Announcement

Collapse
No announcement yet.

Snowden's Email Service, Lavabit, Shuts Down

Collapse
X
 
  • Filter
  • Time
  • Show
Clear All
new posts

  • Snowden's Email Service, Lavabit, Shuts Down

    Lavabit, the email service that Edward Snowden was reportedly using, has suddenly shut down. Lavabit claimed to offer users better privacy and security than Google and other email services.

    http://boingboing.net/2013/08/08/lav...-snowden.html?

    Excerpted from BoingBoing.net:

    Message from Lavabit's founder and operator Ladar Levison:
    "My Fellow Users,

    I have been forced to make a difficult decision: to become complicit in crimes against the American people or walk away from nearly ten years of hard work by shutting down Lavabit. After significant soul searching, I have decided to suspend operations. I wish that I could legally share with you the events that led to my decision. I cannot. I feel you deserve to know what’s going on--the first amendment is supposed to guarantee me the freedom to speak out in situations like this. Unfortunately, Congress has passed laws that say otherwise. As things currently stand, I cannot share my experiences over the last six weeks, even though I have twice made the appropriate requests.

    What’s going to happen now? We’ve already started preparing the paperwork needed to continue to fight for the Constitution in the Fourth Circuit Court of Appeals. A favorable decision would allow me resurrect Lavabit as an American company.

    This experience has taught me one very important lesson: without congressional action or a strong judicial precedent, I would _strongly_ recommend against anyone trusting their private data to a company with physical ties to the United States.

    Sincerely,
    Ladar Levison
    Owner and Operator, Lavabit LLC

    Defending the constitution is expensive! Help us by donating to the Lavabit Legal Defense Fund here."


    Update: Spencer Ackerman at the Guardian has more:

    Several technology companies that participate in the National Security Agency's surveillance dragnets have filed legal requests to lift the secrecy restrictions that prevent them from explaining to their customers precisely what it is that they provide to the powerful intelligence service – either wittingly or due to a court order. Yahoo has sued for the disclosure of some of those court orders.

    The presiding judge of the secret court that issues such orders, known as the Fisa court, has indicated to the Justice Department that he expects declassification in the Yahoo case. The department agreed last week to a review that will last into September about the issues surrounding the release of that information.

    There are few internet and telecommunications companies known to have refused compliance with the NSA for its bulk surveillance efforts, which the NSA and the Obama administration assert are vital to protect Americans. One of them is Qwest Communications, whose former CEO Joseph Nacchio – convicted of insider trading – alleged that the government rejected it for lucrative contracts after Qwest became a rare holdout for post-9/11 surveillance.

    "Without the companies' participation," former NSA codebreaker William Binney recently told the Guardian, "it would reduce the collection capability of the NSA significantly."

    Be kinder than necessary because everyone you meet is fighting some kind of battle.

  • #2
    Re: Snowden's Email Service, Lavabit, Shuts Down

    Silent Circle is now shutting down as well.

    http://gizmodo.com/another-secure-em...tin-1075763867

    Be kinder than necessary because everyone you meet is fighting some kind of battle.

    Comment


    • #3
      Re: Snowden's Email Service, Lavabit, Shuts Down

      Really great Glenn Greenwald on this:

      http://www.theguardian.com/commentis...silicon-valley

      Comment


      • #4
        Re: Snowden's Email Service, Lavabit, Shuts Down

        Originally posted by Chomsky View Post
        Really great Glenn Greenwald on this:

        http://www.theguardian.com/commentis...silicon-valley
        Thanks for this.

        I wonder how much longer op-ed pieces critical of U.S. policy will be "permitted" over the Internet here. Email services today. Internet servers tomorrow.

        Be kinder than necessary because everyone you meet is fighting some kind of battle.

        Comment


        • #5
          Re: Snowden's Email Service, Lavabit, Shuts Down

          NSA is also laying off "about 90%" of the 1000-ish sysadmins they employ - one of which was Snowden.

          Apparently all that guff about only a handful of people having access - complete fabrication.

          http://www.theregister.co.uk/2013/08...ith_alexander/

          The NSA has announced its brainwave to end further leaks about its secret operations by disaffected employees: it will simply sack 90 per cent of all its sysadmins.

          The US surveillance agency's spyboss General Keith Alexander told a computer security conference in New York that automating much of his organisation's work - such as snooping on anyone with an internet connection on the planet - would make it more secure.

          The inner workings of the NSA's massive PRISM and XKEYSCORE programmes were exposed to the world by Edward Snowden, an ex-CIA techie and NSA contractor who had access to highly classified material, along with about 1,000 other sysadmins.

          Gen Alexander said: "What we're in the process of doing - not fast enough - is reducing our system administrators by about 90 percent."

          Until now, the chief spook continued, the NSA has "put people in the loop of transferring data, securing networks and doing things that machines are probably better at doing".

          Replacing these leaky humans with computers would make the spooks' work "more defensible and more secure". However, the general said his agency had been planning these changes for some time. He did not refer to Snowden by name while announcing his layoffs.

          The head spook has previously discussed security measures employed by the agency, such as the requiring the presence of two people before certain sensitive data can be accessed.

          "At the end of the day it's about people and trust," Gen Alexander added. "No one [at the NSA] has wilfully or knowingly disobeyed the law or tried to invade your civil liberties or privacies. There were no mistakes like that at all."
          Right. That's not what any number of other people have said, including ex-NSA executives.

          Comment


          • #6
            Re: Snowden's Email Service, Lavabit, Shuts Down

            Originally posted by shiny! View Post
            Silent Circle is now shutting down as well.

            http://gizmodo.com/another-secure-em...tin-1075763867
            I wonder how safe good old PGP is against nation states. Which motives are there to chose Silent Circle or Lavabit when GPG is proven technology?
            engineer with little (or even no) economic insight

            Comment


            • #7
              Re: Snowden's Email Service, Lavabit, Shuts Down

              Originally posted by FrankL
              I wonder how safe good old PGP is against nation states. Which motives are there to chose Silent Circle or Lavabit when GPG is proven technology?
              The short answer is - if they're out specifically to get you, they can.

              But the ability to crack all or even many people's PGP is quite severely restrained.

              You can see this from the data here:

              http://www.pgp.net/pgpnet/pgp-faq/pg...ty-against-nsa

              Q: Can the NSA crack PGP (or RSA, DSS, IDEA, 3DES,...)? A: This question has been asked many times. If the NSA were able to crack RSA or any of the other well known cryptographic algorithms, you would probably never hear about it from them. Now that RSA and the other algorithms are very widely used, it would be a very closely guarded secret.

              The best defense against this is the fact the algorithms are known worldwide. There are many competent mathematicians and cryptographers outside the NSA and there is much research being done in the field right now. If any of them were to discover a hole in one of the algorithms, I'm sure that we would hear about it from them via a paper in one of the cryptography conferences.

              For this reason, when you read messages saying that "someone told them" that the NSA is able to break PGP, take it with a grain of salt and ask for some documentation on exactly where the information is coming from. In particular, the story called NSA Can Break PGP Encryption is a joke.

              Q: Has RSA ever been cracked publicly?

              A: Several messages RSA-encrypted with small (< 513 bits) keys have been cracked publicly. Further effort is still ongoing, RSA Security offers prizes for their RSA factoring challenges.

              First was the RSA-129 key. The inventors of RSA published a message encrypted with a 129-digits (430 bits) RSA public key, and offered $100 to the first person who could decrypt the message. In 1994, an international team coordinated by Paul Leyland, Derek Atkins, Arjen Lenstra, and Michael Graff successfully factored this public key and recovered the plaintext. The message read: " THE MAGIC WORDS ARE SQUEAMISH OSSIFRAGE "

              They headed a huge volunteer effort in which work was distributed via E-mail, fax, and regular mail to workers on the Internet, who processed their portion and sent the results back. About 1600 machines took part, with computing power ranging from a fax machine to Cray supercomputers. They used the best known factoring algorithm of the time; better methods have been discovered since then, but the results are still instructive in the amount of work required to crack a RSA-encrypted message.

              The coordinators have estimated that the project took about eight months of real time and used approximately 5000 MIPS-years of computing time.
              What does all this have to do with PGP? The RSA-129 key is approximately equal in security to a 426-bit PGP key. This has been shown to be easily crackable by this project. PGP used to recommend 384-bit keys as "casual grade" security; recent versions offer 768 bits as a recommended minimum security level.

              Note that this effort cracked only a single RSA key. If this had been a PGP key, it would have allowed them to decrypt all messages encrypted to that key. Nothing was discovered during the course of the experiment to cause any other keys to become less secure than they had been, i.e. it would not make it any easier to read messages encrypted to other keys.

              A year later, the first real PGP key was cracked. It was the infamous Blacknet key, a 384-bits key for the anonymous entity known as "Blacknet". A team consisting of Alec Muffett, Paul Leyland, Arjen Lenstra and Jim Gillogly managed to use enough computation power (approximately 1300 MIPS) to factor the key in three months. It was then used to decrypt a publicly-available message encrypted with that key.

              The most important thing in this attack is that it was done in almost complete secrecy. Unlike with the RSA-129 attack, there was no publicity on the crack until it was complete. Most of the computers only worked on it in spare time, and the total power is well within reach of a large, perhaps even a medium sized organization.

              As for motives - ease of use is one particular benefit. Not everyone likes having to load messages into a PGP encrypter, then email, with responses having to go the same route.

              It probably does cut down on the number of one line emails, though.

              Comment


              • #8
                Re: Snowden's Email Service, Lavabit, Shuts Down

                Now they may be criminally charged for shutting down.

                http://www.techdirt.com/articles/201...-service.shtml

                Comment


                • #9
                  Re: Snowden's Email Service, Lavabit, Shuts Down

                  Originally posted by LazyBoy View Post
                  Now they may be criminally charged for shutting down.

                  http://www.techdirt.com/articles/201...-service.shtml
                  interesting. it implies the nsa wanted there to be a supposedly encrypted/secure email service that they had full access to; a kind of bait for whomever chooses to use such services, advertising a [false] promise of security to attract certain types of users.

                  Comment


                  • #10
                    Re: Snowden's Email Service, Lavabit, Shuts Down

                    This government pressure is making me have trust issues. For example, I store passwords with lastpass.com. Could they stand up to similar US government pressure?

                    Comment


                    • #11
                      Re: Snowden's Email Service, Lavabit, Shuts Down

                      Originally posted by LazyBoy View Post
                      This government pressure is making me have trust issues. For example, I store passwords with lastpass.com. Could they stand up to similar US government pressure?
                      "Could" they and "will" they are two different things. They all could, but most of them won't.

                      Be kinder than necessary because everyone you meet is fighting some kind of battle.

                      Comment


                      • #12
                        Re: Snowden's Email Service, Lavabit, Shuts Down

                        I'm considering signing up with Neomailbox, whose servers are hosted in Switzerland. Mainly because my host's server keeps getting blacklisted by Spamcop so my emails get blocked. But as long as I'm looking for a better email host, it may as well be one that values their customers' privacy.

                        Be kinder than necessary because everyone you meet is fighting some kind of battle.

                        Comment


                        • #13
                          Re: Snowden's Email Service, Lavabit, Shuts Down

                          Here's a list of privacy-conscious email services:

                          http://prxbx.com/email/

                          Be kinder than necessary because everyone you meet is fighting some kind of battle.

                          Comment


                          • #14
                            Now Groklaw is shutting down

                            Groklaw is shutting down over privacy concerns:

                            Citing concerns about privacy and government surveillance, Pamela Jones is shutting down her site Groklaw, which for years took on what she and vocal fans saw as wrongheaded legal action in the tech domain.

                            "There is now no shield from forced exposure," Jones said in final blog post Tuesday. Groklaw depended on collaboration over e-mail, "and there is now no private way, evidently, to collaborate."

                            Jones, a paralegal, started her site a decade ago taking on the SCO Group's legal attack on IBM and others involving Linux and Unix intellectual property. She rebutted the company's position, detailed the arcana of the lawsuit proceedings, and shared legal filings on which the case rested. Volunteers attended some hearings in person, and collaborative efforts found just any hole that could be poked in SCO's case. The site archives show hundreds of posts since its start in May 2003.

                            As SCO's case fizzled, Groklaw directed its righteous indignation toward other legal cases, including the storm of patent infringement cases in the tech world, digital rights management, open-source licensing, and Psystar's Mac clones.

                            In an e-mail, Jones said Groklaw won't disappear, though activity on the site will.

                            "The site will stay, but forums will not. I guess they'll be up for about two weeks," she said.

                            And she doesn't expect to return to Groklaw, as she did once before after a short-lived retirement in 2011.

                            "I don't think there is any way to come back," Jones said. "As for a replacement, I don't know of any. Without wanting to blow my own horn, Groklaw was unique. I just happened to have the very skills needed to explain the law to geeks, and they showed up in large numbers to explain the tech to me. It was a unique combination and a deliberate attempt to do something new in journalism, and I'll miss doing it more than I can express."

                            Jones herself is withdrawing from the electronic world, too.

                            "My personal decision is to get off of the Internet to the degree it's possible. I'm just an ordinary person. But I really know, after all my research and some serious thinking things through, that I can't stay online personally without losing my humanness, now that I know that ensuring privacy online is impossible. I find myself unable to write," she said in the blog post. "Oddly, if everyone did that, leap off the Internet, the world's economy would collapse, I suppose. I can't really hope for that. But for me, the Internet is over."
                            I wonder what would happen if everyone all over the world swore off the Internet for one week, or even one day in protest of Government surveillance?

                            Be kinder than necessary because everyone you meet is fighting some kind of battle.

                            Comment


                            • #15
                              Re: Now Groklaw is shutting down

                              In other words, the message to Internet providers is NOT to let whistle blowers utilize your services or your business will go down. Internalize the fear, baby, internalize the fear.
                              The greatest obstacle to discovery is not ignorance - it is the illusion of knowledge ~D Boorstin

                              Comment

                              Working...
                              X