Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-22 Thread Cynthia Wong
] Microsoft Releases 2012 Law Enforcement Requests Report On 03/21/2013 10:37 AM, Jacob Appelbaum wrote: Joseph Lorenzo Hall: On Thu Mar 21 12:27:47 2013, Jacob Appelbaum wrote: Joseph Lorenzo Hall: Two things seem particularly interesting: apparently zero requests for content were

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-22 Thread Cynthia Wong
[mailto:liberationtech-boun...@lists.stanford.edu] On Behalf Of Eric S Johnson Sent: Thursday, March 21, 2013 9:49 PM To: 'liberationtech' Subject: Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report I wrote to them and asked these questions, as well as a few others. What other questions

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-22 Thread Nadim Kobeissi
...@lists.stanford.edu [mailto: liberationtech-boun...@lists.stanford.edu] On Behalf Of Eric S Johnson Sent: Thursday, March 21, 2013 9:49 PM To: 'liberationtech' Subject: Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report I wrote to them and asked these questions, as well

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-22 Thread Eugen Leitl
On Fri, Mar 22, 2013 at 12:08:42PM -0400, Nadim Kobeissi wrote: Regarding SSL, hasn't Skype claimed in the past that the conversations are encrypted client-to-client, as in, even from Microsoft or Skype itself? Why is it relevant what they claimed? You can't check it, so why spend any time on

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-22 Thread Nadim Kobeissi
Eugen, Of course you're right, and I've made that specific argument about closed-source crypto many times before. But it's still interesting since we're trying to glean as much information as possible from that report here, which is a first for Skype. NK On Fri, Mar 22, 2013 at 12:16 PM, Eugen

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-22 Thread Nick Daly
On Fri, Mar 22, 2013 at 10:49 AM, Cynthia Wong wo...@hrw.org wrote: Why are RU and CN (most glaringly) absent from the first chart enumerating the number (and type) of requests by country? It's hard to believe those countries' security services have no interest in (non-Skype) Microsoft data.

[liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-21 Thread James Losey
From the blog post: As noted in the data table (available in the PDF below) in 2012, Microsoft and Skype received a total of 75,378 law enforcement requests. Those requests potentially impacted 137,424 accounts. While it is not possible to directly compare the number of requests to the number of

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-21 Thread Nadim Kobeissi
We did it! Our Skype Open Letter worked!!! *Pats self on back* NK On Thu, Mar 21, 2013 at 10:04 AM, James Losey lo...@newamerica.net wrote: From the blog post: As noted in the data table (available in the PDF below) in 2012, Microsoft and Skype received a total of 75,378 law enforcement

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-21 Thread Paul Bernal (LAW)
Well done!! Sent from my iPhone On 21 Mar 2013, at 14:10, Nadim Kobeissi na...@nadim.ccmailto:na...@nadim.cc wrote: We did it! Our Skype Open Letter worked!!! *Pats self on back* NK On Thu, Mar 21, 2013 at 10:04 AM, James Losey lo...@newamerica.netmailto:lo...@newamerica.net wrote: From

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-21 Thread Stefan Geens
Re MSFT transparency, congrats on the result. In its FAQ. MSFT seems to answer quite unequivocally that Skype still encrypts Skype-Skype calls on a peer-to-peer basis: We provide SSL encryption for Microsoft services and Skype-Skype calls on our full client (for full function computers) are

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-21 Thread Jacob Appelbaum
Joseph Lorenzo Hall: Two things seem particularly interesting: apparently zero requests for content were fulfilled for Skype and the associated FAQ [1] says CALEA (the US law that mandates intercept capability) does not apply to Skype. That seems particularly encouraging to me. The FAQ is

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-21 Thread Joseph Lorenzo Hall
On Thu Mar 21 12:27:47 2013, Jacob Appelbaum wrote: Joseph Lorenzo Hall: Two things seem particularly interesting: apparently zero requests for content were fulfilled for Skype and the associated FAQ [1] says CALEA (the US law that mandates intercept capability) does not apply to Skype.

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-21 Thread Jacob Appelbaum
Joseph Lorenzo Hall: On Thu Mar 21 12:27:47 2013, Jacob Appelbaum wrote: Joseph Lorenzo Hall: Two things seem particularly interesting: apparently zero requests for content were fulfilled for Skype and the associated FAQ [1] says CALEA (the US law that mandates intercept capability) does

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-21 Thread Dan Auerbach
On 03/21/2013 10:37 AM, Jacob Appelbaum wrote: Joseph Lorenzo Hall: On Thu Mar 21 12:27:47 2013, Jacob Appelbaum wrote: Joseph Lorenzo Hall: Two things seem particularly interesting: apparently zero requests for content were fulfilled for Skype and the associated FAQ [1] says CALEA

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-21 Thread Fabio Pietrosanti (naif)
On 3/21/13 5:27 PM, Jacob Appelbaum wrote: I don't agree with that reading of the report. There is likely a lot of word-smithing here - for example, Does Skype include SkypeIn and SkypeOut or just Peer to Peer video, text and storage of (other) meta-data? Does CALEA happen on the Skype side of

Re: [liberationtech] Microsoft Releases 2012 Law Enforcement Requests Report

2013-03-21 Thread Eric S Johnson
I wrote to them and asked these questions, as well as a few others. What other questions should we pose to them, I wonder? Why are RU and CN (most glaringly) absent from the first chart enumerating the number (and type) of requests by country? It's hard to believe those countries' security