8 ms·
Sweden warrantlessly wiretaps all Internet traffic crossing its borders
- m_eiman 13y agoIt's widely known and acknowledged that the information gathered this way is used not only by Swedish agencies, but also traded with foreign agencies in exchange for information gathered in whatever way is possible to them. In effect it means that communication that crosses any border is likely collected, analyzed and available to all western intelligence agencies. Good luck trying to hide.
- Sami_Lehtinen 13y ago"The records were exploited by Swedish Intelligence. They were also shared with Japan, Britain, France and the USA." https://en.wikipedia.org/wiki/Operation_Stella_Polaris https://en.wikipedia.org/wiki/Operation_Stella_Polaris
- lrem 13y agoIf you try, you probably can hide. These kind of operations are best at taking people unawares...
- tommis 13y agoThis is actually old news, but what is interesting is that recently Finlands gov. approved plans to layout new cable to the sea, so that internet traffic can be routed from Finland to Germany, bypassing Sweden all together... http://yle.fi/uutiset/suomi_haluaa_oman_tietoliikennereitin_eurooppaan/6559072 http://yle.fi/uutiset/suomi_haluaa_oman_tietoliikennereitin_... Picture from the article shows how the connection towards Europe/US goes trough Germany and the connections towards Asia will be directed trough nothern part of Finland, trough Norway - instead of Sweden: http://yle.fi/uutiset/kotimaa/article6559090.ece/ALTERNATES/w580h326/koillisv%C3%A4yl%C3%A4+tietoliikennekaapeli.jpg http://yle.fi/uutiset/kotimaa/article6559090.ece/ALTERNATES/...
- gasull 13y agoWould it be feasible to just encrypt the traffic?
- notimetorelax 13y agoI don't know how much it would cost in latency, but I think one of the concerns is that all traffic is stored for future decryption.
- jevinskie 13y agoThe underwater SEA-ME-WE 4 cable between Europe and India has a capacity of 1.28 Tbits/s. I am unsure about the current capacity. I think it would be possible to encrypt at those line rates, given enough parallelism. https://en.wikipedia.org/wiki/SEA-ME-WE_4 https://en.wikipedia.org/wiki/SEA-ME-WE_4
- Sami_Lehtinen 13y agoI'm sure that Germany is also running their own more or less secret intelligence operations. Great if we (Finland) get more international traffic, so we can wiretap it. https://en.wikipedia.org/wiki/Finnish_Intelligence_Research_Establishment https://en.wikipedia.org/wiki/Finnish_Intelligence_Research_...
- Sami_Lehtinen 13y agohttp://en.wikipedia.org/wiki/Bundesnachrichtendienst http://en.wikipedia.org/wiki/Bundesnachrichtendienst "It depends heavily on wiretapping and electronic surveillance of international communications."
- tezza 13y agoStrange blip then. In Finland: * Your Tax Return is public http://taxjustice.blogspot.co.uk/2009/07/paying-taxes-is-public-in-finland.html http://taxjustice.blogspot.co.uk/2009/07/paying-taxes-is-pub... * Random people can find out your telephone number from your car number plate. I met a Finnish girl who got called on her mobile phones while driving... being asked out on a date by the guy driving behind her (not me LoL). They also can find your home address ( spooky ) * Driving fines are proportional to your income... earn more and your speeding fine is more
- jonke 13y agooverall moral: even if your own country don't collected your internet traffic, always assume that another country does.
- beagle3 13y ago... and will hand it to your country willingly.
- deleted 13y ago[deleted]
- sandstrom 13y agoI think the Swedish wiretapping is wrong and that the law should be torn up. That said, in practice it's less intrusive than the recently revealed US wiretapping-programs. Since more or less all software encrypt their traffic, the FRA-wiretapping is pretty useless.
- mehwoot 13y agoSince more or less all software encrypt their traffic, the FRA-wiretapping is pretty useless. Huh? Forgive me if I'm mistaken, but are you saying everybody uses SSL?
- deleted 13y ago[deleted]
- fekberg 13y ago> Since more or less all software encrypt their traffic I suggest that you open Wireshark and start browsing the internet and use your applications that you normally do, then check the packages sent from/to the servers. If you think that "more or less all software" encrypts their data, you'll be really surprised what the dumps will show you.
- callesgg 13y ago"Since more or less all software encrypt their traffic." Just not true. However dosn't matter in the context of the fra law as it only allows meta data to be taped like somthing like. { from:'145.23.45.34:89047', to:'214.56.4.67:443', size:23456, when:'June 9 2013 12:34 13.234' }
- znowi 13y agoWell, this is getting really grim. There seems to be no safe place left. Although, this is to be expected. The US is a common trend-maker and the world is looking up to them. Of course who can sit this one out when the US itself is at full speed spearheading it. And very likely gently forcing to abide. We're all at fault in what is happening.
- effn 13y agoIt's worth noting that Facebook's European datacenter is in Sweden so a large part of Facebook traffic passes Swedish borders.
- CarlHoerberg 13y agobut encrypted..
- randyrand 13y agoDo we know they don't have access to the private keys?
- draugadrotten 13y ago> It's worth noting that Facebook's European datacenter is in Sweden so a large part of Facebook traffic passes Swedish borders It's also worth noting that Google said in 2007 that if the FRA snoop law is passed, they will locate their servers outside Sweden. They placed them in Finland instead. Peter Fleischer from Google said "By introducing these new measures, the Swedish government is following the examples set by governments ranging from China and Saudi Arabia to the US government’s widely criticised eavesdropping programme. Do Swedish citizens really want their country to have the most aggressive government surveillance laws in Europe?" http://peterfleischer.blogspot.se/2007/05/sweden-and-government-surveillance.html http://peterfleischer.blogspot.se/2007/05/sweden-and-governm... http://internetworld.idg.se/2.1006/1.109576 http://internetworld.idg.se/2.1006/1.109576 Facebook knew they would be listened to, but put their datacenter in Sweden anyway. http://www.theregister.co.uk/2011/10/31/facebook_swedish_data_centre_privacy_law/ http://www.theregister.co.uk/2011/10/31/facebook_swedish_dat...
- parski 13y agoI'm fine with traffic going in and out being tappable. As long as they have good reason I have trust in the FRA.
- flyinRyan 13y ago>As long as Hitler has a good reason I have to trust the Nazi's. FTFY
- sebcat 13y agoJust want to emphasize the difference between the FRA law and what's happening in the U.S. right now: FRA (swedish agency doing SIGINT) don't need a warrant. This is all supported by law. "Nothing to hide" dominated the pro-debate for this. Only populist representatives like Fredrick Federley and Annie Lööf voiced their discontent with the proposed changes in law, and they happily agreed to it while some minor things where changed. Common people just didn't care. Still don't.
- mongol 13y agoI didn't realize that Annie Lööf was on the discontent side. How did she vote in the end? Was it not Fredrick that cried in the end, in the speakers chair?
- sebcat 13y agoAnnie Lööf voted for the law in the end after some minor changes were made and "promises" where given. Didn't know about Fredrick Federley crying, but I found it on youtube: https://www.youtube.com/watch?v=iyfL4hSL-9E https://www.youtube.com/watch?v=iyfL4hSL-9E Pretty funny.
- ralfd 13y agoDoesn't Sweden (or was that Norway?) publicly release the tax data of every citizen? Seems like a different approach to privacy/openness.
- rdouble 13y agoTax data is public in Finland, Sweden and Norway.
- pathy 13y agoYes, as are all company annual reports (true for Norway as well). There are several sites publishing financials, where the 'overview' is free while the actual annual reports costs a few bucks. You can of course just request the data from the tax authority. Example: Klarna's financials can be found here http://www.allabolag.se/5567370431/Klarna_AB http://www.allabolag.se/5567370431/Klarna_AB
- NicoJuicy 13y agoSweden used to be the most open country for internet access. Since America threatened it with economic sanctions (because of the piratebay, sweden was sued by America and their entertainment industry), Sweden has changed a lot. A pitty America has to threaten every other country in the world... :-) .
- venomsnake 13y agoOr the politicians just used this as way to forward their agenda.
- NicoJuicy 13y agoEurope isn't "sponsored" by multinationals for their elections, bribes are probably happening, but the impact is pretty low, i suppose. Haven't suspected much "multinational sponsorship" (except for the EU Commissioner for Trade named Karel De Gucht)
- pekk 13y agoEverything everywhere is America's fault and everyone else just sits and watches helplessly. Right...
- deleted 13y ago[deleted]
- NicoJuicy 13y agoI didn't say that, but some countries have more power than others.. (obviously) Although i'd rather have Europe then America to "trust" (their no saints either, don't get me wrong - but it's more democraticly and corporations have less influence). My second choice would be America though.. And unless there is freedom of speech, i can still say what i want. You don't have to listen.
- efraim 13y agoSweden was sued by America, really?
- mercurial 13y agoIt's reassuring to see how "terrorism" is still the magic word to pass all manners of freedom-trampling laws.
- Murk 13y agoI expect most countries either monitor traffic endpoints or capture data. I know the one one in which I live does.
- venomsnake 13y agoThat is not such a big problem. When a government does something like that in the open you can use appropriate protection if you feel you need it. There is not information asymmetry. You just remove all sweden related certificates from the CA bundle and use VPN to other country. If tomorrow the US says openly - we collect all data you send to Apple,Facebook,Google and Yahoo although stupid you can use or not them depending on how you feel about it.
- Legogris 13y agoNot that it gives Sweden any real excuse here, but I believe most countries do SIGINT at least on a level comparable to that enabled by the FRA law already. That we did already have a law disabling the government to do so legally was mostly percieved as an inconvenience that had to be "fixed". The real issue here should not be the miltary SIGINT that is performed today, but what will happen years from now when these possibilities might be used for gradually varying purposes.
- belorn 13y agoThe Wikipedia article is quite focused on the discussion before the law was made into effect, and are thus missing how the focus on terrorism was changed before even a year had passed. Before the law was voted in, political leaders and columnist promised high and low that FRA would never be used for anything other than counter terrorism. Anyone who said otherwise was a tinfoil hat, and just didn't understand the issue. The law was about preventing terrorists from killing our children and nothing more! A little less than a year after the law was passed, and the secret police got access to the collected data. Soon after, the legislative assembly and diplomats. After that, the police wanted in and was also granted access. Today, go to their website and they talk very little about terrorism. The focus currently is on it-threats, malware and pen-testing[1], and thus calling out how great help they are currently providing in connection with the regular police and secret-police[2]. The "mission" description sounds more like the slogan of a pen-test company than that of counter-terrorism, mostly noticeable because the word terrorism is not even mentioned most of the time, and on the list of services, the word "terrorism" is demoted to the bottom part of a bullet point list.[3] The last attempt to expand the "goal" of FRA was when the Swedish version of IRS asked for access. I don't know if they were granted, and the media don't care much anymore. [1]http://www.fra.se/verksamhet/informationssakerhet/regeringsuppdragtillfra.121.html http://www.fra.se/verksamhet/informationssakerhet/regeringsu... [2]http://www.fra.se/verksamhet/informationssakerhet/tjanster.78.html http://www.fra.se/verksamhet/informationssakerhet/tjanster.7... [3]http://www.fra.se/verksamhet/signalunderrattelseverksamhet.68.html http://www.fra.se/verksamhet/signalunderrattelseverksamhet.6... * Correction * The IRS has not asked yet for FRA data. They have asked ISP's and webhosting providers for customers data, but not from FRA. There have been speculation on where the FRA scope would go next after that the police got access, but from what I can find, nothing official.
- plainhold 13y agoThat the Swedish IRS would be given access to FRA is still only speculation. I haven't seen any article saying that it is even something they are planning to do. It could happen, but I'm sure it will be a public outcry if it ever is proposed
- 13y ago
- plainhold 13y agoWhat should be noted is that before Sweden gave FRA authority to increase it's surveillance the swedish public was well awere of what was happening. There was a public debate, the adversaries would say it was only for the curtains, but the people still had a chance to rally up against it before the legislatures reached their decision. But the public majority didnt care that much.
- namank 13y agoI have no sources but I'd be willing to bet that so do India and China.
- temp453463343 13y agoThe difference is that this program is public and the Swedish public can debate it.
- cupcake-unicorn 13y agoBut it's something that people voted on, something that people knew about, something that people had a chance to protest...which was not the case with PRISM. I mean, yes, people did vote on the Patriot act, but I wonder if things would have been different if there was more transparency in putting this system into place.
- bjhoops1 13y agoSwedish government - or Lisbeth Salander?