Re "If they were honest, they wouldn't be collecting everyone's data to begin with. That in itself is a violation of people's liberties."
They have to collect it all to know who to target with software or hardware to get around individual use of encryption.
Collecting all data finds out why a person is interesting in encryption. Then seek the plain text thanks to tame telcos, OS, standards.
You read up on or show an interest in TOR, your ip is noted for some further consideration. How do they know you looked at TOR? Collect it all.
Not all telcos and web 2.0 sites have plain text within their interconnects. They have to collect it all to get past encryption to some point where plain text point exists in a network.
By collect they don't want you to understand the idea of a person reading, listening, watching. Just all in storage and fast sorting. Once all the hops to friends of friends, calls and internet activity are fully reconstructed then more tasks are considered.
If your within their Empire and practicing "money" changing you may have to:
have some bond or trust account in United States dollars
name and contact information to some expected level of ID standards
disclosures risks.
Anti-money Laundering Compliance and reporting and hire more staff.
and a few other new tasks
Think of it as been a "bank" somewhere that has just got a treaty request from the United States.
Have fun filling out the new virtual forms.
Control over reading web sites and control over what can be reported.
News Corp and media union warn over crackdown on spy reporting (17 July 2014) http://www.theguardian.com/wor...
Journalists will face jail over spy leaks under new security laws (16 July 2014) http://www.theguardian.com/wor...
Welcome to a few years in jail for “any person” who disclosed information relating to “special intelligence operations”
ie no subsequent disclosure by the press.
ASIO (comparable to MI5) and ASIS (equivalent to CIA or MI6) also get new powers eg power to access a third party's computer.
Dont worry its only for very "very limited circumstances". You can still enjoy freedom of discussion and Australia will "believe very strongly in freedom of speech and freedom of the press". You just wont be able to find digital discussions, if you start the wrong discussion or comment your computer might be a security threat. No more Snowden links? No more links to digital discussions about Snowden that might link to Snowden materials?
You just go further up/down the network and explore options in telco or building places like a classic Meet-me-room https://en.wikipedia.org/wiki/...
Over time a nice international network layer will fall out that is peered to lower domestic interconnect fees? International sounds like fair game?
Even if you do get the courts protection recall the "“antagonizing” the federal government and police if they shared too much information about authorities snooping their customers’ personal data" aspect.
"Telecom giants worried about ‘antagonizing’ feds on lawful access: documents" (May 21 2014) http://www.thestar.com/news/ca...
The problem is the lack of warrants over some time is what induced this law reform. Also recall the political pressure to allow new colour of law warrantless logging and isp account tracking.
ie rolled back in under the cover of 10's of pages related to cyber bullying laws with legal protections for isp providing support and tacking in a lower “reasonable suspicion” standard.
'Say no to government spying" (March 31, 2014) http://fullcomment.nationalpos...
Re "I hope that this is the beginning of the end for that idea."
Canada seems to want the self signed bureaucratic option. Officials will go looking, get isp logs, users full details and then seek a real court for the later stages of an investigation.
ie customer information, no reasonable expectation of privacy, no warrant is required for warrantless "looking" at internet activity:)
How this new court event will slow down that vision of finding and ip, logging usage and review will be interesting.
Long term law changes could allow cleared local town, city officials and police in say Australia, Canada or the UK a form of automated interfaces into all their nations isp logs and web 2.0 sites.
Within new laws they could find a user via an ip, log usage, review the past many months and track all new activity of that users account.
Just "looking" at months of web history and your full account details.
Australia had news on issues like this "Greens unveil plan to require warrant to access phone and internet records" http://www.theguardian.com/wor... (11 June 2013)
"2007 to the Telecommunications Interception Act clarified that so-called “metadata” – email addresses, information about where emails are sent and from whom they are received and who is called from a certain telephone number, from which location and for how long – can be accessed simply by filling in forms"
Think of it more as Google Federal.
'Microsoft, Google spar over federal contract" (04/11/11) https://thehill.com/policy/tec...
ie getting beyond FISMA and into enterprise - reps with military, intelligence, gov contractor like skills to move iPhone and iPad into US agencies.
From 10 Sep 2013, you really want paper ballots in the open been counted by hand with lots of staff, election observers around. http://www.abc.net.au/news/201...
The complex Single Transferable Vote math has been used around the world for many, many years now in different forms. This rush to keep computer code is interesting.
Re the human factor.
Thats a huge risk in Germany. Generations of post ww2 Germans know nothing but helping the NSA and GCHQ over their decades in every level of the West and later German bureaucracies.
The men and woman who helped the UK and USA post 1950's would have chosen like minded staff to work with them or replace them.
Thats the entire upper structures of vital German security lost to 5+ other Five Eyes countries by default over decades.
Then you have the tame German political leaders watched, dropped, advanced thanks to insider help.
The East Germans got some staff next to generations of top West German political leaders or top NATO staff.
The US and UK got all the communication networks of West Germany and then Germany with the help of cleared Germans.
After East Germany lost its entire Western spy network early on due to the files been given to West Germany they thought about what their next file system would be like.
They broke the structure down so that eg 3 files would be stored in separated physical areas. If you wanted the full file you needed top staff to turn up in person to put a spies full background together. Later East Germany went digital and the CIA walked out with all the East German spy contact files from a safe.
You can also share slightly altered data in each page with "trusted" staff. A test to see what turns up in the media or gets reflected back at a friendly nations embassy.
No looking up computer master files to compare and see the changes, thats your own/only page.
Countries have lost aircraft designs and lack of photocopy paper counts did allow the Soviet Union to get material from the UK in bulk.
A trusted person with access to paper work is a huge risk.
"Couldn't they just buy a bunch of computers with no network hardware whatsoever?"
The NSA and GCHQ can cover that air gap with some extra hardware added when shipped.
A tiny burst wireless then sends logged text over a short range to a waiting collection device for storage or other networking.
"NSA Spying Includes Wireless Transmitters To Get Data Off 'Air Gapped' Computers" (Jan 14, 2014) https://www.techdirt.com/artic...
ie the ideas behind RF transceivers eg SPECULATION, HOWLERMONKEY and CONJECTURE
NSA Codenames http://cryptome.org/2014/01/ns...
Re "People with a rudimentary knowledge of international economics and politics believed any of that?
Their grandparents got mil/gov/police clearance, their parents got mil mil/gov/police clearance. Some of the second or third generation might have drifted into the private sector and became a contractor/consultant?
Or with skill and great grades you where the first to pass a full life story back ground/friends/family face to face interview.
As for 'decent knowledge of network hardware and software" look at crypto in the 1950-80's and what sold to nations and banks. It passed or was fast or was sold as an international interconnect standard. Why would a person risk their job, standing, profession, pension or a huge grant, effortless edu funding? If that failed you where a communist or spy or addict or... until you where pushed out.
You have people with the decent knowledge of network hardware and software who just want to advance and build/design an outsourced part or maintain that optical splitter behind the locked door.
Recall the "Drug Agents Use Vast Phone Trove, Eclipsing N.S.A.’s" http://www.nytimes.com/2013/09...
"Those employees sit alongside Drug Enforcement Administration agents and local detectives and supply them with the phone data from as far back as 1987."
Just tell the private sector staff a good story and all is good for decades:) The same in the UK, Australia, Canada, NZ...
Before Snowden academic people could still spin the lines about:
Universities and gov standards ensure good encryption globally.
Courts and political leaders ensure checks and balances at a national level.
Lawyers at a corporation level would never allow their brand to be tainted with extra-judicial collaboration.
The press would find out, the data collected is massive and could never be kept, sorted.
Shared intelligence sites are only looking at other nations.
The post-Snowden revelations fill in the history book gaps from the mid 1990's.
Re extreme manner to which computing advances have been driven by the needs of various secret security agencies around the world?
Sock puppets still try and spin file sizes vs global digital storage numbers, that its just metadata. A lot of talking points are been shaped for academic people.
Code reviews, better encryption, court cases, new political leaders - anything to restore the faith in junk global networking:)
During the cold war all this was compartmentalized and staff where happy to do their duty. Years later its all been turned inwards. As the internet move beyond web 2.0 the role of classics like Operation Mockingbird https://en.wikipedia.org/wiki/... is just as fun with votes and trending.
Modern art was CIA 'weapon' (22 October 1995) http://www.independent.co.uk/n...
". The centrepiece of the CIA campaign became the Congress for Cultural Freedom, a vast jamboree of intellectuals, writers, historians, poets, and artists which was set up with CIA funds in 1950 and run by a CIA agent." Note the fun cash flow for artists, critics and tours:)
Follow the cash as always. Free massive web 2.0 sites fully funded by votes and ads?
Pentagon Wants a Social Media Propaganda Machine ( 07.15.11 ) http://www.wired.com/2011/07/d...
eg what was the Social Media in Strategic Communication (SMISC) program, ie countermessaging is now legal with the loss of the Smith–Mundt Act.
The 'using data from the micro-blogging service as an intel source to aid" ends up in an interesting way.
US military studied how to influence Twitter users in Darpa-funded research (9 July 2014) http://www.theguardian.com/wor...
It depends on the fine and the hardware?
France Responds To US BNP Fine, Will Train Hundreds Of Russian Seamen To Operate French-Made Warship (06/04/2014) http://www.zerohedge.com/news/...
Putin Slams US $9 Billion Fine Against French BNP As "Blackmail" For Russian Warship Deal http://www.zerohedge.com/news/...
The best companies ever do is open up "satellite offices" in other tech hubs; maybe over time they could move themselves this way, but it's not a quick process by any means.
All you really need a legal team and a few security cleared staff in the USA. Some other staff to bolt part A onto part B and then repackage as a legal US product with some security and domestic supply obligations signed off. The rest is a massive just in time global supply chain for parts.
The "satellite offices" for the domestic market can be done.
Banks around the world negotiate individual penalties with U.S. officials over US citizens and tax.
Govs then request industry-wide settlement for all related banking penalties with U.S. officials to close the matter.
From a bank or the banks gov that once confidential bank data will be forwarded to U.S. officials.
Even if the client names are not offered judicial treaties would then allow the US to find more details.
Re: If it was so easy, why does it take physical access to break into one, and why does Law Enforcement have a huge waiting list at **some big trusted brand** to break into them? (And only partial success, at that)?
Think back to other nations using junk encryption in the past?
Engima, aspects of Japans war time codes, the Soviet Unions re use of one time pads in the 1940's early 1950's, the German efforts against US (M-209) and UK War Office Cypher (~4-figure codebooks) and so many other national systems.
You sit back and watch people of interest use the devices with confidence.
Soon details leak back to people of interest to law enforcement that some devices are hard to decrypt.
Soon details leak back to low ranking law enforcement that some devices are hard to work with.
Soon details leak back to low ranking gov workers that some devices are hard to work with or are not logged at all.
Soon details leak back to low ranking mil that some devices are hard to work with.
Chat away just like so many did in the past:) Your gov, law enforcement, mil and the larger internal affairs departments are having so many problems.
The bottom line is that any data stored in the USA has to be assumed to be compromised.
Thats why Russia, China and other nations are now building their own cpu production lines, trying to build their own internal networks and removing data from any connected networks.
They have also worked out what can be activated for law enforcement per user can also be used by other countries clandestine services.
The consumer software is tame, the encryption junk and known to revert to plain text. The reach of updates and cloud offerings is a longterm connection.
Dual use law enforcement layers with global reach. Thats not a back door, trap door - its a legal feature as shipped.
Other nations are starting to think different about the telco devices they see their staff saving up for and 'enjoying'.
After CALEA (1994) Communications Assistance for Law Enforcement Act, and Snowden? There is not much left on any telco connected phone that would be considered private.
Add in self written NSL, findings and other cute legal options to work with cadres of willing private sector staff.
Slashdot Mirror
Re "If they were honest, they wouldn't be collecting everyone's data to begin with. That in itself is a violation of people's liberties."
They have to collect it all to know who to target with software or hardware to get around individual use of encryption.
Collecting all data finds out why a person is interesting in encryption. Then seek the plain text thanks to tame telcos, OS, standards.
You read up on or show an interest in TOR, your ip is noted for some further consideration. How do they know you looked at TOR? Collect it all.
Not all telcos and web 2.0 sites have plain text within their interconnects. They have to collect it all to get past encryption to some point where plain text point exists in a network.
By collect they don't want you to understand the idea of a person reading, listening, watching. Just all in storage and fast sorting. Once all the hops to friends of friends, calls and internet activity are fully reconstructed then more tasks are considered.
If your within their Empire and practicing "money" changing you may have to:
have some bond or trust account in United States dollars
name and contact information to some expected level of ID standards
disclosures risks.
Anti-money Laundering Compliance and reporting and hire more staff.
and a few other new tasks
Think of it as been a "bank" somewhere that has just got a treaty request from the United States. Have fun filling out the new virtual forms.
Also note intelligence officers will get immunity from liability or prosecution during the unlawful access to the third party's computer.
Yes a lot of white box efforts http://en.wikipedia.org/wiki/W...
Control over reading web sites and control over what can be reported.
News Corp and media union warn over crackdown on spy reporting (17 July 2014)
http://www.theguardian.com/wor...
Journalists will face jail over spy leaks under new security laws (16 July 2014)
http://www.theguardian.com/wor...
Welcome to a few years in jail for “any person” who disclosed information relating to “special intelligence operations”
ie no subsequent disclosure by the press.
ASIO (comparable to MI5) and ASIS (equivalent to CIA or MI6) also get new powers eg power to access a third party's computer.
Dont worry its only for very "very limited circumstances". You can still enjoy freedom of discussion and Australia will "believe very strongly in freedom of speech and freedom of the press". You just wont be able to find digital discussions, if you start the wrong discussion or comment your computer might be a security threat. No more Snowden links? No more links to digital discussions about Snowden that might link to Snowden materials?
You just go further up/down the network and explore options in telco or building places like a classic Meet-me-room https://en.wikipedia.org/wiki/...
Over time a nice international network layer will fall out that is peered to lower domestic interconnect fees? International sounds like fair game?
Even if you do get the courts protection recall the "“antagonizing” the federal government and police if they shared too much information about authorities snooping their customers’ personal data" aspect.
"Telecom giants worried about ‘antagonizing’ feds on lawful access: documents" (May 21 2014)
http://www.thestar.com/news/ca...
The problem is the lack of warrants over some time is what induced this law reform. Also recall the political pressure to allow new colour of law warrantless logging and isp account tracking.
ie rolled back in under the cover of 10's of pages related to cyber bullying laws with legal protections for isp providing support and tacking in a lower “reasonable suspicion” standard.
'Say no to government spying" (March 31, 2014)
http://fullcomment.nationalpos...
Re "I hope that this is the beginning of the end for that idea." :)
Canada seems to want the self signed bureaucratic option. Officials will go looking, get isp logs, users full details and then seek a real court for the later stages of an investigation.
ie customer information, no reasonable expectation of privacy, no warrant is required for warrantless "looking" at internet activity
How this new court event will slow down that vision of finding and ip, logging usage and review will be interesting.
Long term law changes could allow cleared local town, city officials and police in say Australia, Canada or the UK a form of automated interfaces into all their nations isp logs and web 2.0 sites.
Within new laws they could find a user via an ip, log usage, review the past many months and track all new activity of that users account.
Just "looking" at months of web history and your full account details.
Australia had news on issues like this "Greens unveil plan to require warrant to access phone and internet records"
http://www.theguardian.com/wor... (11 June 2013)
"2007 to the Telecommunications Interception Act clarified that so-called “metadata” – email addresses, information about where emails are sent and from whom they are received and who is called from a certain telephone number, from which location and for how long – can be accessed simply by filling in forms"
Think of it more as Google Federal.
'Microsoft, Google spar over federal contract" (04/11/11)
https://thehill.com/policy/tec...
ie getting beyond FISMA and into enterprise - reps with military, intelligence, gov contractor like skills to move iPhone and iPad into US agencies.
From 10 Sep 2013, you really want paper ballots in the open been counted by hand with lots of staff, election observers around.
http://www.abc.net.au/news/201...
The complex Single Transferable Vote math has been used around the world for many, many years now in different forms. This rush to keep computer code is interesting.
Totally divergent interface languages.
Ada and BeOS?
Re the human factor.
Thats a huge risk in Germany. Generations of post ww2 Germans know nothing but helping the NSA and GCHQ over their decades in every level of the West and later German bureaucracies.
The men and woman who helped the UK and USA post 1950's would have chosen like minded staff to work with them or replace them.
Thats the entire upper structures of vital German security lost to 5+ other Five Eyes countries by default over decades.
Then you have the tame German political leaders watched, dropped, advanced thanks to insider help.
The East Germans got some staff next to generations of top West German political leaders or top NATO staff.
The US and UK got all the communication networks of West Germany and then Germany with the help of cleared Germans.
After East Germany lost its entire Western spy network early on due to the files been given to West Germany they thought about what their next file system would be like.
They broke the structure down so that eg 3 files would be stored in separated physical areas. If you wanted the full file you needed top staff to turn up in person to put a spies full background together. Later East Germany went digital and the CIA walked out with all the East German spy contact files from a safe.
You can also share slightly altered data in each page with "trusted" staff. A test to see what turns up in the media or gets reflected back at a friendly nations embassy.
No looking up computer master files to compare and see the changes, thats your own/only page.
Countries have lost aircraft designs and lack of photocopy paper counts did allow the Soviet Union to get material from the UK in bulk.
A trusted person with access to paper work is a huge risk.
"Couldn't they just buy a bunch of computers with no network hardware whatsoever?"
The NSA and GCHQ can cover that air gap with some extra hardware added when shipped.
A tiny burst wireless then sends logged text over a short range to a waiting collection device for storage or other networking.
"NSA Spying Includes Wireless Transmitters To Get Data Off 'Air Gapped' Computers" (Jan 14, 2014)
https://www.techdirt.com/artic...
ie the ideas behind RF transceivers eg SPECULATION, HOWLERMONKEY and CONJECTURE
NSA Codenames
http://cryptome.org/2014/01/ns...
Re "People with a rudimentary knowledge of international economics and politics believed any of that? ... until you where pushed out. :) The same in the UK, Australia, Canada, NZ ...
Their grandparents got mil/gov/police clearance, their parents got mil mil/gov/police clearance. Some of the second or third generation might have drifted into the private sector and became a contractor/consultant?
Or with skill and great grades you where the first to pass a full life story back ground/friends/family face to face interview.
As for 'decent knowledge of network hardware and software" look at crypto in the 1950-80's and what sold to nations and banks. It passed or was fast or was sold as an international interconnect standard. Why would a person risk their job, standing, profession, pension or a huge grant, effortless edu funding? If that failed you where a communist or spy or addict or
You have people with the decent knowledge of network hardware and software who just want to advance and build/design an outsourced part or maintain that optical splitter behind the locked door.
Recall the "Drug Agents Use Vast Phone Trove, Eclipsing N.S.A.’s"
http://www.nytimes.com/2013/09...
"Those employees sit alongside Drug Enforcement Administration agents and local detectives and supply them with the phone data from as far back as 1987."
Just tell the private sector staff a good story and all is good for decades
Before Snowden academic people could still spin the lines about: :) :)
Universities and gov standards ensure good encryption globally.
Courts and political leaders ensure checks and balances at a national level.
Lawyers at a corporation level would never allow their brand to be tainted with extra-judicial collaboration.
The press would find out, the data collected is massive and could never be kept, sorted.
Shared intelligence sites are only looking at other nations.
The post-Snowden revelations fill in the history book gaps from the mid 1990's.
Re extreme manner to which computing advances have been driven by the needs of various secret security agencies around the world?
Sock puppets still try and spin file sizes vs global digital storage numbers, that its just metadata. A lot of talking points are been shaped for academic people.
Code reviews, better encryption, court cases, new political leaders - anything to restore the faith in junk global networking
During the cold war all this was compartmentalized and staff where happy to do their duty. Years later its all been turned inwards.
As the internet move beyond web 2.0 the role of classics like Operation Mockingbird https://en.wikipedia.org/wiki/... is just as fun with votes and trending.
Modern art was CIA 'weapon' (22 October 1995)
http://www.independent.co.uk/n...
". The centrepiece of the CIA campaign became the Congress for Cultural Freedom, a vast jamboree of intellectuals, writers, historians, poets, and artists which was set up with CIA funds in 1950 and run by a CIA agent." Note the fun cash flow for artists, critics and tours
Follow the cash as always. Free massive web 2.0 sites fully funded by votes and ads?
Pentagon Wants a Social Media Propaganda Machine ( 07.15.11 )
http://www.wired.com/2011/07/d...
eg what was the Social Media in Strategic Communication (SMISC) program, ie countermessaging is now legal with the loss of the Smith–Mundt Act.
The 'using data from the micro-blogging service as an intel source to aid" ends up in an interesting way.
US military studied how to influence Twitter users in Darpa-funded research (9 July 2014)
http://www.theguardian.com/wor...
It depends on the fine and the hardware?
France Responds To US BNP Fine, Will Train Hundreds Of Russian Seamen To Operate French-Made Warship (06/04/2014)
http://www.zerohedge.com/news/...
Putin Slams US $9 Billion Fine Against French BNP As "Blackmail" For Russian Warship Deal
http://www.zerohedge.com/news/...
The best companies ever do is open up "satellite offices" in other tech hubs; maybe over time they could move themselves this way, but it's not a quick process by any means.
All you really need a legal team and a few security cleared staff in the USA. Some other staff to bolt part A onto part B and then repackage as a legal US product with some security and domestic supply obligations signed off. The rest is a massive just in time global supply chain for parts.
The "satellite offices" for the domestic market can be done.
Banks around the world negotiate individual penalties with U.S. officials over US citizens and tax.
Govs then request industry-wide settlement for all related banking penalties with U.S. officials to close the matter.
From a bank or the banks gov that once confidential bank data will be forwarded to U.S. officials.
Even if the client names are not offered judicial treaties would then allow the US to find more details.
Re: If it was so easy, why does it take physical access to break into one, and why does Law Enforcement have a huge waiting list at **some big trusted brand** to break into them? (And only partial success, at that)? :) Your gov, law enforcement, mil and the larger internal affairs departments are having so many problems.
Think back to other nations using junk encryption in the past?
Engima, aspects of Japans war time codes, the Soviet Unions re use of one time pads in the 1940's early 1950's, the German efforts against US (M-209) and UK War Office Cypher (~4-figure codebooks) and so many other national systems.
You sit back and watch people of interest use the devices with confidence.
Soon details leak back to people of interest to law enforcement that some devices are hard to decrypt.
Soon details leak back to low ranking law enforcement that some devices are hard to work with.
Soon details leak back to low ranking gov workers that some devices are hard to work with or are not logged at all.
Soon details leak back to low ranking mil that some devices are hard to work with.
Chat away just like so many did in the past
The bottom line is that any data stored in the USA has to be assumed to be compromised.
Thats why Russia, China and other nations are now building their own cpu production lines, trying to build their own internal networks and removing data from any connected networks.
They have also worked out what can be activated for law enforcement per user can also be used by other countries clandestine services.
The consumer software is tame, the encryption junk and known to revert to plain text. The reach of updates and cloud offerings is a longterm connection.
Dual use law enforcement layers with global reach. Thats not a back door, trap door - its a legal feature as shipped.
Other nations are starting to think different about the telco devices they see their staff saving up for and 'enjoying'.
After CALEA (1994) Communications Assistance for Law Enforcement Act, and Snowden? There is not much left on any telco connected phone that would be considered private.
Add in self written NSL, findings and other cute legal options to work with cadres of willing private sector staff.