Slashdot Mirror
IETF Rejects Wiretapping
Declan McCullagh of Wired covered the IETF meeting last night, and his report notes that the IETF rejected creating any sort of wiretapping standard. However, the companies who build routers and similar networking fundamentals stated that they would still move ahead with implementing tap-ability into their equipment - so the IETF action is a hollow victory, your internet communications will still be easily tappable.
"I'm a little concerned about [this anti-wiretap sentiment]. Clearly not all wiretapping is illegitimate," one Cisco engineer said.
Herein lies the problem. As long as people can see one use for something, all the adverse effects become secondary. Some criminals are caught by wiretaps, so everyone should be tappable.
This may be a specious argument, but if you nuke a city (say, Seattle), then you'll kill millions of innocent people. But it's okay, because you'll get some criminals, who'll never mug an old lady again.
It seems to me that the vendors who decided to continue with plans to make their equipment tapable are voluntarily taking part in a very strange experiment.
The way I see it, since there will very clearly be other vendors who do not insert taping abilities into their equipment, the ones that do are going to find out just how important an issue this is to the people who buy their equipment.
Most IT people I know have a thing about civil liberties, and I suspect that those companies that put backdoors into their products are going to get hurt in the marketplace because of their decisions (as long are there are alternatives to their products). It will be very interesting to see if the people who buy the network equipment will be willing to put up with a back door, or if they will simply find ways around it (the most obvious of which is to simply not buy the goods with the back doors built in).
Let the experiment begin...
Impossible = A fun challenge
This is just plain _wrong_. Does anyone else have flashbacks to big brother, or is it just me? Why would a private organization have _any_ responsibility to the FBI to make things "easily tappable". If it's easy for them, is it easy for any 'ol hacker to as well? Just telnet in, "come get your 0day logs here!"
This sort of thing in private industry makes me just plain sick to my stomach - I'm not an american, but I worry because this nuttiness finds it's way north of the border sooner or later. I thought america was supposed to be the land of the free, yet as an outside observer I see your rights getting quickly taken away in the name of either a drug-free (even your politicians smoke dope!) or protecting children (duh, that's what parents are for).
For example, in Canada, almost _no_ organization will require drug testing for engineering work - yet this is the opposite case in the US. Perhaps when they start looking for DNA samples, protests will start?
Federal screwing with the internet has to stop. Making the internet easy for the feds probably will make it possible for any MORON to play with your router logs.
Answer with your wallet - don't buy hardware that supports features like this. Until people stand up, you'll continue to get walked over. But why worry, you have nothing to hide, right?
Instead, buy hardware that supports idiot-friendly secure encryption, and I don't mean 48 bit DES, either. If the net is encrypted, who gives a flying @#$@# who's listening. They can get a court order to make you turn over your keys - just like they can do for your house.
Kudos..
..don't panic
So support you local Mom&Pop ISP!
If you catch a criminal and you look who he
emailed around the same time you learn stuff,
much like phones. Why did the husband mail his
wifes murderers hotmail account a day before etc..
Thats the crime angle. The big one is the tax
angle. Uncle Sam's nightmare scenario goes like
this.
IBM, Microsoft, GE and other big vendors all use
people like Visa. Visa start doing encrypted
transactions. Companies start neglecting to
mention this kind of fund transfer in their tax
returns.
Next stage. A company like Visa creates a private
cryptographically managed currency of their own.
Everyone opts to use it and hard crypto, the
US tax man only sees transactions into US
currency space.
Shortly after the USA bankrupted by massive tax
revenue basically suffers a total collapse of
government power.
Welfare collapses leading to riots. The army cant
be paid, healthcare goes totally cash upfront, the
education system fails.
Whether a massive loss of Government is good or
bad is a complex political question to most people
but if you are a politician its easily answered
Alan
I don't think this is a hollow victory at all, even if the companies go ahead and screw us over with or without the IETF (Did you ever think better of them? The state and the industry have been each others whores for the better part of this century.)
However, this battle was never about whether they are tapping Internet nodes or not. The Internet is already tappable. The FBI can do it, a skilled hacker can do it, and the NSA is most probably already doing it. If you want your communications to be secure: encrypt them. If you don't, there is no reason to think that people aren't, or to argue that they shouldn't be, listening.
What this was about was the integrity of the IETF, and by extension the Internet community. I think that if the IETF had gone ahead with this, many of the ideals that have driven the Internet until today would have been run over once and for all. A yes to collaboration would have been a confirmation that the Net and Web had become nothing more than a PR playground for Disney and Microsoft. But by rejecting this, the IETF has showed that there is more to it than that: that there is still a thread of revolution in the very nature of connectivity, even if you have to dig through a lot of dancing baloney to find it.
That is not a hollow victory...
-
We cannot reason ourselves out of our basic irrationality. All we can do is learn the art of being irrational in a reasonable way.