On Tue, Jun 24, 2008 at 1:30 AM, Roger Oberholtzer <[EMAIL PROTECTED]> wrote:
On Mon, 2008-06-23 at 06:12 -0500, David A. Bandel wrote:
On Mon, Jun 23, 2008 at 1:46 AM, Roger Oberholtzer <[EMAIL PROTECTED]> wrote:
> On Fri, 2008-06-20 at 18:41 -0700, Lonni J Friedman wrote:
>> Sadly, I know the guy in the first picture:
>> http://hehe2.net/linuxhumor/linux-and-sex-debunking-the-myth/
>
> Our overzealous company has set up a filter called webwash. It blocked
> this. What I really dislike about the filter is that there is no
> mechanism to register a complaint that the filter is wrong or should at
> least be reviewed. I have been blocked from legitimate development
> software related sites, with no apparent recourse. Given Sweden's new
> 'FRA' law (http://www.thelocal.se/12534/20080618/), I guess I should
> just get used to a different internet...

I've said it for years, internet communications are not secure.  You
don't want your e-mail read, encrypt it.  I routinely encrypt e-mails
to individuals.  Obviously to lists like this, you wouldn't want to do
that, but all other communications should just be encrypted as a
matter of routine.  Then laws like this wouldn't bother you in the
least.

I do not expect it to be secure. I also do not expect to be monitored by
a civilian organization who will need no approval to access things.
There is no control over the access. This is not being done by the
police or military, over which there is some sort of control or
monitoring of their activities. This is by a civilian organization who
could sell the information they harvest without needing to ask anyone.

Fact is, neither the government nor military run any of the telecoms, and they 
have the capability and access to do this anyway -- perhaps not without risking 
the consequences of a major backlash, but still ... your comms are _not_ 
private and you should have no expectation of that without using encryption.  
Then you do have an expectation of privacy.


It does bother me. Telia Sonera, a big telecoms company in these parts,
has moved all servers out of Sweden, since they cannot guarantee things,
like IP telephony between two Finns - nothing to do with Sweden, will
not be effected. Their communications would have passed through a
Swedish server, making all content available. Google have said all
servers it has and would consider placing in Sweden will now go
elsewhere. Many other companies are following suite. Sweden's place as a
major telecom player (Ericsson is Swedish), with a very good national
network, is at risk. This national network exists, to a large extent,
because many companies located their services here. As they leave, a big
reason for maintain this network goes as well.

And this makes a good argument for fighting the new law and getting it 
overturned, but does not impact privacy.


It is not a mater of having something to hide. It is a matter of now
feeling a need to hide that which previously would not have been hidden.
A play on the USA Prohibition era stories of people starting to drink
only because it was now forbidden.

Even folks who have nothing to hide don't want everything published in the 
local newspaper.  Invasion of privacy makes one feel vulnerable.  Nothing to do 
with illegal, immoral, or even fattening.


Also, since a _lot_ of e-mail is via web, folks should get used to
using https vice http.

Every port is monitored. It is full communication access. And,
encryption only slows down the government. If they want to read it, they
will.

Um.  No.  If you encrypt it, there are inferences they can draw based on 
statistics and heuristics, but they cannot read it. Even NSA doesn't have the 
resources to even begin to try to decrypt a small percentage of the email on 
the internet.


Just because technology allows me to move my stuff in more secure
fashion does not in any way make it ok for the government to monitor as
they now will. I think this will probably result in making their job
more difficult. You know that secure communications will now be a big
industry in these parts.

Didn't imply this.  I said you have no expectation that someone won't read your 
mail if you send a note on a postcard.  The mailman may read it only because he 
can.


I have nothing to hide, but don't think my private communications are
any of anyones business, so I encrypt everything I can just because.
Part of the reason I think little of sending someone who needs it a
password to something via e-mail.  If the e-mail is strongly
encrypted, via either gnupg or s/mime (I use whatever the other party
uses -- most Linux folks like gnupg and most Windoze lusers like
s/mime with a private e-mail cert via Thawte), it's secure enough
against prying eyes.

My laptop drive is also encrypted for some of the same reasons.  Will
probably do this for all my personal systems in the future.

On a similar note, I read in the paper yesterday that doctors think too
many people believe that a condom is 100% protection against STDs.

And your encrypted mail can be read from your drive or the recipients drive 
(but not in transit or if intercepted, assuming you're using strong encryption 
and a good passphrase).


I get your point, David, but I do not think the world is safer because
of this. If I was a terrorist, I would add my message to JPEGS or TIFFS.
Anyone who really wants to transmit something unseen is probably already
doing so. Swedes value their privacy as much as the next, so I think
there will be a big fight over this law.

Not talking about safer.  But there's more than one way to skin a cat.  
Intercepting messages is one thing.  Someone reading them is another.  If 
suddenly 99% of all messages (except spam) were encrypted, interception would 
serve no purpose and any organization permitted to do so would find little 
fruit in continuing to intercept messages (except to win government $$$ or do 
general analysis of traffic flows).

Encryption is one way of "fighting" this kind of silliness.  Voting those who 
favor these kinds of bills out of office is another.  Both would probably send a very 
strong message.  But it would take action, like actually bothering to get an e-mail 
certificate.

But most folks would just rather complain than even go to the "trouble" of 
getting an e-mail cert and letting their computer automagically encrypt everything.  
These folks deserve to have all their e-mail read and have no right to complain (IMHO).

Ciao,

David A. Bandel
--
Focus on the dream, not the competition.
- Nemesis Air Racing Team motto

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

_______________________________________________
[email protected]
Unsub/Pause/Etc : http://mail.linux-sxs.org/mailman/listinfo/general

Reply via email to