Still working to recover. Please don't edit quite yet.

Difference between revisions of "corporate websites and LEA"

From Anarchopedia
Jump to: navigation, search
(important information to be here)
 
(anarchowikification)
Line 1: Line 1:
 
Two birds recently did a presentation at the People's Summit[1]
 
Two birds recently did a presentation at the People's Summit[1]
celebrating the 10 year anniversary of the WTO protests. We discussed
+
celebrating the 10 year anniversary of the [[World Trade Organization|WTO]] protests. We discussed
 
the dangers of using corporate tools to do organizing work, in
 
the dangers of using corporate tools to do organizing work, in
 
particular, the fact that you don't know what they do with your data.
 
particular, the fact that you don't know what they do with your data.
Line 12: Line 12:
 
copies of the guidebooks that several large corporations provide to
 
copies of the guidebooks that several large corporations provide to
 
assist law enforcement with their requests. The leaked manuals include
 
assist law enforcement with their requests. The leaked manuals include
those for facebook,[3] yahoo,[4], myspace,[5] comcast,[6] and paypal.[7]
+
those for [[Facebook]],[3] [[Yahoo!]],[4], [[MySpace]],[5] [[Comcast]],[6] and [[PayPal]].[7]
 
Each manual provides helpful hints for law enforcement regarding the
 
Each manual provides helpful hints for law enforcement regarding the
 
specific data available (some of which may be obtained with a mere
 
specific data available (some of which may be obtained with a mere
 
subpoena and without any judicial scrutiny), and even sample request
 
subpoena and without any judicial scrutiny), and even sample request
 
language to use in different circumstances. For example, according to
 
language to use in different circumstances. For example, according to
the leaked manual, facebook retains information about the IP address of
+
the leaked manual, facebook retains information about the [[IP address]] of
 
every computer that accesses their website for 30 days. This means that,
 
every computer that accesses their website for 30 days. This means that,
 
unless you use countermeasures, facebook can know the exact location
 
unless you use countermeasures, facebook can know the exact location
Line 30: Line 30:
 
ID), group listing and messages.
 
ID), group listing and messages.
  
There is little oversight of surveillance conducted in the U.S. of
+
There is little oversight of surveillance conducted in the [[United States of America|U.S.]] of
online service providers because the U.S. Department of Justice does not
+
online service providers because the [[U.S. Department of Justice]] does not
 
report the number of IP address requests that they have issued, even
 
report the number of IP address requests that they have issued, even
 
though a 1999 law requires reports.[1] There is also no reporting
 
though a 1999 law requires reports.[1] There is also no reporting
Line 40: Line 40:
 
One of the scary things about all of this is that the US actually has
 
One of the scary things about all of this is that the US actually has
 
better data protection laws than many other countries. Also, unlike our
 
better data protection laws than many other countries. Also, unlike our
comrades in the EU,[9] the US does not currently require online
+
comrades in the [[European Union|EU]],[9] the US does not currently require online
 
providers to keep logs, This means that people organizing everywhere
 
providers to keep logs, This means that people organizing everywhere
 
should be aware that if you are using corporate providers, your data is
 
should be aware that if you are using corporate providers, your data is

Revision as of 07:00, 25 December 2009

Two birds recently did a presentation at the People's Summit[1] celebrating the 10 year anniversary of the WTO protests. We discussed the dangers of using corporate tools to do organizing work, in particular, the fact that you don't know what they do with your data. Thanks to some anonymous comments in a blogger's post[2] about his research regarding a U.S. mobile phone company's release to law enforcement of its customers' geographic location information, we now have some answers.

Large companies have entire departments devoted to dealing with law enforcement subpoenas and warrants, and the anonymous posters provided copies of the guidebooks that several large corporations provide to assist law enforcement with their requests. The leaked manuals include those for Facebook,[3] Yahoo!,[4], MySpace,[5] Comcast,[6] and PayPal.[7] Each manual provides helpful hints for law enforcement regarding the specific data available (some of which may be obtained with a mere subpoena and without any judicial scrutiny), and even sample request language to use in different circumstances. For example, according to the leaked manual, facebook retains information about the IP address of every computer that accesses their website for 30 days. This means that, unless you use countermeasures, facebook can know the exact location where you logged on to your account. Because this IP address information does not include the contents of communications, a U.S. prosecutor can seek the information without any judicial oversight.

With a court order, facebook will release even more information about you. They've even developed an application called "Neoprint" to deliver a handy packet of information about subscribers, including profile contact information, mini-feed, friend listing (with friend's facebook ID), group listing and messages.

There is little oversight of surveillance conducted in the U.S. of online service providers because the U.S. Department of Justice does not report the number of IP address requests that they have issued, even though a 1999 law requires reports.[1] There is also no reporting requirement for court orders issued under the Stored Communications Act[8] which governs the release in the United States of all of your electronic data stored online.

One of the scary things about all of this is that the US actually has better data protection laws than many other countries. Also, unlike our comrades in the EU,[9] the US does not currently require online providers to keep logs, This means that people organizing everywhere should be aware that if you are using corporate providers, your data is at risk.

While this information should not be surprising, it illustrates the importance of supporting alternatives and educating each other about the risks of using corporate tools for organizing work. For more information, read the blog post,[2]

References

[1] http://seattleplus10.org/ [2] http://paranoia.dubfire.net/2009/12/8-million-reasons-for-real-surveillance.html [3] http://dtto.net/docs/facebook-manual.pdf [4] http://dtto.net/docs/yahoo-guide.pdf [5] http://dtto.net/docs/myspace-guide.pdf [6] http://dtto.net/docs/comcast-guide.pdf [7] http://dtto.net/docs/paypal-guide.pdf [8] http://en.wikipedia.org/wiki/Stored_Communications_Act [9] http://eur-lex.europa.eu/LexUriServ/LexUriServ.do?uri=CELEX:32006L0024:EN:NOT

Acknowledgement

The text was originally adopted from the newsletter of RiseUp.net