The Google File System makes NSA’s hack blatantly illegal and they know it

nsa_google_snoopThe latest Edward Snowden bombshell that the National Security Agency has been hacking foreign Google and Yahoo data centers is particularly disturbing. Plenty has been written about it so I normally wouldn’t comment except that the general press has, I think, too shallow an understanding of the technology involved. The hack is even more insidious than they know.

The superficial story is in the NSA slide (above) that you’ve probably seen already. The major point being that somehow the NSA — probably through the GCHQ in Britain — is grabbing virtually all Google non-spider web traffic from the Google Front End Servers, because that’s where the SSL encryption is decoded.

Yahoo has no such encryption.

The major point […]

Privacy is dead and here’s how

privacy-do-not-disturb

My friend Dave Taht, who battles bufferbloat for us all, pointed me today to a document from the Wireless Internet Service Provider Association. It’s the WISPA CALEA Compliance Guide, which details most of the rules that wireless ISPs are required to follow by CALEA — the Communications Assistance for Law Enforcement Act of 1994. These rules, variants of which apply to all telcos and to ISPs of all kinds (not just wireless), say what those companies are required to do to comply with the law. More directly, it specifies how they can be required to intercept customer communications and relay that content to law enforcement agencies.

Read it if you have a moment. The document, which is […]

What if Marissa Mayer went to jail?

Dai SuganoWednesday at the TechCrunch Disrupt conference in San Francisco, Yahoo CEO Marissa Mayer presented her company’s side of fighting the National Security Agency over requests to have a look-see at the data of Yahoo users. It’s a tough fight, said Mayer, and one that takes place necessarily in private. Mayer was asked why tech companies had not simply decided to tell the public more about what the U.S. surveillance industry was up to. “Releasing classified information is treason and you are incarcerated,” she said.

Go directly to jail?

No.

How would that work, exactly? Would black helicopters — silent black helicopters — land at Yahoo Intergalactic HQ and take Marissa Mayer away in chains? Wouldn’t that defeat the […]

Eisenhower, Snowden and the military industrial complex

eisenhower-farewellFifty-two years ago, three days before he left office and retired from Washington, U.S. President Dwight D. Eisenhower addressed the nation on television with what he called “a message of leave-taking and farewell, and to share a few final thoughts…” This came to be called Eisenhower’s military-industrial complex speech and was unlike any other address by Eisenhower or, indeed, by any of his predecessors. You can read the entire speech (it isn’t very long) here, or even watch it here, but I’ve also included below what I believe to be the most important passage:

Until the latest of our world conflicts, the United States had no armaments industry. American makers of plowshares […]

Is cyber insurance AAA for data or another back door?

GMCtowA few days ago I promised “tomorrow” a column about the future of data security. Then, just as the electrons were flowing on that DefCon column, I bought on eBay a 1978 GMC Royale motorhome in Bismarck, North Dakota that Channing and I have been trying to bring home ever since. We’ve so far broken down in Fargo, North Dakota (air suspension leak) and Brookings, South Dakota (ignition failure), but are now back on the road headed for California. We met Rick, the tow truck driver who used to be a rodeo bull rider, and Wayne Westerberg, the RV mechanic who gave up his Friday night to get us back on the road. Try Googling […]