FBI's ability to legally access secure messaging app content and metadata [pdf](propertyofthepeople.org)
propertyofthepeople.org
FBI's ability to legally access secure messaging app content and metadata [pdf]
https://propertyofthepeople.org/document-detail/?doc-id=21114562
450 comments
They left off one very popular messenger, SMS:
* Message content: All
* Subpoena: can render all message content for the last 1-7 years
* 18 U.S.C 2703(d): can render all message content for the last 1-7 years
* Search warrant: can render all message content for the last 1-7 years
* Vague suspicion plus a small fee to the carrier: can render all message content for the last 1-7 years
* Message content: All
* Subpoena: can render all message content for the last 1-7 years
* 18 U.S.C 2703(d): can render all message content for the last 1-7 years
* Search warrant: can render all message content for the last 1-7 years
* Vague suspicion plus a small fee to the carrier: can render all message content for the last 1-7 years
This seems like a good place to say that I strongly recommend Yasha Levine's Surveillance Valley book (https://www.goodreads.com/book/show/34220713-surveillance-va...) where he suggests that all of this is working as intended, going all the way back to the military counter-insurgency roots of the arpanet first in places like Vietnam, and then back home in anti-war and leftist movements. The contemporary themes that are relevant are the fact that current privacy movements like Tor, Signal, OTF, BBG are fundamentally military funded and survive on government contracts. It distracts from the needed political discourse into a technology one where "encryption is the great equalizer" and everyone can resist big brother in their own way on the platforms the government has built. Encryption does exist, but it also distracts from other vectors like vulnerabilities (that led to Ulbricht getting caught), what services you would e2e connect to, how you get the clients to connect to those services, what store can push binaries for said clients etc.
So if you have something to hide, don't use iCloud backup.
And Whatsapp will give them the target's full contactbook (was to be expected), but also everyone that has the target in their contact list. That last one is quite far reaching.
And Whatsapp will give them the target's full contactbook (was to be expected), but also everyone that has the target in their contact list. That last one is quite far reaching.
It says Telegram has no message content. Isn't telegram not E2EE by default, instead required explicit steps to make a conversation encrypted?
Either way looks like Signal wins by a lot. The size of it spot is so small, it seems almost squeezed in. But only because they have nothing to share.
Either way looks like Signal wins by a lot. The size of it spot is so small, it seems almost squeezed in. But only because they have nothing to share.
Check the difference between Telegram and WhatsApp.
Add to this the fact that WhatsApp
- uploads messages unencrypted to Google if you or someone you chat with enable backups
- and send all your metadata to Facebook.
Then remember how many people here have tried to tell us that Telegram is unusable abd WhatsApp is the bees knees.
Then think twice before taking security advice from such people again.
PS: as usual, if your life depends on it I recommend using Signal, and also being generally careful. For post card messaging use whatever makes you happy (except WhatsApp ;-)
Add to this the fact that WhatsApp
- uploads messages unencrypted to Google if you or someone you chat with enable backups
- and send all your metadata to Facebook.
Then remember how many people here have tried to tell us that Telegram is unusable abd WhatsApp is the bees knees.
Then think twice before taking security advice from such people again.
PS: as usual, if your life depends on it I recommend using Signal, and also being generally careful. For post card messaging use whatever makes you happy (except WhatsApp ;-)
Do you want this to stop? Raise awareness, add this to your mail sig:
> This electronic communication has been processed by the United
> States National Security Agency.
LINE,telegram,threema and WeChat are not even american companies. Can't they just tell the FBI to suck a fat one when they ask for user data?
I'm wondering how this was obtained, and how old this is?
For WhatsApp:
> if target is using an iPhone and iCloud backups enabled, iCloud returns may contain WhatsApp data, to include message content
Probably not true since WhatsApp launched encrypted backups.
For WhatsApp:
> if target is using an iPhone and iCloud backups enabled, iCloud returns may contain WhatsApp data, to include message content
Probably not true since WhatsApp launched encrypted backups.
Now I just have to get my friends and family to use Signal.
It's kind of funny that WeChat seems pretty locked-down to the FBI, especially for Chinese citizens. Makes sense, really, but still funny.
The way these became bullet points on the slide is ~
An active investigation leads an agent to a suspect known to have used one of these applications
An administrative subpoena is issued to the company asking for what information is available
The company is then ordered by a federal judge to provide information related to a particular account or accounts
The company complies.
This is why it is important to understand how your messaging service handles data and how you can compromise your own safekeeping of all or part of that data.
An active investigation leads an agent to a suspect known to have used one of these applications
An administrative subpoena is issued to the company asking for what information is available
The company is then ordered by a federal judge to provide information related to a particular account or accounts
The company complies.
This is why it is important to understand how your messaging service handles data and how you can compromise your own safekeeping of all or part of that data.
I wonder where Matrix/Element would fit into this chart.
Well, who cares when all they need is to use something like Pegasus to obtain full access to your phone simply by sending you a WhatsApp message (without having you even open the message).
Knowing how well guarded IOS is against app developers, I wonder what kind of zero-day would suddenly turn a message received in WhatsApp to full system access. I think NSO found a WhatsApp backdoor, not a zero-day bug.
Knowing how well guarded IOS is against app developers, I wonder what kind of zero-day would suddenly turn a message received in WhatsApp to full system access. I think NSO found a WhatsApp backdoor, not a zero-day bug.
Can't the FBI get chatlogs from WeChat? https://www.youtube.com/watch?v=N5V7G9IBomQ In the short documentary that the FBI made about catching Kevin Mallory they mentioned catching him sending classified stuff via WeChat.
I use LINE a fairbit, have a number of Japanese friends as well as friends that have traveled to Japan. I had no idea they had implemented much better encryption [1]. I'm convincing all my contacts to turn on the option now.
[1]https://engineering.linecorp.com/en/blog/new-generation-of-s...
[1]https://engineering.linecorp.com/en/blog/new-generation-of-s...
I'd like to see Tox and Jami.
[deleted]
The funny thing is that sometimes when I search for Arabic words about Islam I get results for some old and usually the extremest books on CIA library (direct links to PDFs) which I wonder why?
Isn’t this simply imaginary, where in practice all the FBI has to do to up the ante is to request military-grade interception from a willing foreign counterpart?
[deleted]
PSA: This is a year old.
I do DIY encryption with enigma reloaded and it works
is this only page two of an alphabetical list?
or are there no messaging systems with a name before 'i'
or are there no messaging systems with a name before 'i'
WhatsApp. -> FBI
Telegram. -> KGB
Signal. -> The rest of us?
Telegram. -> KGB
Signal. -> The rest of us?
The list doesn't have ANØM
What about Snapchat?
Snapchat?
i use enigma reloaded to manually encrypt my messages
link seems to be broken
https://propertyofthepeople.org/document-detail/?doc-id=2111...
https://propertyofthepeople.org/document-detail/?doc-id=2111...
We are not religious (at all). We do not attend church, synagogue or mosque. We are lower middle class white Americans born and raised in the USA and have never traveled outside the country.
I have no idea why they thought this about us. Maybe it was an IP mix-up, but it was very disturbing. I feared that I may lose my job. I became very afraid of the FBI that day. I think this could happen to anyone at anytime.