Boing Boing 

We know you love privacy, Judge Posner. We just wish you'd share.


As I wrote yesterday, 7th circuit judge Richard Posner's views on privacy (basically: "nothing to fear, nothing to hide" and "it should be illegal to made a phone the government can't search") are dismal and unsophisticated -- but they're also deeply hypocritical.

Read the rest

Blackphone announces privacy-oriented app store


Blackphone, the Swiss-based, secure hardware/OS mobile phone from PGP inventor Phil Zimmerman has announced that it will provide a store with privacy-oriented apps that are sandboxed to minimize data-misuse.

Read the rest

NYC theater overrules MPAA rating for Snowden documentary


Citizenfour, the acclaimed Laura Poitras documentary about Edward Snowden, has been given an R rating by the notoriously corrupt and opaque MPAA ratings board (see This Film Is Not Yet Rated).

Read the rest

Judge Posner: it should be illegal to make phones the government can't search

Cory Doctorow on why privacy is about more than concealing crime—and why backdoors are inevitably available to everyone, not just people you trust.

Read the rest

Spies can't make cyberspace secure AND vulnerable to their own attacks


In his Sunday Observer column, John Naughton makes an important point that's hammered home by the escape of the NSA/GCHQ Regin cyberweapon into the wild: spies who make war on the Internet can't be trusted with its security.

Read the rest

Stats-based response to UK Tories' call for social media terrorism policing


David Cameron wants social media companies to invent a terrorism-detection algorithm and send all the "bad guys" it detects to the police -- but this will fall prey to the well-known (to statisticians) "paradox of the false positive," producing tens of thousands of false leads that will drown the cops.

Read the rest

Irish government retroactively legalizes GCHQ surveillance revealed in Snowden docs

As reported by The Irish Times on Saturday, 6th December; "Foreign law enforcement agencies will be allowed to tap Irish phone calls and intercept emails under a statutory instrument signed into law by Minister for Justice Frances Fitzgerald."

Read the rest

Senator Ron Wyden introduces a bill banning FBI backdoors


It's a legislative shot across the bow of the FBI, who are demanding back-doors in phones and other devices, claiming "children will die" unless our pocket supercomputers are designed to allow untrusted parties to secretly take them over.

Read the rest

NSA leak reveal plans to subvert mobile network security around the world


The NSA's AURORAGOLD program -- revealed in newly released Snowden docs -- used plundered internal emails to compromise nearly every mobile carrier in the world, and show that the agency had planned to introduce vulnerabilities into future improvements into mobile security.

Read the rest

Why journalists should be free speech partisans


Following on the New York Times's decision to continue its critical coverage of China, despite the Chinese government's retaliation against it, Dan Gillmor calls on journalists and news organizations to abandon the pretense of "neutrality" and take a partisan stand for free speech in questions of censorship, surveillance, net neutrality, copyright takedown, and other core issues of speech in the 21st century.

Read the rest

Sweden awards Snowden the "Right Livelihood" award


The parliament gave him several standing ovations as he accepted by video-link from Moscow.

Read the rest

Vodafone made millions helping GCHQ spy on the world


A newly released Snowden doc, published in the German newspaper Süddeutsche Zeitung, shows how Cable and Wireless (now a Vodafone subsidiary) made millions of pounds illegally installing fiber-taps to help GCHQ conduct its programme of mass surveillance.

Read the rest

Essential reading: the irreconcilable tension between cybersecurity and national security


Citizenlab's Ron Diebert lays out the terrible contradiction of putting spy agencies -- who rely on vulnerabilities in the networks used by their adversaries -- in change of cybersecurity, which is securing those same networks for their own citizens.

Read the rest

Glenn Greenwald: NSA-proofing your product is good for business


Just because Congress can't even pass minimal NSA reform, it doesn't mean that privacy is dead: American tech companies are NSA-proofing their services because customers are demanding it.

Read the rest

TRAITORS

Alexander (R-TN), Ayotte (R-NH), Barrasso (R-WY), Blunt (R-MO), Boozman (R-AR), Burr (R-NC), Chambliss (R-GA), Coats (R-IN), Coburn (R-OK), Cochran (R-MS), Collins (R-ME), Corker (R-TN), Cornyn (R-TX), Crapo (R-ID), Enzi (R-WY), Fischer (R-NE), Flake (R-AZ), Graham (R-SC), Grassley (R-IA), Hatch (R-UT), Hoeven (R-ND), Inhofe (R-OK),

Read the rest

Whatsapp integrates Moxie Marlinspike's Textsecure end-to-end crypto


It's the largest-ever deployment of end-to-end crypto, and assuming they didn't add any back-doors or make critical errors, this means that hundreds of millions of users can now communicate without being spied upon by governments, crooks, cops, spies or voyeurs.

Read the rest

EFF backs new nonprofit free certificate authority "Let's Encrypt"

It will be overseen by Internet Security Research Group with backing from EFF, Mozilla, Cisco, Akamai and others, and will offer free HTTPS certificates to all comers, making it radically easier and cheaper to encrypt the Web and make it resistant to mass surveillance.

Currently, most Internet traffic is unencrypted, meaning most interactions you have with websites leave your accounts vulnerable to eavesdropping by everyone from a minimally competent hacker to the U.S. government. The HTTPS protocol—in contrast to HTTP—encrypts your connection and verifies the authenticity of sites, protecting your data and personal information. EFF has been campaigning successfully for a number of years to spread HTTPS from payment pages and banking sites to email, social networking, and other types of sites. But there are still hundreds of millions of domains that lack this protection.

The new Let's Encrypt project aims to solve that. Let's Encrypt is a new free certificate authority, which will begin issuing server certificates in 2015. Server certificates are the anchor for any website that wants to offer HTTPS and encrypted traffic, proving that the server you are talking to is the server you intended to talk to. But these certificates have historically been expensive, as well as tricky to install and bothersome to update. The Let's Encrypt authority will offer server certificates at zero cost, supported by sophisticated new security protocols. The certificates will have automatic enrollment and renewal, and there will be publicly available records of all certificate issuance and revocation.

Let's Encrypt

New, Free Certificate Authority to Dramatically Increase Encrypted Internet Traffic [EFF]

EFF makes DoJ admit it lied in court about FBI secret warrants

Department of Justice lawyers told a judge that when the FBI gives one of its secret National Security Letters to a company, the company is allowed to reveal the NSL's existence and discuss its quality -- it lied.

Read the rest

When the FBI told MLK to kill himself (who are they targeting now?)


We've known for years that the FBI spied on Martin Luther King's personal life and sent him an anonymous letter in 1964 threatening to out him for his sexual indiscretions unless he killed himself in 34 days. Now we have an unredacted version of the notorious letter.

Read the rest

Expat activists and journalists leave USA for Berlin's safety

From Laura Poitras to Jacob Appelbaum to Sarah Harrison, Berlin has become a haven for American journalists, activists and whistleblowers who fear America's unlimited appetite for surveillance and put their trust in Germany's memory of the terror of the Stasi.

Read the rest

Surveillance and stalkers: how the Internet supercharges gendered violence


85% of domestic violence shelters work with women who have been GPS-tracked by their abusers; 75% have clients who were attacked with hidden mobile surveillance apps; cops routinely steal and share nude selfies from the phones of women pulled over in traffic stops, and NSA spies used agency's massive, illegal surveillance apparatus to stalk women they were sexually attracted to, a practice that was dubbed "LOVEINT."

Read the rest

Potato-chip surveillance: once you start, you just can't stop

The ongoing revelations about UK domestic spying on political activists, continued in some case for decades, and which included an incident in which an undercover police officer fathered a child with the woman he was spying on, illustrate an important point: once you decide someone is suspicious enough to follow around, there's no evidence that you can gather to dispel that suspicion.

Read the rest

Dissecting the arguments of liberal apologists for Obama's surveillance and secret war

Democratic party partisans like Sean Wilentz, George Packer and Michael Kinsley spent the Bush years condemning the tactics they now defend under Obama -- apart from sheer intellectual dishonesty, how can this be explained?

Read the rest

Opsec, Snowden style

Micah Lee, the former EFF staffer whom Edward Snowden reached out to in order to establish secure connections to Glenn Greenwald and Laura Poitras, shares the methodology he and Snowden employed to stay secure and secret in the face of overwhelming risk and scrutiny.

Read the rest

Edward Snowden interviewed by Lawrence Lessig

It's a fascinating, hour-long session in which Snowden articulates the case for blowing the whistle, the structural problems that created mass surveillance, and why it's not sufficient to stop the state from using our data -- we should also limit their ability to collect it. The Slashdot post by The Real Hocus Locus provides good timecode-based links into different parts of the talk.

CHP officer who stole and shared nude photos of traffic-stop victim claims "it's a game"

Officer Sean Harrington of Martinez California Highway Patrol says that when he stole nude photos from the cell phone of a woman he'd traffic-stopped and then shared them with other CHP officers, that he was just playing "a game" that is widespead in the force.

Read the rest

Wouldn't it be great if a billboard could actually read your mind?

Said no one, ever. Except, apparently not: the "data scientists" of Posterscope are excited that EE -- a joint venture of T-Mobile and Orange -- will spy on all their users' mobile data to "give profound insights...that were never possible before"

Read the rest

EFF launches a new version of Surveillance Self-Defense


Hugh from the Electronic Frontier Foundation writes, "We're thrilled to announce the relaunch of Surveillance Self-Defense (SSD), our guide to defending yourself and your friends from digital surveillance by using encryption tools and developing appropriate privacy and security practices. The site launches today in English, Arabic, and Spanish, with more languages coming soon."

Surveillance Self-Defense (Thanks, Hugh!)

FBI chief demands an end to cellphone security

If your phone is designed to be secure against thieves, voyeurs, and hackers, it'll also stop spies and cops. So the FBI has demanded that device makers redesign their products so that they -- and anyone who can impersonate them -- can break into them at will.

Read the rest

Adobe responds to scandalous news of secretly spying on readers (not really)

A week ago, Adobe was caught spying on people's reading habits -- they index all your books and send a full dossier to themselves, in the clear. Now, they've responded to the American Library Association (whose members are the major customers for this terrible stuff) by saying they'll say something next week. (Thanks, Jay!)