Spending the afternoon at the @CatoInstitute Surveillance Conference, so my tweets may get a little dystopian. #CatoSpyCon
Mozilla's @heatherwest on IoT security: "I'm not worried about the tech companies; they kind of know that this stuff is important. I'm worried about the baby-monitor company."
Facebook's Alexandra Galloway says the company is working to expand its community-standards-enforcement transparency report with data on how long it takes to respond to complaints and how often it makes mistakes. #CatoSpyCon
Google's David Lieber reminds the audience that when he spoke at #CatoSpyCon in 2013, Google couldn't disclose Foreign Intelligence Surveillance Act data requests at all; thanks to 2015's USA Freedom Act, it can. "We are in a different place now,"
"I'm extremely happy that GCHQ has given us something concrete to talk about," says @matthew_d_green of its proposal to enable legal access to encrypted comms by getting a warrant to compel providers to silently add investigators to chats. lawfareblog.com/principles-mor…
But while that's not yet another "nerd harder!" wish from law enforcement, Green warns that implementing this system would require an Apple or Facebook to disable security features in comms apps that warn against lurkers--not just for targeted participants, but for everybody.
"Journalists are overworked, they are tired, they don't necessarily have the time to learn a whole new skill set," says @_olivemartini_ of the difficulties in teaching opsec to journalists. But who doesn't match that description these days? #CatoSpyCon
Many early newspaper implementations of SecureDrop used an address like securedrop.newspaper.com--visible through DNS lookups--instead of newspaper.com/securedrop, which would obscure the purpose of a whistleblower's visit to the newspaper site.
Preceding tweet is how I learned that newspaper.com redirects to @gruber's @daringfireball blog, though it's not clear if he owns that domain.
Saying that "most tips that you get are from crazy people," @attackerman calls it almost "healthy for democracy" that the Daily Beast is now seeing that the crazies also submit tips via SecureDrop. #CatoSpyCon
