Off Topic: Email service used by Snowden shuts itself down, warns against using US-based companies | Glenn Greenwald | theguardian.com

Email service used by Snowden shuts itself down, warns against using US-based companies | Glenn Greenwald | Comment is free | theguardian.com.

( This is the scariest of scary pieces to come out about the US’s abuse of its citizen’s human rights.  Off topic here, it is of such deep concern to me that I urge all who come here to read it and decide what they are willing to do about it.  It is time for grass-roots ACTION !  – JW )

Snowden: “Google, Facebook, Microsoft, Yahoo, Apple, and the rest of our internet titans must ask themselves why they aren’t fighting for our interests the same way”

Lavabit
The front page of Lavabit announces to its users its decision to shut down rather than comply with ongoing US surveillance orders Photo: Lavabit

A Texas-based encrypted email service recently revealed to be used by Edward Snowden – Lavabit – announced yesterday it was shutting itself down in order to avoid complying with what it perceives as unjust secret US court orders to provide government access to its users’ content. “After significant soul searching, I have decided to suspend operations,” the company’s founder, Ladar Levinson, wrote in a statement to users posted on the front page of its website. He said the US directive forced on his company “a difficult decision: to become complicit in crimes against the American people or walk away from nearly ten years of hard work by shutting down Lavabit.” He chose the latter.

CNET’s Declan McCullagh smartly speculates that Lavabit was served “with [a] federal court order to intercept users’ (Snowden?) passwords” to allow ongoing monitoring of emails; specifically: “the order can also be to install FedGov-created malware.” After challenging the order in district court and losing – all in a secret court proceeding, naturally – Lavabit shut itself down to avoid compliance while it appeals to the Fourth Circuit.

This morning, Silent Circle, a US-based secure online communication service, followed suit by shutting its own encrypted email service. Although it said it had not yet been served with any court order, the company, in a statement by its founder, internet security guru Phil Zimmerman, said: “We see the writing on the wall, and we have decided that it is best for us to shut down Silent Mail now.”

What is particularly creepy about the Lavabit self-shutdown is that the company is gagged by law even from discussing the legal challenges it has mounted and the court proceeding it has engaged. In other words, the American owner of the company believes his Constitutional rights and those of his customers are being violated by the US Government, but he is not allowed to talk about it. Just as is true for people who receive National Security Letters under the Patriot Act, Lavabit has been told that they would face serious criminal sanctions if they publicly discuss what is being done to their company. Thus we get hostage-message-sounding missives like this:

I wish that I could legally share with you the events that led to my decision. I cannot. I feel you deserve to know what’s going on – the first amendment is supposed to guarantee me the freedom to speak out in situations like this. Unfortunately, Congress has passed laws that say otherwise. As things currently stand, I cannot share my experiences over the last six weeks, even though I have twice made the appropriate requests.”

Does that sound like a message coming from a citizen of a healthy and free country? Secret courts issuing secret rulings invariably in favor of the US government that those most affected are barred by law from discussing? Is there anyone incapable at this point of seeing what the United States has become? Here’s the very sound advice issued by Lavabit’s founder:

This experience has taught me one very important lesson: without congressional action or a strong judicial precedent, I would _strongly_ recommend against anyone trusting their private data to a company with physical ties to the United States.

As security expert Bruce Schneier wrote in a great Bloomberg column last week, this is one of the key aspects of the NSA disclosures: the vast public-private surveillance partnership. That’s what makes Lavabit’s stance so heroic: as our reporting has demonstrated, most US-based tech and telecom companies (though not all) meekly submit to the US government’s dictates and cooperative extensively and enthusiastically with the NSA to ensure access to your communications.

Snowden, who told me today that he found Lavabit’s stand “inspiring”, added:

“Ladar Levison and his team suspended the operations of their 10 year old business rather than violate the Constitutional rights of their roughly 400,000 users. The President, Congress, and the Courts have forgotten that the costs of bad policy are always borne by ordinary citizens, and it is our job to remind them that there are limits to what we will pay.

“America cannot succeed as a country where individuals like Mr. Levison have to relocate their businesses abroad to be successful. Employees and leaders at Google, Facebook, Microsoft, Yahoo, Apple, and the rest of our internet titans must ask themselves why they aren’t fighting for our interests the same way small businesses are. The defense they have offered to this point is that they were compelled by laws they do not agree with, but one day of downtime for the coalition of their services could achieve what a hundred Lavabits could not.

“When Congress returns to session in September, let us take note of whether the internet industry’s statements and lobbyists – which were invisible in the lead-up to the Conyers-Amash vote – emerge on the side of the Free Internet or the NSA and its Intelligence Committees in Congress.”

The growing (and accurate) perception that most US-based companies are not to be trusted with the privacy of electronic communications poses a real threat to those companies’ financial interests. A report issued this week by the Technology and Innovation Foundation estimated that the US cloud computing industry, by itself, could lose between $21 billion to $35 billion due to reporting about the industry’s ties to the NSA. It also notes that other nations’ officials have been issuing the same kind of warnings to their citizens about US-based companies as the one issued by Lavabit yesterday:

And after the recent PRISM leaks, German Interior Minister Hans-Peter Friedrich declared publicly, ‘whoever fears their communication is being intercepted in any way should use services that don’t go through American servers.’ Similarly, Jörg-Uwe Hahn, a German Justice Minister, called for a boycott of US companies.”

The US-based internet industry knows that the recent transparency brought to the NSA is a threat to their business interests. This week, several leading Silicon Valley and telecom executives met with President Obama to discuss their “surveillance partnership”. But the meeting was – naturally – held in total secrecy. Why shouldn’t the agreements and collaborations between these companies and the NSA for access to customer communications not be open and public?

Obviously, the Obama administration, telecom giants, and the internet industry are not going to be moved by appeals to transparency, privacy and basic accountability. But perhaps they’ll consider the damage being done to the industry’s global reputation and business interests by constructing a ubiquitous spying system with the NSA and doing it all in secret.

It’s well past time to think about what all this reflects about the US. As the New York Times Editorial Page put it today, referencing a front-page report from Charlie Savage enabled by NSA documents we published: “Apparently no espionage tool that Congress gives the National Security Agency is big enough or intrusive enough to satisfy the agency’s inexhaustible appetite for delving into the communications of Americans.” The NYT added:

Time and again, the NSA has pushed past the limits that lawmakers thought they had imposed to prevent it from invading basic privacy, as guaranteed by the Constitution.”

I know it’s much more fun and self-satisfying to talk about Vladimir Putin and depict him as this omnipotent cartoon villain. Talking about the flaws of others is always an effective tactic for avoiding our own, and as a bonus in this case, we get to and re-live Cold War glory by doing it. The best part of all is that we get to punish another country for the Supreme Sin: defying the dictates of the US leader.

[Note how a country’s human rights problems becomes of interest to the US political and media class only when that country defies the US: hence, all the now-forgotten focus on Ecuador’s press freedom record when it granted asylum to Julian Assange and considered doing so for Edward Snowden, while the truly repressive and deeply US-supported Saudi regime barely rates a mention. Americans love to feign sudden concern over a country’s human rights abuses as a tool for punishing that country for disobedience to imperial dictates and for being distracted from their own government’s abuses: Russia grants asylum to Snowden –> Russia is terrible to gays! But maybe it’s more constructive for US media figures and Americans generally to think about what’s happening to their own country and the abuses of the own government, the one for which they bear responsibility and over which they can exercise actual influence.]

Lavabit has taken an impressive and bold stand against the US government, sacrificing its self-interest for the privacy rights of its users. Those inclined to do so can return that support by helping it with lawyers’ fees to fight the US government’s orders, via this paypal link provided in the company’s statement.

One of the most remarkable, and I think enduring, aspects of the NSA stories is how much open defiance there has been of the US government. Numerous countries around the world have waved away threats, from Hong Kong and Russia to multiple Latin American nations. Populations around the world are expressing serious indignation at the NSA and at their own government to the extent they have collaborated. And now Lavabit has shut itself down rather than participate in what it calls “crimes against the American people”, and in doing so, has gone to the legal limits in order to tell us all what has happened. There will undoubtedly be more acts inspired by Snowden’s initial choice to unravel his own life to make the world aware of what the US government has been doing in the dark.

Explore posts in the same categories: Uncategorized

42 Comments on “Off Topic: Email service used by Snowden shuts itself down, warns against using US-based companies | Glenn Greenwald | theguardian.com”

  1. artaxes Says:

    Mr. Ladar Levison, thank you. You are a true patriot and a freedom fighter, sir.
    We need more people like you.
    Americans, don’t let them take your freedoms and privacy away.

    To all the other email providers who take part in this shameful scandal:
    Post the following message on your web site:
    “Forgot password? Ask NSA!”

  2. Norm Says:

    For Americans, the only response is the 2014 midterm elections. The people’s revolt must take its form in a dominating Republican presence in both houses of Congress. Only then will it be possible to obtain some type of effective control over the activities of Federal agencies which have gone beyond their legal and Constitutional boundaries. Donate money and your time to your local candidates. Talk to everyone. Use the internet.

  3. artaxes Says:

    For small business owners it may be helpful to consider the services of these guys.
    http://cyberbunker.com/web/index.php

  4. shekinah419 Says:

    Reblogged this on servehiminthewaiting and commented:
    One of the most chilling indicators of how serious the U.S. Government over-reach of power has become. Companies shutting down voluntarily so as not to comply with the conditions that are being forcibly imposed.

  5. Louisiana Steve Says:

    Troubling to say the least…..but…..anyone can run their own email service. I do not use an outside service. I have an email server running in my office that is capable of hosting email boxes, sending mail directly to recipients and receiving mail directly from senders without going through a third party. It’s relatively simple to set up and the server software is free! Not only that, you can encrypt your mail is you so choose. Of course, while I do not traffic in illegal emails, I do, however, use my server for my business and host mailboxes for some of my clients. 😎

    • artaxes Says:

      There are some things to consider though.

      – Your machine running the service must be on 24/7.
      – It must also be connected to the internet 24/7

      If that’s not the case ou can not access your postbox from outside your home (on your smartphone etc.) and neither can other email servers send emails to you.

      – You should run regularly automated backups.
      – You should configure the server as secure as possible and take also other measures to protect your server because any service listening to an open port can be succeptible to hacker attacks.
      Neglecting to do this can leave you in a much worse situation.
      In the worst case you traded the spying by NSA for abuse of your data by cyber criminals and script kiddies hacking just for fun.

      Steve, I’m very interested in your solution.
      Could you give me some details?
      Somehow the outside world must find my server which means that there must be a DNS-entry.
      Do I have to register a domain or does this solution work with services like dynDNS etc.?
      Maybe you can give me some links where I can read further?

      • Louisiana Steve Says:

        Glad to help you AR…

        I have a web server running Apache, a mail server running Mercury Mail, a database server called MySQL, and an FTP server running FileZilla. Everything is running on ONE machine using WIndows XP Pro. In addition are PHP and Perl script engines. The computer runs continually with no keyboard or monitor. I use remote desktop to access when needed. It’s on my office LAN so it’s easy to get to.

        As for the connection, I’m connected via the TV cable (fastest upload speed I could afford). Remember, as a server you spend more time uploading than downloading, not like someone just browsing the internet. Anyway, you need to get a static IP address as this will solve a lot of problems and make the setup a lot easier.

        Lastly, you will need to register a domain. I have several and all can use the same IP address. The server programs can sort it all out.

        Yes, I do backup regularly to my officer server and to a removable disk WEEKLY and its saved my butt many times. Believe me, nobody wants to rebuild years of work.

        Access to my mail server is like any other. You can access using POP, SMTP, and I even have a webmail interface. Go to http://www.varvaro.com to check out some of the stuff. It’s all running on my server.

        Hacking is always problem, but none so far. The server is behind a firewall and I try to stay on top of the program updates. You will have to setup your router to allow only the data ports needed to pass through to your server, i.e. 80, 125, 110, etc.

        You can use a dynamic IP service but I recommend getting a static IP if you want to run a serious server.

        Confused yet?? Here’s the good news. Someone took the time to package all this software in something called XAMMP that installs everything you need to get started. Here’s a link for you…

        http://sourceforge.net/projects/xampp/files/

        Some of my websites have logged over 600 million hits, so the little computer is working its tail off.

        If you have questions, email me at stephen@varvaro.com

  6. Joop Klepzeiker Says:

    It is not a solution you have to go trough the server from your ISP even whit your own server.

    There is a solution , search for mesh networks

    • Louisiana Steve Says:

      The ISP provided the pipeline. They do not host any information. Any info I pass thru can be encrypted is I so choose. My solution is still viable.

      • Louisiana Steve Says:

        Also, nodes on a mesh network must be connected to the internet and that still takes an ISP.

      • Joop Klepzeiker Says:

        Any pipeline can be tapped, encryption is easy for the big professionals.

        http://en.wikipedia.org/wiki/Tier_1_network

        And there are country border servers etc etc, to much to explain.

        • artaxes Says:

          Not true. the bigger the key (the more bits) the harder it is to crack.
          Absolute security is not the point.
          As it is now, NSA and others can collect huge amount of unencrypted data. This makes it very tempting and feasible to read the data or run automated searches and analysis on the data.
          The easier it is to read your data the more tempting it is to do it for all kinds of illegitimate reasons.
          Assuming that a key can be cracked (very hard) each message encrypted with a semi-decent algorithm increases the time it takes do decpher it by orders of magnitude.
          If enough people encrypt their messages it is no longer feasible to read what Joe Blow wrote to Susan Anyhow and the NSA has to concentrate its resources on the guys who really justify this effort.
          Why do you think the NSA wanted wanted Lavabit to intercept Snowdens’s password?
          Exactly! Because it’s not as easy as you want us make believe.

          • Louisiana Steve Says:

            I agree AR. I really have nothing to hide, but I like a little privacy. I’ve had ‘denial of service’ attacks, repeated logon attempts, and hijacked email accounts. The ‘denial’ attacks eventually go away if you go offline for a while. Repeated logon attempts are stopped by the server after so many failures. Hijacked email accounts occur at another person’s computer over which I have no control. But I do suspend their account if a lot of spam shows up in the outgoing folder for the server. In other words, there are tools in the software to manage and monitor most everything.

          • Joop Klepzeiker Says:

            Depends on the quality of encryption and if it is a encryption whits send his key, ( symmetric encryption ) but i do not know enough about this matter.

            but the quantum computer is arrived so, speed is amazing.

            But as far i can read it your tight for the moment

            http://www.computerworld.com/s/article/354997/The_Clock_Is_Ticking_for_Encryption?taxonomyId=17&pageNumber=1

          • artaxes Says:

            Steve. No need to justify yourself. Privacy is a human right.
            For the same reason we lock our doors and send our mails in envelopes. That’s natural. Even if what we are doing in our homes is perfectly innocent, moral and legal we don’t want our neighbour to know everything about us.
            I really like your solution and I want to try to implement it. Can you give me at least some pointers where I have to look for further information? What is the name of this free program?

            Joop, as in all things we have to use common sense.
            If we don’t lock our home any idiot can rob us without much effort.
            If we lock it, it takes effort to break it. So a professional burglar will break it only if he thinks it is worth the effort. If we buy a lock that is a little above average only the real top professional burglar will break it.
            Yes there are burglaries. But these simple measures make sure that they are the exception rather then the norm.

          • Louisiana Steve Says:

            AR, I included the info in a reply to your earlier message above. 😎

          • artaxes Says:

            Steve I’m very thankful for your detailed answer.
            Now I have a starting point. I’ve seen recently a computer not much bigger than a pack of cigarettes with USB-port, Ethernet-port, and monitor connector running linux.
            Because of its low power consumption and used togther with an external USB-HDD it should be sufficient for my needs (in theory).
            I’m not getting or sending 10000 mails per day.
            Anyway, I’ve copied your answer and it can be safely removed by JW if you want (because of your email-address).

          • Louisiana Steve Says:

            AR- My server is a regular desktop PC. Power consumption is not much more than a light bulb, so continuous operation is not a problem. No need to delete my message because it contains my email address. It’s already all over the internet. If you google my name I’ll be on the first 10 pages or so. You can run, but you cannot hide..that’s me. 😆

          • Justice for Israel Says:

            GCHQ can still intercept all of this

          • artaxes Says:

            ANY message can be intercepted regardless of the medium.
            Whether the message is carried by air (your voice), a rider on a horseback, radio waves, or light in a fiber cable it can be intercepted.
            That’s why cryptography was invented in the first place.

  7. Joop Klepzeiker Says:

    @ Steve

    MM, i have a solution for that problem, old fashioned HAM radio whit info packet burst, perhaps some relay stations.

    • Louisiana Steve Says:

      Or we could use good old ESP. 😆

      • Joop Klepzeiker Says:

        I,am scanning now, mm, jack no 7 ?

        • Louisiana Steve Says:

          My thought exactly.

          • Joop Klepzeiker Says:

            I was in doubt between jack and Prichard’s Lincoln County Lightning

            The reading is not perfect is overcast.

          • Louisiana Steve Says:

            There’s nothing better than good Kentucky whiskey…except a well made moonshine…even the legal brands are good. Had to give them all up though. At my age, it hurt more than it helped.

          • Joop Klepzeiker Says:

            Bin there, done that, rocking chair dog on your feet .

          • Justice for Israel Says:

            ill second that about the moonshine but have you tried scottish single malts steve you wont ever want Kentucky again afterwards

          • Louisiana Steve Says:

            I was into Scotch in the 80’s. Great stuff. Glenlivet if my once alcohol soaked brain can recall.

          • josephwouk Says:

            Guys, if you can manage a break from the whiskey, check out the top story here.

            I watched the press conference. Obama looked like he was doing Queeg’s breakdown in “The Caine Mutiny.”

          • Justice for Israel Says:

            wow av just realized how spoilt we are here my favorite whiskeys aboiut $60 but its 4 times that in the states

    • Justice for Israel Says:

      “MM, i have a solution for that problem, old fashioned HAM radio whit info packet burst, perhaps some relay stations.”packet burst is a big thing still especially with encrypted files it gets round lots of surveillance problems everyone shod have ham radio dam good fun too now all the idiots have gone to the net

  8. Louisiana Steve Says:

    From what I’ve read, the bad guys would set up free email accounts on services such as Hotmail. When one wanted to communicate with another, he would compose his message and store it in the draft folder of his email account, never sending it out. The other guy would log on to that same account knowing the password in advance. He would view the message sitting in the draft folder then delete it. Back then, the email service providers did not archive draft folders. They may be doing so now, however.

  9. Steve Harr Says:

    Great work, Joe … as usual. Aren’t you glad you live in a free country? Be joining you there soon.

    Steve


Leave a comment