Social network monitoring: trust none | Dan Gillmor

A woman uses her BlackBerry at a shopping mall in Dubai, United Arab Emirates. In neighbouring Saudi Arabia, authorities blocked its instant messaging services. Photo: Reuters

Law enforcers in the UK and elsewhere come to life harsh realities: modern communication technologies provides activists all forms an easier way to organize and implement.

But even as Governments move to crack, as Jeff Jarvis notes, activists also teaches a lesson — not only those that we can support, such as the Egyptian revolutionaries, but also those whose actions leave us cold or angry, like many of the rioters and looters who have trashed so many parts of London and other British society over the last few days. In all cases they realized they did not begin to have confidence in technology companies, if they used communication tools.

Law enforcement dilemma was highlighted by the protesters BlackBerry use of mobile devices, which encrypts text communication. So the activists could organise on the fly with no apparent fear of being identified or have the decrypted in sufficient time for the police to reply to messages.

That led inevitably to calls, research in motion (RIM), maker of BlackBerry, to help police investigations, including the unmasking of users. What RIM has touted as a brilliant feature in his service, encryption capability was to be turned towards customers – like so many of the technologies, we routinely use can be turned against us by their operators.

RANDS motives in helping the police is understandable. It wants to be seen as a responsible corporate citizen, without a doubt; But even more likely, it fears the Government sanctions if it does not cooperate.

But this assistance will lead to a renewal of a long-lasting arms race. Protesters may not have realised that rand could (or would) decrypt their messages on its servers and extradite them to third parties. Some activists would react by seeking new and more secure ways to communicate.

And so will some companies when they better understand the wider implications. After all trust companies increasingly on mobile communication, so they should ask themselves if there is any reason to trust on the units and or the carriers move data around security.

The answer could be Yes; There is no technical reason why any particular conversation should not be secure. Some technologies, such as Skype, is said to be sure. Perhaps, but I have never fully trusted Skype, given his super-complex and proprietary system; and now that it is owned by Microsoft, I have confidence in the even smaller.

The safest method is security specialists call "Start-to-end encryption" – creating what amounts to a secure channel cannot be unscrambled in the middle of the network. When you interact with a bank, using its website, it assumes the competent security procedures, you use this method; in theory, nobody in the middle (for example, your internet service provider) see anything but gobbledygook when examining the data flowing through the networks.

This kind of thing is not widely implemented in simple text, email, social networks or most other digital communications. When you use the encrypted version of Facebook or Google + social-network, for example, is your data safe up to the point that when these companies ' servers; but they can save it and if ordered by a Government, supplying it.

The dangers of systems that enable "man in the Middle" monitoring attack, or is so obvious – among other things, they offer tantalising target really bad people-that we should see more widespread deployment of seriously secure communications. Individuals who have reason to fear government or criminal intruders will migrate to really ensure systems over time, if they aren't already there. It includes smart businesses, not just reviled protesters or criminal elements who are using technology to wrong. In the meantime, it is clear that no one can place absolute trust in those companies that currently provides the hardware and network.

The more we work to create truly secure communication, the more likely will be a reactionary responses that go beyond encouraging or forcing corporate cooperation with monitoring. In some places already, including the United Kingdom, the police require that people turn over personal encryption keys or go to jail, a scandalous violation of freedom of the invasive. At one point, can we expect the authorities will require restrictions on conversations they don't push to understand in real-time.

This is an old debate, in fact — one we trøde, settled in the United States in the 1990s when the Clinton Administration put forward a plan to require all cell phones include chips, which would make it possible for the Government to spy on all calls. Security experts then explained that the idea was both impractical and dangerous to actual security, and the plan was shelved.

It comes back in some form. World Governments are terrified of the idea of unbreakable communications. (Even visible them worry paranoid leaders; British Prime minister David Cameron's call for a ban on some types of discussions on social networks is a particularly ridiculous proposals.) Only two of them understand if I am right, it will soon be illegal to have a really private conversation unless you whispering in someone's ear in a language.

Never mind that it does not work, and that it will lead to less, not more, security for all. Is it you want to live in the world?

View the original article here

Google +: Tweet smell of success | Dan Gillmor

A Twitter user. Google + enjoy opening its platform to third-party developers that Twitter has. Photo: Jonathan Hordle/Rex features

It is a month ago Google launched its non-Facebook and non-Twitter social network. Despite some signs of a slowdown in growth – and some difficult issues around ease of use and terms of Service-there seems little doubt that Google has created something that could stand the test of time.

More than 20 million people have signed up with G + (my shorthand to Google +) already. There is a small fraction of the bases are using Facebook and Twitter, but for a month in existence, it is a notable figure (although one news report suggests that people use it less, on a per capita basis, than when they first joined).

I use it more. Although this service is still in "beta" status, the Google account, it's already compelling – like Facebook and Twitter have been compelling places to visit for college students (and many others) in recent years. Why? Former Chairman of MySpace (remember MySpace?) wrote in this week, "G + is about people and the community. It is a celebration of our existence … "

I would not go so far, but I would say that there is much to be desired about the service. As I noted in a post a day after G + launched, the term Google team a number of things that have been waiting competition – the need for more robust control and privacy for users who have been waiting for Facebook people, and a more user-friendly way to post short thoughts and have conversations around those who have been waiting for Twitter.

Some observers believe Twitter is more at risk than Facebook, and there can be true. I certainly spending less time with Twitter, but I would dream of quitting completely. Service 140-characters are still leagues better for hearing and sorting through "breaking news", which I placed in quotation marks, because so much of what is new on Twitter is unverified. In addition, third-party tools makes Twitter very useful for, among many other things, keep track of certain people links to what they consider important.

But Twitter has to acknowledge its weakness, and not only because G + is more flexible in the way it can be used. It took less than four weeks to have more followers on G + than I've accumulated on Twitter for more than four years. This is now not entirely shocking: Twitter started from a user base of zero, while Google + started from a base of hundreds of millions of Google search users. But the number of followers is just a number. What is most remarkable is the level of engagement I experience with the people who read what I write. It is not uncommon to see dozens of comments on short postings I publish on G +, one greater than answer generated on Twitter, where the conversation is much more difficult to follow in any case, the order of magnitude.

Google + need to copy the Twitter in a decisive manner: by opening its own data and conversations to third-party developers, because Web browsers is still not robust enough for the kind of thing many of us want to do with the service. For example it is easy enough to put a few people in circles – G + method for the creation of groups to which you want to follow – but organize them when you have more than a few are very clumsy with the current system.

Google + leaders also are struggling with problems of identity – not yours, but the identities of the users. In the first instance permitted Google people to sign up with pseudonyms and create accounts for organizations. This violated the terms of Service, but in several weeks, Google did not respond, and when it did, it turned to unilaterally from certain accounts. The company must allow both pseudonymous and organization accounts, but only the latter seems to be on the road, according to public opinions.

I am also disappointed by what I've learned about the service's security. Although communications are encrypted, was Google's answers to my questions about the Government spying on users are not encouraging. The company does not dispute that: one) it can record users ' text and video conversations, even when they are, in theory, shared by only two people; and (b)), it would give government agencies the ability to tap these conversations. Google has to abide by the law, and it has a track record of fire resisting exaggerated the Government's efforts to spy on us citizens.

The company may have created an architecture that is designed to ensure real security, but chose otherwise. Given its increasing problems with the Government, this is not much of a surprise, I suppose. I had hoped, however, Google + can be an excellent tool for dissidents in dictatorships, and it is a pity that it chose otherwise.

And as noted several weeks ago, I am not entirely sanguine, at least to put more of my communications to the Web sites I do not control. Google + has become an almost essential part of my day. I get great value out of it, but I would be careful not to let it be a dependency.

View the original article here