News for hackers. Stuff that matters.
Re:China to Set Up ‘Security Offices’ Inside Internet Companies by jebblue on Wednesday August 05, 2015 @10:15AM (#10009799)
Did you really equate communist forced police presence with voluntary and beneficial government partnerships with the private sector in the US? The Internet exists because of the US Government (DARPA) and US taxpayer; not under its direct police control.
Re:China to Set Up ‘Security Offices’ Inside Internet Companies by jpollock on Wednesday August 05, 2015 @10:28AM (#10009898)
How about the requirement that foreign carriers have US citizens in US offices at the point of interconnect with the US.

I also believe there are reporting oddities in the role too, but I can't find the reference to it anymore.

The result is that same as China, the difference is who's paying the person's salary.

Edit [information below]:

[1] (13) Carriers shall comply with the Communications Assistance for Law Enforcement Act (CALEA), see 47 C.F.R. §§ 1.20000 et seq. Page 5 of 6 1.20000 et seq.

[2] (14) Every carrier must designate an agent for service in the District of Columbia. See 47 U.S.C. § 413, 47 C.F.R. §§ 1.47(h), 64.1195.

[3] https://apps.fcc.gov/edocs_public/attachmatch/DA-15-348A1.pd...

Not that ominous, just normal legal intercept. The US has had this requirement for a long time.

Re:China to Set Up ‘Security Offices’ Inside Internet Companies by iamthepieman on Wednesday August 05, 2015 @11:21AM (#10010407)
For those who don't know much about CALEA here is a short article from an industry rag[0] and a more technical document on a specific solution by Cisco[1]

[0] https://insidersurveillance.com/calea-solutions-should-you-b...

[1] http://www.cisco.com/web/about/security/intelligence/LI-3GPP...

Re:China to Set Up ‘Security Offices’ Inside Internet Companies by prewett on Wednesday August 05, 2015 @02:53PM (#10011945)
It's not the same as China. China is putting police in local (Chinese) companies with Chinese citizens in Chinese companies. That's kind of different than requiring a citizen in the office of a foreign company doing business locally.

I expect that the intent is different, although I don't know US law. The Chinese intent is to (forcibly?) prevent unwanted communication. I doubt that is the intent of the US law.

Re:China to Set Up ‘Security Offices’ Inside Internet Companies by jpollock on Wednesday August 05, 2015 @03:25PM (#10012197)
Actually, CALEA [2] is a requirement for all US carriers (ISPs/telcos), it's just an extra requirement on anyone peering with a US firm. It's also been around since 1994.

CALEA intercepts are implemented through automated systems, the judge signs a warrant, it's entered into a computer and the wiretaps are done automatically, with the traffic routed to the requesting agency's systems.

In China, they probably noticed that they don't have a legal intercept facility built in, and don't want to spend the time to negotiate with all of the interested parties. So, they put a person on site.

The threat and the outcome is the same. If you don't provide legal intercept, you're going to get locked up.

For an example of what level of access these systems provide, a Greek carrier was hacked through theirs - the hacker(s) turned it on and used it to listen in on the Prime Minister's phone calls[1].

I'm not saying that the Chinese are doing the right thing, just that it's largely equivalent to what happens here.

[1] http://spectrum.ieee.org/telecom/security/the-athens-affair

[2] https://en.wikipedia.org/wiki/Communications_Assistance_for_...

Re:China to Set Up ‘Security Offices’ Inside Internet Companies by anseljh on Wednesday August 05, 2015 @03:58PM (#10012412)
Intercepts with warrants is really, really different than giving unaccountable thought police a desk in the news room. Equating these things is silly and borderline offensive.
Re:China to Set Up ‘Security Offices’ Inside Internet Companies by happyscrappy on Wednesday August 05, 2015 @10:33AM (#10009939)
Right, Europe is just as bad as China as well.
Re:China to Set Up ‘Security Offices’ Inside Internet Companies by pjc50 on Wednesday August 05, 2015 @10:43AM (#10010034)
Collaboration with surveillance authorities in the US is neither voluntary ("national security letter") nor beneficial.

The enforcement that goes with the surveillance is much less intrusive, almost invisible, but that doesn't mean we should ignore it.

Re:China to Set Up ‘Security Offices’ Inside Internet Companies by sschueller on Wednesday August 05, 2015 @10:50AM (#10010107)
There are some financial benefits. [1]

[1] http://www.huffingtonpost.com/2013/07/10/government-wiretap_...

Re:China to Set Up ‘Security Offices’ Inside Internet Companies by iamthepieman on Wednesday August 05, 2015 @11:05AM (#10010247)
Some of the partnerships, maybe even all of them, are beneficial to the private sector entities and their customers. The U.S. government provides security, guidance, technical competence and resources. But just because they are beneficial in some ways doesn't mean they can't also be harmful in others.

The government can make sure that the private sector information and communication is secure against nation states and industrial espionage while also using the partnership and the access it provides to further its surveillance efforts, even its efforts against its own citizens.