I haven't put much thought into it, I guess it could be daily but hourly is overkill I think.

Actually, this is an interesting startup idea - warrant canary as a service, with an API.

I think the point is that at some level of granularity, it's an announcement that you are currently working with the authorities, which is expressly forbidden in the NSL.

There's some point at which a court will decide that you aren't complying, and stepping over that point is bad for your business. Since that point is very fuzzy, it's a dangerous thing to play around with.

Exactly. They could even order you to keep updating it. In the Lavabit case, the FBI asked and judge agreed to compel Levison's silence + lies if they got the key with reason being his business wouldnt suffer if customers were lied to about their privacy. That argument and a judge agreeing with it are worth remembering in discussions like these.

it is a disturbing commentary on our rights in society that we have to actually think about these things as a normal part of life. it is remarkable our ability and resolve to continue enforcing our rights in new and creative ways, but we should actually all recognize the fact that our right to privacy has been completely violated, as well as our right to self-incrimination.

I wonder what the legal limits on the granularity are, probably up for a lot of interpretation in a court.

Before you receive an NSL, you have no limits. After you receive one, you may only report buckets (0-249, 250-499, etc.) on a quarterly basis.