Site Sponsor:

mcafee_logo.gif
line

Now Available:

Featured Resource:

line

Newsletter

Email Address:


line

Ask the Expert

Have a question for our resident expert? Email your questions to Dan or post a comment to the blog.

« Human Factors and Improving Application Security | Main | MPAA Toolkit Leaves Schools Vulnerable »

Skype Surveillance

The German police are having trouble monitoring Skype conversations of suspected criminals because of encryption. There has always been a tension between the use of encryption to protect privacy and the need for governments to track illegal activities. Striking the right balance is culture-specific. What works in the U.S., for example, may not work in Germany which has strict anti-surveillance laws. Gizmodo reports:

"We can't decipher it," says Joerg Ziercke, President of the BKA, Germany's Federal Police Office. "That's why we're talking about source telecommunication surveillance — that is, getting to the source before encryption or after it's been decrypted." He does not, however, advocate that the Talinn-based internet company gave law enforcers its encryption keys.

Getting to the source means bugging computers with Trojans. I wonder if case law governing bugging phones will carry over to VoIP, at least in the U.S. Public access computers are analogous to public pay phones, every conversation, not just suspects, could be monitored. I can't imagine that would stand up in court but if anyone is familiar with relevant case law or legislation on this, I'd be interested to hear about it.

TrackBack

TrackBack URL for this entry:
http://www.realtime-websecurity.com/type/mt-tb.cgi/534

Post a comment

(All comments are approved by site leader before appearing here. Thanks for commenting!)

line

Dan Sullivan's Bio:

Dan Sullivan is a systems architect with 20 years of IT experience that includes engagements in enterprise security, application design, and systems architecture. His experience includes a broad range of industries, including financial services, manufacturing, government, retail, gas and oil production, power generation, and education. Dan’s security-related project work has ranged from requirements analysis for enterprise information security to designing and implementing security for database applications and enterprise portals. Dan has written about information security and other enterprise information management topics for Business Security Advisor, DM Review, Intelligent Enterprise, and E-Business Advisor. You can contact Dan at: dan_sullivan@realtimepublishers.net