2 ms·

As long as they are in the US, or a nation that bends to our will, it is not a secure provider. It's been little over a year since the FBI seized their servers

As long as they are in the US, or a nation that bends to our will, it is not a secure provider. It's been little over a year since the FBI seized their servers. https://www.eff.org/deeplinks/2012/04/may-firstriseup-server-seizure-fbi-overreaches-yet-again https://www.eff.org/deeplinks/2012/04/may-firstriseup-server... edit: I also believe they were complicit in ousting several of their users who allegedly used their service for illicit reasons a while back when they were competing with hushmail, safemail, and the lot. This is from memory, and I have no proof to back it up. Grain of salt and all that

hank_dotnuts 13y ago
Last I checked, it is not a requirement that you keep logs in the US, and that is exactly what they don't do. Regarding that server seizure... they seized one server that was used for virtual hosting of another group's mixmaster and when it was returned they immediately quarantined it and did not use it. citation needed about the outing, otherwise its just FUD
- consonants 13y ago
  Last I checked, you can at any time be requested by the US government to do exactly that: to keep logs or give them access. My point is that they are on the radar, it's a matter of when not if they get an order to start keeping logs or an agency deems it okay to seize their hardware again.
  - hank_dotnuts 13y ago
    Name one case where the US government has required that you do exactly that. Also, https://www.riseup.net/en/riseup-and-government-faq https://www.riseup.net/en/riseup-and-government-faq
    - consonants 13y ago
      If someone is using your service and is suspected to be committing a crime through it, as a provider you can be subpoenaed to be reasonably complicit in an investigation on said individual. That can involve keeping temporary logs, contact information, message content, or being placed under total network surveillance without notice. Or they can just seize the servers again and you can hope _everything_ is secured on the provider's end. The site's premise is a honeypot for just the kind of people the government would like to keep an eye on.
      - hank_dotnuts 13y ago
        You didn't name one case.

hank_dotnuts 13y ago

Last I checked, it is not a requirement that you keep logs in the US, and that is exactly what they don't do. Regarding that server seizure... they seized one server that was used for virtual hosting of another group's mixmaster and when it was returned they immediately quarantined it and did not use it. citation needed about the outing, otherwise its just FUD

consonants 13y ago
Last I checked, you can at any time be requested by the US government to do exactly that: to keep logs or give them access. My point is that they are on the radar, it's a matter of when not if they get an order to start keeping logs or an agency deems it okay to seize their hardware again.
- hank_dotnuts 13y ago
  Name one case where the US government has required that you do exactly that. Also, https://www.riseup.net/en/riseup-and-government-faq https://www.riseup.net/en/riseup-and-government-faq
  - consonants 13y ago
    If someone is using your service and is suspected to be committing a crime through it, as a provider you can be subpoenaed to be reasonably complicit in an investigation on said individual. That can involve keeping temporary logs, contact information, message content, or being placed under total network surveillance without notice. Or they can just seize the servers again and you can hope _everything_ is secured on the provider's end. The site's premise is a honeypot for just the kind of people the government would like to keep an eye on.
    - hank_dotnuts 13y ago
      You didn't name one case.