How Silicon Valley Helped the NSA

theodp writes "The U.S. tech giants' pledge to up their privacy game in the wake of reports that all-your-data-belong-to-the-NSA rings a little hollow to Abraham Newman, who reminds us that such protections run counter to the business model and public policy agenda that tech companies have pursued for decades. 'For years,' writes Newman, 'U.S. information technology (IT) firms have actively backed weak privacy rules that let them collect massive amounts of personal data. The strategy enabled the companies to work their way into every corner of consumers' lives and gave them a competitive edge internationally. Those same policies, however, have come back to haunt IT firms. Lax rules created fertile ground for NSA snooping. In the wake of the surveillance scandals, as consumer confidence plummets, technology companies' economic futures are threatened.'"

Comments

Strange

[Anonymous Coward]

How all of us were "ok" with the companies collecting this information. When an intelligence agency combines this info, we suddenly scream for privacy. I'm scared enough that google accesses my Gmail content, and Apple my iMessages and contacts.

Re:Strange

[Mitreya]

all of us were "ok" with the companies collecting this information. When an intelligence agency combines this info, we suddenly scream for privacy.

Google does not have the ability to put us on the no-fly list. "Ok" or not, the threat level just isn't the same.

Re:Strange

[AHuxley]

Most wanted to believe the articulate sock puppets:
Legally you had the US Constitution to keep the US gov away.
Legally you had teams of in house (corporate) lawyers defending the 'brand' from hints of warrantless gov collaboration.
Your political leaders that would 'out' any goverment domestic spying just for party political points.
The US stock market would never allow the US gov to risk its international sales and would side against warrantless gov and keep sales up.
You had the public, gov hardware and software 'interface' that would be uncovered very quickly with great press coverage by so many skilled staff.
You had staff, academies and skilled members of the press who would find some trace.... and then win media prizes with the story of the decade...
Skilled academics, code reviews, gov standards, software brands and teams of individuals had all looked over net encryption and found it usable for consumers.
After Snowden it was all found to be a hoax.
Political leaders did nothing, lawyers said nothing, academics educated the junk code to generations of fee paying students, the tame press never followed any stories, corporations took gov cash and helped, telcos ensured the optical was in place. Mercenaries and contractors enjoyed the overtime.
The brands are now a joke.

Re:Strange

[Runaway1956]

"How all of us were "ok" with the companies collecting this information."

Speak for yourself, Kemosabe. There were a lot of us who have been bitching about the invasion of privacy all along. Were we listened to? Of course not - we were shouted down. "There is no privacy on the internet, everything you put out there is available for public consumption. Grow up dummy, if you've done nothing wrong, then you have nothing to hide!"

Always, the conversation was derailed with just such words.

Fact is, conversations on the internet are about as private as discussing your private life on the town square. Of course it's not "private", but you don't expect snoops to be actively engaged in eavesdropping activities. On the town square, you can look around to see if the town gossip is lurking behind the nearby bench. Or, whether the Chief of Police is loitering within earshot.

The internet? Only some of the more savvy users are aware just HOW LITTLE privacy they have. We are forced to avoid monitoring and eavesdropping. And, it's impossible to tell just how effective our efforts are. And, we know all the while that if NSA or any other agency takes an active interest in us, they can just tap into everything at the ISP level.

Those of YOU who were "ok" with data mining - it's about time you woke up, and understood that we have valid concerns. Now - what ya gonna do about it? Can we get NSA and a few dozen of the programs that they support defunded? Can we get some of the various police tools shitcanned? What are we gonna DO? Resort to the darknets? That really isn't a solution. All that the NSA has to do, is to install a few thousands of their own onion routers and I2P routers, and whatever else comes along. Perfect MIM attack vectors, since they straddle the backbones anyway.

What ya gonna do? Just sit around and bitch, with those of us who have been bitching for years? Do you have a plan?

You might join us, in writing your congress critters. Repeatedly. Often. Write to your own, and everyone else's as well. Sign all the online petitions that you can find. Start your own petitions. And, bug hell out of your congress critters. They HATE to get hate mail. They much prefer not to hear from you at all, and they love fan mail, so send the HATE MAIL.

Re:Strange

[Runaway1956]

Actually - you DO have some choice. Did you fill out that frequent shopper's survey? Chump. Did you supply your telephone number the last time you purchased a pizza over the counter? Chumped again. Do you give out your cell phone and email address everytime a vendor requests it? Chumped, chumped, and chumped, over and over again. Do you use that credit card for ALL your purchases? You are so chumped!

Use dollar bills, in person, and refuse to supply information of any kind to the vendor. THEY DON'T NEED ANY INFORMATION TO MAKE A SALE!!

But, if you insist on getting that penny discount on your next bag of Cheeto's, go ahead and play their game.

Re:Strange

[BitZtream]

Not all email is sent in clear text. Some admins aren't clueless.

For instance, my mail server communicates with many other mail servers using SSL, including when talking to other servers. Yahoo, Google, and Outlook.com all use TLS and upgrade to a secure connection on HELO. Likewise my mail servers REQUIRE SSL AND AUTHENTICATION for picking up mail or sending from our addresses. Include SPF in the mix and the only clear text version of the mail is sitting on my server hard drives and the client machines.

I'm fairly confident the NSA hasn't gotten into my system yet, and they didn't fake our certificate chain since its an internally generated chain that no cert provider is in, just our own not network connected CA.

Email can be secured with current technology and protocols. Easily.

Who can spare a thought for such matters

[korbulon]

When the next iPhone will be curved?

http://apple.slashdot.org/story/13/11/11/0353252/apple-developing-curve-screen-iphones-and-improved-sensors

Vote with your feet

[FriendlyLurker]

Take your business elsewhere whenever possible. Only thing that will make companies sit up and pay attention is when their bottom line starts to be affected. Computer professionals advise non-techy business types on how best to protect sensitive company information against the massive industrial espionage spy network. People may not care about their facebook page and personal email is being compromised, but they sure as hell care when their companies sensitive business information is put at risk...

Backward

[Jah-Wren Ryel]

Lax rules created fertile ground for NSA snooping.

No, rules don't make any difference to criminals, NSA or otherwise.

It is the high value of centralizing all that data info which makes for fertile ground.