Saidit.net Canary #21
submitted 2 years ago by magnora7 from (self.SaiditCanary)
view the rest of the comments →
[–]Zapped 5 insightful - 2 fun5 insightful - 1 fun6 insightful - 1 fun6 insightful - 2 fun - 2 years ago (1 child)
Failure to publish a warrant canary may constitute contempt of court, but has never been forced as far as we know. The following excerpt also talks about the PGP key which u/Drewski talks about.
This is from the ProPrivacy.com website:
"Can a warrant canary be trusted? On the face of it, warrant canaries sound like a good idea. Many are not convinced, however, arguing that warrant canaries are little more that puff and smoke advertising with little to no real substance.
This is even more true outside the US, where people do not enjoy the explicit Constitutional rights afforded to US citizens. Australia is the first country to explicitly outlaw the use of warrant canaries, and other countries (such as the UK) are likely to follow soon.
As Brett Max Kaufman, a lawyer at the American Civil Liberties Union, told the BBC,
"If the government asked a company to leave its warrant canary up (and therefore communicate something false to the public), the company would have the right to challenge any gag (under the First Amendment... or under certain provisions of the USA Freedom Act) in court. But if a court upheld the government's request... the public would be none the wiser, at least for some time. Indeed, that would be the entire objective from the government's perspective."
An individual who was quick enough might be able to destroy all copies of their PGP key (which will be stored in a variety of places so it that can be verified) before being forced to hand it over. This would allow an eagle-eyed observer to notice the missing signature if the company is forced to keep updating its warrant canary. There is still no way, however, for customers to know whether or not a key has not been destroyed.
Secure web storage firm SpiderOak makes a brave attempt to address this problem by having its warrant canary digitally signed by 3 different high ranking individuals within the company (who are presumably located in different geographical locations). This would certainly make coercing (or bribing) all signers more difficult (or expensive), but provides no cast-iron guarantees that this is the case and that they can all be trusted.
Another example is the missing warrant canary in Reddit’s 2015 transparency report. Despite some initial concern among a small subsection of Redditors, business on the Reddit forums has also since continued as usual."
[–]JasonCarswell 1 insightful - 5 fun1 insightful - 4 fun2 insightful - 4 fun2 insightful - 5 fun - 2 years ago (0 children)
I feel like I should start making canaries for sites I haven't made yet before I'm forced to stop by my evil Canadian overlords.
use the following search parameters to narrow your results:
e.g. sub:pics site:imgur.com dog
sub:pics site:imgur.com dog
advanced search: by author, sub...
~3 users here now
SaiditCanary
view the rest of the comments →
[–]Zapped 5 insightful - 2 fun5 insightful - 1 fun6 insightful - 1 fun6 insightful - 2 fun - (1 child)
[–]JasonCarswell 1 insightful - 5 fun1 insightful - 4 fun2 insightful - 4 fun2 insightful - 5 fun - (0 children)