5 ms·
Are there any examples of companies refusing to provide the requested data to the NSA other than lavabit?
by welder 11y ago
Are there any examples of companies refusing to provide the requested data to the NSA other than lavabit?
- tptacek 11y agoLavabit didn't refuse requests --- he had apparently been responsive to others --- until the Snowden incident, where his refusal cost all its users their privacy in a futile effort to preserve one user's privacy.
- lindx 11y agoNot familiar with the lavabit story - how did his refusal cost users their privacy?
- Tomte 11y agoHe had to give up other peoples' privacy, as well. The alternative (that the FBI demanded until he started playing childish games) was actually only handing over Snowden's mails.
- tptacek 11y agoWhich, to be clear, would still have been a disaster for Lavabit! It's not my suggestion that he should have gone along with the FBI and then continued to run the service. But had he complied, as he was legally obligated to do, with the FBI, he could have immediately and gracefully shuttered the service without having given up the TLS keys that unlocked all communications to the site.
- forgetsusername 11y agoIf they can come in at any time and say "we only want this one guy" then the rest of the users privacy is already in trouble.
- Kalium 11y agoIn a sense, yes. One of Lavabit's failings is that they didn't design for scope-limited disclosure. When the FBI demanded their certs, it exposed all their users.
- tptacek 11y agoDon't overthink it. The failure of Lavabit was designing a system that enabled disclosure at all. It wasn't end-to-end encrypted; its users had to trust its operators, which, because operators can always be coerced, is never safe.
- sbank 11y agohttps://en.wikipedia.org/wiki/Qwest#Refusal_of_NSA_surveillance_requests https://en.wikipedia.org/wiki/Qwest#Refusal_of_NSA_surveilla...