Monday, October 10, 2011

So The FBI Can Just Take A Copy Of All Instapaper User Data With No Recourse?

LulzSec find, taking into account the collateral damage was some popular sites to different servers. One of the servers took a backup server for the service Instapaper popular that many people use to save Web pages and other information. While Arment Instapaper, Marco said that the FBI returned to the server fast enough, it is possible that the FBI now has a copy of the data Instapaper almost everyone, which could reveal a lot about some people.


Perhaps most important, however, the FBI and is probably in possession of a full copy of the database was Instapaper that Tuesday morning, including the complete list of users and does not remove the markers. ("Archive" markers are not deleted. "Deleted" markers are difficult to remove from the database immediately.)



salt stores Instapaper does SHA-1 hash words password, so they are relatively safe. However, email addresses are stored in the clear because it saves the contents of each marker saved by the marker.

The server also contains a complete copy of the code base Instapaper web, but not the implementation of IOS code base.


Linked
Facebook, Twitter, Tumblr, or simply store their respective OAuth key accounts. Evernote accounts linked e-mail storage only in the sense of Evernote. Display panel of linked accounts, however, to store user names and passwords encrypted in the text, and encryption keys are present in the source code of the website on the server.


While the FBI illegal possession of almost all data and Instapaper a moderate portion of their code base, and as far as I know is completely out my control.
Marco is very reasonable bothered by the hosting company, DigitalOne, never contacted about it (before or after the raid, including the blog, days later). Frankly, it's unfair. For an ISP just do not tell their customers that the server was taken? Marco is also upset that DigitalOne did nothing to stop the seizure. Now, on both accounts, you can DigitalOne hands were tied. Not much you can really do if the FBI comes with an attachment order, even if it's super wide. And we saw the FBI gag orders ISPs use to talk about what has been captured.
But really, it just goes to show, once again, problems with attacks by the government without prior adversarial hearing. I understand they are looking for evidence may disappear, but the possibility of serious collateral damage, such as potentially serious violations of privacy seems to be very high. I'm not sure there's something I could do, but certainly interesting if it would suit any client or Instapaper Marco decided to sue the federal government over the attacks.

0 comments:

Blog Archive

Blog Archive

About Me