Court To Reconsider Decision On ISP Mail Snooping 186
thpr writes "In June, Slashdot reported that ISPs can read email (according to a decision by the 1st circuit court of appeals). In short, the court felt it was not a violation of U.S. wiretap laws. Last month, the Justice Department asked for the full court to reconsider the decision. C-Net now reports that the court will 'reconsider its June 29 decision'. Arguments are scheduled for Dec 8."
Kind of link not having curtains (Score:4, Interesting)
I like double rot-13; if it is encrypted and someone cracks it than I guess you should find a better encryption algorithm.
Re:Kind of link not having curtains (Score:5, Insightful)
Laws like the ones are talking about will eventually cause the population to do exactly that but it's not exactly as if the criminals weren't doing that already.
You will be labelled a traitor if you protect yourself and [tinfoil warning] you could eventually be held against your will for crimes against the government for protecting your personal privacy [/tinfoil].
Remember that anyone who encrypts their email obviously has something to hide and doesn't support their government and their own freedom!
Re:Kind of link not having curtains (Score:4, Insightful)
There are so many sides to a coin - case in point you brought up a very good flip side.
But lets say that enough people started recognizing that email isn't *gasp* private and, visioning everyone knowing email isn't private; that all email (lets extend it to internet traffic) became encrypted. This ruling only helps the civil libertarian groups on getting the word out to protect the civil liberties at an individual level.
Re:Kind of link not having curtains (Score:4, Insightful)
Max
Re:Kind of link not having curtains (Score:2, Insightful)
Re:Kind of link not having curtains (Score:3, Insightful)
Re:Kind of link not having curtains (Score:2)
What if they are using a network sniffer? Email is passed in plain text. Further, a lot of info about the email is stored in the logs (e.g. sender and subject). For example, when I worked at a university, there was a faculty member who required 80 MB of space (default was 10; anyone could get 20 by asking; 80 required special permission) to get emails from the gay.black.male mailing list
Re:Kind of link not having curtains (Score:2)
Although I can understand that there are reasons to emphasize that email isn't secure, there are also some very good reasons to place legal restrictions on reading other people's email without their consent. It's in the same vein as the "legalized security" of postal mail.
Sure, you still have to worry about getting hax0red, just as you have to worry about people swiping your mail or beige boxing your phone. With laws on the books, tho
Re:Kind of link not having curtains (Score:2)
Even if you are the post master.
And post cards are hand delivered and consequently have a low expectation of privacy. Email is not hand delivered.
Re:Kind of link not having curtains (Score:2)
Do you think the postman is permitted to make a copy of your postcards?
I ask, because using a computer system to "view" a document requires making a copy. And I think there is a reasonable expectation that the ISP should/does not commit copyright infringement against its customers. And consequently can not normally "View" the email unless t
Re:Kind of link not having curtains (Score:3, Insightful)
E-Mail is not run by the government. It is run mostly by private industry - though anyone can set up thier own mail server no one can argue that private industry does not own the vast majority of hardware and resources that proces
that makes no difference (Score:2)
Paper mail is hardly safe from intrusion (Score:2)
In that regard, email is already better.
Re:Kind of link not having curtains (Score:2, Insightful)
Re:Kind of link not having curtains (Score:1)
And in future putting snail mail in an envelope will be defacto evidence of criminal intent.
At that point the Post Office will only deliver mail contained in government certified lock boxes for which they hold a master key.
KFG
Re:Kind of link not having curtains (Score:2)
Laws like the ones are talking about will eventually cause the population to do exactly that but it's not exactly as if the criminals weren't doing that already.
There's a really interesting paradox in that. By protecting the rights of the majority of citizens, it actually makes law enforcement easier than if you universally clamp down on freedom. It's just like illegal search; a cop might think their job is easier if they can search everyone at will, but in reality it makes it harder because it make
Re:Kind of link not having curtains (Score:3, Interesting)
Re:Kind of link not having curtains (Score:1)
Re:Kind of link not having curtains (Score:2, Insightful)
I can see the utility of "wire tapping" email, but I can also see how people have an expectation of privacy when they send an email. They expect those "To" and "From" fields to mean something.
Re:Kind of link not having curtains (Score:3, Informative)
Re:Kind of link not having curtains (Score:2)
The USPS is a government institution and the government does not own the physical letter. Once it gets in the government's hands it ceases to be your property and becomes the property of the addressee.
With electronic mail, the physical medium that on which the message is located is owned by the mail provider. Thus they shoul
Re:Kind of link not having curtains (Score:3, Interesting)
Not true. In many instances the postal service owns the mailbox just as the garbage service owns the cans. Even if they dont, most people rent their home and so still dont own the box.
Re:Kind of link not having curtains (Score:3, Insightful)
Re:Kind of link not having curtains (Score:2)
You may have bought your mail box. But acording to US law you do not own it. Do a google search on the subject. So how about answering the question I asked? Are you OK with people going through your mail?
Re:Kind of link not having curtains (Score:1)
Re:Kind of link not having curtains (Score:2, Insightful)
Re:Kind of link not having curtains (Score:2, Informative)
At issue here isn't just "anyone" reading the e-mail--it's the ISP. Also, the people who were snooped were not the SENDERS of e-mail--they were the recievers. You can't encrypt someone ELSE's mail to you. Finally, this wasn't a case of "well, potentially anyone can read your e-mail," this was a case specifically of data mining e-mail for commercial purposes.
The original case had someone who ran a bookstore and also provided e-mail service to customers. He then SCANNED THEIR I
Re:Kind of link not having curtains (Score:2)
Re:Kind of link not having curtains (Score:2)
They do all that already -- GMail admits it and is open; the other can and probably do, and are secretive about it. The real question is what, precisely, is allowed in step 3 (Act on That Information).
-Billy
Re:Kind of link not having curtains (Score:2)
Re:Kind of link not having curtains (Score:2)
Well, if they want to snoop... (Score:5, Funny)
Re:Making the FBI.... (Score:2)
Let me get this right (Score:3, Interesting)
Wonder how the groupthink will justify this.
Re:Let me get this right (Score:2)
Re:Let me get this right (Score:1)
The threat to individuals is no greater and no less than it was previously, and the threshhold for proving racketeering is a lot lower than terrorism.
I can't figure out why people get so bunged up about this.
Re:Let me get this right (Score:3, Insightful)
Re:Let me get this right (Score:2, Interesting)
Of course. If everyone realizes how insecure email really is then encryption will become more prevalent . More ecrypted traffic means a lower singal to noise ratio and much harder to find those conversations that the Feds want to snoop on.
Don't kid yourself. When the Federal Government wants to read your encrypted email they can. But finding what email is worth decrpyting is much harder when everyone is encrypting their email, but as it stands now
Re:Let me get this right (Score:4, Insightful)
They wish to consolodate the power of surviellence to themselves, and themselves alone.
That way they can not only snoop on the people, but on the snoopers as well; and all without having to worry about being snooped on.
Pretty slick setup really, if they're allowed to pull it off.
KFG
Re:Let me get this right (Score:2)
Re:Let me get this right (Score:3, Insightful)
Ashcroft had a great pro-privacy record in the Senate; now that he's AG, a different faction pulls his strings.
Re:Let me get this right (Score:2)
Exactly. This really isn't a Democrat/Republican issue. Whichever party is in control wants more power for the government at the expense of civil liberties, because they're the ones that get to wield that power. Kerry on the Patriot Act [reason.com]:
This seems like a Reversal of the usual policy (Score:1, Interesting)
Default Encryption (Score:2)
It seem like a reversal of policty for the DoJ, but perhaps it is because they want to be the _only_ group to be able to snoop mail.
Also, if everyone _assumes_ someone is reading their email, then it might lead to real efforts to use encryption by default in email clients - exactly what the DoJ doesn't want.
There's an issue here? (Score:5, Funny)
There's an issue here?
I read my users' email all the time, to, uh, ummmmm, help tune my, um, spam filters.
Yeah, that's it, to tune my spam filters.
Why is ISP mail readding bad? (Score:3, Insightful)
If I placed a confidential document on the street with no protection can I arrest you for reading it?
Allowing Email to be read would help prevent spam and other illegal activities.
If you want to protect your Email you can encrypt it using one of the many available free applications/protocals. Which I recommend you do anyways!
Re:Why is ISP mail readding bad? (Score:3, Interesting)
it is an invasion of privacy, they are service providers, not regulators.
Either way, carnivore sees everything you do anyway, but being from a small town with a small town ISP, i'd rather not have my neighbor who works at the ISP reading my email.
Especially since there may be usernames,pass
What if you use hotmail? (Score:3, Informative)
Re:What if you use hotmail? (Score:2)
That's funny, I just sent a PGP-encrypted e-mail from my gmail account a few days ago. It seemed to work fine, including the encrypted response I got from the recipient (or a man-in-the-middle gov't snoop). Just because there isn't a "Click here to PGP encrypt your e-mail" button in gmail, doesn't mean you can't do it externally and paste the ciphertext into the nice little box.
-paul
Re:What if you use hotmail? (Score:3, Informative)
Sure you can. PGP can encrypt the contents of the clipboard. It's a manual process, selecting the text, encrypting (manually selecting the recipient's key), then pasting the encrypted text into your browser, but it's easy enough to do. You can encrypt anything with this method, including posts to message boards.
Re:Why is ISP mail readding bad? (Score:1, Informative)
Do you read his
Re:Why is ISP mail readding bad? (Score:1)
I think it's very enforceable. Server software could easily make it difficult for casual employees to view customer mail, and ISPs could be compelled to have such software under due diligence of the law.
So are you going to argue that the fact that a few select administrators or an e
Re:Why is ISP mail readding bad? (Score:3, Interesting)
my roommate a shell account does it become illegal for me to view certain sectors of my hard drive? Does there have to be some sort of consideration?
Re:Why is ISP mail reading bad? (Score:2)
The purpose of such a law would be to allow penalties/punishment in situations where it can be proven that an employee of an ISP read someone else's mai and used the information in some sort of harmful manner.
We've already got plenty of laws in place that work the same way. For example, there are laws against eavesdropping on cellular phone conversations, yet hundreds of thousands of
Re:Why is ISP mail readding bad? (Score:5, Insightful)
A great example I received from a law class I took (I am no legal expert, but my professor is) was a hypothetical situation: If I leave my car engine running, with the windows open and ten thousand dollars on the seat... Would someone who took the car and/or money be liable both criminal and civil courts? Yes.
Fast forward to computer: If I send a text email and at the top of the email it says "the following message is intended for John Schmoe ONLY", anyone reading it is in violation of privacy acts (unless they are authorized to do so by groups like the proper authorities, or contracts.)
Re:Why is ISP mail reading bad? (Score:3)
While e-mails are not in a sealed container (unless en
email should have the same standard (Score:5, Insightful)
why sould it be that once I use a computer and/or the internet I must see my rights go down the tubes?
Hopefully, this is part of the reason why the Court is reconsidering its decision
I disagree. (Score:2)
With the telephone system, you only have a handfull of companies which have control of and legal access to the communication lines. They are tightly regulated by the government, and thus laws are fairly effective at protecting your privacy. With the telephone system, up until the 1950's, there was no method of encrypting conversations, and it was much later until these te
Re:email should have the same standard (Score:3, Insightful)
Note: Obviously never read anybodys email just to snoop, usualy involving hte tech support of some kind (i.e. why won't my email work? Well you have a 9 megs of photos you're trying to pull down over a 56k modem in a rural area where the
Re:email should have the same standard (Score:3, Interesting)
The ISP owns the connection, the hardware, and yes, all the files that reside therein. In the absence of some contractual obligation, they should have the right to read *any* file on their systems, including your mail. When you talk about your privacy rights you are talking about infrigning on the property rights of the ISPs.
An NA pal of mine who works for a local ISP confirms that his employer takes the same stand. But it is worthwhile noting that they have a polic
Re:email should have the same standard (Score:3, Insightful)
Re:email should have the same standard (Score:3, Insightful)
Some people will fall for any argument if you couch it as an issue of property rights.
Like when political protest was supressed this summer in the name of protecting grass [usatoday.com].
Re:email should have the same standard (Score:2)
The earlier AC (call him AC1, which makes you AC2) asserted his right, as a putative ISP, to handle client email pretty much any way he saw fit:
His basis for this was,
AC1 was hardly defending privacy rights, unless you think that an ISP's privacy is somehow compromised by not reading and then disseminating their clients
Re:email should have the same standard (Score:2)
Perhaps I should just make it completely explicit: I D
Re:Oops (Score:2)
Re:email should have the same standard (Score:3, Interesting)
What if you do encrypt it and they break the encryption? What need could you have to read
my mail, it's not like your law enforcment your a ISP. Just because it's your property doesn't give you unlim
Read my mail (Score:4, Funny)
Seems to me... (Score:5, Insightful)
The solution here is either to encrypt your email or to create a new law specifically forbidding ISPs from reading your email.
I prefer the former method to the latter. Laws forbidding an ISP from reading your email don't protect your email. They can act as a deterrent, but first you have to find out it occured, and then you have to prosecute. And then your email has already been read.
Re:Seems to me... (Score:3, Insightful)
Let the free market deal with it.
Re:Seems to me... (Score:2)
Re:Seems to me... (Score:2)
-Billy
Re:Seems to me... (Score:3, Insightful)
This is a goverment canard pulled out when the issue is protecting consumers and citizens from corporations. Corporations however get shrink-wrapped EULAs and DCMAs when their 'free market rights' are endangered. http://en.wikipedia.org/wiki/Corporatism [wikipedia.org]
Re:Seems to me... (Score:2)
Re:Seems to me... (Score:2)
Re:Seems to me... (Score:2)
"Create a new low specifically forbidding anyone from reading my mail, without my express written permission or a court order".
The reason I like it violating the Federal Wiretapping laws, is that I believe those laws are binding to the Federal Gov't also. I like it when the JD argues that it should be given less ability to intrude on a private citizens privacy.
The one thing I have against encryption, is that it's not terribly graceful in the face of an error. If my disk has
Stored Communications Act? (Score:5, Informative)
You can read the order for an en banc rehearing here [uscourts.gov].
One of the questions they ask the parties to argue for the rehearing is "Whether the conduct at issue in this case could have been additionally, or alternatively, prosecuted under the Stored Communications Act?".
Hmmm, I wonder what the Stored Communications Act is? It seems the court might be worried that the SCA (whatever it is) already applies to email-snooping, so that the Wiretap Act should not apply.
18 USC 2701 (Score:2)
Re:Stored Communications Act? (Score:1)
If you do not encrypt your email (Score:1)
full story on SecurityFocus (Score:1)
Disappointing to see Slashdot is mostly just mainstream big media news now.
This is a good reason why ISPs are private groups (Score:4, Insightful)
There are of course limits that have to be placed on how private your messages are on an ISP's network. I personally have no problem with somebody that the ISP has detected has been systematically, egregiously violating state and federal laws with the ISP's resources getting spied on a bit to cover the ISP's ass. The ISP has a right, if it **happens** to find you systematically violating the law and putting it in any way at risk to see what you are up to. The only alternatives are a world where criminals have complete freedom of movement and the other is where the police actively spy on the public. I happen to like neither, but that's just me.
You also have to wonder why someone who is sending stuff that is so sensitive that they wouldn't want anyone but the recipient seeing it, wouldn't encrypt the message first. If nothing more write a little script that that scrambles the message based on some hack algorithm you come up with and send it via another email account to the recipient. It's not REALLY secure, but it's a little better than nothing.
Re:This is a good reason why ISPs are private grou (Score:2)
Yes, of course. You expect that from the government, and luckily we have checks and balances in the government. We have watchdog groups. We have the FOIA. We have none of these covering private businesses; the only way we'd know an ISP was reading mail is if they did something stupid, or a whistleblower speaks out. We have no checks and balances with private businesses.
I personally have no problem with somebody that t
Oh please, like you have 'checks and balances' (Score:2)
You really haven't been paying attention to politics lately. Ever heard of the USA PATRIOT Act or the foreign surveillance courts and laws? Puhlease, p
Re:This is a good reason why ISPs are private grou (Score:2)
Wait. NONE of that is true. We have all of those things covering private businesses; we also have one other critical thing: with a private
Re:This is a good reason why ISPs are private grou (Score:2)
No, we do not. As an investor to a company, you don't have any rights to see ANY confidential corporate memos. You don't have rights to see much more than released financial statements. And if you do, and you act on that information, you get charged with insider trading.
If you want high speed digital service, MOST people in the US do not have a choice, it's the cable company or no one. In cities, you have a choice, but
Re:This is a good reason why ISPs are private grou (Score:2)
Whoops, I missed one thing -- we don't have FOAI. That's the ONE safeguard you mentioned that we can't get from corporations that, in theory, we can get from our government.
Unfortunately, there's two problems with this.
First, the information you'd be asking for is something like "did you ever read any of my emails?" That sort of info is easily hidden, to say the least, and trivial enough that it
Re:This is a good reason why ISPs are private grou (Score:2)
I look a my typical phone bill, and I see all sorts of taxes, levies, and surcharges. I'd say that the telephone infrastructure is indeed subsidized a good deal by us tax-paying folks already. That doesn't even include the subsidies that aren't so overt, like those many businesses get, the quasi-monopoly status of t
Notice it was DOJ asking for reconsideration? (Score:4, Interesting)
With the tinfoil hat paranoia running at all time highs, it is interesting to note it was the DOJ, not the EFF or ACLU, that asked the full Appeals Court to reconsider this decision.
I guess that the nasty, civil rights stomping Ashcroft DOJ feels that wiretap laws apply in this situation. Curious.
Yours,
jordan
The EFF WAS involved as was... (Score:2, Informative)
Is he arguing the DOJ shouldn't have the power? (Score:2)
What part of not wanting others to have spying rights is inconsistant with Ashcroft as a rights-stomping totalitarian?
Re:Is he arguing the DOJ shouldn't have the power? (Score:2)
My reading of the DOJ arguments is that such activity, Patriot Act aside, would require a warrant for the FBI/NSA/etc., as much as it would for anyone else.
Yours,
Jordan
Re:Is he arguing the DOJ shouldn't have the power? (Score:2)
Why was this passed to begin with? (Score:2)
For example, the Patriot Act. The govt gets to do all kinds of crazy shit knowing that they'll have a year or two to do whatever they want until it's passed through courts and is ruled unconstitutional.
Knowing that it will eventually float back through the courts and be ruled out, this little time frame gives them enough time to do anything they please without repurcussions.
Instead of having this take time, i
spammer approved (Score:2, Insightful)
The real effect (if this is passed) would be that some spammer gets a bounce message from a spam filter, sues a major ISP for "reading his email" and wins, and then ISPs drop spam filtering to keep from getting sued for privacy violations.
Re:spammer approved (Score:2)
GMail ads? (Score:3, Interesting)
PGP still a myth for most ! (Score:2)
Not because i am an idiot like others
No, seriously, using pgp would put a point on all that crap, it is just the ignorance of the masses that prevent me and others to start using it....
Of course do not pgp everything, but stuff you care about should be protected.
And tell you what, I was admin at ISPs with thousand accounts, and while I never read mail I know it was common to search info in mails (not private stuff, but some people figured, it
If I had something sinister to hide... (Score:2)
If your ISP can't read email... (Score:2)
If your ISP can't read users' outgoing email, it can't know who is and who is not a SPAMMER.
The question isn't the act; it is the intent.
Re:Unencrypted Email = Snail Mail Postcard (Score:2)
From a practical standpoint, an email is more like a letter with a thin envelope. You don't have to do much to read it (browse mail server log, hold the envelope up to a light) but it still requires some positive action as opposed to a postcard which can essentially fall message-side-up in front of you. But enough of the ana