Full Disclosure mailing list archives

Re: JAP Wins Court Victory


From: "Gregory A. Gilliss" <ggilliss () netpublishing com>
Date: Mon, 20 Oct 2003 06:36:24 -0700

Privacy is an important adjunct to security, IMHO. Perhaps the JAP folks
did not handle their police issues as well as they should have. However
let us not abandon them or the project yet, unless we can find more
compelling and better solutions to the problem of the powers that be
improperly intruding onto the use of the online community.

Terrorists would not make bombs if they were satisfied with their condition.
I suspect that JAP and other privacy services would not have been widely
deployed if there were not the threat of snooping and privacy invasion.
I vote that we stay focused on the problem, and not bash the solution (well
not *too* much at least).

G

On or about 2003.10.20 08:48:24 +0000, Cael Abal (lists () onryou com) said:

This doesn't change how the JAP folks behaved -- the correct course of
action would have been for them to have notified their users of the
request to backdoor JAP immediately.  I fear the JAP people have lost a
fair amount of credibility and it'll take more than a, "JAP is okay
again!  Trust us!" before they regain the world's trust.

Please lets not rehash the backdoor issue.

As for the idea that the existence of a court order somehow proves the
robustness of a certain piece of code, well, that's just silly.  Cops
aren't software developers, they're cops.  Court orders are their tools
of choice, not disassemblers.

-- 
Gregory A. Gilliss, CISSP                             Telephone: 1 650 872 2420
Computer Engineering                                   E-mail: greg () gilliss com
Computer Security                                                ICQ: 123710561
Software Development                          WWW: http://www.gilliss.com/greg/
PGP Key fingerprint 2F 0B 70 AE 5F 8E 71 7A 2D 86 52 BA B7 83 D9 B4 14 0E 8C A3

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.netsys.com/full-disclosure-charter.html


Current thread: