SpiderOak's Warrant Canary Died

guest · Aug 8, 2018

SpiderOak's Warrant Canary Died
August 08, 2018
https://www.schneier.com/blog/archives/2018/08/spideroaks_warr.html

BoingBoing has the story.

I have never quite trusted the idea of a warrant canary. But here it seems to have worked. (Presumably, if SpiderOak wanted to replace the warrant canary with a transparency report, they would have written something explaining their decision. To have it simply disappear is what we would expect if SpiderOak were being forced to comply with a US government request for personal data.)
Click to expand...

SpiderOak:
A Transparency Report is a Canary
August 06, 2018
https://spideroak.com/articles/a-transparency-report-is-a-canary/

Over the weekend there has been chatter on the internet about the change at SpiderOak from a Warrant Canary to a Transparency Report. We understand that some people are concerned that this is a signal that we have in some way been compromised. To be completely clear: Nothing has changed other than the way we report our interactions with the government from the first time we posted a canary in August 2014. [...]
Click to expand...

guest · Aug 9, 2018

mood said: ↑

SpiderOak's Warrant Canary Died
August 08, 2018
https://www.schneier.com/blog/archives/2018/08/spideroaks_warr.html
Click to expand...

EDITED TO ADD (8/9): SpiderOak has posted an explanation claiming that the warrant canary did not die -- it just changed.

That's obviously false, because it did die. And a change is the functional equivalent -- that's how they work. So either they have received a National Security Letter and now have to pretend they did not, or they completely misunderstood what a warrant canary is and how it works. No one knows.

I have never fully trusted warrant canaries -- this EFF post explains why -- and this is an illustration.
Click to expand...

mirimir · Aug 9, 2018

Yeah, you really can't trust anyone And so you gotta deal with it. By using OPSEC that doesn't rely on trusting anyone

So for SpiderOak, that means encrypting stuff locally, independently of their software. And accessing SpiderOak via nested VPN chains and Tor.

Log in or Sign up

SpiderOak's Warrant Canary Died

guest Guest

guest Guest

mirimir Registered Member

Log in or Sign up

SpiderOak's Warrant Canary Died

guest Guest

guest Guest

mirimir Registered Member

Useful Searches