Slashdot Mirror

← Back to Stories (view on slashdot.org)

Carnegie Mellon Denies FBI Paid For Tor-Breaking Research (wired.com)

Posted by samzenpus on from the wasn't-us dept.

New submitter webdesignerdudes writes with news that Carnegie Mellon University now implies it may have been subpoenaed to give up its anonymity-stripping technique, and that it was not paid $1 million by the FBI for doing so. Wired reports: "In a terse statement Wednesday, Carnegie Mellon wrote that its Software Engineering Institute hadn’t received any direct payment for its Tor research from the FBI or any other government funder. But it instead implied that the research may have been accessed by law enforcement through the use of a subpoena. 'In the course of its work, the university from time to time is served with subpoenas requesting information about research it has performed,' the statement reads. 'The university abides by the rule of law, complies with lawfully issued subpoenas and receives no funding for its compliance.'"

6 of 79 comments (clear)

  1. Re:So... by MyAlternateID · · Score: 2, Insightful

    ...what was the $1 million for? What did the taxpayers get out this?

    I bet it would have cost them a lot less than $1 million to hire a lawyer and at least make even the most feeble effort to resist this subpoena.

  2. Weasel Words by Anonymous Coward · · Score: 5, Insightful

    "Carnegie Mellon wrote that its Software Engineering Institute hadn’t received any direct payment for its Tor research from the FBI or any other government funder."

    Now if that word "direct" had not been there I would have a little more faith.

    As well know , there are hundreds of ways to indirectly pay for stuff...... "Hey here's some money for your sports team", "hey here's some money for your building funds", etc etc etc etc etc

    1. Re:Weasel Words by tylerni7 · · Score: 4, Insightful

      The Software Engineering Institute is a Federally Funded Research and Development Center (FFRDC), similar to places like Los Alamos, Sandia, or Lincoln Labs. So yes, they certainly receive funding from the government, and that probably includes funding from the FBI.

      It sounds like what they are saying is that they were doing general research on Tor as part of their normal research activities. Funding for this, like all other research they do as an FFRDC, comes from the federal government in some form. So yes, indirectly I'm sure the government paid for the research, but that does not seem shocking.

      All in all, it's hard to understand what all the fuss is about for this, it seems pretty much in line with the goals of an FFRDC to do this type of research.

  3. Liars by Etherwalk · · Score: 5, Insightful

    "hadn’t received any direct payment for its Tor research from the FBI or any other government funder"...

    So they have received indirect payments or have received direct payments from non-government funders.

    That's like when the Bush administration found "dozens of weapons of mass destruction related program activities" in Iraq, but no actual WMDs.

    1. Re:Liars by Etherwalk · · Score: 2, Insightful

      Yes, I saw the wired statement first, which is more weasely, but the point stands--it is not an effective denial because it's not a statement as to what exactly happened. It is a non-statement that has gone through a communications office and/or legal counsel so that it ends up not saying anything. No sane reader would believe it as a denial, because it's not one. Of course that *could* be incompetence and stupidity, but why assume incompetence and stupidity when you're dealing with a high-quality engineering school accused of helping mass surveillance efforts?

  4. Police State Lapdog by ThatsNotPudding · · Score: 4, Insightful

    All in all, it's hard to understand what all the fuss is about for this, it seems pretty much in line with the goals of an FFRDC to do this type of research.

    Yes, all they did was merely destroy the trustfulness of the CERT process to warn EVERYONE of vulnerabilities in software, instead of delightedly handing it over to the descendants of J Edgar Hoover and not bothering to tell the software maintainers anything. This is the main point; the million pieces of silver were just added insult.