Follow Slashdot stories on Twitter

 



Forgot your password?
typodupeerror
×
Yahoo! Government Privacy

As Contradictions Mount, Experts Call For Declassification of Yahoo's Email-Scanning Order (onthewire.io) 50

An anonymous Slashdot reader writes: Look at this contradiction in the government's story about their secret scans on hundreds of millions of Yahoo emails. "Intelligence officials told Reuters that all Yahoo had to do was modify existing systems for stopping child pornography from being sent through its email or filtering spam messages." But three former Yahoo employee have now said that actually the court-ordered search "was done by a module attached to the Linux kernel -- in other words, it was deeply buried near the core of the email server operating system, far below where mail sorting was handled... They said that made it hard to detect and also made it hard to figure out what the program was doing."
Slashdot reader Trailrunner7 writes: Now, experts at the EFF and Sen. Ron Wyden say that the order served on Yahoo should be made public according to the text of a law passed last year. The USA Freedom Act is meant to declassify certain kinds of government orders, and the EFF says the Yahoo order fits neatly into the terms of the law. "If the reports about the Yahoo order are accurate -- including requiring the company to custom build new software to accomplish the scanning -- it's hard to imagine a better candidate for declassification and disclosure under Section 402," Aaron Mackey of the EFF said.
This discussion has been archived. No new comments can be posted.

As Contradictions Mount, Experts Call For Declassification of Yahoo's Email-Scanning Order

Comments Filter:
  • Comment removed (Score:4, Insightful)

    by account_deleted ( 4530225 ) on Monday October 10, 2016 @02:03PM (#53049183)
    Comment removed based on user account deletion
    • Re: (Score:1, Insightful)

      by Anonymous Coward

      Yes, feminists even argue for more rules, more censorship and criminalizing more things, rather than working towards a more tolerant and free society. They want to introduce starecrime and wantcrime, where simply the act of wanting a woman and looking at her is equal to rape. Welcome to the orwell society!

      Trump is a very bad choice for president, but locker room talk really is not why he should be avoided. The only positive thing from this is that many republicans condemn his actions and declare to not supp

      • Re: (Score:2, Insightful)

        Comment removed based on user account deletion
        • by crashumbc ( 1221174 ) on Monday October 10, 2016 @02:30PM (#53049365)

          Or, perhaps, there are a lot of people who will behave differently inside a voting booth than outside of it?

          For all the people claiming "he can't win", there is a extremely large population of Americans that long for 1950's and will vote that way, no matter what they say in the polls.

          • Comment removed based on user account deletion
            • In general I don't think the polls are to be trusted this year. Polling is objective data derived from a subjective process, and the polls are all based on the assumption that the demographic mix of voters this year will be the same was it was in 2012. But there is no way blacks are going to come out for Hildawg the way they came out for Black Jesus, and no one has spoken to the white working class (or any working class) like Trump has in 50 years. I do not know what the correct method should be, and I don'

          • For all the people claiming "he can't win", there is a extremely large population of Americans that long for 1950's and will vote that way, no matter what they say in the polls.

            Just like Romney thought he had won in 2012 .... oh wait.

            But yes, you are right. On the other hand the same thing is true for Clinton voters.

        • by GNious ( 953874 )

          Or, perhaps, there are a lot of people who will behave differently inside a voting booth than outside of it?

          This is a pretty well-know scenario - when polled, people answer partly based on social expectations, but in the voting-booth it is solely their own opinion that matters.

          Yes, that means there'll be reluctant Trump-supporters, who won't admit who they are voting for when polled, but will vote Trump on election day.

          Have fun

      • I've heard "locker room talk", and it was nowhere near as crude as what he was saying. I've never heard any guy casually talking/bragging about forcing themselves on women.

        • Re: (Score:1, Funny)

          by Anonymous Coward

          Then you must be a female!

        • I've heard locker room talk like this, and then too, I felt the guy involved was more-than-likely powerful, creepy, spoiled, and quite capably a rapist.
      • Re: (Score:3, Insightful)

        by meta-monkey ( 321000 )

        The only positive thing from this is that many republicans condemn his actions and declare to not support him anymore, so his chances of becoming president sink.

        Have you people not got the message yet that the voters have completely rejected the neocon GOP establishment? No one cares what Mitt Romney and Paul Ryan and the rest of those quisling faggots have to say.

      • by whoever57 ( 658626 ) on Monday October 10, 2016 @03:31PM (#53049905) Journal

        Trump is a very bad choice for president, but locker room talk really is not why he should be avoided.

        Agreed. He should be avoided for the stupidity he showed in making those comments while wearing a microphone. And, let's head off the idea that he thought the microphone was off: what's the first rule about wearing a microphone? Assume that it is on and recording.

  • by 93 Escort Wagon ( 326346 ) on Monday October 10, 2016 @02:23PM (#53049309)

    The summary presents one itself.

    But three former Yahoo employee have now said that actually the court-ordered search "was done by a module attached to the Linux kernel -- in other words, it was deeply buried near the core of the email server operating system, far below where mail sorting was handled... They said that made it hard to detect and also made it hard to figure out what the program was doing."

    versus

    If the reports about the Yahoo order are accurate -- including requiring the company to custom build new software to accomplish the scanning ...

    Surely if the Yahoo employees custom-built the kernel module, they wouldn't have found it "hard to figure out what the program was doing". So were they handed a module and ordered to install it, or were they ordered to write custom code? If the first submission is accurate, the second submission is irrelevant - and vice-versa.

    • I think it's pretty safe to say the employees that would have been involved with writing it would be under a serious gag order. The employees talking about this are clearly not those same employees, and had nothing to do with writing it.

      I would hope that they were at least smart enough to keep any changes like that in-house. Trusting code they give you, especially a kernel module, would be epic stupidity.
      • If they can order Yahoo to write new code, they can probably order them to install outside code. I don't think a search warrant should extend to unpaid work not involved with turning over evidence you already have access to.
    • But three former Yahoo employee have now said that actually the court-ordered search "was done by a module attached to the Linux kernel -- in other words, it was deeply buried near the core of the email server operating system, far below where mail sorting was handled... They said that made it hard to detect and also made it hard to figure out what the program was doing."

      Why is this a contradiction? Yahoo deals with billions of messages of a day. It's entirely possible that Yahoo built Kernel modules to handle mail sorting to squeeze out more performance from the kernel.

      • Why is this a contradiction? Yahoo deals with billions of messages of a day. It's entirely possible that Yahoo built Kernel modules to handle mail sorting to squeeze out more performance from the kernel.

        I wonder if they have a hybrid/shim approach, like FUSE, or the nVidia modules, which allow the actual module to be somewhat independent of the kernel (and perhaps run in user space), but be more tightly integrated into the kernel than normal user space code?

    • Perhaps the alleged kernel module was built on top of the netfilter code, doing deep packet inspection via xt_string. Theoretically such a system could be constructed to add hidden match rules from an iptables list from userspace, much like past Linux malware has run tasks not listed on the process table.

    • So were they handed a module and ordered to install it, or were they ordered to write custom code?

      There would have to be more involvement from Yahoo. Kernel modules have to be built against the correct kernel version. Upgrades to the kernel would have to be coordinated with the NSA/FBI/whoever to ensure that the upgrade did not remove the scanning module.

  • "If the reports about the Yahoo order are accurate -- including requiring the company to custom build new software to accomplish the scanning"

    I do believe there is a law out there that forbids the federal government from requiring companies to build things a specific way or design specific things specifically for the US Gov't. Slashdot has discussed this many times in the comments regarding the iPhone. The Gov't has no legal power to compel Yahoo or any other entity to do their bidding in this manner and so

    • by AHuxley ( 892839 )
      The ability to find languages, crypto, images, draft accounts been logged into and shared.
      A site next door or in the same city or at the first big telco hub was not selected.
      Re " or any other entity to do their bidding in this manner and some /.er has pointed this law out several times."
      The ability to suggest help can be worked on:
      "The Telecom Exec Who Refused to Let the NSA Spy Is Out of Prison, and He's Talking" October 1, 2013
      http://motherboard.vice.com/bl... [vice.com]
      "His was the only company to resist

THEGODDESSOFTHENETHASTWISTINGFINGERSANDHERVOICEISLIKEAJAVELININTHENIGHTDUDE

Working...