There should be a way to encrypt things when the server is off and then have a Killswitch for situations like this. Idk if it'd be overkill in this case thougj
this post was submitted on 25 Jul 2023
6 points (87.5% liked)
sh.itjust.works Main Community
7485 readers
1 users here now
Home of the sh.itjust.works instance.
founded 1 year ago
MODERATORS
Luks is a thing. No reason it can’t be done on the server though things like patching won’t be automated.
Kill switch is well, not as easy. But possible.
That said. The government would just lampoon you in the media as some child porn hoster or whatever they want and taint the jury pool. And probably charge you with obstruction and a host of other things if you didn’t decrypt the server.
There is case law where refusing a description password isn’t covered by the 4th or 5th amendment so they could just Guantanamo your ass as pressure.
TL:DR - there’s no established case law that protects you from withholding the encryption key from government and there’s conflicting rulings in the current US districts. In some places you can be held indefinitely. Unsure what occurs if you can’t remember the key though.
Yeah, I want to know what these unrelated charges were for before I get up in arms about a nothing burger. Sound sus as hell.
It's irrelevant to the EFF's point here, because a database backup containing user data was seized by the FBI. Those users almost certainly had nothing to do with whatever the charges were.
Is there anything instance owners can do? Are there things you can do with your server to get better security for your users (and yourself)
What unrelated charges? You can't just write some alarmist shit and then not go into any detail as to what prompted the event.
- Step 1: Don't host in the USA
- Step 2: Don't host in a USA puppet ally
Probably good advice but not exactly relevant. The person was hosting a server in their house and got raided for unrelated reasons and all their electronics were seized. Had they hosted in a data center or at least had off premises back ups, this wouldn’t have happened.
I thought one of the points of the fediverse was to not be centralized in data centers that are more easily controlled. It's supposedly supposed to be easy and relatively cheap to spin up your own instance on your own hardware. Just outsourcing to a data center I think goes against what the fediverse promised.
Fediverse does not use magic. They are bound cabels and cpu.
In average any datacenter wil have a better connection to everywhere else.
Like anything, it’s a trade off. The fact that you can do whatever you want is the good thing. As long as everyone isn’t in the same datacenter, it’s fine. There’s datacenters all over the planet.
If you’re self hosting, you can mitigate the risks by having some kind of contingency plan though. Just having backups in another location would have made it possible to get back up after the interruption. Now, this instance is probably just screwed.
Data centers aren’t inherently bad and neither is self hosting. But there’s different risks that need to be planned for.
As an American, feel free to just mute us. Watch the slow motion collapse from a distance.
I have dreamed about the ability to do this for so long. Cut US communications off and prohibit travel in/out. You can come out in 100 years when you're ready to play nice.
Lemmy: please do no use the term "Chinese shills" as this is sinophobic.
Also Lemmy:
If this happened, the first Americans to land in Paris in 100 years time would be greeted with "Privyet".
Unfortunately, good old Uncle Sam may take offense at that, and his six-shooter contains somewhere on the order of a few thousand thermonuclear weapons, which he's already used, twice. He's also not afraid of ignoring national sovereignty and borders when it's in his interests.
Not saying this is a good thing by any means, and sorry for raining on your parade, but the situation is what it is. Hopefully sometime in the next few decades, if not sooner, some kind of change for the better can be made. Who knows?
The US again continuing to flex its muscles that it truly does own and control half the world, as it so affectionately reminds us daily.
It is absolutely hysterical how bad authoritarianism has engulfed all modern governments. This isn’t remotely a left vs right thing or a US thing, almost all modern governments have become this way.
The person referenced in the article was raided for completely unrelated charges. It just happened they took the server and backups as part of the raid. Had they hosted off-site or kept the backups off-site, the damage would have been minimal. This article brings up a good point, but it's not the nefariousness that the title implies.
But this is the strength of federation. One tiny bit of the fediverse was taken down. This did not affect the rest of it. There will always be bad actors, whether the cops, the administrators of a particular instance or the owners of a mega-forum like twitter or reddit. With a decentralized system the damage is localized and minimized.
It wasn't even taken down. The dude was raided probably because of some electronic crime, they took his electronics to get evidence. Completely reasonable.
On their backup hard drive happened to be a backup a mastodon instance, so by extension they got that too. The backed up data, not the server.
It's not some nefarious collusion, it's completely reasonable actions.
Now whether the backup should have been stored unencrypted on a hard drive at their house? Well that's a server admin problem not an FBI issue, but the comments here come across like the FBI shouldn't have done what they did.
But I'd argue that you should not store anything on Mastodon where it would be an issue if it became public. It's basic 90s internet safety. We know that the data isn't encrypted (the same for Lemmy), don't go sharing passwords on a site designed for public sharing.
But I’d argue that you should not store anything on Mastodon where it would be an issue if it became public.
One of the first things new fediverse users should be told is that the fediverse is not the darknet.
Cops took what wasn't needed and haven't returned it (that we know of).
I'd say that's about as nefarious as it gets.
How do we know it wasn't needed? What were the charges?
How do you know that it was? Were you involved in this case enough to know something the rest of us dont? Or are you just a bystander playing devil's advocate?
EDIT: since I apparently cant reply to your comment below, you cant just claim that the hardware was involved in a crime by "just asking questions" then accuse me of "stirring up shit" after calling you out on making unsubstantiated claims. If you make a claim it is YOUR job to defend that claim. Not everyone elses' job to disprove your assertion.
Were you involved enough to know that it wasn't? There's devil's advocate, and then there's devil's PR. Why are you trying so hard to stir up shit where none exists? It's not wrong to want more information before going on a paranoia bender.
-
I'm not the person you can't reply to below.
-
I was literally just asking. If the warrant was in relation to a charge that they were hosting CSAM, then yes the seizure of the server would be appropriate.
Any time they take all electronics, there's bound to be something there that wasn't needed. It's overly broad.
And that's often because what is needed isn't in plain site, so it makes sense to just grab everything and take it back to their lab and have experienced techs go over it rather than having the site team sit on the computers going through files to find what they need.
The US in living its own Brezhnev Era
I’d argue a great majority of the world has entered this era now, and consider it a standard. I hate it. They took 1984 and used it as an instruction manual.