Slashdot Mirror


FBI Has Tor Mail's Entire Email Database

An anonymous reader writes "Tor Mail was an anonymized email service run over Tor. It was operated by a company called Freedom Hosting, which was shut down by the FBI last August. The owner was arrested for 'enabling child porn,' and the Tor Mail servers suddenly began hosting FBI malware that attempted to de-anonymize users. Now, Wired reports on a new court filing which indicates that the FBI was also able to grab Tor Mail's entire email database. 'The filings show the FBI built its case in part by executing a search warrant on a Gmail account used by the counterfeiters, where they found that orders for forged cards were being sent to a TorMail e-mail account: "platplus@tormail.net." Acting on that lead in September, the FBI obtained a search warrant for the TorMail account, and then accessed it from the bureau's own copy of "data and information from the TorMail e-mail server, including the content of TorMail e-mail accounts," according to the complaint (PDF) sworn out by U.S. Postal Inspector Eric Malecki.'"

40 of 195 comments (clear)

  1. Wait, WTF? by Penguinisto · · Score: 5, Insightful

    Anyone with an Internet connection is capable of 'enabling child porn'.

    Fuck sakes - is CP now the backdoor to the whole US Constitution (not to mention the means by which anyone, anywhere, can be arrested for any reason?)

    Someone needs to seriously put a curb on this.

    --
    Quo usque tandem abutere, Nimbus, patientia nostra?
    1. Re:Wait, WTF? by Anonymous Coward · · Score: 5, Insightful

      Mentioning "child porn" and "backdoor" is probably a poor choice of words when you're logged in and traceable.

    2. Re:Wait, WTF? by houstonbofh · · Score: 5, Insightful

      Is CP now the backdoor to the whole US Constitution (not to mention the means by which anyone, anywhere, can be arrested for any reason?)

      Now? Where have you been for the past 20 years?

    3. Re:Wait, WTF? by Anonymous Coward · · Score: 5, Interesting

      And don't forget that the range "child porn" materials already includes cartoon drawings, adults who look too young, and images of fully-clothed children. Soon the definition of "child porn" will also be expanded to include pictures of cats and any women who are not wearing full headscarves.

    4. Re:Wait, WTF? by GameboyRMH · · Score: 2

      Fuck sakes - is CP now the backdoor to the whole US Constitution (not to mention the means by which anyone, anywhere, can be arrested for any reason?)

      Cheat code in Democracy for Dictator Mode: Up, Up, Down, Down, Left, Right, Left, Right, B, Child Porn Exists

      --
      "When information is power, privacy is freedom" - Jah-Wren Ryel
    5. Re:Wait, WTF? by Anonymous Coward · · Score: 3, Informative

      Fuck sakes - is CP now the backdoor to the whole US Constitution[...]?)

      Yes.

      https://en.wikipedia.org/wiki/Four_Horsemen_of_the_Infocalypse

    6. Re:Wait, WTF? by SirGarlon · · Score: 4, Insightful

      Well, the Feds needed another backdoor. That Fourth Amendment thing really gets in the way of building up an impressive arrest record and getting promoted. You can't play the terrorism card *all* the time. People might catch on.

      --
      [Sir Garlon] is the marvellest knight that is now living, for he destroyeth many good knights, for he goeth invisible.
    7. Re:Wait, WTF? by ackthpt · · Score: 5, Insightful

      Spiro Agnew must be cackling in his grave.

      Same for John Edgar Hoover.

      If you're not on their list, it only means they haven't got around to you yet.

      everyone is guilty of something, sooner or later

      --

      A feeling of having made the same mistake before: Deja Foobar
    8. Re:Wait, WTF? by bill_mcgonigle · · Score: 5, Insightful

      So, here's the rub:

      When evaluating a hosting company of some flavor, you also have to know if they are hosting anything that could be interpreted as permitting its services to be used for child porn, terrorism, drug talk, insider trading, prostitution, seditious speech, pornography, hate speech, sins against the Father, sins against the President, or campaign finance.

      If so, don't depend on that service for any privacy.

      Basically, if there's a US nexus, you cannot hire a hosting company and expect any privacy.

      The terrorists hate us for our freedoms. Go shopping.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    9. Re:Wait, WTF? by lgw · · Score: 4, Informative

      When Slashdot was very young, before we had a mode system, the was an article on "the four horsemen of the internet apocalypse": that our rights online were sure to erode in the name of fighting terrorism, CP, hacking, and/or drug dealing. Wow, that was an amazing prediction - if we include "torrenting ripped media" in hacking, that's been right on target. I hadn't been understanding the "drug dealing" part until the Silk Road bust, but sure enough.

      This is why I resist giving the government any special power only to be used in extremes - excuses are so readily available that "extremes" becomes commonplace in a few years. And whatever the real motivation for the various TOR busts, WikiLeaks is effectively dead now as a result, with their TOR service is gone.

      You can certainly see the FBI wanting TOR just strong enough to leak information from the Iranian government safely, but not strong enough to leak information about the US government safely. Sad that it seems to have come to that.

      --
      Socialism: a lie told by totalitarians and believed by fools.
    10. Re:Wait, WTF? by Sperbels · · Score: 4, Insightful

      our rights online were sure to erode in the name of fighting terrorism, CP, hacking, and/or drug dealing. Wow, that was an amazing prediction

      No it wasn't. Even before the internet, these things were used violate peoples constitutional rights.

    11. Re:Wait, WTF? by lgw · · Score: 3, Funny

      Hey now, are you saying that the same old thing on the internet isn't new and patent-worthy? Heresy!

      --
      Socialism: a lie told by totalitarians and believed by fools.
    12. Re:Wait, WTF? by Mister+Liberty · · Score: 2

      My answer:
      Ready, Aim, Fire.
      In short: where's all those guns now that you need 'em?

    13. Re:Wait, WTF? by Anonymous Coward · · Score: 3, Insightful

      One would expect a 100% anonymous hosting company to not engage in illegal practices which would force their company to be taken down. Unfortunately even the most tech savvy people are dumber than rocks.

      No, one would expect a 100% anonymous hosting company to be incapable of knowing whether they are engaged in illegal activity. If the hosting company can tell the difference then they are less than 100% anonymous.

    14. Re:Wait, WTF? by AmiMoJo · · Score: 3, Interesting

      It's our own fault for giving them such a powerful weapon. Last week I suggested that possession of child pornography should be decriminalized, i.e. they can confiscate it from you but you can't be charged with a crime or otherwise publicly shamed. There have been a lot of cases in the UK where someone was falsely accused, often after the police bungled some other investigation and were trying to cover themselves by saying "oh, but he was a paedo, so at least we got him".

      Of course some idiot immediately accused me of being a paedophile and went on a fairly extensive rant about it. In amongst the raving he made the point that anyone advocating decriminalization for any reason will be subjected to his kind of behaviour by a large proportion of the public, and unfortunately I think he could be right. It's a shame because decriminalization could go a long way to allowing people who do find themselves attracted to children to come forward and get help without fear of public shaming or prosecution, as well as stopping police abuse.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
  2. The government = zombies by tripleevenfall · · Score: 3, Insightful

    In those zombie movies, no matter how well the humans are barricaded in a place, eventually the slow-witted zombies will always break in. They have all the numbers and time required.

    1. Re:The government = zombies by dougmc · · Score: 2

      I'm not sure your analogy really works here.

      If the humans were well baricaded in a place and they remained safe there from the zombies ever after ... it wouldn't be a very entertaining movie.

  3. Tor is a honeypot by ebno-10db · · Score: 2

    I don't know if it was designed for that purpose, but in practice Tor is a honeypot. Encryption too? (though not by design). Maybe it's time to consider steganography more, though it has its limits in terms of bandwidth, and if encryption isn't widely used, steganography certainly won't be.

  4. really? by Connie_Lingus · · Score: 4, Insightful

    i don't understand why people think that the FBI and NSA and CIA are just going to stand by and allow criminal activity when informants (no doubt where law enforcement gets 90% of its info) tell them how and where it's happening.

    technology may slow them down a bit, but people are foolish if you think your VPN and Tor browser is going to protect you for long *if* a three-letter agency really decides to getya.

    --
    never bring a twinkie to a food fight.
    1. Re:really? by Charliemopps · · Score: 4, Insightful

      The point of this article is not that the FBI went into a companies email server and collected the emails of some criminals. The point of the article is that the FBI declared the entire email service criminal, collected its entire contents, and kept it for their own and then started advertizing it as a legitimate service. This is clearly, without a doubt, unconstitutional. Not only are they violating all the innocent people who were using the services rights, they are violating the CRIMINALS rights as well! They've jeopardized their own convictions and the only 2 outcomes of this are:

      1. The convictions stand, and the US continues down this totalitarian surveillance state road.
      or
      2. The SCOTUS finally gets off their collective asses and declares this unconstitutional... unwinding decades worth of convictions based on illegal evidence and releasing tens of thousands of some of the worst criminals we have back on the streets.

      Neither on of those options are very palatable and I'd prefer the FBI gets back to investigating rather than spying to do their jobs.

  5. Promises of anonymity are greatly exagerated by ClayDowling · · Score: 5, Insightful

    When you trust a third party, with whom you have no actual connection, to keep your data private, you are pretty much asking to have it compromised. The best encryption and anonymity schemes in the world are useless in the face of a court order or questionable system administration. Did you really think some anonymous person was willing to go to jail for your privacy? You're both silly and naive if you think so.

    1. Re:Promises of anonymity are greatly exagerated by Anonymous Coward · · Score: 5, Informative

      Lavabit was willing to take the sword and went out of business.

  6. Re:Child porn, think of the children, blah blah bl by ebno-10db · · Score: 2

    What kind of pron is it? A girl of 17 years, 364 days, looking "provocative"? I better check the pics on my computer. Somewhere I probably have one of my young daughter eating a pickle or something. Those perverts get off on anything. Does it matter if the pickle is half sour or full sour?

  7. Presumed guilty by Dynamoo · · Score: 4, Insightful

    So, are the users of TorMail being presumed guilty because they dared to use a system that the NSA couldn't intercept?

    --
    Never email donotemail@WeAreSpammers.com
    1. Re:Presumed guilty by squiggleslash · · Score: 2

      No, that's not exactly what the article says.

      The article says the FBI seized the Tormail thingie as part of an investigation into the company that was hosting it - which they were investigating because the company in question was providing hosting services to child pornographers.

      This turns out to be a stroke of luck for the FBI, as it means for all subsequent investigations, if something comes up that involves a Tormail email address, they don't need a cooperative ISP to provide them with the contents of the associated mailbox.

      And, uh, that's about it. You're not presumed guilty, it's just you made the mistake of using something that the FBI now have complete access to, kinda like if you walked through a street in a crime ridden neighborhood, and the local police had decided to clamp down on crime there by covering the entire area in cops, you'd be "under surveilance" even though the police don't think you've done anything and should probably hope they don't mistake you for someone else or something like that.

      --
      You are not alone. This is not normal. None of this is normal.
    2. Re:Presumed guilty by sjames · · Score: 3, Informative

      Legally, they should delete all of the tormail data since it wan't relevant to their search.

  8. Wrong country for hosting by gmuslera · · Score: 2

    If you care about your privacy or want that your data is still yours, don't host it there, even encryption can be surpassed if you can control the hardware that decrypts it. UK, Australia, Israel, and others allies in the intelligence operations should be avoided too. And is not just for privacy paranoids only, companies should be worried too, and is not limited to just IP, managing data that can get you sued if disclosed will make you liable.

    Wonder what countries with strong citizens privacy laws will require to any company that want to work there.

  9. BADTHINK MINDCRIME DETECTED! by Thud457 · · Score: 5, Funny

    please, STOP thinking about the children!

    --

    the preceding comment is my own and in no way reflects the opinion of the Joint Chiefs of Staff

    1. Re:BADTHINK MINDCRIME DETECTED! by HyperQuantum · · Score: 4, Insightful

      They only think about the children when it fits their agenda.

      --
      I am not really here right now.
    2. Re:BADTHINK MINDCRIME DETECTED! by cant_get_a_good_nick · · Score: 3, Insightful

      I miss George Carlin this was part of such a good bit. Too much focus on kids and totally ignoring that adults should think and acting as if children should be infinitely protected.

  10. Amen Brother! by ClayDowling · · Score: 2

    It's like expecting your dog to ignore the roast you left on the counter while you went to work. Sure, it could happen, but there's no reason an intelligent person would expect it to happen.

  11. Re:Daft by bob_super · · Score: 5, Funny

    Phone lines, but only if you speak in Navajo.

  12. Re:Child porn, think of the children, blah blah bl by Goaway · · Score: 4, Insightful

    What kind of pron is it? A girl of 17 years, 364 days, looking "provocative"?

    No. Next question?

  13. Presumed Complicit. by Anonymous Coward · · Score: 5, Insightful

    See, that's the thing. They weren't providing hosting services SPECIFICALLY to child pornographers. They were providing services to ANYONE. Anyone at all. No questions asked.

    Some of those people happened to be child pornographers. The vast majority of them were not.

    You're arguing it's reasonable to presume that any user of a service that is ALSO used by criminals should reasonably be treated as suspect? Oh, child. You don't think there's child pornographers on GMail? Using EC2? With Instagram accounts? What service that's open to all ISN'T "a crime ridden neighborhood" in your example?

  14. Re:NO, no no! by ebh · · Score: 2

    Who would fight whom?

    That's a serious question. What two (or more) large groups of Americans would organize themselves into armies of any respectable amount of strength?

    Anyone trying to fight a loyal US military would get squashed faster than you can say "daisy cutter", I don't care how many M-16s and RPGs you have in your basement bunker. Maybe mutiny, turning the US Army into God's Army? Or how about Walmart and Monsanto *really* putting the competition out of business?

    The states that keep threatening secession: Would we go to war to keep them, or just tell them not to let the door hit 'em where the Lord split 'em?

    What's most likely is that the next civil war will be manufactured by the people selling arms to both sides.

  15. Re:NO, no no! by rogoshen1 · · Score: 2

    I think you overestimate the US military's ability to turn out ruthless, cold blood killers (stow the cynicism here, there's obviously a few cases where a couple of bad actors have done terrible things, but that's not the norm.) I seriously, seriously doubt soldiers would follow orders that result in the slaughter (and it would be slaughter) of thousands of Americans.
    Also, look how much trouble we had policing and 'holding' Iraq, a much smaller country (in terms of both population and geographical area.). Realistically the military would get spread too thin, supply lines would get cut, and yeah... done.

  16. Re:NO, no no! by jxander · · Score: 4, Insightful

    Good question. If only there was a modern day precedent for the US Military having a difficult time overcoming a vastly inferior enemy of insurgents.

    --
    This signature is false.
  17. Re:NO, no no! by nospam007 · · Score: 3, Informative

    "I seriously, seriously doubt soldiers would follow orders that result in the slaughter (and it would be slaughter) of thousands of Americans. "

    You mean like in the Civil War?

  18. Re:Child porn, think of the children, blah blah bl by HiThere · · Score: 3, Insightful

    Considering that the official definition of "Child Porn" includes cartoons, and has been in the past used to arrest people for the possession of cartoons of "apparently underage" (don't remember the rest, sorry), I'm not willing to accept ANYTHING they say about the child porn problem.

    Enforce the laws that already exist against violence and abuse. Do that and the entire problem goes away. (And if people want to see provocative cartoons, so what. It doesn't hurt anybody, and if you don't like it, just don't watch it.)

    FWIW, given the prevalence of anime, I'd say that there's a huge market for cartoon child porn, given a strict enough definition of porn. And so what! It just doesn't matter. Enforce the laws against violence and abuse, and the problem goes away.

    P.S.: Before this became an issue, it was, or appeared to be, much less of a problem. Most parents had explicit photographs of their children. And I just don't see that as a problem.

    --

    I think we've pushed this "anyone can grow up to be president" thing too far.
  19. Re:NO, no no! by rogoshen1 · · Score: 2

    Think of something more like the Arab Spring vs the Civil War. Maybe i'm being optimistic, but I can't see the US army rolling tanks through the streets to quash widespread revolt. In the US. Killing US civilians.
    In other words, fighting an opposing ARMY is probably quite a bit different than fighting CIVILIANS -- and only a sociopath would think it appropriate to use the same level of force in both situations. Doubly so against your own country.