5 ms·

Why monthly and not daily? Or hourly?

jakobdabo 10y ago
I haven't put much thought into it, I guess it could be daily but hourly is overkill I think. Actually, this is an interesting startup idea - warrant canary as a service, with an API.
- kbenson 10y ago
  I think the point is that at some level of granularity, it's an announcement that you are currently working with the authorities, which is expressly forbidden in the NSL. There's some point at which a court will decide that you aren't complying, and stepping over that point is bad for your business. Since that point is very fuzzy, it's a dangerous thing to play around with.
  - nickpsecurity 10y ago
    Exactly. They could even order you to keep updating it. In the Lavabit case, the FBI asked and judge agreed to compel Levison's silence + lies if they got the key with reason being his business wouldnt suffer if customers were lied to about their privacy. That argument and a judge agreeing with it are worth remembering in discussions like these.
- deleted 10y ago
  [deleted]
- toomuchtodo 10y ago
  https://canarywatch.org/ https://canarywatch.org/
- pg_is_a_butt 10y ago
  how could you possibly justify daily... as in, you need to know the day of... but knowing within the hour, so you can do whatever you would do with that data immediately isn't a better idea??? you obviously haven't thought about much, lady.
greenokapi 10y ago
I wonder what the legal limits on the granularity are, probably up for a lot of interpretation in a court.
- dublinben 10y ago
  Before you receive an NSL, you have no limits. After you receive one, you may only report buckets (0-249, 250-499, etc.) on a quarterly basis.
anonbanker 10y ago
it is a disturbing commentary on our rights in society that we have to actually think about these things as a normal part of life. it is remarkable our ability and resolve to continue enforcing our rights in new and creative ways, but we should actually all recognize the fact that our right to privacy has been completely violated, as well as our right to self-incrimination.

I haven't put much thought into it, I guess it could be daily but hourly is overkill I think. Actually, this is an interesting startup idea - warrant canary as a service, with an API.

kbenson 10y ago
I think the point is that at some level of granularity, it's an announcement that you are currently working with the authorities, which is expressly forbidden in the NSL. There's some point at which a court will decide that you aren't complying, and stepping over that point is bad for your business. Since that point is very fuzzy, it's a dangerous thing to play around with.
- nickpsecurity 10y ago
  Exactly. They could even order you to keep updating it. In the Lavabit case, the FBI asked and judge agreed to compel Levison's silence + lies if they got the key with reason being his business wouldnt suffer if customers were lied to about their privacy. That argument and a judge agreeing with it are worth remembering in discussions like these.
deleted 10y ago
[deleted]
toomuchtodo 10y ago
https://canarywatch.org/ https://canarywatch.org/
pg_is_a_butt 10y ago
how could you possibly justify daily... as in, you need to know the day of... but knowing within the hour, so you can do whatever you would do with that data immediately isn't a better idea??? you obviously haven't thought about much, lady.

greenokapi 10y ago

I wonder what the legal limits on the granularity are, probably up for a lot of interpretation in a court.

dublinben 10y ago
Before you receive an NSL, you have no limits. After you receive one, you may only report buckets (0-249, 250-499, etc.) on a quarterly basis.

anonbanker 10y ago

it is a disturbing commentary on our rights in society that we have to actually think about these things as a normal part of life. it is remarkable our ability and resolve to continue enforcing our rights in new and creative ways, but we should actually all recognize the fact that our right to privacy has been completely violated, as well as our right to self-incrimination.