If true, this is a catastrophic cybersecurity failure. I’m feeling more like a Luddite every week. Systems like that maybe shouldn’t exist.

time to start the Butlerian jihad

Building and having exist these mass targeted surveillance creates a risk that is pretty hard to mitigate - they’re meant to be secret even to most of the people operating the comms networks. It’s also creates a blame arbitrage risk - at least in the US, the reputation of all telcos is so in the garbage that they don’t have a huge incentive to keep things tight when doing things the government forces them to do.

Another related case was in the mid 2000s where someone did the same thing to Vodafone’s mobile network: https://en.wikipedia.org/wiki/Greek_wiretapping_case_2004%E2...

Circumstantial evidence suggests it was the US in that case.

If a local police department wants phone records they have to go through the company's legal compliance department.

The disturbing revelation here is that it sounds like the federal government has direct backdoor access to all these records without having to show any warrants.

https://en.m.wikipedia.org/wiki/Room_641A

> The disturbing revelation here is that it sounds like the federal government has direct backdoor access to all these records without having to show any warrants.

This is since a looong time. HTTPS does not offers any security. It just serves to identify you in case they want to.

Every telco in every country has specific systems for handling wiretaps, it’s called “LI” - “lawful intercept”. They don’t like to talk about it, even with their employees

all network devices that terminates a subscriber (broadband or mobile) has a feature called LI: https://en.wikipedia.org/wiki/Lawful_interception, which is required by law in almost all countries one requirement is that operation of LI feature is totally separate from normal network operator, so that even normal network admin are not supposed to know what kind of LI operation is ongoing...