Am 18.10.2013 um 16:31 schrieb Ian Jackson <[email protected]>:
> Tollef Fog Heen writes ("Re: Possibly moving Debian services to a CDN"):
>> I'm fundamentally of the opinion that if the NSA or a similar
>> organisation wants to track you and is willing to expend that effort on
>> tracking you in particular, there is just about nothing you can do about
>> it.
> This is true, but largely irrelevant. That the NSA can get something
> if they really want to is true - but the question is how much of a
> price they want to pay. By making things more difficult for them, we
> reduce the effectiveness of their surveillance capability. They
> then have to be more selective in their targeting, or divert resources
> from other projects, etc.
Exactly.
> It seems to me that obtaining blanket logs about Debian users from a
> commercial CDN (or small set of CDNs) would be easy and cheap for the
> NSA and give significant and valuable information (what packages are
> installed and what security updates are done) about the vast majority
> of Debian users. Indeed I would be amazed if the NSA don't already
> routinely collect or scan all traffic to the big CDNs.
If not scanned by the NSA, it's like that your traffic will be monitored by
GCHQ or others. Using near-by mirrors will reduce that risk of being monitored
by foreign services. Keep in mind that in nearly all countries it is forbidden
by law to spy on own citizens.
And I'm sure that all big CDNs are already cooperating with secret services
around the world.
Additionally, as I already wrote in another mail, I think that Debian as a free
software project has some sort of social responsibility to ensure peoples
freedom and civil rights. Driving them to use a CDN that can be suited to limit
their civil rights and freedom contradict the freedom Debian wants to achieve
with its social contract to some degree.
--
Ciao... // Fon: 0381-2744150
Ingo \X/ http://blog.windfluechter.net
gpg pubkey: http://www.juergensmann.de/ij_public_key.asc
--
To UNSUBSCRIBE, email to [email protected]
with a subject of "unsubscribe". Trouble? Contact [email protected]
Archive:
http://lists.debian.org/[email protected]
