Quantcast
Channel: CodeSection,代码区,网络安全 - CodeSec
Viewing all articles
Browse latest Browse all 12749

Yahoo! tries! to! shoot! down! email! backdoor! claim! 24! hours! after! refusin ...

$
0
0

Yahoo! tries! to! shoot! down! email! backdoor! claim! 24! hours! after! refusin ...

Almost 24 hours after refusing to deny allegations that it allowed US intelligence free reign on its email systems, Yahoo ! has issued a carefully worded non-denial.

"The article is misleading," the statement reads. "We narrowly interpret every government request for user data to minimize disclosure. The mail scanning described in the article does not exist on our systems."

The only declarative statement in there is that the email scanning system described as a system that would allow keyword searches of Yahoo ! users' incoming mails does not exist. That's reassuring, although the statement doesn't say if it ever did exist, or if something very similar to it was implemented.

The use of the word "misleading" is also interesting. "False" would be a much more explicit word to use, since misleading could cover a whole multitude of sins, and Yahoo ! doesn't cite anything specific that Reuters, which yesterday broke the news, got wrong.

Certainly Yahoo ! 's statement stands in stark contrast to those of Google and Facebook, both of whom weredelightfully blunt about the matter.

Meanwhile, the head of the NSA, Admiral Michael Rogers, spoke at the Cambridge Cyber Summit on Wednesday and was asked about the Yahoo ! case. Rogers called the article "a bit speculative," CNBC reports , adding that getting blanket access to emails "would be illegal."

"We don't do that. And no court would grant us the authority to do that. We have to make a specific cast. And what the court grants is specific authority for a specific period of time for a specific purpose."

Again, the statement is interesting. Rogers set up getting blanket access to all emails as a straw man, then proceeded to work on that premise. And doing individual keyword searches in the manner described in the article could be construed as a "specific cast."

This is, after all, the intelligence community we're talking about, and they have their own meanings for words. For example, the Director of National Intelligence, James Clapper, denied that the intelligence service was collecting large amounts of data on American citizens just a few months before Edward Snowden released documents showing just that.

Youtube Video

Clapperexplained later that, to the intelligence services, the word "collect" means to gather information and then study it. Simply gathering the data in the first place isn't called "collection" unless an analyst has looked at it.

So where does Yahoo ! 's statement leave us? Well, still pretty much in the dark, pending a full review of the article pointing out what it got wrong, and possibly what it got right too.

One person who could really help sort this mess out is Yahoo ! 's former security chief, Alex Stamos. In the security field, Stamos' integrity is legendary and he would have had to have known about this indeed the original report suggests he resigned over the matter. Sadly, a spokesman told us he had no comment on the matter.


Viewing all articles
Browse latest Browse all 12749

Trending Articles