The United States must now be part of any privacy threat model

7:38:00 PM
The United States must now be part of any privacy threat model -

When j 'was working at the European Parliament, there was a quote that has stuck with me: "you will never see someone clean government among the threats to privacy of a client in their marketing materials." For all the companies out there who want to "help" with your own data - mail spam filters, large data processors, cloud services, and so on - there is always a government cleptocratic lurking in the back -plan and is an absolute and unacceptable threat to the security of such data.

With the passage of the CISA in the United States last week, the bill has been described as a "Patriot Act on steroids" and that was dysfunctional attached as a rider to a budget Bill to prevent discussion or attention, the US government is now an opponent to privacy worldwide. (It was always, or at least has been since the 1970s, but now it has apparently discovered he did get away with it so he does not care to even hide it.) While the United States is far from alone in this kleptocracy data - the British GCHQ, the German BND and the Swedish FRA all come to mind -. it is geopolitically dominant at that time, if we approve this observation or not

"there is no such thing as the cloud, it's just the computer of someone another "

This autumn, the European Court of justice -. the equivalent of a Supreme Court of the European Union - essentially ruled the soil of the United States not to be trusted to the data of European citizens, drawing on the lack of legal privacy rights in the United States. The effect of this is that US based companies can not transmit personal data on European citizens outside the European zone, where legal guarantees exist for their use.

The ramifications of this can not be underestimated. Although it can be argued that the court is not quite in tune with how the modern project work (do not worry first border), the court said the previous agreement Safe Harbor - a illusion that American companies to protect the privacy of European citizens when confidence to do - was declared null and void. Not because US companies as such could not be trusted, but precisely because the US government could not.

After all, when you have a mechanism that allows only the government to go and take anything anyone wants to operate on its soil, but also prohibited the witness of people as a violation of never talk (so-called national security letter), you can not trust anyone operating on the ground with any kind of confidential data.

Especially since the passage of the CISA, US companies have simply Agency to promise all kinds of longer guarantees of confidentiality. The existence of a privacy policy is a joke to an American company that, unless the political talk of zero knowledge operations (not possessing or connecting the first data). You can not be trusted with the data previously encrypted them where they do not hold any sort of key - or, for that matter, as an additional encryption layer :. As noted above, the United States is not the only cleptocratic government

This is also observable in the intellectually dysfunctional quotes from several presidential candidates on privacy. When running for the position of the highest leadership in the United States, they appear not only ignorant, . but downright oblivious to some of the most important rights of citizens is not enough that the current situation is bad - the trend is worsening They do not even understand the concept of computers for general purposes, such as Cory Doctorow points out. everyone with a general purpose computer is capable of strong encryption. End of the story. Try to turn this into a "bad capacity" is not to understand the concept of the computer first. Is this the kind of person you want to run a country?

Accordingly, frankly, off-born generation of policymakers and decision makers are enemies of privacy, and can not be trusted. On reflection, privacy should not depend on having to trust someone first. That's the whole point of it.

As of 2016, all data threat model must include the question "does this data at any time or in any form, touch the US or the UK the floor clear?". If the answer is yes, there is no privacy and architecture must be renovated.

Privacy remains your own responsibility.

Previous
Next Post »
0 Komentar