Stories
Slash Boxes
Comments

News for nerds, stuff that matters

Slashdot Log In

Log In

Create Account  |  Retrieve Password

U.S. Government Demands ISP Data Retention

Posted by Zonk on Fri Jun 02, 2006 09:32 AM
from the put-up-or-shut-up dept.
dlc3007 writes to mention an article in the New York Times discussing data privacy. The article expands on the U.S. Government's 'request' last Friday at a meeting between Robert S. Mueller III, Attorney General Alberto R. Gonzales, and the executives of several Internet Service Providers. The ISPs were required to retain data on users, for trials if subpoenaed. Right now they're asking companies to do this. The threat is that, if they don't comply, legislation will follow. From the article: "The Justice Department is not asking the Internet companies to give it data about users, but rather to retain information that could be subpoenaed through existing laws and procedures, Mr. Roehrkasse said. While initial proposals were vague, executives from companies that attended the meeting said they gathered that the department was interested in records that would allow them to identify which individuals visited certain Web sites and possibly conducted searches using certain terms." We originally covered this last Sunday, but more details have been released on the meeting since then.
+ -
story

Related Stories

[+] Americans Not Bothered by NSA Spying 1322 comments
Snap E Tom writes "According to a Washington Post poll, a majority (63%) of Americans 'said they found the NSA program to be an acceptable way to investigate terrorism.' A slightly higher majority would not be bothered if the NSA collected personal calls that they made. Even though the program has received bi-partisan criticism from Congress, it appears that the public values security over privacy."
[+] News: U.S. Pressures ISPs on Data Retention 221 comments
packetmon writes "According to Wired's Declan McCullagh 'In a private meeting with industry representatives, Gonzales, Mueller and other senior members of the Justice Department said Internet service providers should retain subscriber information and network data for two years ... A more extensive mandate would require companies to keep track of e-mail messages sent, Web pages visited and perhaps even instant-messaging correspondents.'"
[+] U.S. to Gain Access to EU Retained Data 323 comments
shenanigans writes "After the EU recently ratified controversial data retention laws for ISPs and other telecommunication companies, it now looks like the US government will get full access to the data. From the article: 'US authorities can get access to EU citizens' data on phone calls, sms and emails, giving a recent EU data-retention law much wider-reaching consequences than first expected'. Apparently, the US has been calling members of the EU to 'ensure that the data collected [...] be accessible to them'."
[+] Keeping an Eye on Government Snooping 232 comments
abb_road writes "BusinessWeek looks at the need for better electronic privacy safeguards in light of NSA call monitoring, and more recent administration pushes for ISP data-retention. As the article discusses, though safeguards are already in place, they're easily bypassed, based on older communication norms and don't take into account any 'war-time necessity' arguments." From the article: "There's a crying need for better privacy safeguards that reflect today's world -- and mirror a consensus among America's gadget-happy, cell-phone addicts whose daily chats and text messages are grist for Echelon's computers."
[+] Ask Slashdot: Has Orwell's '1984' Come 22 Years Later? 1272 comments
gabec asks: "This weekend my mother bought a grille lighter, something like this butane lighter. The self-scanner at Kroger's locked itself up and paged a clerk, who had to enter our drivers license numbers into her kiosk before we could continue. Last week my girlfriend bought four peaches. An alert came up stating that peaches were a restricted item and she had to identify herself before being able to purchase such a decidedly high quantity of the dangerous fruit. My video games spy on me, reporting the applications I run, the websites I visit, the accounts of the people I IM. My ISP is being strong-armed into a two-year archive of each action I take online under the guise of catching pedophiles, the companies I trust to free information are my enemies, the people looking out for me are being watched. As if that weren't enough, my own computer spies on me daily, my bank has been compromised, my phone is tapped--has been for years--and my phone company is A-OK with it. What's a guy that doesn't even consider himself paranoid to think of the current state of affairs?" The sad state of affairs is that Big Brother probably became a quiet part of our lives a lot earlier. The big question now is: how much worse can it get?
This discussion has been archived. No new comments can be posted.
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
 Full
 Abbreviated
 Hidden
More
Loading... please wait.
  • Working Clicky (Score:5, Informative)

    by eldavojohn (898314) * <my/.username@@@gmail.com> on Friday June 02 2006, @09:33AM (#15453289) Homepage Journal
    Here is a working link to the story [nytimes.com]. Please use the RSS feed from newspapers when submitting stories!

    How do you do this? Go to the RSS [nytimes.com] feed page and select the category your article appeared in. Then do a search for the title and pull the link that declares it to be an RSS user. It's that simple!

    I don't think this is morally wrong as you're going to their site and you're still getting advertisements. Slashdot is really just a hand selected RSS feed so we might as well use RSS credentials. It saves us the time of registering and it saves the site admins some wasted space & e-mail traffic due to shill registrations.
      • Re:Article Text (Score:5, Insightful)

        by Tackhead (54550) on Friday June 02 2006, @12:21PM (#15454933)
        > The executives spoke on the condition that they not be identified because they did not want to offend the Justice Department.

        Why. If they're doing nothing wrong, they have nothing to hide.

  • by TripMaster Monkey (862126) * on Friday June 02 2006, @09:34AM (#15453297)
    From TFA:
    In its current proposal, the department appears to be trying to determine whether Internet companies will voluntarily agree to keep certain information or if it will need to seek legislation to require them to do so.
    Translation: Will we have to ram another law through Congress to make this happen, or can we achieve the same results through good old-fashioned coercion and intimidation? After all, if we have to pass a law, then we'll be constrained by the law's wording...but if we 'persuade' the Internet companies to retin this data for us 'voluntarily', then we can act without restraint or oversight...after all, it is 'voluntary'...

    So tell me again....why do the Internet companies have to retain so much data?

    From TFA (emphasis mine):
    "The investigation and prosecution of child predators depends critically on the availability of evidence that is often in the hands of Internet service providers," Mr. Gonzales said in remarks at the National Center for Missing and Exploited Children in Alexandria, Va. "This evidence will be available for us to use only if the providers retain the records for a reasonable amount of time," he said.
    Ah yes...yet another shameless use of the 'Lovejoy Gambit'. If you oppose this data retention, you must hate children. You don't hate children, do you?

    And once more from TFA:
    An executive of one Internet provider that was represented at the first meeting said Mr. Gonzales began the discussion by showing slides of child pornography from the Internet. But later, one participant asked Mr. Mueller why he was interested in the Internet records. The executive said Mr. Mueller's reply was, "We want this for terrorism."
    And we segue straight from the 'Lovejoy Gambit' to the '9/11 bloody shirt'. How relentlesly predictable.
    • by Anonymous Coward on Friday June 02 2006, @09:44AM (#15453363)
      The executive said Mr. Mueller's reply was, "We want this for terrorism."

      At least he told the truth, perhaps though he should have lied better and said "We want this to *fight* terrorism."
    • by Virak (897071) on Friday June 02 2006, @09:50AM (#15453409) Homepage
      If you oppose this data retention, you must hate children. You don't hate children, do you?

      Yes, I do, but that's not why I'm against this.
      • by TripMaster Monkey (862126) * on Friday June 02 2006, @10:01AM (#15453509)

        They're asking this data be retained so that **IF A COURT ORDERED SUBPOENA IS ISSUED** the information will be available. Worried by that?

        Given this administration's shocking contempt for the legal system thus far, yes, I am worried by that. They've collected enough data without having to resort to the 'headache' of due process through the courts...do we really need to make more available to them?

        It's quite simple, really. Don't prey on children and don't plan terrorist acts and you'll be fine.

        I'll ignore your reference to the Lovejoy gambit and proceed directly to your statement about terrorism. Have you read Patriot Act I and II? If you have, you'd know that the new definition of a 'domestic terrorism' is "any action that endangers human life that is a violation of any Federal or State law". You'd also know that anyone who fits this ridiculously broad definition of 'terrorism' can now be considred an 'enemy combatant' and stripped of their U.S. citizenship and rights. Under current legislation, a person could be legally held indefinitely without trial for something as innocuous as speeding.

        If you don't trust the courts to work properly, then your issue is much bigger than this request/legislation.

        In that, you're absolutely correct.
      • by ptbarnett (159784) on Friday June 02 2006, @10:02AM (#15453514)
        Don't prey on children and don't plan terrorist acts and you'll be fine.

        From TFA:

        At the meeting with privacy experts yesterday, Justice Department officials focused on wanting to retain the records for use in child pornography and terrorism investigations. But they also talked of their value in investigating other crimes like intellectual property theft and fraud, said Marc Rotenberg, executive director of the Electronic Privacy Information Center in Washington, who attended the session.

        "It was clear that they would go beyond kiddie porn and terrorism and use it for general law enforcement," Mr. Rotenberg said.

        ---- end cite.

        The problem with a "surveillance state" is that the collected information can be abused by the people that collect it. And worse: over-zealous law enforcement can find sufficient evidence of a crime anywhere they want, given the vagueness of many statutes.

          • by CreatureComfort (741652) * on Friday June 02 2006, @10:28AM (#15453784)

            No. "Big Brother" just ensures that everyone is a documented lawbreaker, and that documentation can be used to harrass, blackmail, or remove anyone who offends the ruling power.

            • > No. "Big Brother" just ensures that everyone is a documented lawbreaker, and that documentation can be used to harrass, blackmail, or remove anyone who offends the ruling power.

              This, to me, is the scarriest thing that a government can do. Pass laws and then say, "well it's OK, we're not going to use this against people". What? Don't pass laws if you're not going to prosecute every violator. Otherwise it sounds like you're saying, "this law shouldn't affect people that don't cause any controversy... we're only going to use it to take down people we don't like". Great, just great.

              If every law were actually enforced, they would go away when people got fed up with them. Imagine every jaywalker going to jail -- jaywalking wouldn't be illegal for much longer after W (or someone else important, not one of us pleebs) had to spend time in a cell overnight.

              Speaking of which, I think it's time to start filing lawsuits against the government for all these bullshit laws that are passed. I'm sure there are plenty of other laws that make these laws illegal.
      • by RsG (809189) on Friday June 02 2006, @10:05AM (#15453544)
        Subpoena? You mean like the ones used by the NSA monitoring? Where is that due process thingy again? We seem to have forgotten it somewhere...

        Besides which, even if people don't prey on children or plan terrorist acts, what's to stop the **AA from using the greater data retention in the next batch of lawsuits? After all, they can get subpoenas too.

        Pedos and terrorists are convienient excuses. The number of actual, real, internet predators and terrorists is very very small. Most violent or sexual crime is in no way related to the net - and most terrorists could easly commit crimes using low tech means (like, oh say, boxcutters, maybe?).

        And most child molesters aren't random scary strangers - they're people the victim knows and trusts. The best way to limit the number of molested children would be to force people to get a license before having children, and force people in positions of trust with children (teachers, preists, etc) to undergo rigorous psychological testing. What's that you say? That would violate their constitutional rights? Well tough titty - it's for the children, so that makes it OK.

        The reason that laws governing the internet get passed, and laws limiting parenthood don't even get proposed, is that the former are politically easy to sell, and the latter would rightly be seen as oppressive and illegal. It's just more examples of politicians crying "oh won't somebody think of the children" as a way to get elected - because politicians are inherently dishonest and lazy.
      • by misanthrope101 (253915) on Friday June 02 2006, @10:44AM (#15453925)
        "It's quite simple, really."
        At least you had one sentence that wasn't asinine. It is simple, really. An administration that has already proven that it does not feel bound by warrants and due process wants private citizens to keep a lot of information on other private citizens, and at their own expense, in case the govt wants to look at it later. It is simple--they don't want to fund this, don't want it covered by pesky due process or oversight by the judiciary or legislature, and don't want any accountability when abuses occur. Simple as can be. Now, the other stuff you said was just stupid.
        "Don't prey on children and don't plan terrorist acts and you'll be fine."
        The administration has already put antiwar groups (such as the Quakers, known terrorists all) under surveillance. So your point is simply wrong. Are you just ignorant, or are you lying from political motives? What is it about a Republican presidency that makes people forget that governments will abuse the power they have? Do you get special Kool-aid that makes you forget the obvious? No government in history has really been trustworthy, and all government is hostile to freedom. Has a fairy godmother come down from heaven and blessed this one so it's immune to the human fallibility, arrogance, and secretiveness that has plagued all the other governments in history? What is it about George Bush that makes conservatives want to give him authority unchecked by due process, separation of power, and public scrutiny? Has that whole "power corrupts" idea been rescinded? I didn't see that memo. Did I miss something?
        • by indifferent children (842621) on Friday June 02 2006, @10:17AM (#15453661)
          Maybe even a few of them end up in jail until they can exonerate themselves

          Silly rabbit, they can't hold you in jail for more than a few days without charging you with something, and you could be 'produced' under a writ of Habeus Corpus. They wouldn't hold you in a jail. They would send you to Camp X-Ray in Guantanamo (if you're lucky enough to avoid a truly secret detention camp).

        • Wow. You are amazingly shortsighted.

          Mod this puppy WAY up.

          Gonzales has already said [bloomberg.com] that the lack of data retention has already hurt child pornography investigations, practically blaming the ISPs for hindering an investigation - and who want's to look like they're aiding the criminal?

          This half porn/half terrorism is rediculous. Next they'll be saying hate speech, or arson investigations, or whatever - must... retain... records...

          Can = will with the government, which is why record retention is so damned scary. Just like with the Wired article about the surveilance (sp?) conference recently - if they CAN spy on you, they WILL, which has been proven time and again in the very, very recent past.

          Child porn my ass. Control the populace - call it what it is.

        • by AusIV (950840) on Friday June 02 2006, @01:00PM (#15455334)
          I have to agree with the guy who got modded down to zero, but I don't think you're completely ignoring his last line:

          If you don't trust the courts to work properly, then your issue is much bigger than this request/legislation.

          This piece of legislation is not the problem. If it were really going to be used in the ways they claim it will be used, it would be a decent piece of legislation (although an inconvenience to ISPs). It would help put predators behind bars, and potentially disrupt terrorist attacks. The problem is, as JonTurner suggested, much bigger than this legislation. The problem arises when AT&T gives the NSA any information they ask for without going through proper channels. The problem is that we can't trust our government not to use things like this against people who disagree with them politically. We shouldn't sit here and oppose small pieces of legislation like the one in question, we need to be looking at the bigger issue.

  • Mycarthyism.... (Score:5, Insightful)

    by beheaderaswp (549877) * on Friday June 02 2006, @09:39AM (#15453334)
    It's nothing but Mycarthyism.

    We just jumped back 50 years.
  • What's the point? (Score:5, Insightful)

    by Bombula (670389) on Friday June 02 2006, @09:47AM (#15453380)
    I'm not sure I really see the value of this information. Sure, some crackheads end up on Fark.com for showing their ID to the teller while robbing a bank, but the real pedaphiles and terrorists of the world don't do regular google searches for "how to build a bomb" and "kiddie porn" from the computers in their homes. To think there will be any significant amount of useful data collected in this fashion is, well, fairly retarded in my opinion.

    I can see this data being useful retroactively for things like criminal profiling and possibly being valuable for targeted marketing analysis, but not for catching child molesters and terrorists.

  • Just like the warrantless phone monitoring, just like law enforcement officials can now invade your home without a warrant to see if there is evidence of a crime so they can get a warrant, this is not a fishing expedition.

    Nor are we trying to track where everyone goes or what they read. We're ensuring that everyone is fully protected from those bad, bad terrorists. You know, 9/11 and all.

    You see, people want to be free. We're ensuring they can be free by these actions. All we ask is that people understand that we're in it for the long run and ask for their patience while we administer these proctology exams.

    Just remember, 9/11 was a wakup call [democratic...ground.com]. We can't let these terrorists take our freedoms away.

  • by postbigbang (761081) on Friday June 02 2006, @09:50AM (#15453413)
    We should be able to keep track of lawmakers, where they go, who's buying dinner (or whatever is spent), which people they're with, whether they used condoms, and their cell phone records.... with reverse # lookups.

    Then we can let ISPs retain the records of where we surf.

    Egads:

    Amendment 1:

    Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the government for a redress of grievances.

    Amendment 4:

    The right of the people to be secure in their persons, houses, papers, and effects, against unreasonable searches and seizures, shall not be violated, and no warrants shall issue, but upon probable cause, supported by oath or affirmation, and particularly describing the place to be searched, and the persons or things to be seized.
  • by usurper_ii (306966) <eyes0nly@@@quest4...org> on Friday June 02 2006, @09:54AM (#15453447) Homepage
    Of course, log files can be manipulated and faked. ISPs will have the power to exonerate or destroy people (maybe a new revenue stream for the ISPs???).

    If this does become law, soon it will be required that the ISPs use only "approved" monitoring software, perhaps software that will digitally sign the log files. And then, since they still can't be trusted, the log files will have to be kept in a central location of some government office.

    How much will this "approved" monitoring software cost?

    Usurper_ii

  • Harmonization (Score:5, Interesting)

    by chill (34294) on Friday June 02 2006, @10:05AM (#15453546) Homepage Journal
    The concept of "harmonization" has been used to justify lengthening copyright terms around the globe. If a major area has a longer term, it is easier to convince everyone to bump up to that than have the term lowered. Governments almost never give back power or revenue willingly.

    In this case, Europe was used as a trial balloon by the U.S. While the data retention laws were discussed and debated in Europe, the U.S. policy makers publically commented about the dangers of this sort of thing and how it could lead to a totalitarian "big brother" mentality. All the while they were telling people in the U.S. how much of a breach of privacy this is and how it will never happen here, the back-channels to Europe were doing nothing but supporting the push for mandatory retention and gauging the reaction -- and attention levels -- of the peoples.

    Once the E.U. backdoor hammered thru a mandatory data retention law, the U.S. changed its tune. Newly appointed Attorney General Alberto Gonzalez and staff started talking up data retention in the U.S. and pointing to Europe as leading the way. We are now well down this path. For those of you hoping to stall for two more years until there is a change in administration (aka "regeime change"), don't get your hopes up because the Democrats are just as bad. They'll still fuck you over but will be telling you how much they love you and how it is for your own good. (The Republicans just leave out the "but we love you" part. It is still for your own good.)

    While Europeans love to preach to Americans about how much more privacy aware they are, and how they have Constitutional guarantees and strong laws protecting their privacy and data use, they miss a fundamental difference.

    In Europe, the concept of privacy doesn't include the government. Yes, they have strong laws dictating how data is used, kept, stored and brokered so as to prevent misuse by third parties, individuals and corporations. But, they have no real protections about government access and use to all that data. All in the name of paternalistic government, enacted thru "anti-terror", "anti-drug" and "immigration control" laws the gov'ts of Europe have no privacy when it comes to bureaucratic eyes.

    In the U.S. the concept of privacy really means just you. It is *your* data and *your* information and privacy means ONLY YOU get to determine where it goes and how it is used. The government is NOT (in theory) given a free pass or exemption to use, store or broker your data. For the longest time the U.S. Social Security numbers had printed on the issued cards "not to be used as I.D." so great was the fear of a "national I.D.". Of course, this is offset by most American's apathy towards anything to do with government. As long as they can afford their beers, pay the bills and watch their idiot box most of them will be complacent about damn near anything that doesn't interfere with any of that.

    Don't believe me? How about his for a statistic: more people voted in the last American Idol episode of that television show than did in the last Presidential Election.
  • by stankulp (69949) on Friday June 02 2006, @10:07AM (#15453555) Homepage
    Transfer the costs of spying to the ISPs.

    Priceless.
  • https:// wanted (Score:5, Interesting)

    by crow (16139) on Friday June 02 2006, @10:08AM (#15453577) Homepage Journal
    This is another good reason to use https instead of http. Unfortunately, most web sites will only use https for commerce. If Google used https by default, then the government would have to subpoena them directly to find out what a particular user searched for. Likewise, if Slashdot used https by default, then the government would have a lot more trouble figuring out who an anonymous coward was.
  • by kbuckalo (411216) on Friday June 02 2006, @10:31AM (#15453798) Homepage
    I am the owner of a small ISP in Santa Cruz, California. We get a couple/few subpoenas a year from the FBI, like most ISPs. My concern with data retention of logs, which is what is being asked for here, is: 1. privacy - 'nuff said 2: the cost to the ISP.

    We're a small ISP, and we keep a week or two of backups and it's already several terabytes. Now, the feds want us to extract all the access, email and web log files from the backups and save them from 2 years. There's a couple thousand ISPs in the US, spread this cost over the US industry, and you are looking at millions, perhaps tens of millions of dollars per year in additional storage and staff costs.

    As a final point, I have 3 kids. Anyone invites me to a meeting and opens it with slides of child porn and my one thought is they are sick sick sick. Most of the people "invited" to the meeting are probably parents, you can sell anti-child porn without showing it to us! What does it say about our AG that he supports torture and has a collection of child porn which he shows to people?
  • by davecb (6526) * on Friday June 02 2006, @10:38AM (#15453861) Homepage Journal
    Different jurisdictions have required by law that libraries simultaneously
    • retain per-patron loan information,
    • retain circulation information, and
    • destroy personally identifying per-patron loan information.

    This looks insane, but actually resolves rather easily.

    To oversimplify, libraries keep statistical information, so they can get their grants for books loaned per year, retain patron loan information until the book is either returned or paid for, and then destroy the link from book to patron.

    This is so common that all the vendors of library circulations systems "enforce" it in software, citing the need to use precious disk space for current records.

    In at least one case, we made it surprisingly difficult to reconstruct old patron-book links from backups.

    Consider this a word to the wise authors of ISP record-keeping systems.

    --dave