Google's Encryption Plan To Stifle NSA's Dragnet Will Raise the Stakes 216
CWmike writes "Google's strategy for making surveillance of user Internet activity more difficult for U.S. and foreign governments — started last year, but accelerated in June following the NSA leaks — is as much about economics as data encryption, experts say. Eric Grosse, vice president for security engineering at Google, told The Washington Post: 'It's an arms race.' The crux of the issue with Google making the NSA dragnet harder (knowing if the government wants in, it will get in) is that the NSA evaluates the tactic it uses by weighing the cost with the value of the information obtained. However, the agency does evaluate the tactic it uses by weighing the cost with the value of the information obtained. 'The NSA has turned the fabric of the Internet into a vast surveillance platform, but they are not magical,' Bruce Schneier, a renowned security technologist and cryptographer, wrote in The Guardian. 'They're limited by the same economic realities as the rest of us, and our best defense is to make surveillance of us as expensive as possible.' The NSA's capabilities for cracking encryption are not known outside the agency. However, the most secure part of an encryption system remains the 'mathematics of cryptography,' Schneier said. The greater weaknesses, and the ones mostly likely to be exploited by governments in general, are the systems at the start and end of the data flow. 'I worry a lot more about poorly designed cryptographic products, software bugs, bad passwords, companies that collaborate with the NSA to leak all or part of the keys, and insecure computers and networks.' Is this about citizen's rights, or a business decision (some might say an existential issue) for Google? Does it matter, and will it make a difference?"
Re:That's a relief (Score:5, Informative)
Re:I will believe ... (Score:5, Informative)
I believe that Google already has craploads of servers local to their customers. That is how they work. They have servers in America for ... Americans. They have them in Europe and many other places as well.
Google does have crap-loads of servers worldwide, localized into 7 different regions, 2 in North America; an eight region was recently activated during the last year or so. IIRC, the regionalization allows the data centers as a whole to never experience a sunset; also, the data itself being redundant, is optimized locally to minimize delays.
Re:Not a solution. (Score:2, Informative)
For instance spying kept the Cuban Missile Crisis from getting out of hand.
Just a minor issue, but can we please start to call that event the Turkish Missile Crisis?
After all, it was the USA that started the escalation by emplacing IRBMs in Italy and Turkey.