Bitcoin Forum
November 07, 2024, 09:22:54 AM *
News: Latest Bitcoin Core release: 28.0 [Torrent]
 
   Home   Help Search Login Register More  
Pages: [1]
  Print  
Author Topic: Lavabit— A best case outcome for blockchain.info?  (Read 2072 times)
gmaxwell (OP)
Staff
Legendary
*
Offline Offline

Activity: 4270
Merit: 8805



View Profile WWW
August 09, 2013, 01:17:54 AM
Last edit: August 09, 2013, 01:33:25 AM by gmaxwell
 #1

Lavabit was a web-based email service which kept all email encrypted a key protected by the user's password to how mywallet works. Today lavabit shut down without any advance notice. Details are scarce, but they are claiming that they were being ordered by the us government to do things which they considered wrong. Many believe they were ordered to intercept users (such as Edward Snowden) passwords, or send specific users zero-day exploit code, and chose to shut down rather than comply with the order.

Many other services would and have just simply captured the passwords and gone on with life,  many many more are not designed in such a way that they could even resist such an order. The operators of lavabit appear to have taken a remarkably principled position.

Eventually it seems likely to be that hosted wallet services like blockchain.info's my wallet will encounter a similar interaction with the relevant authorities intent on seizing some funds.

It's possible that they could just comply completely, perhaps they could shutdown like lavabit rather than attempt to betray their user's trust, or maybe there is some other possibility.

What would be a best case outcome there?


Edit:And now silentmail has preemptively shut down rather than be placed in the same position.
nobbynobbynoob
Hero Member
*****
Offline Offline

Activity: 784
Merit: 1000


Annuit cœptis humanae libertas


View Profile WWW
August 09, 2013, 01:30:22 AM
 #2

That more people wake up to the inherent danger of centrally-based organizations that tyrannical states dislike. We should use our own local wallets/nodes as much as possible. Likewise, Bitmessage sets the standard for encrypted decentralized communications along the Bitcoin model.

That's not to say that centralized hosts such as Lavabit or blockchain.info never have their place. But we should be vigilant and wary of the counterparty risks should we decide to use them.

Earn Free Bitcoins!   Earn bitcoin via BitcoinGet
BTC tip: 1PKkvuwC24Vqjv9odigXs1QVzE66jEJqmb (if <200 µBTC, please donate to charity)
LTC tip: LRqXaNdF79QHvhPpS5AZdEJZnLiNnAkJvq (if <Ł0,05, please donate to charity)
AMuppInTime
Donator
Sr. Member
*
Offline Offline

Activity: 290
Merit: 250



View Profile
August 09, 2013, 01:43:57 AM
 #3

This is an issue that needs to be addressed - wallet providers are an easy target for anyone trying to take Bitcoin down, yet few know how to properly generate a paper wallet & even fewer practice cold storage... Ideas?

danieldaniel
Hero Member
*****
Offline Offline

Activity: 854
Merit: 1000


View Profile
August 09, 2013, 03:02:40 AM
 #4

To be honest, I think what happened with Lavabit IS the best case outcome... At least, this way, we don't continue using the service while they are giving information to the Government.

eldentyrell
Donator
Legendary
*
Offline Offline

Activity: 980
Merit: 1004


felonious vagrancy, personified


View Profile WWW
August 11, 2013, 08:37:17 AM
 #5

Eventually it seems likely to be that hosted wallet services like blockchain.info's my wallet will encounter a similar interaction with the relevant authorities intent on seizing some funds.

No need.  Bitpay and all the bitcoin exchanges surrendered their SSL keys to cloudflare months ago.  NSA isn't going to waste their time on the actual websites.

Mtgox appears to have recently switched to Akamai.  I'm not sure how they handle SSL, but it can't possibly be as reckless as what cloudflare is doing.

The printing press heralded the end of the Dark Ages and made the Enlightenment possible, but it took another three centuries before any country managed to put freedom of the press beyond the reach of legislators.  So it may take a while before cryptocurrencies are free of the AML-NSA-KYC surveillance plague.
🏰 TradeFortress 🏰
Bitcoin Veteran
VIP
Legendary
*
Offline Offline

Activity: 1316
Merit: 1043

👻


View Profile
August 11, 2013, 08:39:39 AM
 #6

Eventually it seems likely to be that hosted wallet services like blockchain.info's my wallet will encounter a similar interaction with the relevant authorities intent on seizing some funds.

No need.  Bitpay and all the bitcoin exchanges surrendered their SSL keys to cloudflare months ago.  NSA isn't going to waste their time on the actual websites.

Mtgox appears to have recently switched to Akamai.  I'm not sure how they handle SSL, but it can't possibly be as reckless as what cloudflare is doing.
Right. Don't trust cloudflare sites if you think the NSA is interested.
eldentyrell
Donator
Legendary
*
Offline Offline

Activity: 980
Merit: 1004


felonious vagrancy, personified


View Profile WWW
August 11, 2013, 08:57:51 AM
 #7

Right. Don't trust cloudflare sites if you think the NSA is interested.

Or if you think anyone they offer parallel construction to is interested.

The printing press heralded the end of the Dark Ages and made the Enlightenment possible, but it took another three centuries before any country managed to put freedom of the press beyond the reach of legislators.  So it may take a while before cryptocurrencies are free of the AML-NSA-KYC surveillance plague.
justusranvier
Legendary
*
Offline Offline

Activity: 1400
Merit: 1013



View Profile
August 15, 2013, 06:33:20 PM
 #8

http://bitcoinism.blogspot.com/2013/08/trust-no-us-companies-with-future-of.html
Pages: [1]
  Print  
 
Jump to:  

Powered by MySQL Powered by PHP Powered by SMF 1.1.19 | SMF © 2006-2009, Simple Machines Valid XHTML 1.0! Valid CSS!