[Was, and still is: yahoo sux] Security experts urge clients to stop using Yahoo Mail

[Kindra Meow]

http://www.nytimes.com/2016/10/06/technology/yahoo-email-tech-companies-government-investigations.html
]


Yahoo was ordered last year to search incoming emails for the digital
“signature” of a communications method used by a state-sponsored, foreign
terrorist organization, according to a government official familiar with
the matter.

The Justice Department obtained the order from a judge of the Foreign
Intelligence Surveillance Court.

To comply, Yahoo used a modified version of its existing systems that were
scanning all incoming email traffic for spam, malware and images of child
pornography. The system stored and made available to the Federal Bureau of
Investigation a copy of any messages it found that contained the digital
signature.

- - -

this is a bit peculiar, because what if the communication method that yahoo
implements for transport utilizes a 'signature' that you can string-match
on? not many.

Mujahideen Secrets, etc had a custom armor header line specific to the
application,
https://www.recordedfuture.com/al-qaeda-encryption-technology-part-2/.
maybe the answer?


On Wed, Oct 5, 2016 at 7:30 AM, Razer <rayzer at riseup.net> wrote:

>
>
> On 10/04/2016 08:49 PM, jim bell wrote:
> >
> >
> > *From:* Shawn K. Quinn <skquinn at rushpost.com>
> >
> > On Wed, 2016-10-05 at 02:26 +0000, jim bell wrote:
> >
> >>> Generally speaking, American Federal laws are not applicable outside
> >>> the United States (and its territories) unless the law explicitly says
> >>> so.  The term is called "extraterritorial jurisdiction"
> >>> https://en.wikipedia.org/wiki/Extraterritorial_jurisdiction
> > <https://en.wikipedia.org/wiki/Extraterritorial_jurisdiction>  I am
> >>> not aware of anything that would prohibit a person in one of these
> >>> companies to visit Canada, or Mexico, or perhaps even a foreign
> >>> embassy, or some other nation, and then publicly announcing the
> >>> existence of this secret surveillance, immune from the reach of the
> >>> law.
> >
> >
> >>The problem is that the company's operations in the US will remain under
> >>US jurisdiction, and that is the most likely avenue of
> >>enforcement--against the company, not the individuals leaking the info
> >>from the shores of Vancouver or Cancún.
> >
> > Well, then the government would have to argue that the corporation
> > violated the court order somewhere within America, as opposed to an
> > individual outside the jurisdiction of that court.  The thing could go
> > as far as the company hiring a foreign attorney, communicating with him
> > by Internet (or courier, etc), with the foreign attorney announcing the
> > fact of the information.  It would be very difficult to formulate a
> > theory that a company isn't entitled to communicate with an attorney who
> > was outside the jurisdiction of the U.S., or that the U.S. just happened
> > to have legal power to prevent that attorney from speaking.  It would be
> > quickly seen as a First Amendment issue, and would fail.
> >
> >             Jim Bell
> >
> >
>
> > Well, then the government would have to argue that the corporation
> violated the court order somewhere within America,
>
>
> If the leak came from an IP address based at the corporation's office no
> matter what country it's in (assuming capitalist-friendly), I'd suspect
> that a local court would give the US jurisdiction.
>
> Disclaimer: I AM NOT nor have I ever been, a corporate lloigor.
>
> https://en.wikipedia.org/wiki/Lloigor_(Cthulhu_Mythos_race)
>
> Rr
>
> "In the 1975 The Illuminatus! Trilogy, the lloigor are mentioned as the
> gods of the aboriginal natives of the People's Republic of Fernando
> Po(o), as well as the original gods of Atlantis. Here, the term appears
> to be synonymous with Great Old One—for example, H. P. Lovecraft's
> creation Yog-Sothoth is called a lloigor."
>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: not available
Type: text/html
Size: 5721 bytes
Desc: not available
URL: <https://lists.cpunks.org/pipermail/cypherpunks/attachments/20161005/a6125d6c/attachment.txt>