Yahoo built specialized software to spy on users for the NSA. (extremetech).
Ever since the Snowden leaks in 2013, there’s been an ongoing debate over the nature of state surveillance. One of the more interesting things we learned in 2013 was that certain companies had fought the NSA tooth and nail — and Yahoo had led the charge.
When the company was ordered to produce user data in 2007, it challenged the legality of that order at the Foreign Intelligence Surveillance Court (FISC, also sometimes known as the FISA Court). When its challenge failed, it appealed the case to the Foreign Intelligence Surveillance Court of Review. While it also lost on appeal, the company earned accolades for its willingness to stand up for user privacy, even though all of the court proceedings and decisions were classified at the time and couldn’t be milked as a PR opportunity.
If a new report from Reuters is accurate, the Yahoo that went to bat to defend its users is a dim and distant memory today. The news agency reports that last year, Yahoo built a custom search engine to allow the government to search its entire database of email for keywords and terms provided by US intelligence agencies. The decision was apparently highly controversial within Yahoo and reportedly led to the departure of the company’s Chief Information Security Officer, Alex Stamos, who now works for Facebook.
Sources close to Yahoo have previously stated the company was reluctant to upgrade its email security or adopt end-to-end encryption out of fear that any disruption to its service would drive customers away to other email providers.
This new information suggests this may have been a strictly secondary concern. We already know that the federal government pays for access to customer databases; the Snowden leaks showed that the NSA paid AT&T $190 million in 2011.
We don’t know what kind of arrangement the government struck with Yahoo, but it’s not hard to connect the dots here.
Mayer’s company has been in trouble for years, with declining revenue and poor user engagement. The Yahoo that went out on a limb to defend its customers in 2007 – 2008 and decried the government’s collection of millions of webcam images through Yahoo’s own infrastructure is a far cry from the Yahoo of 2016, and Mayer may well have taken the deal as a way to generate additional revenue.
Prior to this, federal agencies have had the right to demand information on specific users. But no other company is known to have built a database that automatically scanned all incoming mail and provided that information to a federal agency, or allowed real-time analysis based on specific criteria (called a selector).
“I’ve never seen that, a wiretap in real time on a ‘selector,'” Albert Gidari, a lawyer who represented phone and Internet companies on surveillance issues for 20 years before moving to Stanford University this year, told Reuters. “A selector refers to a type of search term used to zero in on specific information. It would be really difficult for a provider to do that.”
Yahoo’s sole comment on the matter was terse: “Yahoo is a law abiding company, and complies with the laws of the United States.” Hmmm.........'We were just following orders' ....'Wir folgen nur den Befehlen'. Read the full story here.