Slashdot Mirror


Dropbox Moves Accounts Outside North America To Ireland

monkeyzoo writes: Similar to a previous announcement by Twitter, Dropbox has changed its Terms of Service for users outside of North America (USA/Canada/Mexico) such that services will now be provided out of Ireland. Will other companies follow this trend and leave the USA (and the jurisdiction of the NSA)? Note, the announcement states that North American users are not able to opt into the Irish Terms of Service.

135 comments

  1. That's not a security move by Opportunist · · Score: 4, Insightful

    They're after the double Irish with a Dutch Sandwich.

    It's about money. Not "our valued customer's security" or other bullshit.

    --
    We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    1. Re:That's not a security move by fustakrakich · · Score: 1

      Well yeah, they need a gimmick. Just Madison Avenue, jumping on the bandwagon.

      --
      “He’s not deformed, he’s just drunk!”
    2. Re:That's not a security move by Muros · · Score: 3, Insightful

      They're after the double Irish with a Dutch Sandwich.

      It's about money. Not "our valued customer's security" or other bullshit.

      They don't need servers here to funnel profits through the country, they can do that easily enough with dodgy licensing subsidiaries and some accounting sleight of hand in an office of 2 people.

    3. Re:That's not a security move by gstoddart · · Score: 3, Insightful

      It's as much about PR as anything. Maybe it's actually about telling the NSA et al to piss off.

      But sooner or later, a nice government official will show up and say "now gimme".

      I'm no sure there really is a way to take data outside of jurisdictions now. Courts seem to think they aren't constrained in their decisions, any more ... and all the governments are trading the data.

      --
      Lost at C:>. Found at C.
    4. Re:That's not a security move by MobileTatsu-NJG · · Score: 2

      Well, duh, they exist in the first place to make money. The real question is why this isn't a win-win for their customers anyway?

      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    5. Re:That's not a security move by TheGratefulNet · · Score: 2, Insightful

      I think you're right.

      at best, the data copying will happen on the sly and we will be 100% lied to about it.

      the world (everyone, this is about human nature) has a craving for spying. we love gossip and rumors and knowing the dirt on people. its a sad but true fact about human beings.

      given that, and given the fact that, once out of the bottle the genie is not going back - we now have to assume all data is being mined, stolen, taken, whatever word you want to use.

      politicians will say things. they will always lie about this.

      the only thing we can do is engage in the chilling effect and 'watch what we say and write'. which is NOT what the internet was supposed to be about!

      thanks government goons. you ruined one of mankind's BEST achievements in all of earth's history.

      --

      --
      "It is now safe to switch off your computer."
    6. Re:That's not a security move by thesupraman · · Score: 1

      Um no, they are ALREADY doing that.

      This just means they see the writing on the wall and want to put a little legitimate infrastructure there to secure the 'Irish Scam'.
      They see the writing on the wall as the EU moves in of this tax scam, and by using this nice excuse the US has handed to them,
      they will get a nice little PR boost also. Ireland gets to make cents-on-the-dollar money from other countries lost taxes.

      Of course if they actually wanted to secure anyones data, Ireland would not be the best place, by a long shot. All of its internet
      connectivity runs through the UK, practically the USs 52nd state so fast as the NSA are concerned.

      Its actually quite funny looking at the undersea cable routed around that area, they actively bypass landing them in Ireland, choosing
      to run longer cables should risky areas instead..

    7. Re:That's not a security move by currently_awake · · Score: 1

      The fact that north american customers don't get that choice probably indicates the US government has already ordered them to hand over all data. The fact that an American court has already ordered another company (MS) working in Ireland to hand over data indicates Ireland isn't far enough for security.

    8. Re:That's not a security move by fustakrakich · · Score: 4, Insightful

      thanks government goons. you ruined one of mankind's BEST achievements in all of earth's history.

      Mankind's BEST achievement in all of earth's history are the washer and dryer (and maybe the horseless carriage), and mine work just fine, thanks. The internet is a giant billboard.

      --
      “He’s not deformed, he’s just drunk!”
    9. Re: That's not a security move by Anonymous Coward · · Score: 1

      Dey always after me lucky charms!!!

    10. Re:That's not a security move by chrism238 · · Score: 1

      The real question is why this isn't a win-win for their customers anyway?

      It's not a win-win for customers unless the price goes down. It may be just a win if there's a reduced likelihood of NSA surveillance, but there's no guarantee of that.

    11. Re:That's not a security move by Anonymous Coward · · Score: 0

      Well, if customers don't like the move then, in the coming months (and years), more customers will be coaxed towards rival services and fewer will choose to start using dropbox than otherwise. If the customers consider the move a loss then dropbox is going to make less money (or lose more money) than otherwise with time.

    12. Re:That's not a security move by MobileTatsu-NJG · · Score: 1

      It's not a win-win for customers unless the price goes down.

      Bull. The customers maintain the price, not the other way around. If they raise their prices some customers will leave. How many depends on the value of what they offer. They can't just raise their prices if their overhead goes up and it is unwise for them to lower them if the customers are happy. Lower operating costs, however, do nothing but help their customers, even if it's something as simple as it means DB's services are around longer.

      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    13. Re:That's not a security move by ShanghaiBill · · Score: 1

      thanks government goons. you ruined one of mankind's BEST achievements in all of earth's history.

      The NSA records billions of phone calls everyday, collects meta-data on billions more, and yet, the government still can't do a damn thing to track down "Rachel from card holder services".

    14. Re:That's not a security move by Anonymous Coward · · Score: 0

      Mankind's BEST achievement in all of earth's history are the washer and dryer (and maybe the horseless carriage), and mine work just fine, thanks. The internet is a giant billboard.

      I thought it was sliced bread.

    15. Re:That's not a security move by CrimsonAvenger · · Score: 3, Funny

      the UK, practically the USs 52nd state

      Just curious - what's the US's 51st State?

      --

      "I do not agree with what you say, but I will defend to the death your right to say it"
    16. Re:That's not a security move by lgw · · Score: 2

      Screw that, humanity's two best achievements are dentistry and air conditioning. Damn northerner!

      --
      Socialism: a lie told by totalitarians and believed by fools.
    17. Re:That's not a security move by stephanruby · · Score: 1, Funny

      In other news, Amazon is renditioning its Cloud Drive servers to Guantanamo, because it's cheaper to comply with CIA/NSA requests from there (and it's technically not even a crime they said). And no-evil Google Drive is moving all its US cloud servers to Saudi Arabia, to save on air conditioning bills (the tax concessions they''ll be receiving are besides the point). It also helped in their decision that Saudi Arabia has a better track record than the Republic of Ireland on freedom of speech, where it comes to central banking and "too big to fail" government bailouts.

    18. Re:That's not a security move by Anonymous Coward · · Score: 0

      My guess would be that he is referring to either D.C. or Puerto Rico.

    19. Re:That's not a security move by Anonymous Coward · · Score: 0

      They're after the double Irish with a Dutch Sandwich.

      It's about money. Not "our valued customer's security" or other bullshit.

      And from a privacy/security standpoint, it's pointless. In moving from USA to ROI, they're just trading being spied on by the NSA to being spied on by the CIA. This is probably a bad thing, since the NSA doesn't generally murder people. Now the CIA on the other hand...

    20. Re:That's not a security move by Anonymous Coward · · Score: 2, Insightful

      Canada.

    21. Re:That's not a security move by hjf · · Score: 4, Informative

      Also it FUCKS user experience.
      Facebook is pulling the same retard move. I'm in Latin America. There are NO fiber links between Latin America and Europe, let alone Ireland. All my traffic is relayed to the US. What used to be a 200ms hop with a fat multi-Gbps link, is now over 1000ms with a much, MUCH smaller link.

      Facebook has become unusable. Load times are now in excess of 30 seconds. Packet loss seems awful. Images don't load, the page is botched from missing CSS bits.

      The NSA is still spying on me, but now I get a dial-up experience thanks to this crap.

    22. Re:That's not a security move by Anonymous Coward · · Score: 1

      The fact that north american customers don't get that choice probably indicates the US government has already ordered them to hand over all data. The fact that an American court has already ordered another company (MS) working in Ireland to hand over data indicates Ireland isn't far enough for security.

      You're right Ireland is not the right country. Dropbox should bitch slap the US Government and move all data to Russia. Vladimir Putin would be only too happy to tell the US Government to bugger off.

    23. Re:That's not a security move by cavreader · · Score: 1

      Indoor plumbing.

    24. Re:That's not a security move by Anonymous Coward · · Score: 0

      Exactly, Ireland has long been a washing machine for London's City, as much Luxemburg is laundering money for Germans and Cyprus for Russians (until recently). Welcome to the EU.

      There is nothing about privacy and protecting the customers, just business as usual.

    25. Re:That's not a security move by shione · · Score: 0, Troll

      "Facebook has become unusable. Load times are now in excess of 30 seconds. Packet loss seems awful. Images don't load, the page is botched from missing CSS bits."

      What is the bad thing again? :)

    26. Re:That's not a security move by Anonymous Coward · · Score: 0

      They're after the double Irish with a Dutch Sandwich.

      It's about money. Not "our valued customer's security" or other bullshit.

      They don't need servers here to funnel profits through the country, they can do that easily enough with dodgy licensing subsidiaries and some accounting sleight of hand in an office of 2 people.

      ... plus how long would it take for the US govt. to bully the Irish one into allowing them full access to the Irish network backbone to download so they can archive every byte that passes through it or have FBI agents walk in there and confiscate servers and storage by the military air cargo palette? A week? 24 hours? and that's assuming the US doesn't already have unlimited access to the Irish telecommunications network and a carte blanche on confiscating equipment. If the German government has it's own security services spying on local businesses on behalf of the US there probably isn't a single country in the 'free world' that doesn't have the NSA bugging it's entire telecommunications network with the full cooperation of the local government and it's security services. For dropbox this is about appearing to care about security and having plausible deniability when the next wikileak reveals that the move to Ireland and out of US juristiction did squat to increase customer security. Not that I can blame them, there isn't a single place anywhere in the US, Europe, Asia or the rest of the Americas where their customer's data would be safe.

    27. Re:That's not a security move by Anonymous Coward · · Score: 0

      moving all its US cloud servers to Saudi Arabia, to save on air conditioning bills

      Are you sure this makes sense ?

      Greenland yes, SA no.

    28. Re:That's not a security move by Anonymous Coward · · Score: 0

      All of its internet connectivity runs through the UK, practically the USs 52nd state so fast as the NSA are concerned.

      Not quite all of it, there are direct links to Canada & the US. Most of it is through the UK though.

    29. Re: That's not a security move by Anonymous Coward · · Score: 0

      Only if you really trust those two people.

    30. Re:That's not a security move by hjf · · Score: 1

      I get the joke, but: I have a business page on facebook. I have a comic book store. The only way for me to reach my customers is through facebook (via paid ads). I can't just go all indie and "fuck facebook, i don't use that shit".
      Nowadays for a scaringly high number of people, facebook IS the internet. They barely know other sites, and don't bother googling. Hell, people don't even care about email anymore.

      Facebook is "convenient": everything they want to know about everyone they know is there, and they can also message. What more do they want?

      Great minds discuss ideas; average minds discuss events; small minds discuss people.
      --Eleanor Roosevelt

    31. Re:That's not a security move by hjf · · Score: 1

      In fact: facebook is now exploiting "social search". People like, no, LOVE to ASK people things. I constantly see in my FB feed: "Does anyone know where I can buy X?" Something you could ask google and get an instant answer, they love to get a stupid string of "smartass" answers and "you should ask at this place around the corner from bobby's house"

    32. Re:That's not a security move by currently_awake · · Score: 1

      Sanitation and hygene doubled human life expectancy (35 to 70 years). Nothing else we've done comes close.

    33. Re: That's not a security move by nine-times · · Score: 1

      Or, hopefully, it means Dropbox has more money to pour into development, improving the services they provide. Unfortunately, it usually just means that some billionaire will be billionairier.

    34. Re: That's not a security move by MobileTatsu-NJG · · Score: 1

      It's worth pointng out that DropBox does have competition. They probably are investing in keeping their customer base.

      --

      "I like to lick butts!" by MobileTatsu-NJG (#32700246) (Score:5, Informative)

    35. Re:That's not a security move by jonbryce · · Score: 1

      Oil is cheaper than water out there, so while you probably need more electricity for the air-con, the overall running costs would be a lot less.

    36. Re:That's not a security move by frisket · · Score: 1

      ... plus how long would it take for the US govt. to bully the Irish one into allowing them full access to the Irish network backbone to download so they can archive every byte that passes through it

      Already done. No bullying needed, just a private chat between senior officials, plus the gross digital ignorance of our [Irish] politicians. Anyone who believes that the NSA doesn't scan all Irish traffic is living in cloud-cuckoo land.

    37. Re:That's not a security move by ZoobieWa · · Score: 1

      We didn't need dentistry and our life expectancy before the dawn of agriculture. Our teeth were fine and we lived long lives.

    38. Re:That's not a security move by stephanruby · · Score: 1

      moving all its US cloud servers to Saudi Arabia, to save on air conditioning bills

      Are you sure this makes sense ?

      Greenland yes, SA no.

      SA no, sarcasm yes.

  2. King Frosty The First by Anonymous Coward · · Score: 0

    I'm royal! Bow to me and when you have an audience, kiss my shoes at the start!

  3. One for the USA, one for the EU... by The+New+Guy+2.0 · · Score: 1

    Seems like NSA is trying to snoop on international data that's being stored in the USA, which is why they're setting up EU versions of worldwide web services. If America wants to read international data, they need to do so only in times of need.

    1. Re:One for the USA, one for the EU... by grimmjeeper · · Score: 1

      Sure, this is a good thing if you're already in the EU. But how are you going to get your data from the US to the EU without the NSA capturing the entire stream? What good will this do for anyone on this side of the pond?

    2. Re:One for the USA, one for the EU... by The+New+Guy+2.0 · · Score: 1

      The EU DropBox user hits the Irish server and nobody tells the USA server about it....

    3. Re:One for the USA, one for the EU... by R3d+M3rcury · · Score: 1

      But what about the data that's already IN the US?

    4. Re:One for the USA, one for the EU... by The+New+Guy+2.0 · · Score: 1

      That's so big it might as well be shipped on disk/flash drives instead of an undersea cable.

    5. Re:One for the USA, one for the EU... by hjf · · Score: 1

      And what benefit do I, as a Latin American, get from this?
      None. Zero. See submarine cable map to understand the implications for us (FAR higher latency: several SECONDS; and STILL GOING THROUGH US NETWORKS TO EUROPE).

    6. Re:One for the USA, one for the EU... by Anonymous Coward · · Score: 0

      Surely it depends how good the end to end encryption is between you and Ireland ?
      They can grab the data but it doesn't mean they can read it. And if it's never at rest in their juresdiction they cannot demand it's opened up.

    7. Re:One for the USA, one for the EU... by Anonymous Coward · · Score: 0

      To be honest, in Latin America you're simply unimportant as far as DropBox is concerned.

  4. It won't work by Anonymous Coward · · Score: 0

    Notice that Microsoft's Ireland servers have been targeted by the NSA and Microsoft is in contempt of court for not giving the info so far. They will. ANY company that does business in the US, even if they are based in Ireland, MUST submit to the NSA. Anyone who tells you differently either doesn't know the law, or is telling a fib.

    1. Re: It won't work by Anonymous Coward · · Score: 1

      Actually if your servers are in Ireland, the US government needs to comply with EU law to get the data and US law doesn't apply. The US can scaremonger their corporates at home but the corps need the EU for strategic and open marketing to work. The US needs to recognise sovereign laws or the EU will draw more corporates over here. We respect companies and individuals and their ability to conduct business within the law. Gradually MS could just pull aspects of their business overseas or set up remote and legally separate entities. The US gov could then only try to invoke laws to prevent intercontinental trade which would cripple their economy from an international standpoint. The US gov has nowhere to go but idle threats. MS will just move their money elsewhere... The corporate freedom the US depends on is the thing that will kill that sort of action and MS would be idiots to comply. Contempt in US court will mean a fine at most... MS and their reputation will be fine

    2. Re: It won't work by Tokolosh · · Score: 1

      Look what happened to the banks. Do business with a country the US has decided to dislike? Have some American's money in your vaults and not reported it to the IRS, in compliance with your own country's laws? The US government will find ways to make things very painful for you.

      Microsoft, Google, Facebook, Yahoo, Intel, Dell, HP, Cisco, IBM, Amazon need to band together and say to the US, "If you don't stop this douchebaggery, we are pulling the plug. The short-term damage to the economy will be huge, but a lot less than the long-term damage you are causing."

      --
      Prove anything by multiplying Huge Number times Tiny Number
    3. Re: It won't work by Anonymous Coward · · Score: 0

      Thats the whole point of moving the data out of the US it frees the NSA, CIA to snoop on the data , spying doesn't respect the lawas of the host country it is oldskool and honours 'Thou shalt not get caught'.As the for the data in the US that is what the secret fisa courts are for and packing the Supreme court.

    4. Re: It won't work by Anonymous Coward · · Score: 0

      Microsoft, Google, Facebook, Yahoo, Intel, Dell, HP, Cisco, IBM, Amazon need to band together and say to the US, "If you don't stop this douchebaggery, we are pulling the plug. The short-term damage to the economy will be huge, but a lot less than the long-term damage you are causing."

      Meh, government always wins.

      Firstly, they'd never do so as a unified front.

      Secondly, declare their (which ever company was the first fool to try it) intellectual property as public domain and simply take away their ability to do business. That's a mighty nice business you've got there; it'd be a shame if you lost the ability to do business in the US via legislative means under the 'enemy corporate espionage act'.

      Lastly, anybody who thinks GCHQ (you know, one of the NSA's closest allies) doesn't own ALL of Ireland lock, stock, and barrel is an idiot.

    5. Re: It won't work by frisket · · Score: 1

      Actually if your servers are in Ireland, the US government needs to comply with EU law to get the data and US law doesn't apply.

      I don't think that actually worries the NSA.

  5. Not what you think by Anonymous Coward · · Score: 2, Interesting

    This has nothing to do with privacy and everything to do with taxes.

  6. False sense of security? by JustNiz · · Score: 4, Insightful

    It seems clear from the way that Juilian Assange is being fucked over by the UK and Sweden on behalf of the US, that the US gov already has their hand far enough up the arse of significant western countries to make them their puppet.

    What makes anyone seriously think that Irish won't also just bend over for the NSA as readily?

    1. Re:False sense of security? by Anonymous Coward · · Score: 0

      I *love* the Assange apologists. They think it's a big conspiracy - get the Brits to send Assange to Sweden, who will hand him over to the US! Because we all know that Sweden has *much* closer ties to the US than England does (she said, sarcastically). Also, apparently them bitchez were just jelly or some shit.

    2. Re:False sense of security? by AmiMoJo · · Score: 1

      It's more complex than that.

      The NSA hacks stuff, they don't use legal means to get at data. They can be defended against with technical measures. However, it isn't the NSA that Dropbox is worried about.

      Other government agencies do use the legal system. Microsoft us currently exploring the limits of their powers in court, but others have already learned from the arguments used. They have to set the system up in such a way that they can't comply with legal demands.

      Look at how Google and apple have set up encryption on their operating systems. They can't decrypt them, simple as that. Companies are learning to protect themselves from legal attempts to make them complicit in violating their customer's privacy.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    3. Re:False sense of security? by JustNiz · · Score: 1

      ...and you seriously believe that charge wasn't cooked up then do you?

      Have you read the "evidence" and the background on the case and the witnesses? I seriously suggest you do.

    4. Re:False sense of security? by Anonymous Coward · · Score: 0

      I *love* the Assange apologists. They think it's a big conspiracy - get the Brits to send Assange to Sweden, who will hand him over to the US! Because we all know that Sweden has *much* closer ties to the US than England does (she said, sarcastically). Also, apparently them bitchez were just jelly or some shit.

      Reiser had the same kind of support, ridicule of the evidence and conspiracy theories about why he was accused. Until he showed the police where he had buried his wife.

  7. Canada and Mexico by Anonymous Coward · · Score: 0

    Why leave Canada and Mexico mixed in with the US servers? USA stays in USA but CA and MX can go with the rest of the world.

    Either that or let North America become one big country, the borders here are useless anyway.

    1. Re:Canada and Mexico by The+New+Guy+2.0 · · Score: 1

      Canada and Mexico don't have good places to set up datacenters, there's a region of Texas known as Datacenter, TX which has fast bandwidth in all directions, including pointed toward Canada and Mexico.

    2. Re:Canada and Mexico by currently_awake · · Score: 1

      Setting up a data centre on the arctic tundra would cut way down on cooling bills, unlike putting it in the desert. Also nobody "wants" to put their data in the USA. Third, if you live or work in a 5 eyes country your data is already in the NSA data hoover system.

    3. Re:Canada and Mexico by CanadianMacFan · · Score: 1

      There's talk that we might get electricity sometime next year!

      Canada has many great places for data centers. How do I know? Because we have lots of data centers up here. Not that Dropbox needed to actually put one up here. They just needed to put our accounts on their Irish servers too. We've got excellent connections to Europe.

    4. Re:Canada and Mexico by quonsar · · Score: 1

      We've got excellent connections to Europe.

      looks like you have exactly ONE connection to Europe, and guess where it also connects?

  8. well... by zippo01 · · Score: 4, Insightful

    This is only news if you think the NSA still couldn't easily gain access....

    1. Re:well... by rmdingler · · Score: 1
      Moves abroad outside the North American

      sphere of influence

      are trendy, a great time to be hating America if you will.

      The NSA, after all, is undoubtedly helpless against the formidable Guinness consumers.

      --
      Happiness in intelligent people is the rarest thing I know.

      Ernest Hemingway

    2. Re:well... by bug1 · · Score: 1

      This is only news if you think the NSA still couldn't easily gain access....

      The question is how hard they have to work for it.

    3. Re:well... by Anonymous Coward · · Score: 0

      This is only news if you think the NSA still couldn't easily gain access....

      And moving outside the US makes it easier for the NSA to gain access. There's no Constitutional or legal reason a spy agency can't spy on foreign/non-US accounts based on foreign/non-US soil.

      And Dropbox ain't dumb enough to think otherwise.

    4. Re:well... by Anonymous Coward · · Score: 0

      They could, but that would be illegal.

      Basically some kind of remote hacking only, no breaking in, or splicing - otherwise they risk getting caught with their hand in a cookie jar.

      They will not risk their assets over there for some piddly little target.

    5. Re: well... by BobSwi · · Score: 2

      Pff, its a NSLetter away from Dropbox having to grant unfettered access to the non-USA data. If you want privacy, roll your own with owncloud or seafile.

    6. Re:well... by Anonymous Coward · · Score: 0

      It's hard to get local authorities to do your dirty work for you when the local authorities are all too drunk to remember what your dirty work was.

  9. It's not the NSA they're fleeing by Anonymous Coward · · Score: 5, Interesting

    The NSA knows no boundaries and arguably has MORE reach outside the USA.
    Companies are fleeing the US courts, following the ruling that a company with offices in the USA (i.e. Microsoft) can be compelled to produce digital evidence stored outside the USA.

    1. Re:It's not the NSA they're fleeing by sshir · · Score: 1

      My understanding is that Microsoft is still fighting that one. Let's hope they will prevail.

    2. Re:It's not the NSA they're fleeing by Anonymous Coward · · Score: 0

      I think North Korea should enter the datacenter business.

      Hard working, guaranteed to spy, but also guaranteed to not spy for NSA.

      Won't flinch from threats (used to it), and need the money for nuclear weaponry to battle with US.

      Good deal!

    3. Re:It's not the NSA they're fleeing by Anonymous Coward · · Score: 0

      You know this is /. ? - Supporting MS here is viewed like supporting ISIS.... :-).

    4. Re:It's not the NSA they're fleeing by jythie · · Score: 1

      And the NSA is the only law enforcement in existence and secretly runs all the others, so any story MUST be about the NSA.

  10. They are not leaving US jurisdiction by Anonymous Coward · · Score: 0

    They are just making sure that the three letter agencies can access the accounts of foreigners when a law limits their access to US based accounts.

  11. Megafail by Anonymous Coward · · Score: 0

    looks like you are merely a court jester now

    1. Re:Megafail by Anonymous Coward · · Score: 0

      I'm king! I'm first! I'm Frosty, the first King! The Opportunist rebellion won't succeed! Bow to me!

  12. NSA jurisdiction by Anonymous Coward · · Score: 5, Interesting

    and the jurisdiction of the NSA

    Actually, the rest of the world is the jurisdiction of the NSA. It's mission is to gather signals intelligence from foreign countries. If there is a jurisdiction that is off-limits to the NSA, its the US. That's why recently a US Appellate Court ruled that the NSA's wholesale spying on US citizens' phone communications is illegal. Besides, there's the British GCHQ that will be glad to spy on Dropbox and share what it gathers with the other Five-Eyes members.

    What this does for Dropbox is provide a tax haven for it, and to make it difficult for US law enforcement to serve warrants to produce evidence for Dropbox's users it suspects of criminal actions like pedophiles, copyright fraudsters, drug traffickers, etc.

    1. Re:NSA jurisdiction by Anonymous Coward · · Score: 0

      "Purview" isn't exactly the same as "jurisdiction" ...

      But you're right -- the NSA's *mission* is certainly ("ideally," for some values of "ideal") to snoop on stuff that happens outside the U.S.'s borders ...

    2. Re:NSA jurisdiction by msobkow · · Score: 1

      The "Five Eyes" is just one big circle-jerk. Canadians, GCHQ, etc. spy on Americans and share the intel with the NSA. The NSA spies on Canadians and shares the intel with CSIS. CSIS spies on the brits and shares the info with GCHQ.

      Don't fool yourself -- everyone gets spied on in the end. No exceptions.

      --
      I do not fail; I succeed at finding out what does not work.
    3. Re:NSA jurisdiction by Zontar+The+Mindless · · Score: 1

      Relocating to China is looking better and better all the time.

      --
      Il n'y a pas de Planet B.
    4. Re:NSA jurisdiction by Anonymous Coward · · Score: 0

      If US law enforcement wants access to an account based in MS in Ireland, they can just follow the usual practice and ask the Irish law enforcement to cooperate (after showing reasonable evidence the account holder is a bad actor).
      Instead they insist on this dick swinging showdown with Microsoft, who have massive EU business reasons for fighting it off really strongly.

      And the longer it goes on the more US companies are damaged.

    5. Re:NSA jurisdiction by Lserevi · · Score: 1

      According to the Snowden leaks, the NSA can and does intercept traffic that crosses the US border. Combined with the Dropbox move, this means that all Dropbox file accesses will now be fair game for the NSA.

  13. I went Swiss by Anonymous Coward · · Score: 1

    I moved my personal server from EC2 to a Swiss host - Swiss data center, owned by a Swiss company.

    Amazon lost all of 25 USD a month :-)

    1. Re:I went Swiss by Anonymous Coward · · Score: 0

      Interesting. Which company and how much do you pay and for what?

    2. Re:I went Swiss by Anonymous Coward · · Score: 0

      Interesting. Which company and how much do you pay and for what?

      nice try nsa

  14. Isn't this about taxes? by Punto · · Score: 1

    I thought this was about taxes, since Ireland had that loophole for tech companies. I'm not sure what the deal is with north american users tho..

    --

    --
    Stay tuned for some shock and awe coming right up after this messages!

  15. traffic by BradMajors · · Score: 1

    Just because the user and the server are not in the United States doesn't mean the traffic to the server isn't going through the United States.

  16. Dropbox outside jurisdiction of the NSA? by Anonymous Coward · · Score: 1

    "Dropbox .. services will now be provided out of Ireland. Will other companies follow this trend and leave the USA (and the jurisdiction of the NSA)?"

    Not really, as most/every electronic cummunication out of Ireland is monitored in real time by NSAs best buddy - GCHQ.

  17. check out any time you want by turkeydance · · Score: 1

    but you can never leave. old song.

    1. Re: check out any time you want by Anonymous Coward · · Score: 0

      I hate the fuckin Eagles, man.

    2. Re: check out any time you want by Anonymous Coward · · Score: 0

      I hate the fuckin Eagles, man.

      Why? They are majestic animals.

  18. North americans by manu0601 · · Score: 2

    North Americans, that is, residents from Canada, USA and Mexico, cannot use the Irish service.

    The ban on people under Canada and Mexico juridiction is interesting. Either Canada and Mexico have agreements with the USA that enforce their citizen's snooping, or Dropbox does not want the transatlantic traffic increase.

    1. Re:North americans by Anonymous Coward · · Score: 0

      Look into the North American Union.

    2. Re:North americans by zoid.com · · Score: 1

      Guess this is another reason to get a VPN that makes us not look like north americans. Always have to be in disguise when minding our business. pity.

  19. Condoleezza Rice by Anonymous Coward · · Score: 0

    Condoleezza Rice

  20. That's cute! by jomcty · · Score: 1

    That's cute they think Ireland is outside jurisdiction of the NSA.

  21. NSA won't flinch by Kishin · · Score: 1

    Many countries are SIGINT partners with the NSA (see Fourteen Eye's etc). They share data. They almost all use vulnerable systems of the type the NSA can hit directly. Hence, data in Ireland isn't safe from the NSA by any means. It might also be used in mass collection that NSA gets to share. Der Spiegel has been reporting a lot of that sort of thing in Germany, for instance. The only well-connected, democracies listed in Snowden documents as resisting NSA cooperation were Iceland and Switzerland. Move your data there in partnership with citizens and in a way that benefits their cities. That should knock out the legal attacks. Then, you need EAL7+ security on all your systems with good supply chain and updates. Good luck with that part. ;)

    Nick P, High Assurance Security Engineer/Researcher

  22. Actually helps the NSA by Etherwalk · · Score: 1

    It's as much about PR as anything. Maybe it's actually about telling the NSA et al to piss off.

    But sooner or later, a nice government official will show up and say "now gimme".

    I'm no sure there really is a way to take data outside of jurisdictions now. Courts seem to think they aren't constrained in their decisions, any more ... and all the governments are trading the data.

    It probably actually helps the NSA. European privacy laws still apply to the company's actions, but the NSA is completely freed from the laws (and constitution) that restrain it from spying on US citizens. The NSA actually does have some limits on how it spies on US Citizens.

    It sucks up pretty much every other signal on the planet.

    1. Re:Actually helps the NSA by Anonymous Coward · · Score: 0

      Except, you know, Ireland is an ally, and has a Constitution, and a set of courts.

      Here's what the Irish government says:

      The Constitution does not specifically state a right to privacy but the courts recognise that the personal rights in the Constitution imply the right to privacy.

      For example, your private written communications and telephone conversations cannot be deliberately, consciously and unjustifiably interfered with. However, your right to privacy may be limited or restricted by legislation in the interests of the common good, public order and morality.

      In the absence of primary legislation explicitly allowing foreign agencies to spy on people in Ireland or data by non-Irish people that is held or controlled in Ireland, it is not lawful for them to do so, and would be (a) prosecutable under the Criminal Law Act 1997 and (b) privately prosecutable by injured parties.

      Statutes allowing for cooperation with foreign entities can be Constitutional but usually have to be carefully limited; no such statute allows for _lawful_ spying by the NSA (or GCHQ) on Irish people. It is unlikely that Irish courts would accept that it is unlawful to spy on Irish people but lawful to spy on non-Irish people holding data in Ireland, barring explicit legislation from the Dail.

      That said, there *are* such statutes in force, and the Gardai do engage in surveillance, in order to police against domestic organized crime (of which there is a long history in all of Ireland). They almost certainly engage vigorously with counterparts in other countries which are variously the victims of and/or supporters of organized crime in Ireland -- the Five Eyes states include obvious counterparts. Few people in Ireland would object to cooperation with the goal of containing mass loss of life arising from organized gangs' activities, even when the gangs attempt to justify murder by appeals to sectarianism.

      On the other hand, when the state refuses to explain what its doing, the population -- a chunk of which still has direct memory of living under foreign occupation with serious curtailments of their own civil liberties, and a bigger chunk of which has memories of intrusions on their own rights by the state after independence -- tends to want answers...

      http://www.thejournal.ie/vodaf...

  23. With Condie Rice on the board by spacepimp · · Score: 1, Insightful

    There is almost nothing to trust about the service.

  24. North American users can't get Irish TOS? by schwit1 · · Score: 1

    How does dropbox know where a user is from?

    1. Re: North American users can't get Irish TOS? by Anonymous Coward · · Score: 1

      I think they're called "internet protocol addresses", or something like that.

    2. Re:North American users can't get Irish TOS? by Anonymous Coward · · Score: 0

      Billing Address

  25. not outside the jurisdiction of the NSA by ron_ivi · · Score: 3, Interesting

    That's not a security move

    It's also not outside the jurisdiction of the NSA.

    Recall that the NSA is a DoD sub-agency --- so is quite restriced from spying on US Citizens inside the US. However DoD intel agencies are much more free to spy on international -- in fact, it's their main job.

    It seems to me this moves it INSIDE the jurisdiction of the NSA.

    1. Re:not outside the jurisdiction of the NSA by Anonymous Coward · · Score: 4, Insightful

      This has nothing to do with the NSA (the NSA will get anything they want - legally or not, if you think otherwise you are pathetic).

      This has to do with the legal bounds of the American court. If the service provider is stationned outside America and has local TOS, then it is outside the jurisdiction of the court. You cannot demand information that can be used in American civil cases. The NSA information can not be used in those cases unless they can prove it is legally handed to them.

    2. Re:not outside the jurisdiction of the NSA by rvw · · Score: 1

      This has nothing to do with the NSA (the NSA will get anything they want - legally or not, if you think otherwise you are pathetic).

      This has to do with the legal bounds of the American court. If the service provider is stationned outside America and has local TOS, then it is outside the jurisdiction of the court. You cannot demand information that can be used in American civil cases. The NSA information can not be used in those cases unless they can prove it is legally handed to them.

      If NSA information was illegally obtained, then they won't use it in court, but outside of court. If they have all files from a suspected dropbox user, it will reveal all kind of things about the user. Analyzing this will result in other leads, which can be used to get a normal court order.

    3. Re: not outside the jurisdiction of the NSA by nine-times · · Score: 1
      Yeah, that's what I was thinking. My understanding is that the NSA officially claims not to collect information on US citizens when the data resides solely in the U.S. However, they do monitor data going in and out of the U.S., so if you're an American located in the U.S., then storing data outside of the U.S. seems to open you to monitoring.

      On the other hand, I also thought part of what Snowden released showed that they didn't exactly stick to their own rules, and they were collecting all kinds of data that they weren't really supposed to. I could be wrong about that, though. Reporting on the issue has been terrible.

    4. Re:not outside the jurisdiction of the NSA by jythie · · Score: 2

      We are focusing on NSA here, but forgetting the elephant in the room: domestic law enforcement. The FBI, much less various state and local police forces, do not have access to NSA type spying capabilities and instead use the courts to demand information. Moving to Ireland would cut those sources out.

    5. Re:not outside the jurisdiction of the NSA by Anonymous Coward · · Score: 0

      I guess what they mean to say is, it's moved "outside the area where the NSA/FBI/etc can force the company to give up user information with just a single secret letter that is being used improperly. (ie: not for terrorist-finding reasons, or WAY too general ie: give us ALL your customer data. We think there might be a terrorist in there.")

      At least by moving it offshores, the NSA actually has to resort to actions that have a good chance of causing a bit of egg on the government's face if they're caught.

      But yes, I'll agree there's a good chance that this is just them going for money as well, since the Irish have that new law that's closing up the standard double irish tax evasion trick - where people simply open up an office in the country then funnel all their money through it. If they have an actual business that does actual work up there, then that probably avoids the new law's limitations and will let them continue doing the double irish.

    6. Re:not outside the jurisdiction of the NSA by fph+il+quozientatore · · Score: 1

      Also, what kind of idiot has NSA-sensitive information and stores it on Dropbox?

      --
      My first program:

      Hell Segmentation fault

    7. Re:not outside the jurisdiction of the NSA by easyTree · · Score: 1

      At least by moving it offshores, the NSA actually has to resort to actions that have a good chance of causing a bit of egg on the government's face if they're caught.

      The government's face has zero adhesive attraction to additional egg - they need to wash the face first to remove the existing dried egg.

    8. Re:not outside the jurisdiction of the NSA by Anonymous Coward · · Score: 0

      This. The NSA is under fire for collecting data on US citizens. What better way to silence that criticism than by having PRISM partners store their US data in one place and non-US data elsewhere? Then the NSA can concentrate on mining the Irish data, while the US data becomes the province of domestic law enforcement. The PRISM partners are doing the NSA a favor by helping them stick to their mandate.

      Of course, all the EU intelligence agencies will be plundering the Irish stores with glee, and the GCHQ will see it as their special playground, since spying on anything Irish is probably on the top of their todo list. Frankly, if I were a global firm, I'd be more inclined to register a US-based account to have my data stored in the US. As bad a reputation as the US has for spying, it's probably safer than the EU, where SIGINT was quietly born and raised. Of course, I wouldn't keep anything important on Dropbox of all godforsaken places, but unimportant working documents that need to be shared or sync'ed, sure.

  26. It's EU privacy laws by mtippett · · Score: 1

    EU privacy laws are fairly painful for US companies to comply with. To do business with EU individuals, Personal Identifiable Information needs to be handled according to a set of rules - http://ec.europa.eu/justice/da...

    It is often simpler for Amazon deployed companies to set up in the Ireland AWS zone.

    As others have mentioned, most foreign SIGINT/COMINT agencies can't gather intelligence domestically, so it lowers barriers. Ironically US companies that want to deal with EU customers may end up moving everything to Ireland. However this allows the NSA to gather intelligence indirectly on US citizens.

  27. It's about the lax tax by Anonymous Coward · · Score: 0

    and they will still give the NSA and U.S gov everything it asks for, in fear of being jailed on bogus charges back home in the U.S, period. Don't think your files and data are safe just because it's in Ireland. If you use U.S-owned services, then you're fucked, simply. Find European alternatives if you care about privacy.

  28. it makes no difference by Anonymous Coward · · Score: 0

    They're using Amazon right? So they're just placing their servers in AWS's Ireland region. It makes no political difference, NSA, the US govt or whoever still has full jurisdiction.

  29. But by Anonymous Coward · · Score: 0

    Wouldn't moving "stuff" out of USA just have USA use other more relaxed laws and practices to spy on that said stuff?

  30. Data location by Anonymous Coward · · Score: 0

    I can't see anywhere that says that data will be outside the USA, only the location of the "company".

  31. Exchange NAS for GCHQ+NSA? by Anonymous Coward · · Score: 0

    I'm not sure that's so smart. And as far as we know, the German BND is NSA's lapdog too...

  32. Simple solution by BarbaraHudson · · Score: 2

    The simple solution is just not to store your stuff on someone else's servers. If you put it out there, someone else has access to it.

    --
    "Transparent" is a shit show that trades on every stereotype going. A man in drag is NOT a transsexual.
    1. Re:Simple solution by Anonymous Coward · · Score: 0

      And you think your network is more secure??

    2. Re:Simple solution by BarbaraHudson · · Score: 1

      By definition my network alone is at least as secure as my network + other networks. When the net goes down, I can still access my files.

      --
      "Transparent" is a shit show that trades on every stereotype going. A man in drag is NOT a transsexual.
  33. off topic Re:That's not a security move by onepoint · · Score: 1

    you have no idea how much I just laughed. thank you for injecting some quality wit and brightening a dull day .

    --
    if you see me, smile and say hello.
  34. side note off topic Re:That's not a security move by onepoint · · Score: 1

    your transit delays are based on multiple problem of not only the pipes
    A) Argentine traffic is somewhat capped and multiple companies are trying to Cache locally to keep bandwidth down
    B) peering is a huge issue withing all the countries of latin america, it's slightly off balance in general to USA
    C) cell phone tech is hindering this, more demand from latin america to learn about the world than the world wanting to learn about latin america ( traffic flow wise )

    all these issue are being fixed, just requires more infra-structure investments

    your only trans-atlantic pipe is the Atlantis https://en.wikipedia.org/wiki/...

    --
    if you see me, smile and say hello.
  35. Had to tell you this... apk by Anonymous Coward · · Score: 0

    See the Ethan Hawke film "Predestination" (you're in particular, in for a REAL treat).

    * :)

    You'll understand why I stated this when you see it...

    Yes - it is TRULY, that good (In fact, I've never seen a film like it, & it's so well done - Takes a "flipping the script" twist/turn of events that's nearly Quentin Tarantino-like, but needed, for character development that really adds to the plot - I was out to see a Sci-Fi film, & was like "So, when's the time part begin?" & suddenly, you know!).

    (Enjoy... it put tears in my eyes in fact - & for you? I'd wager it will have a DEEP personal impact!)

    Sara Snook's beautiful too -> http://www.bing.com/images/sea... & she's the 'starlet'... good actress + another beautiful "aussie" girl comes outta the woodwork too, bonus!

    APK

    P.S.=> Ethan Hawke does it again - it's up there with another of my all-time favorites, GATTACA, so again: Enjoy... apk

    1. Re:Had to tell you this... apk by BarbaraHudson · · Score: 1

      I love time travel stories, and All You Zombies is right up there - it's held up well over the decades, and yes, it reverberates with me for personal reasons :-)

      --
      "Transparent" is a shit show that trades on every stereotype going. A man in drag is NOT a transsexual.
  36. Not even a Partial Fix. by Sir+Holo · · Score: 1

    Note, the announcement states that North American users are not able to opt into the Irish Terms of Service.

    Moving servers doesn't address the real problem, even if NA could opt in to the Irish TOS.

    DropBox indexes every file that is synced through their service. They are reading and cataloging everything that users sync via DropBox. But don't take my word for it — their CEO said so a year or two ago.

  37. Re:side note off topic Re:That's not a security mo by hjf · · Score: 1

    The problem with Latin America, actually, is the fact that no one wants to set up local servers here.

    For example, Netflix released their service here. Did they put a Netflix CDN box in every street corner like they did in the US? Of course not. They're just saturating the already busy international pipes.

    MaxCDN, one of the most well known CDN services, do they have servers in Latin America? From what I see: No, they don't. We rely on US servers. At least that's what I noticed when using the Bootstrap3 CDN, which uses MaxCDN: it was faster for me to serve the library from my own host than using the CDN.

    Now, other big players have set up servers. Many years ago Youtube set up a local server for Cablevision users in Buenos Aires (serving all of Argentina). Youtube is the only streaming service that works fine.

    Amazon has local servers. My business website is hosted on EC2 in Brazil and it's VERY FAST. It's less than 60ms away so it feels really snappy.

    Facebook has shown zero interest in serving users here. They have gladly set up offices everywhere to SELL ADS, but they haven't bothered to set up any datacenters here. And, of all services, facebook DEFINITELY SHOULD set up a datacenter here. Facebook isn't bandwidth hungry, but it definitely needs low latency to be responsive.

    And this is something that bothers me, honestly. I'm all for net neutrality, but this is really an abuse of net neutrality. Netflix is investing ZERO for providing service here. They charge the same amount as they charge in the US, but their service is lacking. They don't bother serving content locally and just saturate the pipes ISPs here can barely afford. My ISP has to pay more to serve a few Netflix users and this is reflected in my bill.

    So, answering to your points:
    A) Maybe Argentina has problems, but I have a friend in Colombia who's also complaining about the HORRIBLE performance on Facebook.
    B) That's an issue the US Embassies around Latin America should fix. Push for legislation around this issue (since US embassies do this all the time, they might as well force stupid ISPs here to behave).
    C) This doesn't make sense. Of course there's more demand from LATAM to the world, since everyone's servers are outside. If big companies (Google, Facebook and some of the larger CDNs) placed their servers here, it would be a completely different story. I've run tests on smaller ISPs and found that 80% of traffic, by volume, is Youtube. If Google sets up local caching all over these countries the pipes "get unclogged" really fast.

  38. Re:side note off topic Re:That's not a security mo by onepoint · · Score: 1

    Well that was well written...
    But more to the point.
    YouTube has a lot of it's own fiber, so it makes sense that the services for ad revenue balance out.

    Netflix ... hahaha you just made me laugh.... did you not read the nightmare ???
    I have weird views on this entire issue and I respect sides of it so let me vent it out.

    the business view is that comcast want's to make money ( and that is a legal mandate of a for profit business ). the subscription model they sell is known as a yield management model, maximize the return for keeping the pipe full.
    Netflix model is, get as many people on the pipe and screw the comcast model ( don't go into the box at the hub crap )

    comcast sells some cheap transit and netflix bought it from 3rd party.
    comcast delivers something to the consumer under the contract it provides, otherwise class action lawsuits would be all over and the model would fail

    comcast owns the pipes and the speed which it will deliver it, netflix would love to fill that pipe, and to do so it would have to pay more. Netflix won't pay, and comcast won't deliver. the market will decide in time whom will win.

    I think netflix will win in the long run ... ....
    Argentina ... how the heck can I legally get money out of the country at the blue rate and not the bank rate. and with the way that country is going, how soon does it become another Venezuela ( which I hope that would never happen, I want to visit soon ) .
    that's why brazil is a better investment option at this time, money flow is legal, while if I want to do anything in Argentina I'm screwed. do you know how Porsche transfers it's profits out of BA??? they have to trade the profits with alcohol producers and export it out of BA ... too much work.

    things should get better in 14 to 16 months, then performance will improve.
     

    --
    if you see me, smile and say hello.
  39. Re:side note off topic Re:That's not a security mo by hjf · · Score: 1

    Yes. The way I see it, Comcast, slimebags as they are, are right. Netflix expects everyone to keep up with their unreasonable bandwidth needs at their pace, which just won't happen.

    You have the USD thing backwards: You want to get USD out of the country at bank rate, but into the country at blue rate!

    I don't think Porsche is the one in your example. It's BMW. Porsche is part of VW and they don't have any issues importing, since they export a lot of cars to Brazil so they meet their export-import quota. BMW *could* install any sort of factory here, and meet the quota. But they're just not interested.

    BTW: bandwidth isn't really that bad. I have Arnet 30/10 (recently released service, up for 6/768k) for $20/mo, and it works at 30mbit except at 6-10pm

  40. Re:side note off topic Re:That's not a security mo by onepoint · · Score: 1

    Hi Again,
    While yes out at black and in at blue, that's a huge spread and just tooo much of a legal nightmare ... so I would stick to blue. ....
    No it's Porsche, My client set up the trade a few years back. ....

    now if you want a mystery to research
    look a the Iron Mountain fire in BA that happened I think about 18 months ago ...
    hmmm does the state know that IM copy documents for it's clients in multiple locations LOL

    --
    if you see me, smile and say hello.