News for hackers. Stuff that matters.
Re:Twitter discloses national security letters by moxious on Friday January 27, 2017 @07:56PM (#13504126)
I may be in the minority, but I still think these companies are being cowardly.

They disclose as soon as they're permitted to, but the trouble with that is that the permission is coming from the people who are the problem in the first place.

An approach that would care about customers and show some more guts would be simple refusal. In essence, civil disobedience in the face of someone who is violating the law. Let the government take them to court, and let it be disclosed in that way.

Before we applaud them too much, keep in mind they're also telegraphing that this behavior is continuing. It doesn't take much skill to read between the lines and see that this is an ongoing problem for them, there's just a lot more of it that's happened that they're not allowed to disclose yet.

Re:Twitter discloses national security letters by jessespears on Saturday January 28, 2017 @12:06AM (#13505024)
The company officers or agents who were served with the letter could be held personally liable for failure to comply with the order. I think it's a little unfair to expect employees to go to prison for contempt of court in defiance of the order.
Re:Twitter discloses national security letters by moxious on Saturday January 28, 2017 @07:48AM (#13506009)
Yes, that could happen. But there's the Spider-Man Rule: "with great power comes great responsibility".

They're running a major international media outlet over there, and they do have some pretty heavyweight responsibilities that come with that, even if it conflicts with their personal lives.

Re:Twitter discloses national security letters by jasonkostempski on Saturday January 28, 2017 @07:59AM (#13506046)
Its unreasonable to expect people to make life changing decisions based on nice sounding but ultimatley meaningless phrases.
Re:Twitter discloses national security letters by moxious on Saturday January 28, 2017 @09:18AM (#13506365)
You're only observing how we're caught in this trap, you're not providing any constructive way out.

Sure, it's unreasonable to expect this of people. It's also unreasonable for the government to expect they'll help in spying on their customers. It's also unreasonable for the government to do this in the first place.

Everything's unreasonable. Someone has to step...the...fuck...up. And the government has demonstrated it won't be them.

Who does that leave? Would it be better to kick back, admire the problem, and simply let things continue as they are?

Re:Twitter discloses national security letters by jakubp on Saturday January 28, 2017 @09:32AM (#13506437)
You aren't providing one [constructive way out] either. It's not Twitter's or any other company's fault, yet you want them to pay the price in form of risk. Why don't you pay it yourself?
Re:Twitter discloses national security letters by moxious on Saturday January 28, 2017 @02:28PM (#13508369)
Well, no one can prove what they'd do if they were in this situation. But I can't pay this cost for twitter, because the government hasn't asked this of me.

I don't believe they'd go to jail though. I do believe they'd cause an utter shitstorm for themselves personally and professionally though, but that they'd get a lot of attention to the matter and come out the other side OK. I can think of at least 5 non-profits who would jump to pay their legal costs, just to be in the battle and stick it to the government if this sort of thing ever came up.

What do you think the real consequences of standing up to the government are? Publicity is mostly my bet. Note that if we're dealing with the CEO of twitter, hustling him off to a secret prison somewhere with no trial isn't an option, as that's the same as setting off a big media bomb.

But you know, nobody wants to be inconvenienced, and it is a risk, so I suppose many people feel that's adequate justification for twitter to do nothing and keep serving punch to the crowd.

Re:Twitter discloses national security letters by jakubp on Sunday January 29, 2017 @11:55AM (#13515016)
Right. So I think you and I agree on some element of responsibility and that it feels too convenient for those companies to just say "sorry, there is nothing we can do". On the other hand, I think it's clear now how things generally play out behind the scenes, so at leats we as users of those services can either stop using them entirely, or seek alternatives that are hosted overseas (relative to US) and where US jurisdiction is weaker. That would secure us a bit as individuals, but it does nothing for the big picture. I don't see a clear way out.
Re:Twitter discloses national security letters by duggan on Saturday January 28, 2017 @11:49AM (#13507291)
No, they're providing the only ethical way out.

This is the responsibility that comes with the wealth and power acquired by using other people's personal information.

Particularly for citizens of a nation whose leadership is now treading a familiar historical path.

Re:Twitter discloses national security letters by Gargoyle on Saturday January 28, 2017 @11:38AM (#13507233)
They're being paid a great deal of money on the theory that their jobs have a lot of responsibility. If they choose to ignore whatever parts of that responsibility they can get away with, perhaps they don't actually deserve that compensation after all.
Re:Twitter discloses national security letters by coldtea on Saturday January 28, 2017 @08:43AM (#13506218)
... and from super-hero comic-books at that.
Re:Twitter discloses national security letters by nebabyte on Saturday January 28, 2017 @09:44PM (#13511536)
Life isn't fiction.
Re:Twitter discloses national security letters by Domenic_S on Saturday January 28, 2017 @01:01AM (#13505168)
Howcome?
Re:Twitter discloses national security letters by oneubauer on Saturday January 28, 2017 @01:12AM (#13505192)
I think it's unfair to expect that.

Anyone who risks their own wellbeing for the greater good is usually applauded, for good reason: it is not expected.

Edit: if you'll pardon the expression, it takes serious balls to put your entire way of life on the line. Yes, history sometimes venerates the brave...sometimes posthumously....so it all might seem glamorous. But it's a lot harder than that in real time, when you don't know what will come of it.

Re:Twitter discloses national security letters by apatters on Saturday January 28, 2017 @02:27AM (#13505358)
That's why disclosure needs to start at the top and come from someone big enough to survive the fallout. If (for example) Zuckerberg genuinely wanted to do good and grew a pair, he'd do it. He's too busy exploiting your data to get rich and virtue signaling via acquisitions though.
Re:Twitter discloses national security letters by morgante on Saturday January 28, 2017 @03:08AM (#13505448)
Do you think the government wouldn't throw Zuckerberg in jail?
Re:Twitter discloses national security letters by apatters on Saturday January 28, 2017 @03:29AM (#13505497)
They might, but he'd have better odds than your average Joe (and certainly a better legal team).

"With great power comes great responsibility" isn't just a line from a movie. Of course we can choose not to hold our leaders to high expectations, but that leads to a markedly worse world for the rest of us.

Re:Twitter discloses national security letters by argonaut on Saturday January 28, 2017 @04:22AM (#13505586)
> virtue signaling via acquisitions though.

This makes no sense.

Re:Twitter discloses national security letters by benevol on Saturday January 28, 2017 @04:17AM (#13505582)
> Anyone who risks their own wellbeing for the greater good is usually applauded, for good reason: it is not expected.

Except for Snowden. America gave him the middle finger.

Re:Twitter discloses national security letters by brokenmachine on Saturday January 28, 2017 @04:55AM (#13505644)
He's applauded by many.
Re:Twitter discloses national security letters by bad_user on Saturday January 28, 2017 @07:38AM (#13505983)
Just as many consider him a traitor.
Re:Twitter discloses national security letters by BinaryIdiot on Friday January 27, 2017 @08:29PM (#13504246)
> I may be in the minority, but I still think these companies are being cowardly.

I don't know. Seems really easy to say when it's not you on the receiving end. But I mostly agree about your other points I just have a hard time judging them too harshly for not wanting to risk their business and / or personal freedoms.

Re:Twitter discloses national security letters by throwaway91111 on Friday January 27, 2017 @09:40PM (#13504531)
What is "just harsh enough" for you?
Re:Twitter discloses national security letters by nperez on Friday January 27, 2017 @10:52PM (#13504782)
It's good that they're disclosing this, but they are not doing anything particularly brave. While it's understandable that they would choose not to put their business at risk, a true act of bravery would be to refuse the requests in the first place.

^ that is a medium harshness level, I think.

Re:Twitter discloses national security letters by wfunction on Friday January 27, 2017 @08:04PM (#13504142)
> An approach that would care about customers and show some more guts would be simple refusal. In essence, civil disobedience in the face of someone who is violating the law. Let the government take them to court, and let it be disclosed in that way.

Is that how it works? You can refuse anything the government tells you to do until they take you to court and the court orders you?

Re:Twitter discloses national security letters by moxious on Friday January 27, 2017 @08:09PM (#13504165)
Perhaps. Perhaps not. Either way, you make it messy for them and you do probably defeat their primary objective, which is secrecy.

How do you think they'd respond? With SEAL Team 6 while keeping everything quiet?

When the government shows up to force you to turn over the information, no violence is required, but you can make sure the newspapers are there when it happens, and that the knowledge of it happening is not restricted to a few execs, keeping key technical people in the dark (as happened at Yahoo)

Re:Twitter discloses national security letters by wfunction on Friday January 27, 2017 @08:20PM (#13504207)
> How do you think they'd respond? With SEAL Team 6 while keeping everything quiet?

Possibly by taking you to court and convicting you of breaking some law by refusing to provide the information the first time, perhaps even completely independently of whether or not the order was actually constitutional. I can imagine lots of bad outcomes that would land you in jail without giving you the chance to take the actual issue to court.

Re:Twitter discloses national security letters by therein on Friday January 27, 2017 @10:57PM (#13504801)
But when dealing with a corporate entity, who do you go after? Since this sort of coercion seems to only work on an individual level, going after the entire corporate entity won't invoke the same emotional response.
Re:Twitter discloses national security letters by brians on Saturday January 28, 2017 @01:00AM (#13505165)
NSLs are addressed to, and claim to compel, an individual.
Re:Twitter discloses national security letters by wfunction on Friday January 27, 2017 @11:02PM (#13504825)
I don't know how the law works. But my completely-unfounded guess is that whoever is supposed to authorize this and who is refusing would be the one convicted.
Re:Twitter discloses national security letters by mirimir on Friday January 27, 2017 @11:39PM (#13504938)
So maybe they ought to be anonymous: http://www.cryptohippie.net/AnonAdmin.html
Re:Twitter discloses national security letters by brokenmachine on Saturday January 28, 2017 @04:58AM (#13505655)
You're giving system administrator status to an anonymous person on the internet. What could possibly go wrong?
Re:Twitter discloses national security letters by mirimir on Saturday January 28, 2017 @09:59PM (#13511621)
You give them limited access and rights, to do what you want them to do. Here, they would have access to communications with government agencies, ability to tweet users or groups thereof, and perhaps responsibility for canary management.
Re:Twitter discloses national security letters by mirimir on Friday January 27, 2017 @11:34PM (#13504926)
They have secret courts for that.
Re:Twitter discloses national security letters by dannypgh on Friday January 27, 2017 @08:18PM (#13504201)
There may be additional penalities/costs for letting it get to the point where a court is involved, but yeah, seems like this falls under "due process of law."
Re:Twitter discloses national security letters by wfunction on Friday January 27, 2017 @08:26PM (#13504229)
Well that's what I mean, it's not like you can just wait for the court to serve you the order. If the additional penalty is that you'll end up in jail or something, then this isn't really realistic is it?
Re:Twitter discloses national security letters by jdormit on Friday January 27, 2017 @08:09PM (#13504164)
Yes. That's what courts are for.
Re:Twitter discloses national security letters by wfunction on Friday January 27, 2017 @08:18PM (#13504199)
But are there no laws that require you to abide by these kinds of orders and challenge them differently? Couldn't you be later convicted of not abiding by those laws independently of whether the orders were themselves legal/constitutional?
Re:Twitter discloses national security letters by paulddraper on Friday January 27, 2017 @09:41PM (#13504534)
An unconstitutional act is void.
Re:Twitter discloses national security letters by rhizome on Friday January 27, 2017 @10:01PM (#13504623)
If you're talking about NSLs, they've been found constitutional for almost a year now. Still time to buy that first birthday gift!

https://arstechnica.com/tech-policy/2016/04/in-a-reversal-ju...

Re:Twitter discloses national security letters by paulddraper on Saturday January 28, 2017 @12:04AM (#13505015)
Sure, I'm just saying that there aren't legal repercussions from violating an unconditional act.
Re:Twitter discloses national security letters by techbio on Saturday January 28, 2017 @05:23AM (#13505705)
Illegal repercussions then?
Re:Twitter discloses national security letters by paulddraper on Saturday January 28, 2017 @09:12AM (#13506337)
Um, sure. If no one watches the watchers.
Re:Twitter discloses national security letters by aisofteng on Saturday January 28, 2017 @05:56AM (#13505781)
While I agree with the spirit or what you say, that could backfire very poorly. Suppose that the NSL were sent as part of an investigation on someone planning some sort of attack, such as a mass shooting, and disclosing the NSL ends up exposing that and causing it to fail. The blowback would end up providing stronger support for secrecy.

Unlikely, but possible - and when you're the one making the decision to disobey, you have to consider it. I don't know what I would do in that situation, honestly.

I think the correct approach is not a gag order that makes it illegal to disclose an NSL, but that an NSL should be accompanied with an explanation of what it is for and what the stakes are. A presumption of good faith in the organization to act in best interests, but leaving the ability to disclose to disclose to the public if it is felt that the NSL is in the wrong.

Re:Twitter discloses national security letters by JoachimSchipper on Saturday January 28, 2017 @01:05AM (#13505176)
Twitter isn't outright defying the government, but they did spend millions on lawyers. Don't they deserve more freedom than implied by "cowardly"?
Re:Twitter discloses national security letters by pmoriarty on Saturday January 28, 2017 @04:27PM (#13509470)
People who care deeply enough about civil liberties to go to jail for it are rarely the type to seek or acquire much power.