Slashdot Mirror


Should Edward Snowden Trust Apple To Do the Right Thing?

Nicola Hahn writes: As American lawmakers run a victory lap after passing the USA Freedom Act of 2015, Edward Snowden has published an op-ed piece which congratulates Washington on its "historic" reform. He also identifies Apple Inc. as a champion of user privacy. Snowden states: "Basic technical safeguards such as encryption — once considered esoteric and unnecessary — are now enabled by default in the products of pioneering companies like Apple, ensuring that even if your phone is stolen, your private life remains private." This sort of talking point encourages the perception that Apple has sided with users in the battle against mass surveillance. But there are those who question Snowden's public endorsement of high-tech monoliths. Given their behavior in the past is it wise to assume that corporate interests have turned over a new leaf and won't secretly collaborate with government spies?

196 comments

  1. why is Eric snowden an expert on security by Anonymous Coward · · Score: 0

    He was aware of abuses. Brought them to light. What are his actual security credentials?

    1. Re:why is Eric snowden an expert on security by Anonymous Coward · · Score: 3, Informative

      He's been a security focused sysadmin for years. Look him up on Wikipedia

    2. Re:why is Eric snowden an expert on security by cjjjer · · Score: 0

      A source "with detailed knowledge on the matter" told Reuters that hiring screeners for Booz Allen had found some details of Snowden's education that "did not check out precisely," but decided to hire him anyway

      Resume falsified, yup sounds like a typical "expert" to me.

    3. Re:why is Eric snowden an expert on security by Anonymous Coward · · Score: 5, Insightful

      You seem to be upset that Snowden leaked information containing the horrible acts of our Government and it's military, yet you're not upset that the government and it's military were doing these horrible things. I think your priorities are askew.

    4. Re:why is Eric snowden an expert on security by prefec2 · · Score: 5, Interesting

      There is no proof that he handed secrets to the Russians or Chinese. The whole article on that was made up by its authors.

      BTW: People criticising the USA normally criticise the politics and actions of the USA. To call them America-haters is totally wrong. In two ways. First, there is a lot more America then only the USA. Use google maps if you do not believe me. Second, its the actions abroad that cause you low reputation. And three, your tourists often help to foster such reputation. Even though the last thing is hardly something that can be changed. We all have parts of our population which go on vacation and ruin our reputation. Ask the Germans and the British or even better ask the Italian and Spanish on the reputation of Germans and the British.

    5. Re:why is Eric snowden an expert on security by nucrash · · Score: 1

      Murica!!!

      --
      Place something witty here
    6. Re:why is Eric snowden an expert on security by gstoddart · · Score: 1

      He was aware of abuses. Brought them to light. What are his actual security credentials?

      What are yours?

      His are that he was trusted as an admin in one of the most secret places you can imagine, and found that they were doing appalling things.

      --
      Lost at C:>. Found at C.
    7. Re:why is Eric snowden an expert on security by Anonymous Coward · · Score: 0

      Who's that? Any kin to Edward Snowden?

    8. Re:why is Eric snowden an expert on security by davydagger · · Score: 1

      you mean after he blew the whistle.

    9. Re:why is Eric snowden an expert on security by Anonymous Coward · · Score: 1

      Well, since we're not at war with Russia or China I'm not terribly worried about them having our secretes.
      (Do remember the NSA isn't a weapons manufacture or a military organization. If top secret weapons plans or troop movements can be extrapolated form what the NSA does watch (public and private civilian communications) than the secrets were probably already out as other nations have equivalent agencies.
      Anything we're doing that it would be a problem if they knew about we shouldn't have been doing in the first place.)

      Which really is the main point here. The NSA is doing a lot of stuff it shouldn't be. In a democratic republic the voters need to know when this shit happens because the only way it gets fixed is if we hold the elected officials who hold the leash to task with the ballot box. Otherwise the preverbal dog juts keeps shitting in out collective lawn and tearing up our garden.

    10. Re:why is Eric snowden an expert on security by fustakrakich · · Score: 5, Informative

      Kidnapping, torture and war... for starters.. The spying? Eh...

      --
      “He’s not deformed, he’s just drunk!”
    11. Re:why is Eric snowden an expert on security by MachineShedFred · · Score: 4, Informative

      Why is it that when the government does something that he doesn't like, it's "big government run amok" but when it's something that I don't like, I'm "an America hater"?

      What would the Founding Fathers, which most conservatives uphold to be the absolute pinnacle of what our government should strive to be, say about the NSA's data collection on it's own citizens? I personally think they made it perfectly clear in the 4th Amendment, but that's just me.

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
    12. Re:why is Eric snowden an expert on security by Curunir_wolf · · Score: 4, Informative

      A source "with detailed knowledge on the matter" told Reuters that hiring screeners for Booz Allen had found some details of Snowden's education that "did not check out precisely," but decided to hire him anyway

      Resume falsified, yup sounds like a typical "expert" to me.

      You have bought into the administration smear campaign and government propaganda. Booz Allen isn't necessarily lying, here, but this statement, along with the ridiculously picayune reasons for rejecting candidates based on some detail not being perfect, it's likely something as innocuous as listing the wrong day of the month for a graduation, or misspelling of an instructor's name.

      You might educate yourself by checking out the form Snowden was required to complete. I challenge anyone to be able to fill it out completely and include nothing that does not "check out precisely".

      --
      "Somebody has to do something. It's just incredibly pathetic it has to be us."
      --- Jerry Garcia
    13. Re:why is Eric snowden an expert on security by anagama · · Score: 2

      You're a troll or a moron. Look at this interview with Tom Harper, the author of that hit piece: http://edition.cnn.com/videos/...

      All he says, repeatedly (besides "ummm"), is that he has no idea if the facts are true and he just wrote what people in the government told him to write. He's a stenographer, not a reporter.

      --
      What changed under Obama? Nothing Good
    14. Re:why is Eric snowden an expert on security by Copid · · Score: 5, Interesting

      One thing I tell everybody who fills out the SF86 is, KEEP A COPY OF YOUR SF86. You'll probably fill it out more than once in your career. Starting from scratch is a gigantic pain and errors creep in if you have to look up older stuff from primary sources.

      --
      An interesting anagram of "BANACH TARSKI" is "BANACH TARSKI BANACH TARSKI"
    15. Re:why is Eric snowden an expert on security by OhPlz · · Score: 2

      How many countries on the American continents have "America" as part of their name, other than the USofA aka America? Do you really want the phrase "United States of America haters" to become a thing?

    16. Re: why is Eric snowden an expert on security by Anonymous Coward · · Score: 0

      Presumably the files he provided were encrypted so he just gave them a lot of numbers. It would be up to the recipient to construct information from the numbers.

    17. Re:why is Eric snowden an expert on security by Anonymous Coward · · Score: 0

      You know, a real agency would've shut up about the whole deal. They wouldn't have admitted Snowden worked for them, or that he'd actually stole any data, or that the data was in any way real and the whole matter would've been forgotten in less than a year.
      Now, they're saying not only they were crooked enough to bend the laws like pretzels, but also incompetent not to properly screen their hires in their first place?
      Where did they get their training, the Secret Squirrel School of Spying?

    18. Re:why is Eric snowden an expert on security by prefec2 · · Score: 0

      The continent is called America. The country is called United States of America in short USA. So to be precise you should the correct term. Here, politicians often call critic towards the USA as anti-Americanism. However, this is still wrong, because the criticism is direct to the USA and not to Venezuela (even though that country should also be criticised extensively).

    19. Re:why is Eric snowden an expert on security by Helican · · Score: 1

      While the position you have taken is reasonable, proving a negative "There's also no proof he didn't," is not possible. I have rubbed elbows with Italians while on vacation and it is my experience they are the most rude, loud and inconsiderate lot in all of non-'Murica.

      --
      ~The grand unifying truth is that the State's power to change us now exceeds our power to change the State.
    20. Re:why is Eric snowden an expert on security by Anonymous Coward · · Score: 0

      126 pages of questions?

      I wouldn't fill that out unless the job paid $1000+ an hour.

    21. Re: why is Eric snowden an expert on security by Anonymous Coward · · Score: 0

      He agonized over whether or not to stay anonymous. Anyone who has seen citizen four knows this. The fact that you are not even aware of this or choose to gloss over that fact means your entire comment can be safely disregarded.

    22. Re:why is Eric snowden an expert on security by Anonymous Coward · · Score: 0

      I've seen people insist here many times that the US is a consistent threat to world peace and the world would be so much better off if we all died as soon as possible.

      Only in fringe, wingnut comments that are quickly modded Troll and/or Flamebait. Not in anything that accurately represents any significant portion of Slashdot's readership, or could even be honestly mistaken as such.

    23. Re: why is Eric snowden an expert on security by unami · · Score: 1

      those files are in the posession of multiple news organizations. they obviously had to decrypt them while working on them. after all the n.s.a. tools, snowden revealed, i find it highly unlikely, that russia and china were unable to obtain unencrypted copies of those files from news organizations who 1) employ a lot of people and have a lot of networked, unsecured computers standing around in their office and 2) employ a lot less than tech savy people (e.g. typical journalists).

    24. Re:why is Eric snowden an expert on security by Anonymous Coward · · Score: 0

      The Federalist Papers were largely written under false names. You are absolutely correct that our founders would have vehemently opposed this type of spying.

      Of course, they also wanted to be isolationists, which is pretty much impossible for the US anymore since we've decided to make everything in the world our business. *sigh*.

    25. Re:why is Eric snowden an expert on security by Anonymous Coward · · Score: 0

      Who the fuck is Eric Snowden?

    26. Re:why is Eric snowden an expert on security by Anonymous Coward · · Score: 0

      You have no idea what you're talking about. The NSA is a repository for every WORLD secret that the NSA has managed to beg, borrow or steal. I have no idea what Snowden had access to, but do not be confused about what the NSA does: They collect information. That's all they do. They aren't *supposed* to be doing it in the states which is the problem.

    27. Re:why is Eric snowden an expert on security by strikethree · · Score: 1

      What would the Founding Fathers, which most conservatives uphold to be the absolute pinnacle of what our government should strive to be, say about the NSA's data collection on it's own citizens?

      This is a bipartisan issue, but you brought up conservatives, so that is what I will address:

      The conservatives are NOT conservatives. They call themselves that but they clearly are not. They have expanded the scope of government as much as the liberals and they have definitely NOT followed any philosophies expounded by the founding fathers. (No, not capitals, they were just people. Extremely respectable people but capitals would elevate them too far.)

      In summary conservative, liberal, democrat, republican, etc. None of these are what they seem. Their outward appearance is purely manufactured. You have to look at their actions to see who they are and then not use words to label them as the words themselves have become corrupted.

      --
      "Someone needs to talk to the tree of liberty about its ghoulish drinking problem." by ohnocitizen
    28. Re:why is Eric snowden an expert on security by Kartu · · Score: 1

      Flamebait, eh?... Good Lord....

      I have been following news, somewhat.
      I know Snowden has leaked a lot of intelligence materials and as far as I remember, it was mostly about (mostly illegal) surveillance, which, as such, doesn't qualify as "terrible act" in my books.

      But torture, eh? He did make statements about it, but it was a fucking senate report: WTF did he "leak" about torture?
      http://www.dailydot.com/politi...

      And, oh, I live in Germany. And, nope, I don't care about Merkel being spied on. Considering what a pathetic motherfucker our previous chancellor was, I even feel a bit safer, if an ally keeps an eye on them.

    29. Re:why is Eric snowden an expert on security by Demonoid-Penguin · · Score: 1

      Resume falsified, yup sounds like a typical "expert" to me.

      And your qualifications?

    30. Re:why is Eric snowden an expert on security by doccus · · Score: 1

      There is no proof that he handed secrets to the Russians or Chinese. The whole article on that was made up by its authors.

      There's also no proof he didn't. While I'd admit he probably didn't hand anything over to them, I'm pretty sure that both countries separated him from his laptops and imaged them so they could shunt decryption off to a series of networked computers. It's certainly possible that they've already cracked his encryption (maybe there is a bug in it that they know about and he doesn't). It's also possible that they haven't cracked it yet. But I think there is almost zero chance that they aren't even trying to crack it.

      BTW: People criticising the USA normally criticise the politics and actions of the USA. To call them America-haters is totally wrong. In two ways. First, there is a lot more America then only the USA. Use google maps if you do not believe me. Second, its the actions abroad that cause you low reputation. And three, your tourists often help to foster such reputation. Even though the last thing is hardly something that can be changed. We all have parts of our population which go on vacation and ruin our reputation. Ask the Germans and the British or even better ask the Italian and Spanish on the reputation of Germans and the British.

      Keep in mind that this is Slashdot and it's very common for European members to trash the US at every turn, including all of its citizens. I've seen people insist here many times that the US is a consistent threat to world peace and the world would be so much better off if we all died as soon as possible.

      OK, so no proof that he did.. but also no proof that he DIDN'T. "So let's just go right ahead and charge him with having leaked files to China and Russia, since if there's no proof he didn't, he must be guilty".. Screw the constitution" He MUST have leaked secrets to Russia, especially if there's no evidence , let's make it up". Let's be just like the people he tried to expose"... That attitude all that is wrong with the country today, where people feel that violating constitutional liberties is OK to catch someone exposing violators of constitutional rights.. Sheesh... In rebuttal you agree he likely didn't actually intentionally do so, but how is Russia or China sending spooks to access his laptop while he's away, his doing, any more than a foreign agent stealing files from a diplomat's compter when they're away. You don't call the diplomat a traitor because his files were stolen. And I'm sure he's not only capable of noticing the incongruity of a chinese following him everywhere in Russa (!) but surely Snowden has the chops to encrypt his stuff a lot better than "martini sloshed" foreign diplomats..

    31. Re: why is Eric snowden an expert on security by doccus · · Score: 1

      THe news agencies decrypted NOTHING. They received them unencrypted,that was how the info was released in the first place. He wouldn't be much use as a whistleblower if he released totally encrypted files. ;-) And if you really think the typical newspaper has the tools to decrypt a CIA cypher, wow.. Wanna buy some swamp for a million bux?

  2. The basic tenet of security by ColdWetDog · · Score: 5, Insightful

    Is that you don't trust nobody.

    I can't imagine actually 'trusting' Apple or any other corporation or government. Give them a pat on the back for making security easier - sure. Trusting them, not so much.

    --
    Faster! Faster! Faster would be better!
    1. Re:The basic tenet of security by praxis · · Score: 5, Insightful

      You must trust some things some times with some data, or you can get no meaningful work done. Balancing that trust (the risk) with that data (the value) is what security is about. I put this data, that I just wrote, on this website, because it is low value and low risk. I wouldn't post here my social-security number because that would be high risk. I wouldn't post my private key here either, but I do store my private key on a hard drive I did not build myself nor did I verify myself running an OS I did not build myself nor did I verify myself because while it's high value, it is low risk due to the many rounds of secure math protecting it.

      As to trusting Apple or any other corporation or government. You implicitly trust your hardware manufacturers, all of them, unless you build your own hardware from scratch. Same goes for software, even open source software.

    2. Re:The basic tenet of security by s.petry · · Score: 1

      I completely disagree. I trust nobody, and am glad that others follow suite. It's through this constant lack of trust that we found flaws in numerous technologies which allowed certain people back door access. No company should get a free pass with security. They should all have to constantly prove their worth and people should constantly be testing.

      That is not to say I don't use products, but use does not imply 100% trust. It implies just enough trust to use something.

      --

      -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

    3. Re:The basic tenet of security by Opportunist · · Score: 1

      You cannot trust NObody. To do that, you'd not only have to have unlimited experience and access to any and all source codes, even if you had both you lack the third ingredient: unlimited time.

      You simply do not have time to audit everything yourself. Every line of code in Linux, every line of code in your router's firmware, every line of code in every tool used to create any other code you use... Not possible.

      At some point you have to trust someone. A person, an entity, an organization. What I agree on is that trust is something that said entity has to earn and that it's BY FAR faster lost than earned.

      But at some point, you just have to trust someone.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    4. Re:The basic tenet of security by shadowrat · · Score: 2

      that's the most similar complete disagreement i've ever seen.

    5. Re:The basic tenet of security by s.petry · · Score: 1

      You implicitly trust your hardware manufacturers,

      That is the part I disagree with, and in most cases is simply not true.

      --

      -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

    6. Re:The basic tenet of security by nine-times · · Score: 4, Insightful

      I trust nobody

      Bullshit. As praxis pointed out, you trust some people, sometimes, with some data. Otherwise you wouldn't post here. At a bare minimum, you've trusted Slashdot with your username and password, and you've trusted us, the Slashdot readership, with the contents of your post. What's more, whatever computer you're working on has at least hardware (with BIOS/firmware), an OS, and a web browser. You've trusted whoever made all of those things. Even if you are using FOSS, unless you've performed a thorough code review of the sort that you would perform on a suspected virus, you've trusted the community to review the code and remove security threats. Even if you encrypt your data, you're trusting whoever wrote the encryption software, along with the people who created the platform that the encryption software runs on, to be both honest and competent.

      What praxis was pointing out, which is entirely correct, is that security is not about being "absolutely secure". It's about balancing "making things accessible to those who I'd like to grant access" against "making things inaccessible to those who I would not like to have access." It inherently includes trusting authorized users, but also it pretty much always includes some level of trust (not necessarily absolute trust) of some 3rd parties. When you put money in the bank, you're putting some trust in the people who own the bank, in the bank's guards and tellers, in the police to protect the bank, and in the government to oversee the whole system and provide legal recourse if anyone else violates your trust. You don't have to trust any of those people absolutely, but that's because of the security practice of dispersing trust among multiple parties.

      So no, you're trusting someone, whether you admit to it or not.

    7. Re:The basic tenet of security by shadowrat · · Score: 1

      I get it. you put your data on a hard drive, but you feel uneasy about it. your unease makes your feel like you aren't trusting the hard drive manufacturer. the gp (i think) would say regardless of feelings, you put your data on a hard drive. at the end of the day, your data is there and the trust was implicit. your trust may not be 100%, but your private key is 100% there.

      semantics to me.

      unless you actually are splitting your key among different drives sourced from different manufacturers. in that case, bravo.

    8. Re:The basic tenet of security by s.petry · · Score: 1

      I get it. you put your data on a hard drive, but you feel uneasy about it.

      Most of us do exactly that right? We don't just store our sensitive data on a hard drive, we create an encrypted volume and put data in that.

      I quoted the statement, and will ask you to read the definition of implicit. I don't have unqualified trust for hardware any more than I have unqualified trust for software.

      --

      -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

    9. Re:The basic tenet of security by shadowrat · · Score: 1

      we seem to be at an impasse then as there are a couple of definitions. One for me and one for you.

    10. Re:The basic tenet of security by s.petry · · Score: 1

      There is one common definition, and if you read the dictionary you will find several parts but none of those parts discount the other. In normal use it means "implied" which indicates no formal explanation or express statements needed. See item 2 for further clarification which is "unquestioning". Even when dealing with Mathematics it has the same meanings.

      --

      -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

    11. Re:The basic tenet of security by Anonymous Coward · · Score: 0

      I completely disagree. I trust nobody, and am glad that others follow suite.

      Well since you made that claim twice now, it is no longer simply being mistaken, but you are lying.

      You SAY you don't trust anyone, yet you SHOW you trust a large number of hardware manufacturers, evidenced by the fact you used such trusted hardware to post the very comment where you claim you didn't utilize any computing hardware to post to slashdot.

      Sorry, but your post is here. We all see it. You clearly trusted that system and all of its components enough with your comment (doesn't matter that it is low trust, it is still non-zero trust, which was your claim)

    12. Re:The basic tenet of security by Wraithlyn · · Score: 1

      OK, I'll bite.

      Why would anybody have to "trust Slashdot" to post a comment here? Please be specific, instead of spewing rhetorical bluster that sounds good until you actually think about it.

      I don't use this username or password anywhere else. What am I "trusting" Slashdot (or "the readership".. wtf?) with exactly?

      --
      "Mind, as manifested by the capacity to make choices, is to some extent present in every electron." -Freeman Dyson
    13. Re:The basic tenet of security by Carewolf · · Score: 1

      You cannot trust NObody.

      No that is easy. You just have to trust anybody, and then you won't trust nobody anymore.

      Now what you and the GP probably meant with is to "not trust anybody" or "trust nobody".

    14. Re:The basic tenet of security by AmiMoJo · · Score: 2

      His point isn't that you should trust Apple, it's that every company should make things as private as possible with encryption by default. Even if there is a back door, what Apple has done will prevent a lot of low level abuse. Police won't be able to access you phone without permission, and there is no way the NSA is sharing their back door with them. Maybe the FBI might get a look in if they have a really high value target and can explain it away with some parallel construction, but in any case it's a huge win for most people even if Apple are ultimately treacherous.

      Companies that encrypt and protect users by default should be praised, if not entirely trusted. Privacy and security are becoming desirable features, largely thanks to Snowden's revelations.

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
    15. Re:The basic tenet of security by Anonymous Coward · · Score: 0

      N0! Don't trust them any farther than you can throw the rock of Gibraltar! They are not trustworthy at all!

    16. Re:The basic tenet of security by Opportunist · · Score: 1

      Not trusting nobody does not mean trusting anybody. It means trusting somebody. The difference is that with somebody, you pick and choose rather than letting chance take control.

      --
      We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
    17. Re:The basic tenet of security by praxis · · Score: 1

      What am I "trusting" Slashdot (or "the readership".. wtf?) with exactly?

      You are trusting Slashdot with your username, your password, and the text you submitted in any comments or stories you may have written. If you do not use this username or password anywhere but here, (and good for you on that), then you are making the data you give them less valuable. That's a sensible thing to do, but you do trust them with that.

      If you had zero trust in Slashdot, you wouldn't even give them that. They could, if they were malicious, alter your submitted posts to make you out to be a pathological monster vowing to murder a world leader and alert authorities of that country. Those authorities might not believe in the rule of law and send agents after you.

      A far fetched example of course, which means you don't have to trust them very much, but it cannot be zero, or you wouldn't give them the little information you did.

    18. Re:The basic tenet of security by praxis · · Score: 1

      I trust nobody

      That is not to say I don't use products, but use does not imply 100% trust. It implies just enough trust to use something.

      You seem to contradict yourself there. You cannot trust nobody but then trust somebody just enough to use something. My entire point was that non-zero trust was impossible when using anything you did not build yourself. A point you seem to agree with despite your protestations that you completely disagree.

    19. Re:The basic tenet of security by KGIII · · Score: 1

      When I was young I had an old Saab. I guess I have always been odd. Anyhow, that Saab was terrible and I had little money or expertise to repair it. I could not trust it to get me to my destination. Yet, strangely enough, I still used it. I could not trust it to start, trust the brakes to work, or even trust the lights to remain on for very long. (I did fix the brakes.)

      You do not need to trust something to use it.

      --
      "So long and thanks for all the fish."
    20. Re:The basic tenet of security by nine-times · · Score: 1

      You might think that "security" is a concept that only applies to some information, and then that information is either "secure" or "not secure". Essentially what I'm arguing (and I think you are too) is that "security" is a concept that applies to all information, and it's a spectrum of "how inaccessible is it to people that I don't want to have this information" vs. "how accessible is it to people that I do what to have access to this information". Nothing falls outside of that.

      So even the contents of your post, this post that I'm responding to, falls under a sort of security scheme that you're not really thinking about. The key thing with this post is, there probably isn't anyone who you're particularly averse to them having access, and you want it to be accessible to the public in general, so security is very light. Therefore, the level of security that Slashdot offers (basically none) is an appropriate level of security. As I pointed out, when you log into Slashdot, you type in your username, which has a security level comparable to the contents of your post. For both of those things, you have to trust Slashdot only a very small, almost non-existent amount, but it's still trust.

      Now you might be thinking, why is this trusting Slashdot to put in public information? Well, that's where it gets a bit foggy and complicated. You don't know what they're doing with that information, and you probably don't know exactly what you're disclosing to Slashdot. By your word choice, you might be giving them information about your background. Use "lift" instead of "elevator", and it hints that you're not American. Mention that you went sledding when you were a kid, and it tells us something about the region where you grew up. There has actually been research into identifying the author of an anonymous writing sample by word choice and sentence structure alone, potentially allowing someone to identify all of your posts across various sites and usernames as "written by the same person".

      Really, who knows what information you give away when you post something online, but the point is, that is information that you're trusting Slashdot (and the rest of us) to have.

      But then in addition, you also give Slashdot your password. You can say, "Well I don't care about that password. I don't reuse it anywhere and so it doesn't constitute trust." I bet that you don't want me to have your Slashdot password, though, because you don't trust what I'd do with it. That means, when you're logging into the Slashdot website, you're trusting that the site is valid and not compromised, and that Slashdot will keep the password secret. The level of security you're demanding may not be very high, but it's higher than what you're expecting from the contents of your post.

      In addition to that, by visiting the site, you're trusting that Slashdot doesn't have malicious code that will compromise your computer. You're also trusting them with information about what browser you're using, and what your IP address is. Now you might have your browser set up to be super-secure, not to run any javascript or Flash, to route through Tor, to block tracking attempts, to obscure data about the system you're working on, etc. In that case, then you're trusting Tor, the developers of your browser, etc. to do those things competently.

      No matter what, you're trusting some people, to some degree, with some information. It may all be information that you don't care that much about, but sharing it still implies some base level of trust.

    21. Re:The basic tenet of security by praxis · · Score: 1

      When I was young I had an old Saab. I guess I have always been odd. Anyhow, that Saab was terrible and I had little money or expertise to repair it. I could not trust it to get me to my destination. Yet, strangely enough, I still used it. I could not trust it to start, trust the brakes to work, or even trust the lights to remain on for very long. (I did fix the brakes.)

      You do not need to trust something to use it.

      You do, to some degree. You trusted the Saab not to explode when you attempted to start it, for example. Trust is not a 0% or 100% thing, it's more complicated than that. When someone says they don't trust X, they really mean they don't trust X to do Y. That Y is important, if sometimes implied. You did not trust your Saab in many regards, but you did trust it in some regards. If you did not trust it in *ANY* regards, you wouldn't use it.

    22. Re:The basic tenet of security by david_thornley · · Score: 1

      I don't see the problem. It's a reasonable deduction, but not a certainty, that my name is David Thornley, and I believe I've put enough geographical information into Slashdot posts to identify a single person of that name. Therefore, anybody could look at my posting history and tie them to an identity which is probably mine. That's why there are certain things I simply don't mention on Slashdot posts.

      Suppose that I had never heard of Slashdot. What would prevent somebody else using this identity as you suggest: making me seem like a loony (if you prefer, a different sort of loony) who desperately wanted to assassinate Vladimir Putin (not one of my real personal goals)? (We know Russian shills monitor Slashdot, so it would likely be spotted.) There's lots of web forums I don't belong to, and I have approximately no control about what they say about me.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  3. Behaviour in the past? by Luthair · · Score: 1, Funny

    None of the tech companies have been shown to be co-operating voluntarily with government spies. Telecoms have but not Google / Apple / Microsoft.

    1. Re:Behaviour in the past? by gstoddart · · Score: 4, Insightful

      None of the tech companies have been shown to be co-operating voluntarily

      Quite honestly, does it matter if this is voluntary?

      When you have secret laws which say "give us this or else", WTF difference does 'voluntary' matter?

      Even the transparency reports say "we can't actually tell you what we did because we're under a gag order".

      Unless the government no longer has secret laws, or tech companies stand up to them and implement tech which doesn't have built in security bypass ... voluntary don't mean a damned thing.

      --
      Lost at C:>. Found at C.
    2. Re:Behaviour in the past? by ic3m4n1 · · Score: 2

      Well, one way could be put responsibility in hands of users or within product itself.
      So even if some one comes up with "give us this or else", companies can just say go take it from device its yours. We dont have information you request but we can point you to person whom we sold the device.

      This can make difference between companies that voluntarily cooperate and put backdoors and those that just choose to push this responsibility to end users and their devices.

    3. Re:Behaviour in the past? by Anonymous Coward · · Score: 0

      As fas as I'm aware, Apple is the only one working against even involuntary cooperation by making sure that they can't break device encryption by not keeping any keys or access to any keys.

      Seems like that's a pretty important point, and the essence of what Snowden is saying.

    4. Re:Behaviour in the past? by MrTester · · Score: 1

      You are absolutely right, but....
      American companies are starting to feel the paranoia about this hit their bottom line. People are trying to find alternatives to american products.
      And THAT means that the lobbyists are jumping into the game. The US government may not listen to the little people's fears, but they will listen to corporate America and we will see changes to the laws.

      Thank goodness America is run by the corporate elite, otherwise we might be in trouble.....

    5. Re:Behaviour in the past? by binarybum · · Score: 1

      Define spies. Google has turned data over to the feds that has led to US citizens being arrested. Google cooperates with China's great firewall policies and therefore contributes to human rights violations. Google is as evil as they come when it comes to data security and protection, do not consider your data secure with them.

      --
      ôó
    6. Re:Behaviour in the past? by anagama · · Score: 1

      As fas as I'm aware, Apple is the only one working against even involuntary cooperation by making sure that they can't break device encryption by not keeping any keys or access to any keys.

      If that is true, I can understand why Snowden praised Apple. Let's be honest about encryption technologies -- they are fickle and difficult even for people who are immersed in technology. For people who aren't tech savvy at all, encryption technologies are 1) not even known or thought about and 2) almost impossible to implement.

      As an exemple, look at GPG email encryption. Once you get the whole public key / private key thing, it isn't that hard, but, getting to that point is actually very difficult for most people. Then there are ongoing issues with usage, keys going out of date or weird stuff happening making things produced in one system not readable in another -- just a bunch of administrative crap most people don't want to deal with -- they just want to send a text or an email and get done what they have to get done.

      So if Apple can make that seamless, AND Apple cannot play man in the middle and decrypt it -- that is a huge win, one which other companies will surely follow. Things are getting slowly easier in the aftermarket. TextSecure (Android) and Signal (IOS), makes encrypted texting pretty seamless, but most people aren't even aware of these ( https://whispersystems.org/ ). They just use the default texting app on their phone. If that default app did secure encryption by default, that's a good thing.

      --
      What changed under Obama? Nothing Good
    7. Re:Behaviour in the past? by CaptainDork · · Score: 1

      Right, and, I'll tell you what's a bitch:

      American companies are subject to attack by people just like you and me, if we felt like it.

      They aren't running stuff that's much better than we have.

      The whole goddam Internet is porous.

      --
      It little behooves the best of us to comment on the rest of us.
    8. Re: Behaviour in the past? by unami · · Score: 1

      well, there's that documented skype-backdoor - i wonder if microsoft closed that after buying them.

    9. Re:Behaviour in the past? by Luthair · · Score: 1

      Google pulled out of China years ago. How is a lawful request co-operating?

    10. Re: Behaviour in the past? by Anonymous Coward · · Score: 0

      Microsoft are the ones responsible for adding the backdoor. That was the whole point of moving from P2P to client-server model.

    11. Re:Behaviour in the past? by strikethree · · Score: 1

      It is a shame that I used up all of my mod points already. You are +4 but your words and their meaning should be +5. I doubt many folks actually think about the consequences of all of this secrecy garbage.

      Voluntary? Involuntary? When choices are forcibly removed through secrecy, it seems a lot like enslavement to me.

      --
      "Someone needs to talk to the tree of liberty about its ghoulish drinking problem." by ohnocitizen
    12. Re:Behaviour in the past? by david_thornley · · Score: 1

      Telecoms have fallen over their feet to hand information over to DHS. (Qwest didn't, so the powers that be had to make an example of them.) Do you have any evidence that Google handed over information without a legal requirement? You can't expect a company to break the law for you, because if they have a pattern of lawbreaking that annoys the authorities they will not survive.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  4. no by kwoff · · Score: 1
  5. What reform? by CrimsonAvenger · · Score: 4, Insightful

    The only real change as a result of this law is that the telecoms have to pay to collect & store the information that the Feds used to do themselves.

    So now they'll have to get their secret court to rubberstamp a warrant for them instead of just emailing a request downstairs when they want some information on someone. Big whoop!

    --

    "I do not agree with what you say, but I will defend to the death your right to say it"
    1. Re:What reform? by Bob+the+Super+Hamste · · Score: 1

      So now they'll have to get their secret court to rubberstamp a warrant for them instead of just emailing a request downstairs when they want some information on someone. Big whoop!

      I'm not even sure it requires that much effort. Since the data is being held by a 3rd party they could always just issue a NSL or given how complacent telecoms were in the past just ask nicely and get the data they want, all without a warrant. Having not read the entire USA FREEDOM Act I don't know if this is the case but it seems the most likely. If someone more knowledgeable that myself chimes in with this info that would be great but until I hear otherwise I will assume this was a shitty deal.

      --
      Time to offend someone
    2. Re:What reform? by Anonymous Coward · · Score: 0

      The only real change as a result of this law is that the telecoms have to pay to collect & store the information that the Feds used to do themselves.

      So now they'll have to get their secret court to rubberstamp a warrant for them instead of just emailing a request downstairs when they want some information on someone. Big whoop!

      Always so negative, think of it as a triumph for domestic outsourcing.

    3. Re:What reform? by fustakrakich · · Score: 1

      The telecoms have to pay? No, the customers and the taxpayers pay. It's right there on your invoice: "Spying and data retention" or it's under "Other fees"...

      --
      “He’s not deformed, he’s just drunk!”
    4. Re:What reform? by MachineShedFred · · Score: 1

      ... and the NSA has a new revenue stream as they sign contracts to co-locate the telco's metadata storage in their data centers...

      --
      Slashdot still doesnâ(TM)t support Unicode after it was added to the HTML standard in 1997.
    5. Re:What reform? by nine-times · · Score: 1

      This is actually a very important technical difference, even if it's not a big practical difference. Essentially, the NSA was already collecting all of the data first, and just saying, "we promise we won't look at it unless we have a warrant." If the procedure is now to have telecoms (who inherently have access to that information) turn over records when they're presented with a warrant, then this falls back into something resembling normal law enforcement procedures. The police can get your phone records if they have a warrant.

      It's like this: The police can search your home if they can get a search warrant. It's as though the NSA was performing a warrant-less search your home on a regular basis, collecting photos, samples for analysis, fingerprints, and anything else they wanted, then running it all through analysis looking for crimes, and then saying, "But that's not an illegal search because we promise not to use that evidence against you unless we can get a warrant first."

      So if now there's reform that says, "No, you can't collect that evidence until you have a warrant," then it's a big step towards solving the problem. I feel like the whole "secret court" thing is still a problem. The records should be made public at some point, even if it's somewhat delayed and with some information redacted. You can't have a democracy while having secret courts devoid of public oversight.

    6. Re:What reform? by Anonymous Coward · · Score: 0

      Don't forget the other problem.
      IN the past the telecoms had haphazard data retention policies. Now they have a government mandate to maintain the data. So we've given them cover to keep the data and exploit it for their own purposes. Maybe they didn't see the value in data-mining it before, maybe they just hadn't yet got around to it. But now that they absolutely must keep it and it has become such a well-known topic, we can be 100% sure they are looking to exploit it in any way possible and if you complain about it or want to opt out: "you can't do that ma'am, it's the law."

    7. Re:What reform? by meta-monkey · · Score: 1

      Also, one of the protections afforded by the Secure Communications Act was that while, yes, the government needs a warrant to get the records from the phone company, the phone company also MAY NOT hand the data over to the government WITHOUT a warrant. So the phone company is incentivized to protect records about you, because it's illegal to turn them over otherwise.

      Which is actually why they need a warrant, and not merely a subpoena. A warrant is written authorization from the government immunizing you from punishment for something that would otherwise be illegal. So the phone company needs that warrant to protect them or else handing over the records is in violation of law.

      Now how that works with regards to still over-broad warrants and NSL letters so you can't talk about them is something we'll just have to wait and see on.

      --
      We don't have a state-run media we have a media-run state.
  6. Molehill by Anonymous Coward · · Score: 1

    Anyone characterizing that single line as an endorsement is just clickbaiting. It is absolutely appropriate to give apple praise for improving their baseline. Just because you recognize the improvements they've made doesn't mean you've left them off the hook for continuing on that path.

    The article's author seems to be taking the tact that nothing short of perfection is worthy of praise. That's a recipe for maintaining the status quo.

  7. Huh? by Anonymous Coward · · Score: 0

    It was one sentence out of an entire essay. I think Ed's point is to praise a direction the country seems to be taking, not single out Apple or even more ridiculously companies in general to just "do the right thing". The piece is about how the world has changed in the past 2 years, not about how we've arrived and a privacy shangri-la where corporations all do everything the way we'd all prefer.

  8. There appears to have been a sea change by 93+Escort+Wagon · · Score: 3, Insightful

    It's still an open question how much we should trust companies like Google and Apple... with regards to their internal motivation and plans. However (anecdotally, at least) it seems pretty obvious these companies learned from Snowden's leaked documents just how much the government was screwing them, and they've seen how it's hit their bottom line - any trust that might've previously existed is gone.

    Remember the (anecdotal) reaction of the Google engineers when they heard how the NSA was tapping their unencrypted intra-datacenter communications?

    --
    #DeleteChrome
    1. Re:There appears to have been a sea change by Anonymous Coward · · Score: 2, Insightful

      It's still an open question how much we should trust companies like Google and Apple... with regards to their internal motivation and plans. However (anecdotally, at least) it seems pretty obvious these companies learned from Snowden's leaked documents just how much the government was screwing them, and they've seen how it's hit their bottom line - any trust that might've previously existed is gone.

      Remember the (anecdotal) reaction of the Google engineers when they heard how the NSA was tapping their unencrypted intra-datacenter communications?

      Snowden's revelations have either hurt or in some cases come close to ruining the business of many US companies. While it is the norm on this forum to assume the worst about large corporations in particular, In many cases companies have suffered damage without collaborating in any way with the NSA that has yet been proven. Cisco for example has been losing sales not because they allowed the NSA to screw around with their equipment but rather because the NSA intercepted their shipments. I don't expect corporations to be reluctant to cooperate with the NSA in future out of some moral idealism, companies will be reluctant to cooperate with the NSA simply because this affair has taught them that cooperating can result in a serious impact on their bottom line and if there is another Snowden that impact might be even worse.

    2. Re:There appears to have been a sea change by 93+Escort+Wagon · · Score: 3, Insightful

      Snowden's revelations have either hurt or in some cases come close to ruining the business of many US companies.

      No, in reality it is the NSA's formerly-hidden behavior that has hurt these businesses.

      If you are stealing from your employer, and I provide documentation of that fact which results in your getting fired - I'm not to blame for the loss of your job, you are.

      --
      #DeleteChrome
    3. Re:There appears to have been a sea change by Helican · · Score: 1

      Snowden's revelations have either hurt or in some cases come close to ruining the business of many US companies. While it is the norm on this forum to assume the worst about large corporations in particular, In many cases companies have suffered damage without collaborating in any way with the NSA that has yet been proven. Cisco for example has been losing sales not because they allowed the NSA to screw around with their equipment but rather because the NSA intercepted their shipments. I don't expect corporations to be reluctant to cooperate with the NSA in future out of some moral idealism, companies will be reluctant to cooperate with the NSA simply because this affair has taught them that cooperating can result in a serious impact on their bottom line and if there is another Snowden that impact might be even worse.

      This cannot be disputed. The appearance of collaboration will indeed hurt the bottom line of many private enterprises that have not made it a priority to ensure whatever data they collect is not somehow safeguarded. To me, as a consumer, safeguarded looks like how, for example, StartPage.com communicates how it handles what data they are able to discover for you using their services.

      StartPage, and its sister search engine Ixquick, are the only third-party certified search engines in the world that do not record your IP address or track your searches.

      There is this sense of resignation among those in my circle, a shrug of "What can I do about it? I need to use my ..!" and for those that are not tech savvy, this is a real complaint. Borne of ignorance and probably laziness, but real nonetheless. Refuse. Resist. Encrypt. Choose to remove yourself from that ecosystem inasmuch as possible. Where it is not possible, obfuscate and use cash where able.

      --
      ~The grand unifying truth is that the State's power to change us now exceeds our power to change the State.
  9. classic game theory - Prisoner's Dilemma. by dummy14141555 · · Score: 1

    The only way to win is not to play as a prisoner - so trust is not possible if you put two people in two separate rooms - or even less than that, one person in a room, with the threat of losing rights to property, freedoms... the "other guy" always looses. It's never like tv.

  10. Simple by Anonymous Coward · · Score: 0

    Snowden didn't really say that. I trust the New York Times to accurately report Snowden testimony in untranslated and undoctored form as much as I trust the Sunday Times to do the same. Tell a thousand truths to sell one lie is a common tactic of government regimes nowadays.

    Lesson: Now we REALLY know we can't trust Apple. IT'S A TRAP!

  11. Re:Trust? by Anonymous Coward · · Score: 0

    Maybe because the only "evidence" of Apple involvement is a claim by government officials, which is self-serving to those officials only.

  12. When you actually RTFA ... by Anonymous Coward · · Score: 0

    ... and the check the links supposedly showing Apple is involved with spying on customers, you find the author is an empty wind bag trying to make a name for himself and failing miserably at it. Don't just take my word for it; go read the articles he links from his post. Absolutely none of those articles implicates Apple outside of accusations by the NSA; no documents, no dates/times/minutes of meetings, nothing verifiable, nothing believable.

  13. Trust by Anonymous Coward · · Score: 0

    Given their behavior in the past is it wise to assume that corporate interests have turned over a new leaf and won't secretly collaborate with government spies?

    As long as there are secret government orders that companies are forced to comply with, you can never trust them.

    1. Re:Trust by anagama · · Score: 1

      As long as there are secret government orders that companies are forced to comply with, you can never trust them.

      You are absolutely correct, and especially correct in the context where the company has the power to decrypt the user's data. However, if the user's data cannot be decrypted by the company, then all it can provide is the encrypted gobbeldygook.

      It isn't clear to me that Apple's system is perfect: https://www.apple.com/privacy/... It looks like the messages are encrypted in transit and Apple cannot read that data, but it also sounds like decrypted messages are backed up to its iCloud service, in which case the transit encryption is totally defeated. A lot of the stuff in that link is marketing bullshit, but the line I've bolded should be clearer. It seems pretty obvious that Apple could be required to turn over decrypted data (such as backed up messages) stored on their servers, and they should come right out an say that because a lot of people won't understand that:

      So unlike other companies' messaging services, Apple doesn't scan your communications, and we wouldn't be able to comply with a wiretap order even if we wanted to. While we do back up iMessage and SMS messages for your convenience using iCloud Backup, you can turn it off whenever you want. And we don't store FaceTime calls on any servers.

      What is the default? Anything that stores or transmits plaintext in a manner accessible by a third party should be opt IN, not opt out, because most people won't understand the implications but fall for the marketing hype about security.

      --
      What changed under Obama? Nothing Good
    2. Re:Trust by KGIII · · Score: 1

      If they are encrypted what makes you think that they are being stored in plain text?

      --
      "So long and thanks for all the fish."
    3. Re:Trust by anagama · · Score: 1

      the juxtaposition of the first and second sentence, the first saying how great the encryption is, the second implying that the backups aren't encrypted by the fact you can disable it if you want to -- it implies a lesser level of security by its silence on whether the data is only available to the user. But more to the point, the iCloud section states pretty clearly that Apple can access the data:

      All your iCloud content is encrypted in transit and, in most cases, when stored (see below). If we use third-party vendors to store your data, we encrypt it and never give them the keys. Apple retains the encryption keys in our own data centers, so you can back up, sync, and share your iCloud data.

      --
      What changed under Obama? Nothing Good
    4. Re:Trust by KGIII · · Score: 1

      That, to me, implies that it is not stored in plain text. It seems that it is stored in an encrypted format but can be decrypted as needed. Maybe I am not getting something?

      Anything that stores or transmits plaintext in a manner accessible by a third party should be opt IN, not opt out, because most people won't understand the implications but fall for the marketing hype about security.

      Then your quote below states that it is encrypted "in most cases" in addition to being always encrypted when it goes out to third parties. (How, pray tell, the third party is able to use encrypted data that they are not being given access to is a bit of a mystery to me but we can safely skip that for now.) I think the salient point is that it is encrypted in most cases *AND* it is always encrypted when they share the data. Again, why they are sharing encrypted data is beyond me - they should just save the bandwidth and not share that at all.

      Anyhow, it looks like the data is typically encrypted though it may not be but that is, hopefully, only trivial data such as meta information or the likes. Their terms are "in most cases" so I would not assume that private data is stored in plain text by default but, perhaps, I am giving Apple too much credit. Additionally, I could be not understanding something. I have certainly missed things in the past, it seems only logical to believe that I will do so in the future.

      --
      "So long and thanks for all the fish."
    5. Re:Trust by anagama · · Score: 1

      The part that concerns me is that it appears for some data Apple does not have the key and has no access even if it has possession of the data. For other data it does have the key and can thus decrypt the data. The first instance is secure and protects user privacy (given a good passphrase), the second is barely secure and subjects user data to the Third Party Doctrine -- this gives the government the ability to grab it whenever it wants to. If this is so, it will confuse unsophisticated users who think encryption _is_ information security, which is true in only certain circumstances, and not true if a third party can decrypt the data.

      --
      What changed under Obama? Nothing Good
  14. I don't think that's what Snowden is saying by engineerErrant · · Score: 5, Interesting

    The poster's interpretation seems completely off-base to me; not only is Snowden not encouraging us to blindly trust Apple et al with our privacy, he explicitly warns of the very danger the OP brings up.

    As an iOS developer, my perception is certainly not that Apple is trying to grab our data instead of the government - in recent years, they have started a major cultural shift toward real protections of user data - simply not collecting it, encrypting it in transit, etc., etc., even if it's a burden on third-party developers to make the transition. This is a Good Thing, full stop. Props to Apple (as well as Google, who is also making its own efforts).

    1. Re:I don't think that's what Snowden is saying by Anonymous Coward · · Score: 0

      I have to agree. Apple will do what is in Apple's interests. Since their business model does not significantly depend upon them mining customer data, it's easy, cheap, and a competitive advantage for Apple to play up their privacy posture.

      All that said, we need to create an environment where good behaviour is rewarded (and that includes praise). If Apple does right by their customers on privacy, it's worth saying to reward Apple. It also creates indirect pressure on those companies (and Three Letter Agencies) that abuse privacy.

    2. Re:I don't think that's what Snowden is saying by Bite+The+Pillow · · Score: 0

      I was going to write: "Basic technical safeguards are now enabled by default" is nowhere in the same ballpark as "turned over a new leaf and won't secretly collaborate with government spies" and you are an ignorant fuckhat for wasting our time with this nonsense. Clearly I have nothing better to do than lambaste the illiterate in order to hopefully correct some small portion of this type of idiotic behavior, but that's far more useful to society than either willful misinterpretation or blatant stupidity.

      But I think you covered the essence, so no need for me to pile on

  15. Snowden...the shill.... by Anonymous Coward · · Score: 0

    I like the title 'Freedom Act'...you can't make this shit up. I see you don't get many creative types in the propaganda department.

    One nation...of lemmings.

  16. why? by superwiz · · Score: 1

    Why do you assume that Snowden is not an NSA operative? An active one. He took a story which was in the public eye (the SLC building is huge so everyone knew about it) and turned it into a story about him for at least half of the population. He could have stayed anonymous. Instead he made the story that would have galvanized 80% of the population against NSA into a story that galvanized 30% of the population against him, 40% against the NSA and 30% not care at all. He couldn't do NSA a bigger favor if he tried.

    --
    Any guest worker system is indistinguishable from indentured servitude.
    1. Re:why? by Anonymous Coward · · Score: 0

      You should be happy, Snowden gave the tinfoil hat people some credibility.

    2. Re:why? by firewrought · · Score: 1

      Baloney... the story was NOT in the public eye (proof) and it wasn't headed that way. Despite very clear warnings from previous whistleblowers, everybody had their head in the sand. Snowden provided concrete, compelling evidence that forced the issue of NSA domestic spying into the US political dialog.

      And yeah... he could have stayed anonymous if he'd wanted to be kidnapped and hauled off to a black site. Putting his name and face to the news gave the story credibility and staying power. Snowden is the man to thank for the 82% concern about NSA surveillance and the ~60% support for weakening the Patriot Act. True, it's not enough to put an end to their shenanigans and restore reverence for human rights and due process, but it's definitely a setback for the NSA.

      --
      -1, Too Many Layers Of Abstraction
    3. Re:why? by superwiz · · Score: 1

      The size of the building and the number of people it had to eventually employ would have brought the conversation into public light. Re-targeting the conversation towards 1 person is what allowed the program to survive the inevitable political scrutiny. It's true that no one outside of the building would have known exactly what goes on inside. But it's so huge that its purpose would have been known just like the purposes of Pentagon and NORAD are known (even though no one outside of them knows what goes on inside). Shifting the righteous indignation towards an individual is what allowed the program to survive and has made it a permanent fixture. If Snowden is not an active NSA agent, he is, at the very least, a useful fool whose activities were known and used to shift the politics in the direction beneficial to the spy community.

      --
      Any guest worker system is indistinguishable from indentured servitude.
    4. Re:why? by superwiz · · Score: 1

      Oh, and the idea that he has a refuge in Russia is laughable. US recognizes the concept of trial in absentia (Roman Polanski was tried and convicted in absentia). Snowden could have been tried and convicted a long time ago if he was not an NSA operative. And given that even prominent politicians get assassinated in Russia, Snowden (if convicted) would have been gone a long time ago if he weren't so useful to the NSA.

      --
      Any guest worker system is indistinguishable from indentured servitude.
    5. Re:why? by Anonymous Coward · · Score: 0

      "...eventually..."

      Strange then that the prior whistle blowers exposing the same things didn't do it. Snowden managed it, but you seem to be arguing that he *shouldn't* have, because "eventually" someone else would have?

    6. Re:why? by superwiz · · Score: 1

      Recruiting tens of thousands of experts at the top of their game would not be possible in secret. The building was still in construction stages when Snowden came out. Possibly some of it was already operational, but according to the reports it was still being built. It's the comic-book-like personality of Snowden (last name sounds like a punk sci fi novel, ready-for-tv look, stripper girlfriend) that was over the top. Let me ask this question: if he wanted to make this story about himself, rather than about the story, what more could he do?

      --
      Any guest worker system is indistinguishable from indentured servitude.
    7. Re:why? by Helican · · Score: 1

      And yeah... he could have stayed anonymous if he'd wanted to be kidnapped and hauled off to a black site. Putting his name and face to the news gave the story credibility and staying power. Snowden is the man to thank for the 82% concern about NSA surveillance and the ~60% support for weakening the Patriot Act. True, it's not enough to put an end to their shenanigans and restore reverence for human rights and due process, but it's definitely a setback for the NSA.

      ^^ This

      --
      ~The grand unifying truth is that the State's power to change us now exceeds our power to change the State.
  17. Right thing == PR ... by gstoddart · · Score: 4, Insightful

    I trust corporations to do the "right thing" inasmuch as PR dictates there is a public perception that this is important.

    But I do not trust corporations to ever do the "right thing" out of a corporate sense of morality.

    I expect corporations to act like vicious sociopaths trying not to be noticed and miming "the right thing" without actually giving a damn.

    Trusting the moral compass of a corporation is a pathetic joke and a lie.

    --
    Lost at C:>. Found at C.
    1. Re:Right thing == PR ... by Anonymous Coward · · Score: 1

      Corporations do nothing other than to attempt to maximize profit. Nothing else ... ever. If ever there were a corporation that had a moral compass it would be out-competed by any competitors without a moral compass. Keep that in mind.

    2. Re:Right thing == PR ... by fustakrakich · · Score: 1

      Whoops! Guess I'm redundant... I see Snowden as one of those flying 'probes' snooping around, like in Star Wars. He won't come back empty handed.

      --
      “He’s not deformed, he’s just drunk!”
    3. Re:Right thing == PR ... by Anonymous Coward · · Score: 0

      WTF is "corporate sense of morality"?! Since when corporations have senses or morality? And anyway, when a moral thing to do is to disobey government on such order of magnitude" - it's time to run. And guess what - "give us some info which is almost public anyway" is not a reason to run for most people.

    4. Re:Right thing == PR ... by Anonymous Coward · · Score: 0

      You're right, but only because corporations are made up of human beings. It is the human being who is untrustworthy -- no corporation required.

    5. Re:Right thing == PR ... by Anonymous Coward · · Score: 0

      Trusting the moral compass of a corporation is a pathetic joke and a lie.

      A corporation is nothing but a group of people working together. What you're really saying is you don't trust certain people. And yes, there are sociopaths in the corridors of power.

    6. Re:Right thing == PR ... by david_thornley · · Score: 1

      Actually, some corporations do things out of a corporate sense of morality, although they may have to present it as PR. This doesn't mean you can trust them to do so, since no corporation is more than one stockholder revolt from turning into a moral sleazeball. I find it easier to trust revenue streams. Apple makes only limited money from getting data from its customers, and lots and lots from selling stuff to its customers. Being known as a government snitch would have a great impact on their public image, and would probably considerably reduce their sales, hence there profits.

      Naturally, some sort of change in top management could mean that they'd go for the short term profit, and damn the long run. I think it very unlikely for the foreseeable future, but it could happen, which is why I don't actually trust them.

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  18. Re:Trust? by Anonymous Coward · · Score: 0

    "evidence" of Apple involvement

    Evidence of their involvement in what? I didn't RTFA. I simply don't trust them on principle.

  19. Context by Anonymous Coward · · Score: 0

    Snowden's comment has to be seen in the context of the recent comments by the director of the FBI demanding that companies like Apple, Google and Microsoft NOT provide default encryption to their customers. guardian.com/us-news/2014/oct/16/fbi-director-attacks-tech-companies-encryption

  20. It doesn't matter if Snowden trusts Apple by jpellino · · Score: 0

    or not. Apple isn't going to care what this one person thinks and Snowden only cares how newsworthy people think he is.

    --
    "Win treats sysadmins better than users. Mac treats users better than sysadmins. Linux treats everyone like sysadmins."
  21. Key exchange by StikyPad · · Score: 1

    Apple technically has end-to-end encryption, but the problem is the key exchange. Apple retains the keys for all of your devices, which is how one iMessage can be sent to multiple devices. The way it works is that the sender communicates with Apple's servers to obtain a list of public keys for devices registered to the recipient. The sender then encrypts the message once per key, and sends the encrypted messages to Apple, who then distributes them to each device. In theory, and likely in practice, Apple cannot see the contents of the messages transiting its servers, since it doesn't have the private keys.

    But, as the custodian, Apple could add keys to this list at any time, including their own, or one at the behest of a TLA. This may or may not happen, so it's really a question of what risk you're willing to take. Their current method, if implemented properly, would prevent your plaintext messages from being swept up in mass collection, but without knowing the encryption method and the security details surrounding the keystore, you could still be targeted. Add to that that iMessage silently falls back to SMS, so if someone had the ability to block your tcp/ip traffic, the iDevice would transmit in the clear. It's an improvement over pure plaintext, but it's still fraught with risk and insecurities that will likely be exploited at some point, if the past experience is any indication.

    1. Re:Key exchange by nine-times · · Score: 2

      Apple retains the keys for all of your devices, which is how one iMessage can be sent to multiple devices.

      Do you actually know this, or is this your guess? Because my understanding is that iMessage encryption was designed explicitly to avoid having Apple hold the kind of private keys that can decrypt the message. I thought there was some scheme where each device got its own decryption key, and that those keys never left the device.

      Add to that that iMessage silently falls back to SMS,

      Well, not entirely "silently". Messages sent via SMS turn green, so you know whether they were sent via iMessage. You don't necessarily know ahead of time whether, when you hit "Send", your message will be sent via SMS or iMessage, but I believe that can also be turned off on the device itself, so that it won't fall back to SMS.

    2. Re:Key exchange by Anonymous Coward · · Score: 0

      Do you actually know this, or is this your guess? Because my understanding is that iMessage encryption was designed explicitly to avoid having Apple hold the kind of private keys that can decrypt the message. I thought there was some scheme where each device got its own decryption key, and that those keys never left the device.

      That doesn't conflict with what the GP said, which is that the public keys are stored on Apple's servers, which means that Apple could add a new public key into the pile of keys that each device uses when sending future messages, and from that point on, they would be able to decode it using the matching private key.

      I sincerely hope that's not the approach that they use. In an ideal world, Apple would use a second, password-protected private-public key pair, which would be stored on their servers, but processed on the clients. The client would fetch that key pair, apply the user-entered password (massively hashed from the iCloud password, presumably), allowing the device to then use that private key to sign its own public key for use by the other devices. That wouldn't completely eliminate the possibility of injecting a new public key, but it would make it very hard.

    3. Re:Key exchange by StikyPad · · Score: 1

      1) They hold the public keys. But the risk isn't them decrypting with your private key, it's them adding their own public key (or one they generate) to your list of keys without your knowledge. Apple could send your public iPhone key, your public Ipad key, and their own generated snopping public key to the sending device, and no one would be the wiser. You can read about it here: http://techcrunch.com/2014/02/...

      2) There's a setting to turn off "Send as SMS," but under some circumstance, it might not honor that setting. For example, if you're texting someone who's not using an iPhone. Ideally, a user should have more strict control.

      As I said, default iMessage encryption is good, in that it guards against mass surveillance in most cases, but there's certainly room for improvement.

    4. Re:Key exchange by nine-times · · Score: 1

      But the risk isn't them decrypting with your private key, it's them adding their own public key (or one they generate) to your list of keys without your knowledge.

      Well yeah, or they could also backdoor the whole device without doing anything half so subtle or sneaky. So could RIM, Microsoft, or Android phone manufacturers. On some level, with every device you use, every service you use, and every piece of software you use, you are assuming that the manufacturer/provider/developer isn't a malicious evil mastermind.

      But in general, their system is designed so that it won't add a public key without approval from an already approved device, or some other authorization. It seems like that's about as good as you're going to get for any system where there's a repository of approved public keys, which is basically what we do for GPG and HTTPS as well. (e.g. if you don't trust certificate authorities, than HTTPS is not secure)

      For example, if you're texting someone who's not using an iPhone.

      In those cases, it's actually pretty clear whether you're using iMessage or SMS. iMessage users turn blue, and it says "iMessage", while SMS users are grey/green and it says, "Text Message". I have no objection to the idea of them including a setting that says, "Just don't use SMS no matter what, and only allow iMessage," but it doesn't seem fair to criticize that it "silently" switches. I would say that the switch is obvious yet unobtrusive, which is honestly what most people want.

    5. Re:Key exchange by StikyPad · · Score: 1

      The difference is that the HTTPS certs are auditable -- they are truly public, in the common understanding of the word. To my knowledge, there is no way to audit Apple's repository.

      My line of thinking when it comes to security is that "good enough" has been repeatedly shown not to be. We know the best practices, so why not follow them? Every time someone compromises, whether it's in the RNG, or allowing infinite login attempts, or allowing degraded connections, or inventing their own untested encryption (which may be the case for iMessage), it gets exploited. As my old man used to say, the shortcut is to do it the right way the first time.

  22. Perception and encouragement by penguinoid · · Score: 1

    Given their behavior in the past is it wise to assume that corporate interests have turned over a new leaf and won't secretly collaborate with government spies?

    No, but it is wise to use free market forces to force corporate interests to offer encryption, to be seen as encryption friendly, and eventually to even be friendly to end-to-end user-controlled encryption.

    --
    Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
  23. Sure, Apple does the right thing... by GuB-42 · · Score: 4, Interesting
    1. Re:Sure, Apple does the right thing... by Anonymous Coward · · Score: 0

      Your sarcasm is as obvious as it is stupid. (1) The celebrity photo leak was found to be the result of bad password and security question choices on the part of people whose lives are very public. (2) Your Arstechnica article does not say Apple is collaborating with government spies and even notes "Still, vice president of products for cloud security firm Echoworx, Robby Gulri, noted that Apple is following best practices used throughout the industry." Go pound sand.

    2. Re:Sure, Apple does the right thing... by david_thornley · · Score: 1

      The celebrity photo hack was not confined to iCloud, and it was not a result of anything Apple did. It was a matter of bad end-user passwords. Unfortunately, not even Steve Jobs and Alan Turing together could make easy-to-use security strong (even with possible additional posthumous abilities).

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  24. I don't trust either of them... by bobbied · · Score: 1

    Both have proven themselves untrustworthy in my view.

    --
    "File to fit, pound to insert, paint to match" - Aircraft Maintenance 101
  25. Of course not by hduff · · Score: 2

    Why would you even ask that question?

    They will do what's best for them, not "the right thing". That what Steve Jobs did.

    --
    "I believe in Karma. That means I can do bad things to people all day long and I assume they deserve it." : Dogbert
    1. Re:Of course not by Anonymous Coward · · Score: 0

      Proof?

  26. They're trying to give him a way to get back home by fustakrakich · · Score: 1

    A little PR statement showing he can play ball and voila! I am interested to see what he brings with him, but that will be classified for a very long time...

    And no, don't trust Apple. That would be absurd. All this stuff is for pacification.

    --
    “He’s not deformed, he’s just drunk!”
  27. fuck Apple by AndyKron · · Score: 0

    No, I don't trust Apple. Never have, never will. Closed source, closed minds.

  28. "esoteric and unnecessary" by Anonymous Coward · · Score: 0

    By this, you mean, in the context of all the fan-boy phones the mindless hordes of tech blog lemmings forced on us AFTER BlackBerry, which, almost since inception, has been encrypted by default. Seriously, you have yourselves to blame for this.

    1. Re:"esoteric and unnecessary" by Anonymous Coward · · Score: 0

      mindless hordes of tech blog lemmings

      Phrases like this are used exclusively by the type of person they purport to describe.

    2. Re:"esoteric and unnecessary" by Anonymous Coward · · Score: 1

      ad hominem attacks are an indicator of evil, hidden agendas and ignorance

    3. Re:"esoteric and unnecessary" by Anonymous Coward · · Score: 0

      That isn't true, nor was my statement an ad hominem. I recommend you look up the phrase, as you obviously think it's Latin for "stop bein' mean to me!".

    4. Re:"esoteric and unnecessary" by Anonymous Coward · · Score: 0

      > nor was my statement an ad hominem.

      Yes, it was exactly an ad-hominem - "you are wrong because of who you are"
      You didn't bother to dispute the argument, only implied that he's wrong because he is a lemming.

    5. Re:"esoteric and unnecessary" by Anonymous Coward · · Score: 0

      The irony of complaining about an ad hominem (that really wasn't one) in a reply to a post *containing* an ad hominem... :sigh:

      Heck, part of the *actual* ad hominem ("mindless hordes of tech blog lemmings") was actually *quoted* in the post you complained about!

    6. Re:"esoteric and unnecessary" by Old97 · · Score: 1

      AFTER Blackberry? Blackberry routes its messages through its own servers. It keeps copies. On a number of occasions they turned these messages over to governments when it was demanded. India was one of those countries if you want to look it up. Apple's work in this area includes 1) the encryption of data that Apple itself cannot break, 2) reducing the amount of information about you that Apple has as a result of your using their products (e.g. Apple Pay doesn't have your CC or see your transactions, 3) refusing to sell that information to third parties and 4) not allowing applications to collect data about you without your consent. Overall, that's better than Blackberry ever did. Yes, its take awhile to get this far, but they are moving in the right direction.

      --
      Very often, people confuse simple with simplistic. The nuance is lost on most. - Clement Mok
    7. Re:"esoteric and unnecessary" by Anonymous Coward · · Score: 0

      To start, you are talking about Apple now, not the Apple that first launched the iPhone. When the iPhone launched, compared with a BlackBerry, it was just a mobile security leak. Same for Android. Even now, the only Android phones to provide encryption on an SD card are Samsung phones. BlackBerry has been offering it since they put an SD card slot on a phone.

      My point was that the tech bloggers, and I read many of the reviews as the phones came out, totally, completely, and utterly ignored all security issues, and you will never, ever get them to admit that they could make such an oversight because that would (gasp!) reveal them as little more than the clueless journalists they are, who should pretty much never be trusted on security matters.

      Note that every BlackBerry is encrypted with a uniquely generated key whenever the phone is first booted. BlackBerry cannot decrypt these phones because it does not have the key. The same is true for anyone using their own BES, because it also uses its own key. Even for customers using BIS, a separate mail program can easily be installed that does not use the BlackBerry mail servers, a rather trivial step for those who have mail which is so sensitive. On the reports of messages being given to a Government, are you serious? Do you think there is any large technology company that is not handing over to large governments whatever is requested?

      Apple tracks every single app installed on a phone. BlackBerry has always allowed "side-loading". This makes your whole cc purchase history point completely pointless.

      BlackBerry has always given users complete control over what an app has access to on the device. Apple and default Android have no such controls at all. At best, they just tell you what the app will be accessing (except for Cyanogenmod, which has the Privacy Guard feature).

      BlackBerry has never sold information to 3rd parties. In fact, a few years ago there was a big brouhaha about some 3rd party installing spyware on "everyone's phone" through resellers, but, of course, although completely not reported by the lemmings, it was not installed on BlackBerry phones because not only does BlackBerry never install such software, they forbid their partners from installing 3rd party software, which, of course, also eliminates the bloatware that tech bloggers always complain about but never mention that BlackBerry doesn't have.

      Your claim that Apple is now better than BlackBerry is, at best, a subjective conclusion. Objectively, BlackBerry is more secure because it is possible to completely disconnect from BlackBerry services and use your own and you can completely control what permissions an app has, and if you are talking about messaging security, even from governments, the best option is to use a different company's messaging system, not the phone manufacturers, and with BlackBerry "side-loading", it is possible to install an app without declaring to any untrusted parties which app is installed, which is the first step in trying to figure out how to intercept and crack messages.

    8. Re:"esoteric and unnecessary" by doccus · · Score: 1

      To start, you are talking about Apple now, .......

      Your claim that Apple is now better than BlackBerry is, at best, a subjective conclusion. Objectively, BlackBerry is more secure because it is possible to completely disconnect from BlackBerry services and use your own and you can completely control what permissions an app has, and if you are talking about messaging security, even from governments, the best option is to use a different company's messaging system, not the phone manufacturers, and with BlackBerry "side-loading", it is possible to install an app without declaring to any untrusted parties which app is installed, which is the first step in trying to figure out how to intercept and crack messages.

      Actually, it's nice to read a straight up comment about Blackberry.. Not only is it true, but I also developed a keen interest in any company that would purchase QNX and then fully intergrate their OS software in their products.I have subbed to QNX's mailings for over 12 years now, and always have been iompressed with the high level of their software that is used in life critical hospital equipment. I mean, did you ever wonder who makes the OS for that heart lung machine keeping you alive? Or that MMRI machine? Somebody has to.. Want it to be Windows? Or , heaven forbid, Apple .. Like "Oops your heart lung machine 's software is incompatible with the newest OSX upgrade. Mind holding your breath for a few days?"

  29. Trust, but verify by Tokolosh · · Score: 0

    To quote the Gipper. I am inclined to feel that Tim Cook understands the need for privacy and security, as a gay man. It would be nice to be able to take him at his word because he is sincere, but we cannot.

    Without independent 3rd-party verification there can be no trust. Sorry Apple, I prefer to let the Chinese and Russians handle my data. They are equally scummy and bent on ruining the internet as the NSA, but at least they are not likely to rendition, dronestrike or merely civil forfeiture me.

    This also applies to Google, Amazon, eBay, Verizon, Motorola, Intel, Cisco, Twitter, Facebook, Microsoft, any US ISP, etc., etc. and especially AT&T.

    --
    Prove anything by multiplying Huge Number times Tiny Number
  30. Yes by tom229 · · Score: 1

    For apple maybe. Will they do the right thing for you? I highly doubt it. And if Mr. Snowden thinks they will, I would advise him to brush up on his history of that company.

    --
    If it ain't broke, don't fix it.
  31. What script was he reading from? by EmagGeek · · Score: 1

    His statement reads like an Apple marketing "press release."

    Or, maybe he's dead, and his identity assumed by a State Actor.

  32. No reason to trust by endus · · Score: 5, Insightful

    I see no reason to trust Apple or any similar companies whatsoever. They have betrayed consumers' trust in the past, have cooperated with illegal surveillance programs, etc. If a given company has cleaned up its act, great, but independent verification, open standards, etc. are the only way to gain assurance. Trust is irrelevant.

    1. Re:No reason to trust by Anonymous Coward · · Score: 0

      "They have betrayed consumers' trust in the past, have cooperated with illegal surveillance programs, etc." -- Proof or GTFO.

    2. Re:No reason to trust by david_thornley · · Score: 1

      Got evidence to back up your statements? Apple has made mistakes, but as far as I know they've never betrayed the trust of customers deliberately, or cooperated with illegal surveillance programs. They have jerked the rug out from under their developers more than once (anybody remember OpenDoc?).

      --
      "When you have eliminated the unacceptable, whatever is left, however improbable, must be the truthiness" - Holmes
  33. encouragement by chilenexus · · Score: 1

    Regardless of how bad a corporation or government agency has been in the past, there's nothing wrong with lauding them whenever they take a step in the right direction. It might not get them all the way to the place you want them to already be, but they're all going to move in the direction of encouragement and what gets them better results. And the faster they get the positive or negative feedback, the more effective it will be. Continuously lambasting Apple today for something that Jobs did in the past will only make them not care about your opinion even more, since we're all pretty sure they're not going to be able to convince Jobs to change his view and publicly apologize at this point. The company will follow what gets them good PR and more money - so we've got to give them a visible path to what they want, that just happens to be sitting on top of what we want. Negative reinforcement is much better at convincing people to not get caught more than it does to just not do it.

  34. It is all a case of by Anonymous Coward · · Score: 0

    "let's not, and say we did." Do you really think the U.S. and its tech giants would deconstruct the spying machinery, with all the investments made into it? The U.S. has decided it will spy and attack all other countries in the world, for its own benefit, and it will never go back on that policy.

  35. That depends by Anonymous Coward · · Score: 0

    Is "The Right Thing" treason? Because otherwise, how the fuck would Snowden know?

  36. Snowden has not made such unqualified statements. by Anonymous Coward · · Score: 0

    If you watch any of his speaking engagements in their entirety, he is always careful to state that, while things like this are better than what we had before the disclosures, it's more a case of things becoming "less horrible", not "everything's great now, move along". He always says we must keep pushing for more and more security, more and more ability to 'trust but VERIFY', more and more transparency.

    See this as more like a parent praising a spoiled kid, who after acting badly for a long time, finally says "please" when asking for dessert, -- the kid's still a spoiled brat, but at least he's making a show of trying to be more polite and this slight improvement should be encouraged, in the hopes it will elicit more good behaviour.

    CAPTCHA: liberty :p

  37. How can you say you disagree? by King_TJ · · Score: 3, Interesting

    If we really "trusted nobody", then nobody would ever build another electronic device. Heck, we'd have to pretty much destroy all of them we've got in use already.
    (Say we're simply talking about a "security appliance" for your network like a box that handles junk mail filtering, or even a firewall. If you don't place any trust in the idea that the components making up the units aren't back-doored at the factory, secretly allowing leaks of the data that passes through them? Then why buy and implement them at all? Same goes for the firmware or software running them.)

    I don't think the original poster was suggesting any company get a "free pass" .... Rather, it's an ongoing process where a company establishes trust over time by putting out products that get widely used and tested, and appear to be working as advertised. When it's discovered they didn't do so, then that trust level evaporates quickly and people look at other options.

    So right now, yes, I have a fair amount of trust in Apple to protect my privacy. I don't "trust them absolutely" by ANY means. But the nature of the marketplace indicates to me that Apple has some strong motivations right now to make it a priority. (EG. They're competing with cloud services, head to head, with Google at the present time -- so they need to be able to show their products are advantageous over Google's because your data is safer from misuse or resale with them.)

    1. Re:How can you say you disagree? by Jane+Q.+Public · · Score: 1

      If we really "trusted nobody", then nobody would ever build another electronic device. Heck, we'd have to pretty much destroy all of them we've got in use already.

      No. You're conflating two different ideas: deciding to take a calculated risk, vs trust. They are not the same things.

      When you trust, you are assuming the other party is "on your side".

    2. Re:How can you say you disagree? by s.petry · · Score: 1

      Like the person I responded to, you seem to be treating hardware and software differently. Hardware should be treated the same level of trust you give to software.

      I had to re-read and make sure I'm not being picky with wording, and I don't believe I am. GP said "You implicitly trust your hardware manufacturers" and you stated "if we really "trusted nobody", then nobody would ever build another electronic device." Both of those statements are incorrect because there should be no explicit trust with either hardware or software.

      You both seem to agree that Software is a sliding scale, but then bulk hardware into either black or white.

      --

      -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

    3. Re:How can you say you disagree? by Demonoid-Penguin · · Score: 1

      If we really "trusted nobody", then nobody would ever build another electronic device. Heck, we'd have to pretty much destroy all of them we've got in use already.

      No. You're conflating two different ideas: deciding to take a calculated risk, vs trust. They are not the same things. When you trust, you are assuming the other party is "on your side".

      True - they are not the same things. When I trust it means I believe I know how something or someone will act - not that they/it are "on my side", just that I "believe" they are predictable. And yes - I have trouble determining what is currently a fact, and I suspect the few things I "completely trust" are the result of insufficient thought.

      I trust that when I go swimming the chance are slim that I'll get eaten by a shark. It's a poorly calculated risk in which I place limited trust - which can/will be reassessed when my perceptions change. To me "trust" is a noun that needs qualification and a certain amount of faith. Even calculated risks require a degree of trust, the type of trust will vary.

      Not simple enough for everyone? Perhaps that's why "simple" is a synonym for "dumb". Like the clickbait phrasing of this "story" which deliberately conflates Snowden's support for Apple marketing improved privacy and security. It doesn't mean Apple should be trusted - only that it's possible (even healthy) to be skeptical about Apple products while simultaneously endorsing the trend - the alternative is rank all software companies on the same level regardless of whether they even play lip service to security.

    4. Re:How can you say you disagree? by Jane+Q.+Public · · Score: 1

      When I trust it means I believe I know how something or someone will act - not that they/it are "on my side", just that I "believe" they are predictable. And yes - I have trouble determining what is currently a fact, and I suspect the few things I "completely trust" are the result of insufficient thought.

      Good point. Trust doesn't necessarily mean they're "on your side", but can be "trusted" to act in a certain way... and often because it's in their own best interest.

    5. Re:How can you say you disagree? by Demonoid-Penguin · · Score: 1

      Trust doesn't necessarily mean they're "on your side", but can be "trusted" to act in a certain way... [snipped]

      The bit I should have bolded was believe. I "believe" intuition is my greatest bias. A failing that is of course unique to me, as the rest of the planet tests their gut instincts whereas I rarely do. When I do test my intuition (e.g. journalise and later review) I find it's wrong more often than it's right, and in the latter case it's damn hard to be certain (did I really "know" Apple was going to "improve their security"). Damn duality [mutter mutter impel, compel, confabulation, mutter mutter, nutters talk to themselves, mutter].

  38. Well by MitchDev · · Score: 1

    We can only judge them on what we know they have done and are doing, not on what they MIGHT do in the future or don't know they are doing.

  39. Absolutely Not! by MagickalMyst · · Score: 1

    Apple is a profiteering corporation; not a human being. As such, it has only one purpose - the bottom line (profit$). Take as much as you can, and give back as little as possible.

    Trust Apple? Sure, trust them to do what they will to increase profits. Trust them to make moral decisions? Nope. Not unless it prevents cuts to their bottom line.

    "Trusting" a corporation is about as foolish as believing that a corporation "cares" about you. Corporations do not care because they cannot care. They are a legal fiction, not human beings.

    It's all about the money. Always will be.

    --
    Political correctness is really just herd psychology pushed by insecure people who desperately seek social conformity.
  40. Lawyers by Etherwalk · · Score: 1

    When you have secret laws which say "give us this or else", WTF difference does 'voluntary' matter?

    Lawyers.

    If it is involuntary, the company pays intelligent lawyers to use the law to (1) hold the government to the law, even if secret and even if it's less protective than it should be. This in turn (2) makes the government less likely to make absurd requests and (3) costs the government resources, which provides at least some limitation on what they do.

    It's not enough, of course--we really need more robust protections on the secret side by cleared personnel with automatic publication a decade or two down the line as a good first step--but it's a lot better than nothing.

  41. snowden by Anonymous Coward · · Score: 0

    If I were Snowden,I would just shut up and live a nice life in Russia. Find some nice girl(s), and don't give a shit..

  42. Define 'Right Thing' by plopez · · Score: 1

    If 'Right Thing' means lining the pockets of upper management, then yes he can.

    --
    putting the 'B' in LGBTQ+
  43. To answer the headline: by Anonymous Coward · · Score: 0

    No.

    Snowden shouldn't trust any one, he is what we call a vulnerable population... susceptible to any number calibers of bullet used by the US military and intelligence organizations.

  44. Why trust Snowden? by Anonymous Coward · · Score: 0

    Who do you trust?

  45. Eat yours by s.petry · · Score: 1

    "Bullshit" that is. Why should I "implicitly" trust hardware as praxis stated? You seem to be happy defending him, so explain that position. I assume risk using Software, but with hardware it's only full and unqualified trust or nothing? How on Earth do you come to that conclusion? Do you know what you are defending?

    --

    -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

    1. Re:Eat yours by nine-times · · Score: 1

      Why should I "implicitly" trust hardware as praxis stated?

      It's not so much a matter of "you should" as it is a matter of "you do." You already do trust hardware. I assume you're posting on Slashdot using some kind of electronic computing device, and you're typing this by banging rocks together.

      Do you know what you are defending?

      Yes, I'm defending the concept of security from those who have a very poor understanding of it.

    2. Re:Eat yours by s.petry · · Score: 1

      t's not so much a matter of "you should" as it is a matter of "you do."

      Wrong wrong wrong! If I had full trust I would not have to do something like create an encrypted file system of any type. I would not have to encrypt traffic between hosts, and I would not have to encrypt my backups. Yet for some reason, I do all of those things with critical data.

      What you are defending is an invalid generalization and statement which happens to ignore reality.

      --

      -The wise argue that there are few absolutes, the fool argues that there are no probabilities.

    3. Re:Eat yours by Anonymous Coward · · Score: 0

      As praxis pointed out, you trust some people, sometimes, with some data. Otherwise you wouldn't post here. At a bare minimum, you've trusted Slashdot with your username and password, and you've trusted us, the Slashdot readership, with the contents of your post.

      If you trusted nobody, you would not be posting on the Internet as you would not trust the people who wrote your OS, the people who wrote your software encryption routines and every node along the communication infrastructure. That is unless you've personally verified every part of system to your standard.

    4. Re:Eat yours by KGIII · · Score: 1

      You can use something without trusting it. Should you? That is up to you and your weight of the risks.

      --
      "So long and thanks for all the fish."
    5. Re:Eat yours by nine-times · · Score: 1

      Ok, so let me ask you two questions: 1) Do you have any information on your computer that you would not like to share with the world? 2) Did you build the entire computer from scratch?

      If your answers were "yes" and "no", respectively, then to some extent, you're trusting your hardware vendor to have not included some kind of... well, who knows what they could theoretically include. A chip that serves as a keylogger, but that will send the info out through the NIC without involving the OS. If they designed and manufactured all the hardware, they might have done any number of things.

  46. Not to be petty... by Helican · · Score: 1

    There is no continent called America. North, yes. South, yes. Central even, yes.

    --
    ~The grand unifying truth is that the State's power to change us now exceeds our power to change the State.
    1. Re:Not to be petty... by OhPlz · · Score: 1

      lol.

      Parent just did the same thing he/she is whining about Americans of doing, except with the name of the continent instead of the name of the country!

    2. Re:Not to be petty... by prefec2 · · Score: 1

      According to our all knowing oracle north and south America are also considered as one continent. https://en.wikipedia.org/wiki/... it is also called the Americas, however, the America refer to the whole landmass. See also https://en.wikipedia.org/wiki/...

    3. Re:Not to be petty... by prefec2 · · Score: 1

      You may have a look at https://en.wikipedia.org/wiki/... and https://en.wikipedia.org/wiki/... (the image on the right). It is absolute proper to call the complete landmass America.

    4. Re:Not to be petty... by OhPlz · · Score: 1

      You should be more precise. That's what you were whining about, right? I mean, there's three continents to choose from for "America", but yet there's only one nation. So if a list of one is too much for you, certainly a list of three is too much effort.

      Pedant.

  47. Not a new leaf by SuperKendall · · Score: 1

    What you have to understand in all this is motivation.

    Google has ALWAYS has a significant monetary motivation to collect and analyze as much data as possible about you.

    Apple has NEVER had that motivation. They just have never had a need to collect information about you because it doesn't do them any good, therefore collecting it is only an added expense with no return.

    Now it turns out that no only does Apple not gain by collecting user data, in fact they have figured out how to PROFIT from not collecting user data - witness the current marketing push that makes the argument you should buy Apple gear because Apple values your privacy. That is a very clear, and very powerful message.

    I don't think people here (or really anywhere) understand just what it means to the world that Apple is firing up its ginormous marketing engine to make privacy desirable...

    --
    "There is more worth loving than we have strength to love." - Brian Jay Stanley
  48. This is a rhetorical question right?? by Anonymous Coward · · Score: 0

    Nobody should ever trust any corporation to "do the right thing". It's a well established fact that profits are first and foremost in consideration. Currently putting up a privacy friendly front may be deemed more profitable but in the long run that will flip flop multiple times until it no longer affects their bottom line.

  49. Trust no one by Anonymous Coward · · Score: 0

    Snowden should know that better than anybody.

  50. Third parties will NEVER EVER be secure by Anonymous Coward · · Score: 0

    Encryption should only be between sender and recipient, ever. The fact that a 3rd party is involved is ridiculous. Apple, Microsoft or any cloud service that has encryption is a joke. Choose to encrypt your own data with the encryption tool of your choice BEFORE it goes to the third party.

  51. Whoa, call Starfish® ... by CaptainDork · · Score: 1

    ... feed the tuna mayo.

    Why the hell don't we all just give it up and sign off on FOIA to each other?

    I mean, all the people on the planet.

    I'll know your shit; mine; theirs and everybody can have mine and stuff.

    --

    You may say I'm a dreamer
    But I'm not the only one
    I hope someday you'll join us
    And the world will be as one

    ~ John Lennon

    --
    It little behooves the best of us to comment on the rest of us.
  52. Absolutely not by Maxo-Texas · · Score: 2

    Especially as a publicly held company, apple could change management literally tomorrow.

    The new management could monetize user data instantly.

    --
    She was like chocolate when she drank... semi-sweet at first and then increasingly bitter.
  53. The only good traitor is a dead one. by Anonymous Coward · · Score: 0

    Edward Snowden is a trader and I abhor the methods he used to collect the data that the Chinese and Russians now hold. Hr has weakened this country and deserves the highest order of punishment.

  54. Enough already by Anonymous Coward · · Score: 0

    Snowden is a spy and traitor. He has done irreparable harm to intelligence agencies and has put people at risk. Several months ago he made the comment that this wasnt about him. My advice - STFU and go away

    1. Re:Enough already by Anonymous Coward · · Score: 0

      You want to believe that. But you don't.

  55. Project Prisim by Gallomimia · · Score: 1

    5 Core members: Apple, Microsoft, Facebook, Google, Yahoo
    Find out more.

    --
    Sadly, a Libertarian cannot force his views on another, and freedom cannot spread as does the cancer known as religion.
  56. How do you even breathe? by Anonymous Coward · · Score: 0

    "That isn't true, nor was my statement an ad hominem"

    Yes it was. Moron.