Slashdot Mirror


Apple's Security Expert Joined the ACLU To Tackle 'Authoritarian Fever' (vice.com)

An anonymous reader quotes a report from Motherboard: Apple security expert Jon Callas, who helped build protection for billions of computers and smartphones against criminal hackers and government surveillance, is now taking on government and corporate spying in the policy realm. Jon Callas is an elder statesman in the world of computer security and cryptography. He's been a vanguard in developing security for mobile communications and email as chief technology officer and co-founder of PGP Corporation -- which created Pretty Good Privacy, the first widely available commercial encryption software -- and serving the same roles at Silent Circle and Blackphone, touted as the world's most secure Android phone.

As a security architect and analyst for Apple computers -- he served three stints with the tech giant in 1995-1997, 2009-2011, and 2016-2018 -- he has played an integral role in helping to develop and assess security for the Mac and iOS operating systems and various components before their release to the public. His last stretch there as manager of a Red Team (red teams hack systems to expose and fix their vulnerabilities) began just after the FBI tried to force the tech giant to undermine security it had spent years developing for its phones to break into an iPhone belonging to one of the San Bernardino shooters. But after realizing there's a limit to the privacy and surveillance issues technology companies can address, Callas decided to tackle the issues from the policy side, accepting a two-year position as senior technology fellow for the American Civil Liberties Union. Callas spoke to Motherboard about government backdoors, the need for tech expertise in policymaking, and what he considers the biggest challenge for the security industry.

7 of 92 comments (clear)

  1. I knew I saved this link for a reason by Anonymous Coward · · Score: 2, Interesting

    I knew I kept a bookmark to this Twitter thread for a reason.

    It's simply a list of the privacy debacles that have occurred under Apple's watch.

    Since I know people won't bother reading the link (even though it's to Twitter, so it's not going to be that long) it includes things like Accuweather tracking Apple users' locations even with location services disabled, Uber's special exemption that let them spy on every app running on the phone, Apple uploading all your call logs and SMS messages to their servers without permission, and Apple allowing third party apps to upload your contacts to their servers without permission. And those are only some of the more recent privacy violations Apple has been caught either helping or allowing.

  2. More worried about Google/Facebook than the NSA by Anonymous Coward · · Score: 5, Insightful

    - While the government can *theoretically* throw you in prison/Gitmo if it misinterprets your intercepted texts to Mom as coded threats to blow up the White House, the odds of it happening are infinitesimal and the procedure for doing so is long and tedious. In fact there's no example that I'm aware of of anything of the sort happening. The government can't do a single thing to you unless you have (or it thinks you have) explicitly committed a crime. Meanwhile tech companies can and eagerly will summarily and mercilessly financially ruin you and effectively banish you from human interaction if they simply don't like your opinions. While this isn't as bad as getting thrown in jail, the odds of it actually happening are infinitely greater, so the actual expected damage is higher.

    - Government is at least theoretically hamstrung by the 1st/4th amendments, while big tech companies get to hide behind the "private company" excuse. (No the constitution isn't going to stop the government long-term, but it at least slows them down and puts them at a competitive disadvantage.) Also, as always massive bureaucracy makes the government slower/worse than the private sector at anything it tries to do.

    - Google/Facebook are actively and proudly already using their power to manipulate the public's beliefs/emotions/behaviors. The government does the same, but "influencing" people via customized algorithmic manipulation of the social media feeds that they're obsessively staring at 10 hours a day is much more effective than just feeding some bullshit to gullible buzzfeed reporters now and then.

    Taken as a whole, Google probably already has more raw power than all but a tiny handful of world governments (if even that many), with virtually no effective checks on its power or ambition going forward.

  3. Re:ACLU!?! by Bobrick · · Score: 2, Insightful

    Sounds like a snowflake is offended.

  4. Re:ACLU!?! by Darinbob · · Score: 3, Informative

    The ACLU does not have a rigid policy for all of its members. So just because a few members are abandoning the civil-rights part of the oganization does not mean that the organization itself has abondoned those ideals. Also, don't believe everything you read from the right-of-center news mill, it is a popular tactic to stick "ACLU" in headlines because it's good for click-bait. There's a lot of fake news out there that doesn't hold up when examined; just because a headline matches your preconcieved bias doesn't mean it's accurate.

  5. Re:ACLU!?! by DNS-and-BIND · · Score: 4, Interesting

    Former ACLU legal director and Berkeley law professor John A. Powell recently told a reporter from the New Yorker that free speech rules in the United States fail to weigh the value of speech against the harms that speech can cause, and argued that we ought to regulate speech that can cause P.T.S.D. and "stereotype threat."

    An internal company briefing produced by Google and leaked argues that due to a variety of factors, including the election of President Trump, the âoeAmerican traditionâ of free speech on the internet is no longer viable.

    It's a real problem and it's only getting worse.

    --
    Shutting down free speech with violence isn't fighting fascism. It IS fascism!
  6. Re:So... by tlhIngan · · Score: 3, Informative

    if you pay 100 bucks / year and have the source then sure you can.

    No, you don't need to pay $100/year. You just need a Mac. Since iOS 8 you can sideload apps you compiled yourself with XCode. (The SDK is free)

    The $100/year is if you want to submit apps to the app store.

    There's a nice repository of emulators and such for iOS these days. All open source because Apple requires you to compile the code yourself. No, RMS will not blow his head off that a proprietary OS has support for open-source.

  7. Re:ACLU!?! by DNS-and-BIND · · Score: 2

    That's an adult hominem fallacy, not an argument. Moreover it was CNN, MSNBC, and all the other "legitimate" media who lied about those catholic school kids who were minding their own business when adults started messing with them. Lied their assess off.

    --
    Shutting down free speech with violence isn't fighting fascism. It IS fascism!