Text 13650, 136 rader
Skriven 2005-06-19 20:43:46 av Ed Hulett (1:123/789.0)
  Kommentar till text 13645 av Gary Braswell (1:123/789.0)
Ärende: KEEP THE PATRIOT ACT
============================
Gary Braswell -> Jeff Binkley wrote:
 GB> Jeff Binkley -> John Massey wrote:

 JM>>> 
TID: CrashMail II/Linux 0.71
 JM>>> "Alan Hess -> all" <1:261/1000> wrote in message
 JM>>> news:11570$POLITICS@JamNNTPd...
 AH>>>> It aids in the war on terror.
 AH>>>> ********

 AH>>>> I've posted views from both sides of the debate.  Personally, I
 AH>>>> think some aspects of the Patriot Act infringe too much on our
 AH>>>> civil liberties.  Some aspects don't (such as allowing
 AH>>>> intelligence and law enforcement to share information.)  Let's
 AH>>>> see if Congress can strike a good balance.
 AH>>>> ********

 JM>>> We had better watch everything. Even with Republicans in charge we
 JM>>> still are getting threats to our privacy

 JM>>> The Bush Administration, through the Justice Department, is
 JM>>> considering the idea of having your Internet service provider keep a
 JM>>> record of your activities on the internet.  Why would the Justice
 JM>>> Department want your ISP to keep a record of your Internet
 JM>>> activities?  That's not hard to figure out.  The feds might want to
 JM>>> give them a look-see to see what you've been up to!


 JM>>> Your ISP as Net watchdog
 JM>>> Published: June 16, 2005, 4:00 AM PDT
 JM>>> By Declan McCullagh
 JM>>> Staff Writer, CNET News.com

 JM>>> The U.S. Department of Justice is quietly shopping around the
 JM>>> explosive idea of requiring Internet service providers to retain
 JM>>> records of their customers' online activities.
 JM>>> Data retention rules could permit police to obtain records of e-mail
 JM>>> chatter, Web browsing or chat-room activity months after Internet
 JM>>> providers ordinarily would have deleted the logs--that is, if logs
 JM>>> were ever kept in the first place. No U.S. law currently mandates
 JM>>> that such logs be kept.


 JM>>> More at:
 JM>>> http://news.com.com/Your+ISP+as+Net+watchdog/2100-1028_3-5748649.html

 JB>> This is impossible with today's technology.  It doesn't scale to
 GB> provide
 JB>> the level of detail necessary to actually provide anything beyond IP
 JB>> address connected to another IP address on a specific port number at a
 JB>> specific time.  They don't have the capability to record session level
 JB>> data and encryption technologies like SSL make it nearly impossible,
 JB>> except under some very specific conditions.  I believe the letter you
 JB>> forwarded was a hoax.

 GB> Depends on how its implemented.

 GB> ISP's can get into your email when they want, they can even place your
 GB> account under surveillance. Email can also easily be forwarded to
 GB> another address without the user even being aware. Unless of course you
 GB> use a third party encryption program. Then they would have a hard time
 GB> understanding the email.

Back when I was doing Tech support for my firend's ISP there were several times
when setting up or troubleshooting someone's account that when I asked them for
their passward they would tell me it was secret and they didn't want me to get
into their personal correspondance. I had a tough time explaining to them that
in many cases it was me who gave them that password. I had to epxlain that it
was only to make things easier and that if necessary I could just look it up in
their account information.

I had at least one person ask that I delete their passward and that they would
come up with another one on their own. It was always amusing to hear their
explaination when I asked how they would set that password into the system.
When explained to them that we owned the system and that they were merely
renting access to it, they soon understood that it  we had access to all their
information including charge card number in many instances.

I would suggest they install PGP or some other incryption software if they
wanted their emails to be private. Very few did.

Hardly anyone needs to have complete privacy with their email anyway. The
majority of email they send and receive is silly jokes and other nonsense.

The only people who need to worry about someone looking in on their daily email
are those who really do have something to hide. Of course, that is exactly what
the Patriot Act was written for.

 GB> FTP is easy to crack. Of course you could use SSH.

Few internet users even know what FTP is.

 GB> Spyware often routinely keeps track of where you surf, some ISP's even
 GB> have software you can install that keeps track of your average
 GB> connection speed to websites you travel too. They can easily set that up
 GB> without you even being aware.

With 4 anti-spyware tools running at all times? ;-)

 GB> As I am sure you know, SSL is not engaged and operating in most of your
 GB> web activity.

Exactly.

 GB> Instant messengers are buggy as heck and have had all sorts of security
 GB> problems with people being able to take over accounts, or have simple
 GB> keystroke copiers send text to them of what you type.

Yep. I use Trillian for all my IM needs and also run IMSecure from Zonelabs. Of
course, nothing I have to say on IM is worth monitoring anyway. ;-)

 GB> And as you pointed out, they can find out where you go through IP's,
 GB> then request the ISP forward all incoming and outgoing email to them.
 GB> They could send you a trojan horse that could set up shop on your PC and
 GB> do or keep track of whatever, all with the cooperation of your ISP, not
 GB> to mention spyware they could create and use.

Maybe on a case to case basis, but not on a large scale. Most computer savvy
people have anti-trojan and anti-spyware software installed making that
prospect a last resort at best.

 GB> If you use PGP for your email, Adawre, Spybot, Spyware Blaster for
 GB> spyware, SSH for FTPing, firewall, anti-virus and just not use instant
 GB> messengers, you will probably be safe from their sniffing.

At least that's the idea. There are other ways of getting into your system
without your knowledge.

 GB> But what average user will know to do even a small part of it?

The average user has nothing to worry about. The average user isn't likely to
be a terrorist.

Ed

--- Mozilla Thunderbird 1.0 (Windows/20041206)
 * Origin:  (1:123/789.0)