The Snowden PRISM revelations showed that all the major tech companies work with the US government and its spy agencies. Can't trust anyone.

▲

dpark 6 hours ago | parent [-]

Snowden’s PRISM leak seemed largely to be an overhyped internal PowerPoint. The claim was that they have access to data from Apple, Google, Microsoft, et al. But I’ve never seen any evidence that these companies were giving the government access to their servers or some general data pipe. But rather than they were cooperating with legally served warrants.

Is there some actual evidence of collusion with the big tech companies? Because I haven’t seen it. (Telecoms I’ve heard were and are much more integrated.)

▲

nostrademons 6 hours ago | parent [-]

PRISM was FISA, and was overhyped. There's a known (and legal) procedure for law enforcement agencies to go to major tech companies with a warrant and say "We need all the information for the account holder of xyz@gmail.com, because they are the subject of an active investigation." There are some concerns about how FISA courts are just rubber-stamps and don't actually read or challenge the warrants for validity, but at least nominally, the procedure is above-board and legal.

The next Snowden disclosure (MUSCULAR) was significantly more concerning though. It was that the NSA was tapping the internal fiber of Big Tech companies. I was at Google when the Snowden disclosures broke, and read the SRE postmortem. They found 2 fiber cuts underneath the English Channel, an hour apart, lining up with the start of the program as disclosed by Snowden. My inference is that the NSA paid off MI6 to send a submarine commando team to cut and tap the fiber of an American company, without consent, and then all the data was shared through Five-Eyes reciprocal data sharing agreements. Google leadership was hopping mad after this, but it would've been impolitic to bring it to the public. They started encrypting all internal traffic soon after, assuming that their internal network was compromised by various nation-state actors, which had some unfortunate effects on their internal culture of openness.

▲

SoftTalker 6 hours ago | parent [-]

Good practice in general to not trust your internal network.

The head security guy where I worked 20 years ago was already saying this.

	▲	mr_toad 3 hours ago \| parent [-]
		I have to say your head security guy was way ahead of the curve. Anywhere I’ve worked it was firewall everything and use VPNs, and most places still do this. SFTP was in the too hard basket. And of course that led to people emailing files around as standard practice (and the only option) and inevitably some got emailed to the wrong recipients.