Slashdot Mirror
German Spy Agency Can Keep Tabs On Internet Hubs, Federal Court Rules (phys.org)
Earlier this week, a federal court in Germany threw out a challenge by the world's largest internet hub, the De-Cix exchange, against the tapping of its data flows by the BND foreign intelligence service. What this means is that the country's spy agency can continue to monitor major internet hubs if Berlin deems it necessary for strategic security interests. From a report: The operator had argued the agency was breaking the law by capturing German domestic communications along with international data. However, the court in the eastern city of Leipzig ruled that internet hubs "can be required by the federal interior ministry to assist with strategic communications surveillance by the BND." De-Cix says its Frankfurt hub is the world's biggest internet exchange, bundling data flows from as far as China, Russia, the Middle East and Africa, which handles more than six terabytes per second at peak traffic.
De-Cix Management GmbH, which is owned by eco Association, the European internet industry body, had filed suit against the interior ministry, which oversees the BND and its strategic signals intelligence. It said the BND, a partner of the US National Security Agency (NSA), has placed so-called Y-piece prisms into its data-carrying fibre optic cables that give it an unfiltered and complete copy of the data flow. The surveillance sifts through digital communications such as emails using certain search terms, which are then reviewed based on relevance.
De-Cix Management GmbH, which is owned by eco Association, the European internet industry body, had filed suit against the interior ministry, which oversees the BND and its strategic signals intelligence. It said the BND, a partner of the US National Security Agency (NSA), has placed so-called Y-piece prisms into its data-carrying fibre optic cables that give it an unfiltered and complete copy of the data flow. The surveillance sifts through digital communications such as emails using certain search terms, which are then reviewed based on relevance.
...for encrypting all traffic to every site and even DNS.
Anons need not reply. Questions end with a question mark.
If it doesn't encrypt, don't connect to it.
One notable aspect of this court rule was that it did not even consider the legality of _what_ the BND wants others to do - they were purely ruling on the validity of the formal order to provide them access.
The more interesting round will be at the Bundesverfassungsgericht, where (hopefully) the legality of eavesdropping on all that (mostly intra-country) traffic will be considered.
But in the end, all those court rules are not really important - spy agencies will spy on every bit of traffic, legal or not, as long as they exist. And in the case of the BND we have already seen how they do it even to provide their "friends" in other countries a favour - e.g. for industrial espionage.
they want their secret police surveillance back.
What's next? Youth groups and book burnings? /s
Since the feed includes German domestic accounts. Will the agency have to get a permission letter from every internet user in Germany? The EU? The world?
They never change.
"The average reporter we talk to is 27 years old......They literally know nothing." - Ben Rhodes
your hub is any microphone, camera and text the German gov can detect on the internet.
Domestic spying is now "Benign Information Gathering"
German courts have a history of not overturning such surveillance laws. The constitutional court overturned previous data retention laws in 2010 as being unconstitutional.
But since that kind of surveillance was something the EU wanted, they sued Germany for non compliance. Then a new data retention law had been drafted by the German government, with some opposition, but eventually it went through and was reinstated in 2015. Ever since then the courts are again working on the validity of this new law, because of course there's been appeals on constitutional issues from various interests groups.
In June 2016 a Court in Munster ruled that a local ISP did not have to comply to the data retention laws because they're unlawful. More recently, in April this year, a court in Cologne ruled that telcos don't have to comply with the law. In this case it was the largest telco of Germany, the Deutsche Telekom, that sued because they apparently didn't want to store meta data. In the end it costs money for them and it hurts their business.
Of course that still means ISPs can comply out of their own volition.
Currently our eyes are focused on the constitutional court that are still in the process of investigating the issue. Hopes are that they'll overturn it again.
Never Forget
"You're right," Fisheye says. "I should have set it on 'whip' or 'chop.'"
Yeah, I remember back when 70% of the traffic between European IP addresses was routed through MAE-East in West Virginia.
Exactly, their job is to spy. There are a few people (out of billions) that need to be spied upon, too. Bin Laden and his compatriots, for example. The ideal is to make it very difficult or expensive to spy on people, so they only spy on the few people they need to be spying on.
Devil's Advocate Mode: Activated.
The problem with spying only on the "the few people they need to be spying on" is that you generally don't know who you need to be spying on till you've spied on them.
Devil's Advocate Mode: Off.
Which is not to suggest I approve of spying on the general population. Just that I can see why spy agencies gotta spy. And on as many people as they can get away with.
"I do not agree with what you say, but I will defend to the death your right to say it"