Wednesday, February 3, 2010

Surveillance Can't Make Us Secure

by Julian Sanchez

In a major speech on Internet freedom last week, Secretary of State Hillary Clinton urged American tech companies to "take a proactive role in challenging foreign governments' demands for censorship and surveillance." Her call to action followed a series of dazzlingly sophisticated cyberattacks against online giant Google and more than thirty other major technology companies, believed to originate in the People's Republic of China. Few observers have found the Chinese government's staunch denials of involvement persuasive — but the attacks should also spur our own government to review the ways our burgeoning surveillance state has made us more vulnerable.

The Google hackers appear to have been interested in, among other things, gathering information about Chinese dissidents and human rights activists — and they evidently succeeded in obtaining account information and e-mail subject lines for a number of Gmail users. While Google is understandably reluctant to go into detail about the mechanics of the breach, a source at the company told ComputerWorld "they apparently were able to access a system used to help Google comply with [US] search warrants by providing data on Google users." In other words, a portal set up to help the American government catch criminals may have proved just as handy at helping the Chinese government find dissidents.

In a way, the hackers' strategy makes perfect sense. Communications networks are generally designed to restrict outside access to their users' private information. But the goal of government surveillance is to create a breach-by-design, a deliberate backdoor into otherwise carefully secured systems. The appeal to an intruder is obvious: Why waste time with retail hacking of many individual targets when you can break into the network itself and spy wholesale? READ MORE

No comments:

Post a Comment