. I'm scared enough that google accesses my Gmail content, and Apple my iMessages and contacts.
When the next iPhone will be curved?
http://apple.slashdot.org/story/13/11/11/0353252/apple-developing-curve-screen-iphones-and-improved-sensors
Take your business elsewhere whenever possible. Only thing that will make companies sit up and pay attention is when their bottom line starts to be affected. Computer professionals advise non-techy business types on how best to protect sensitive company information against the massive industrial espionage spy network. People may not care about their facebook page and personal email is being compromised, but they sure as hell care when their companies sensitive business information is put at risk...
Well, it costs money to run all the servers and machines that deliver cat videos and the latest pictures posted by your secret crush. Who's going to pay the bills for those servers ? Someone somewhere has to pay. Either you pay upfront with cold hard cash, in which case you can make indignant noses about unlawful uses of your data. If you don't want to pay cash, and instead have a "free" service, your data is what the developers will try to monetize. And there ain't a goddamn thing you can do about it. Of course, the NSA has gone a step further with their data collection by forcing companies with even paying customers to hand the user data over to the NSA. In this case, get the Internet off the US hands. I see balkanization of the internet in the future.
Surely the competitive edge is the hidden market for private data the NSA created!
So business models can undercut rivals by selling your private data to the NSA in secret, and it's really a government subsidy controlled by the military, but is never revealed because it's hidden behind terrorist scaremongering.
The only data that cannot be subpoenaed is data that doesn't exist. Collecting data which can be used for tracking is the original sin, and the biggest sinners are Google et al.
Oh certainly Google doesn't want LAWS protecting privacy. That doesn't preclude them whatsoever from encrypting everything. They still get all their own data, and now it's even protected, hypothetically, from the US government which apparently already has cost millions of not billions to US tech providers, but also protection from their competitors cracking their data in a similar fashion.
So they have all the reason in the world to encrypt it, after all the NSA doesn't pay them anything while their angry customers do. But we can also conclude Abraham Newton is a facile idiot.
Has far more data that is likely to hurt you than the NSA does, and they have no problem selling to anyone with enough money. Potential employers having access to my salary history without my consent scares me and will hurt me far more than the government knowing I called my aunt yesterday. Likewise with my insurance company knowing that I visited Dunkin Donuts yesterday. Put away your tinfoil hats and see the real threat.
Lax rules created fertile ground for NSA snooping.
No, rules don't make any difference to criminals, NSA or otherwise.
It is the high value of centralizing all that data info which makes for fertile ground.
When information is power, privacy is freedom.
"... Those same policies, however, have come back to haunt IT firms. Lax rules created fertile ground for NSA snooping."
Fertile ground?
What part of a Federal order that says "plug this black box into your WAN router and don't ask questions." needs to be fertilized?
Government asks no permission, and therefore does not abide by rules, firm or lax. Corporations agree under the duress that they all enjoy the luxury of being a US corporation. Don't play by the rules, you'll find yourself out of the capitalist boys club, one way or another.
And any corporation claiming they're going to tighten up security is merely going to increase password minimum length by a character or two, call that "secure", charge you $1/month more for it under some bullshit privacy surcharge, and rake in millions, all while continuing to allow Government to monitor everything.
Snowden revealed the actions of today's NSA. Nothing has been done to interrupt that. And why anyone would assume a US corporation holds that power is beyond me.
... as consumer confidence plummets ...
As if the average facebook user cares about privacy.
If Pandora's box is destined to be opened, *I* want to be the one to open it.
Of course, I would sound like a paranoid if I invoked the Illuminati, so I won't. *cough*
Just because I'm paranoid, doesn't mean they are not out to get me.
HELP MY ACCOUNT HAS BEEN HACKED BY AN ILLIBERAL ART STUDENT SET TO DESTROY THE INTERWEBZ!
in the wake of reports that all-your-data-belong-to-the-NSA rings
That should be "all your datum are belong to NSA"
Everyone wanted free Internet, free search engines, free Webmail, free coupons, free 5% off clubs, free 1-click shopping.... what did people think was going on there?
I want to delete my account but Slashdot doesn't allow it.
http://www.amazon.com/Corporate-America-Boston/dp/B00006LI3R/
has all you need to know about Corporate America. The stories I could tell.
Oh, come on.
Plenty of these companies already worked together with China behind the great firewall or other countries that required a tight all encompassing security/censoring framework.
It's just the quirks of doing business in a country, your home country included.
...perhaps I could correct this a little: ..."
"'U.S. citizens have passively accepted weak privacy rules that let companies collect massive amounts of personal data. The strategy enabled the companies to work their way into every corner of consumers' lives
I keep hearing about the "US govt" this and "companies" that.
The fact is that the whole 'privacy' thing is comparable to the cigarette issue for the last 50 years....NOBODY believed cigarettes were in any way good for you, and by the late 1960s pretty much everyone recognized that they were quite harmful (regardless of what the cigarette companies insisted).
In short, the consumers willfully participated and knew (when they bothered to think about it) that companies were collecting massive amounts of data with every transaction, using (without complaint) their social security number as an id#, etc.
When I've got a friend or three complaining about companies/government gathering private data, they're usually paying for their meal with a credit card.
-Styopa
I mean , the browsers allow all the tracking etc .. Once the people doing the browsers are done selling us , maybe we'll have a break.
Browsers have to be made not to allow the snooping. They are not made that way , they are made to support snooping.They are made to help advertisers take all they want from our machines.
Time to fork and abandon browsers that do not make the efforts to protect us l
Quite a bit too late since the NSA already publishes ( and for a number of years ) their own security enhanced hardened linux.
When those companies collect that information it's opt-in, we are aware of the information being collected and we can choose to use the competing service if we want to. Also there's plenty of people worried about the privacy concerns around Facebook, but as always convenience is the great motivator.
Also the government has much potential to abuse this information, put people on no-fly list, arrest them, put them in jail, torture them, put them in a secret jail without due process. They promise to only use it against terrorists, and maybe pedophiles (because that justifies having the tech). But we've seen how the US government treats wistleblowers, Bradly Manning will most likely serve a 35 year sentence. So if this information is somehow abused, who will help out?
Love has many dimensions & forms but it is very much sole related in all forms.
Are you blocking some or all Javascript, or are you using a slightly esoteric browser? Adds are disabled just for me.
-- Using the preview button since 2005
For various definitions of "enhanced."
Few people really 'got' what was going on; some people remain unaware; and most really don't care.
Companies will lie, politicians will lie, and the people will pretend to believe them and carry on.
"Consensus" in science is _always_ a political construct.
Hosts do more w/ less (1 file) @ a faster level (ring 0) vs redundant browser addons (slowing up slower ring 3 browsers) via filtering 4 the IP stack (coded in C, loads w/ OS, & 1st net resolver queried w\ 45++ yrs.of optimization):
---
APK Hosts File Engine 9.0++ 32/64-bit:
http://start64.com/index.php?option=com_content&view=article&id=5851:apk-hosts-file-engine-64bit-version&catid=26:64bit-security-software&Itemid=74
(Details of hosts' benefits enumerated in link)
Summary:
---
A. ) Hosts do more than AdBlock ("souled-out" 2 Google/Crippled by default) + Ghostery (Advertiser owned) - "Fox guards henhouse", or Request Policy -> http://yro.slashdot.org/comments.pl?sid=4127345&cid=44701775
B. ) Hosts add reliability vs. downed or redirected DNS + secure vs. known malicious domains too -> http://tech.slashdot.org/comments.pl?sid=3985079&cid=44310431 w/ less added "moving parts" complexity + room 4 breakdown,
C. ) Hosts files yield more speed (blocks ads & hardcodes fav sites - faster than remote DNS), security (vs. malicious domains serving mal-content + block spam/phish), reliability (vs. downed or Kaminsky redirect vulnerable DNS, 99% = unpatched vs. it & worst @ ISP level + weak vs FastFlux + DynDNS botnets), & anonymity (vs. dns request logs + DNSBL's).
---
* "A fool makes things bigger + more complex: It takes a touch of genius & a lot of courage to move in the opposite direction." - Einstein
(Addons are more complex + slowup browsers in message passing (use a few concurrently - you'll see))
---
** "Less is more" = GOOD engineering!
(Vs. slowing down SLOWER usermode browsers layering on MORE in addons which slow them down more: I work w/ what you have in kernelmode, via hosts - A tightly integrated PART of the IP stack itself)
APK
P.S.=> "The premise is, quite simple: Take something designed by nature & reprogram it to make it work FOR the body, rather than against it..." - Dr. Alice Krippen "I AM LEGEND"
...apk
*their own security* enhanced.
There are two types of people in the world: Those who crave closure
Oh sure.. people are going to give up all their wireless and internet enabled devices and AT&T, Comcast, etc. are going to see their business base plummet.
No, what will happen is people will whine and complain, there will be some laws and regulations passed that have little real effect, and we'll move on.
Most people don't realize that the ONLY information service which has a prohibition on distributing your usage records to anyone willing to pay for them is Cable TV. And that is essentially a fluke, prompted by a notorious incident back when two-way cable TV was a lot smaller and more diverse in terms of providers, so they didn't mount a significant political campaign against it. Today, the same event (disclosing a political candidates viewing records) might prompt some outcry, but would never wind up with a legislative fix.
This is also about attacking; hacking, intrusion, modifying systems, sabotaging hardware, etc. Is not a passive "i want to know this", but an active/aggresive "i will plant a backdoor/rootkit to be able to do there whatever i want", including hitting you as a person, as a country, or as a trusted media that reach enough/certain people/companies.
We already knwo they planted backdoors on Tor users and Slashdot and LinkedIn users, and with Silicon Valley cooperation, probably they will be bundled in a lot more software/hardware/services. Time to stop playing boiling frog.
Nobody was OK with it except the companies. You're just a victim of marketing.
ya all lies , keep pushing until the nsa is reigned in large
'enhanced' as in ideally they can hack it but no one else can.
Any insufficiently advanced magic is indistinguishable from technology.
Ads are a pain but I use Ghostery and DoNotTrackMe which takes care of most of the crap.
Harrison's Postulate - "For every action there is an equal and opposite criticism"
For more speed, security, reliability, & anonymity -> http://yro.slashdot.org/comments.pl?sid=4430673&cid=45390909
* Enjoy (it's a 100% 'freebie' - that works on what you have issue with + FAR more)...
(With LESS "added complexity/room for breakdown" browser addons introduce - especially crippled by default OR advertiser owned ones).
APK
P.S.=> The hosts file output's MULTI-PLATFORM (works on ANY OS + webbrowser/email OR hardware, think smartphones like ANDROID for instance, etc.-et al) via custom hosts files, & works on ANY web-bound app, BSD based IP stack, OS, or hardware using those there is that's 'current/mainstream' under the sun, with current data is from 12 reliable + reputable sources in the security community (e.g. - malwarebytes' hpHosts, MVPS org. & 10 others like them, absolutely current) - period!
... apk
all-your-data-are-belong-to-the-NSA
FTFY
CLI paste? paste.pr0.tips!
I find it strange that "following orders" is supposedly not a valid defence.
In a time of war, what is the alternative to following orders? It is court martial, possibly a neckshot, in any case a de facto suicide! How then can someone judge a person for following orders in such a time, when the alternative is self-destruction?
It does that to me sometimes. I just uncheck it, then check it again, with a couple of refreshes thrown in where appropriate and it goes back to normal.
Is 1563649 a prime number?
After ya played yerself (for apk) today http://tech.slashdot.org/comments.pl?sid=4422297&cid=45389951 ? "Inquiring minds want to know".
We call them ourPads
Yours
The NSA and GCHQ
SSL is a good example: tag any self-signed certificates with a scary warning. This is useless. The malware creators are making enough money that they can afford a valid certificate, the rest of us (hobby developers et al) cannot. I have also seen users that just "click through" the errors because they were told to do this at other workplaces. This makes the whole "trusted ca" business model, which is what it is ($$$), worthless as far as security.
My browser is pretty much an "out of the box" IE10 install with minimal plugins. I don't use an ad blockers, I grew up reading newspapers and magazines, my eyes automatically ignore all but the most intrusive ads. However I was intrigued by your claim so I clicked "Disable ads" and (for me) the ads obediently disappeared.
So the problem is very likely something to do with your environment. If you want them to have a look at it then post the details of the problem and your environment to "feedback" - email link in the footer at the bottom of this page.
And did you exchange a walk on part in the war for a lead role in a cage? - Pink Floyd.
Get it outta yer ass. It's not polite to talk with your mouth full http://tech.slashdot.org/comments.pl?sid=4422297&cid=45389951 though!