Category: Privacy & Security
-
NSA, the FISA Court, and Risks of Tech Summaries
Yesterday the U.S. government released a previously-secret 2011 opinion of the Foreign Intelligence Surveillance Court (FISC), finding certain NSA surveillance and analysis activities to be illegal. The opinion, despite some redactions, gives us a window into the interactions between the NSA and the court that oversees its activities—including why oversight and compliance of surveillance are…
-
Groklaw Shuts Down, Citing NSA Eavesdropping
The legendary technology law blog Groklaw is shutting down. Groklaw’s founder and operator, Pamela “PJ” Jones, wrote that in light of current eavesdropping, email is no longer secure. She went on to say: There is no way to do Groklaw without email. Therein lies the conundrum. […] What to do? I’ve spent the last couple…
-
British Court Blocks Publication of Car Security Paper
Recently a British court ordered researchers to withdraw a paper, “Dismantling Megamos Security: Wirelessly Lockpicking a Vehicle Immobiliser” from next week’s USENIX Security Symposium. This is a blow not only to academic freedom but also to progress in vehicle security. And for those of us who have worked in security for a long time, it…
-
MIT asks to intervene in Swartz FOIA suit
Yesterday MIT filed papers asking to intervene in journalist Kevin Poulsen’s Freedom of Information Act (FOIA) lawsuit seeking the Secret Service’s records of the agency’s investigation of Aaron Swartz. Poulsen had won a court order requiring the Secret Service to turn over its documents about Aaron, who took his own life while facing aggressive criminal…
-
Regulating Bitcoin
On Tuesday the State of California sent a letter to the Bitcoin Foundation, saying that the Foundation might be in violation of California’s law against running an unregistered money transmission business. The letter isn’t important in the grand scheme of things—it’s clear that the Bitcoin Foundation isn’t transmitting money—but it does raise the obvious question…
-
Open-source Governance in Bitcoin
Josh Kroll, Ian Davey, and I have a new paper, The Economics of Bitcoin Mining, or Bitcoin in the Presence of Adversaries, from the Workshop on Economics of Information Security. Our paper looks at the dynamics of Bitcoin, how resilient it would be in the face of attacks, and how Bitcoin is governed. Today I…
-
I Join the EFF and Others in Calling for Craigslist to Drop CFAA Claims
[Cross-posted on my blog, Managing Miracles] Craigslist is suing several companies that scrape data from Craigslist advertisements. These companies, like Padmapper and 3taps, repurpose the data in order to provide more useful ways of searching through the ads. I have written about this in earlier posts, “Dear Craig: Voluntarily Dismiss with Prejudice,” and “A Response…
-
The low-transaction-fee argument for Bitcoin is silly
A common argument advanced by Bitcoin proponents is that unlike banks and credit cards, Bitcoin has low (or even zero) transaction fees. The claim is a complete red herring, and in this post I’ll explain why. Let’s assume for the purposes of argument that Bitcoin transaction fees are, in fact, zero. There are small mining-related…
-
Do Judges Play a Role After the NSA Call Records Have Been Collected?
Those who defend the NSA’s massive call records collection program point out that although the program allows indiscriminate data collection, it also meaningfully restricts data analysis and use. They note, in particular, this paragraph from Director of National Intelligence Clapper’s June 6, 2013, press release: By order of the FISC, the Government is prohibited from…
-
51% foreign test doesn't protect Americans
One of the notable claims we have heard, in light of the Verizon / PRISM revelations, is that data extraction measures are calibrated to make sure that 51% or more of affected individuals are non-U.S. persons. As a U.S. person, I don’t find this at all reassuring. To see why, let’s think about the underlying…