4 ms·
> Or you can do business from a jurisdiction that doesn't recognize NSLs. Or perhaps from an unknown jurisdiction. That means not doing business in the US at a
by jonnybgood 9y ago
> Or you can do business from a jurisdiction that doesn't recognize NSLs. Or perhaps from an unknown jurisdiction.
That means not doing business in the US at all.
- JetSpiegel 9y agoWhich makes it fair game for direct targeted attacks by the NSA.
- jonnybgood 9y agoYou can still be targeted if you’re a foreign business operating in the US.
- mirimir 9y agoYes, you can and will be targeted. So if you go that route, you'd better know what you're doing.
- bpanon 9y agoThe entire universe is fair game for the NSA.
- mirimir 9y agoRight. They pretty much do whatever they want, and lie as necessary to frustrate oversight, and protect operational methods. They are, after all, a branch of the military.
- cesarb 9y agoFor someone outside the USA, a targeted attack by the NSA is no different than a targeted attack by anyone else. They are breaking the law, and you are allowed and supposed to defend against them. If you are within the USA, however, they can use things like these National Security Letters which you are not allowed to go against.
- geofft 9y agoThis is incorrect for a few reasons: you can certainly defend against NSLs, even those that you can't defend against are targeted (see the ones Twilio received), they're from the FBI and not the NSA, and as hackers the NSA is more skilled and more well-funded than most other attackers you're defending against.
- mirimir 9y agoThe NSA does have lots of skilled hackers. But so do other national TLAs. And there are many freelance hackers.
- Feniks 9y agoMost countries will happily throw anyone under the bus if the US intelligence services ask them too. Besides if you're doing something the NSA doesn't like local law enforcement probably won't like it either.
- mirimir 9y agoMost countries, yes. But some countries, clearly no. Snowden is still in Russia, for example. And China typically doesn't cooperate with the NSA and its friends.
- MertsA 9y agoThe NSA has made direct targeted attacks at US companies in the past. Just look at Google, they got NSLs and had to cooperate with PRISM yet at the same time the NSA still dug up their fiber and tapped it. With the NSA's twisted logic that a search is not a search unless it matches and it's fine to search data so long as there's a chance it involves a non-US citizen I think jurisdiction is largely irrelevant for attacks other than the necessity of one seeing as the NSA has access to a secret court that has a history of never siding against them. I'd view eliminating tyrannical government orders as a plus.
- mirimir 9y agoIndeed. The NSA has also intercepted device shipments, in order to install backdoors. And some US firms have resorted to shipping through more-or-less anonymous intermediaries to circumvent that.
- wyager 9y agoIf you sell physical goods, maybe not. If you’re a middleman or you sell digital goods, you still can do business with people living in the US.
- mirimir 9y agoYou can do business with US customers. It's not uncommon. Maybe they need some OPSEC, but hey.