Security Category Archives

in need of regulations

23 December 2013 | Internet, Privacy, Security | No Comments

очередная статья Брюса Шнайера максимально точно расставляе акценты в нашем ежедневном интернете:

The “Do Not Track” law serves as a sterling example of how bad things are. When it was proposed, it was supposed to give users the right to demand that Internet companies not track them. Internet companies fought hard against the law, and when it was passed, they fought to ensure that it didn’t have any benefit to users. Right now, complying is entirely voluntary, meaning that no Internet company has to follow the law. If a company does, because it wants the PR benefit of seeming to take user privacy seriously, it can still track its users.

Really: if you tell a “Do Not Track”-enabled company that you don’t want to be tracked, it will stop showing you personalized ads. But your activity will be tracked—and your personal information collected, sold and used—just like everyone else’s. It’s best to think of it as a “track me in secret” law.

а вот и цифры:

Google’s 2013 third quarter profits were nearly $3 billion; that profit is the difference between how much our privacy is worth and the cost of the services we receive in exchange for it.

ничего нового, конечно. но если мы не понимаем, то, видимо, нужно повторять беспрерывно.

  

всевидящее око

25 November 2013 | Politics, Privacy, Security | No Comments

welcome to the brave new world:

Strange new off-white boxes popping up in downtown Seattle use wi-fi networks that can record the last 1,000 locations of a person using their cellphone’s MAC address, but the Department of Homeland Security – which funded the network to the tune of $2.7 million dollars – has refused to address the nightmare privacy implications of a system that could lead to the permanent tracking of an entire city’s population.

есть и подробности:

[A]s new documents reveal, the grid is far deeper than the media is telling you. The Seattle DHS spy system ultimately ties in with an enormous stealth database that acts as an intelligence hub for all of your personal data.

я бы сказал, что это пиздец.

  

народ сер, но мудр

19 November 2013 | Politics, Privacy, Security | 1 Comment

ну, и заодно несколько цифр как раз про NSA:

In August 2012, thanks to YouGov, I launched my first national survey to probe more deeply about what Americans know about intelligence agencies, what they think about controversial intelligence programs, and where those attitudes come from. In light of the Edward Snowden revelations, last month I asked YouGov to run another poll that asked some of the same questions, along with new ones about NSA so that I could start tracking trends over time. The poll ran Oct. 5-7, 2013, and included 1,000 people (with a margin of error of +/- 4.3 percent).

<...>

It appears that Americans like the CIA, FBI, and DHS about as much as they did a year ago. Americans just don’t trust the accuracy of intelligence provided by these or other three-letter intelligence agencies as much now.

а вы говорите Эдвард Сноуден, гражданские свободы и право на частную жизнь. что ж удивляться-то[1]?

I found that the more people watched spy-themed television shows and movies, the more they liked the NSA, the more they approved of NSA’s phone and Internet collection programs, and the more they believed the NSA was telling them the truth.

тьфу.

 


  1. на самом деле, все не так плохо, разумеется. но, как и любые статистические данные, этот опрос тоже полон всевозможных интерпретаций.  ↩

  

например

19 November 2013 | Google, Privacy, Security, Software | 1 Comment

каждый день, каждую минуту:

Google is beta-testing a program that uses smartphone location data to determine when consumers visit stores, according to agency executives briefed on the program by Google employees. Google then connects these store visits to Google searches conducted on smartphones in an attempt to prove that its mobile ads do, in fact, work.

<...>

It is easiest for Google to conduct this passive location tracking on Android users, since Google has embedded location tracking into the software.

<...>

But Google can also constantly track the location of iPhone users by way of Google apps for iOS. <...> Google’s namesake iOS app — commonly referred to as Google mobile search — continues collecting a user’s location information when it runs in the background.

как было когда-то сказано:

The problem here isn’t how Google (or Facebook or anyone else) handles our privacy; the problem is that Google shouldn’t be managing our privacy. And Google (and others) need to stop demanding otherwise.

  

dipping with sharks

13 October 2013 | Jurisprudence, Privacy, Security | No Comments

welcome to the Brave New World:

Many Americans would be surprised by how easily local law enforcement, IRS investigators, the FBI and private attorneys can reach into the vast pool of personal information about their lives with little more than a subpoena, which no judge needs to review.

  

the justification

12 October 2013 | History, Jurisprudence, Privacy, Security | No Comments

немного[1] истории:

Almost 35 years later, the court’s decision — in a case involving the recording of a single individual’s phone records — turns out to be the basis for a legal rationale justifying governmental spying on virtually all Americans. Smith v. Maryland, as the case is titled, set the binding precedent for what we now call metadata surveillance. That, in turn, has recently been revealed to be the keystone of the National Security Agency’s bulk collection of U.S. telephone data, in which the government chronicles every phone call originating or terminating in the United States, all in the name of the war on terror.

 


  1. if you still don’t read Threat Level and Danger Room, I think you should.  ↩

  

о праве на свободу

3 October 2013 | Jurisprudence, Politics, Security | 1 Comment

а вот и закономерное[1] продолжение старой истории:

The U.S. government in July obtained a search warrant demanding that Edward Snowden’s e-mail provider, Lavabit, turn over the private SSL keys that protected all web traffic to the site, according to to newly unsealed documents.

The July 16 order came after Texas-based Lavabit refused to circumvent its own security systems to comply with earlier orders intended to monitor a particular Lavabit user’s metadata, defined as “information about each communication sent or received by the account, including the date and time of the communication, the method of communication, and the source and destination of the communication.”

The name of the target is redacted from the unsealed records, but the offenses under investigation are listed as violations of the Espionage Act and theft of government property — the exact charges that have been filed against NSA whistleblower Snowden in the same Virginia court.

помочь Ладару Левинсону, владельцу Lavabit, можно здесь — и вот, что он пишет:

I’ve shut down Lavabit because I refuse to be complicit in the crimes against the American people and the U.S. Constitution. I wish I could say more about our situation.

What happens now? We at Lavabit have started preparing the paperwork needed to continue fighting for the Constitution in the 4th Circuit Court of Appeals.

 


  1. pardon the pun.  ↩

  

I’m the other

15 September 2013 | Jurisprudence, Politics, Security | No Comments

quote of the year:

I believe a free person needs no excuse whatsoever to keep communications secret from the government, whether those communications are weighty or frivolous. <...> I believe the mantra “what do you have to hide” is a contemptible and un-American sentiment that fundamentally misconstrues the proper relationship between citizen and state.

welcome to the New Dark Age.

  

ингсоц в действии

27 August 2013 | Culturology, Jurisprudence, Politics, Privacy, Security | 2 Comments

к слову о Гленне Гринуолде и Дэвиде МирандаЭндрю Салливан сформулировал мои ощущения максимально точно:

In this respect, I can say this to David Cameron. Thank you for clearing the air on these matters of surveillance. You have now demonstrated beyond any reasonable doubt that these anti-terror provisions are capable of rank abuse. Unless some other facts emerge, there is really no difference in kind between you and Vladimir Putin. You have used police powers granted for anti-terrorism and deployed them to target and intimidate journalists deemed enemies of the state.

You have proven that these laws can be hideously abused. Which means they must be repealed. You have broken the trust that enables any such legislation to survive in a democracy. By so doing, you have attacked British democracy itself. What on earth do you have to say for yourself?

именно.

  

this is how totalitarianism starts

21 August 2013 | Jurisprudence, Politics, Privacy, Security | 1 Comment

о нашем общем будущем:

[A] “terrorist” is anyone the spooks say is a terrorist. In the past, we might reasonably assume our intelligence agencies targeted people who presented a potential threat to us. With the Miranda detention, it’s clear that a “terrorist” is anyone who presents a threat to them.

о предъявленном ультиматуме:

I think even lifelong British bureaucrats understand that destroying the Guardian’s hardware did nothing to destroy the data that lives on it. Encrypted copies abound – if not in England, then certainly in Russia, Germany, and Brazil.

No, they did it to send a message. And that message is, Your debate is inconsequential. We control the horizontal and the vertical. We’ll do what we want, and there’s nothing you can do to stop us.

о начале гражданской войны:

[Y]anking David Miranda out of a queue at Heathrow, tossing him into an interrogation room, and sweating him for nine hours <...>, too, was sending a message.

It was a warning to Greenwald but also to journalists and whistleblowers in general: The gloves are coming off. Or as the kids like to say, s**t just got real.