[liberationtech] Naive Question

[Jon Camfield]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On Monday, September 09, 2013 05:09 PM, Jonathan Wilkes wrote:
> On 09/09/2013 03:40 PM, Case Black wrote:
>> There's a more subtle variant to this idea...
[SNIP]
> In short I don't think there's a hack for this one, it just
> requires old fashioned activism and mobilization to reveal what
> these secret interpretations of the law actually are and try to
> work to get rid of them.  (Well, I guess greater decentralization
> and privacy-overlays are a good way to get around it but that's a
> long term thing AFAICT.)

A naive thought experiment add-on:

There has always been a huge trust factor in hosted services - do they
really not log?  What are their configuration files?  How can we build
transparency into how the servers are configured and what code they
are actually, currently running in a way that would reveal malicious
changes?  (Obviously, there's also a security challenge here, in that
you have to really be on top of your updates and on the watch for
intrusions with this level of transparency).

In the end, it still becomes a iterative process where whatever
transparency system is put up can still be subverted by a skilled
governmental adversary, but it'd still be nice to have more than a
company's word about their logging policies.

Jon
-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.12 (GNU/Linux)
Comment: Using GnuPG with Thunderbird - http://www.enigmail.net/
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=llkI
-----END PGP SIGNATURE-----