How European start-ups can make a business out of the US shut-down of privacy by the NSA, Robert Knapp, Co-founder and CEO, CyberGhost, Germany-Romania
8. The NSA Data Center in Utah
$1.7 billion construction costs
$2 billion for hardware and software
65 megawatts ($ 40 million a year)
6.500 tons of water a day
140.000 square meter of space
3-12 exabytes storage capacity
9. The war on terrorism
27.11.2013: NSA spied during the 2010 G8 and G20 summit
in Toronto, closely co-ordinated with Canadian partner CSEC
25.10.2013: NSA monitored calls of 35 world leaders after US
officials handed over contacts
20.09.2013: GCHQ hacks Belgian Provider Belgacom who
servs the EU Parliament, the EU Commission and the EU
Council
01.07.2013: NSA hides bugging devices in the embassies of
France, Italy and Greece in the USA to surveil diplomats
10. The worldwide surveillance is a billion
dollar business for US-corporations
„Our customers and stakeholders can rely on us to provide
timely, high quality products and services…“
„…because we never stop innovating and improving, and we
never give up!“
11. Security versus Privacy
Obama said on the 7. June 2013:
„I think it's important to recognize that you can't have 100
percent security, and also then have 100 percent privacy and
zero inconvenience. We're going to have to make some
choices as a society.”
12. Reactions on the NSA-scandal
I thought as much! That‘s no surpise what they do!
I don‘t mind. I have nothing to hide.
Facebook is surveilled? – Your fault, when you use it!
I know – but we can‘t do anything about it!
13. What was the role of EU secret services
during the NSA-scandal? – 4 versions:
1. They supported it!
2. They knew about it, but didn‘t support it!
3. They knew about it, but didn‘t inform the
government!
4. They didn‘t know about it!
14. Learnings:
1. The NSA & co. stepped all over the constitution
Todo: Unfortunately, AFTER reforms, we need a consolidation of EU counter-
intelligence services
2. The technical paranoia of nerds around surveillance is reality: Surveillance by
default!
Todo: Build European alternatives!
3. Every mobile phone is until further notice a bugging device. Every email and
online chat is until further notice a public conversation
Todo: We need continuous encryption of all relevant communication on the side
of hardware, software and provider. Encryption has to be the standard
15. Take action
Build large and suistainable
businesses around privacy and data
security…
…and kick some Silicon Valley asses!
Henry Lewis Stimson (September 21, 1867 – October 20, 1950) was an American statesman, lawyer and Republican Party politician and spokesman on foreign policy.
Headquarters for the National Security Agency is located at Fort George G. Meade, Maryland. It contains 280,000 m2 of floor space; Bamford (author of Body of Secrets) said that the U.S. Capitol "could easily fit inside it four times over.“ The United States Capitol is the meeting place of the U.S. Congress, the legislature of the U.S. federal government.
The Five Eyes: The have just the legal right to monitor foreigners. But I am a foreigner, you are a foreigner. In fact 96% of the earth population are foreigners.
Partners: „"We have been assisting the BND in making the case for reform or reinterpretation of the very restrictive interception legislation in Germany.”
The overall sureveilance of the internet is just a synonym for the overall surveillance of the society.
Nineteen Eighty-Four was written by George Orwell published in 1949. The novel is set in Airstrip One (formerly known as Great Britain), a province of the superstate Oceania in a world of perpetual war, omnipresent government surveillance, and public mind control!
We are for example brutally honest with search engines. [Ask the audience who would like to share his search history with the public] You always find something embarrasing or incriminating. We deliver all the data for free and they just collect them.
Surveillance isnt noticeable. It doesnt make itself felt in our daily routine. Main problem for us to take action!
Since 9/11 secret services all over the world built a parallel universe, a so called “deep state”, without any public control that started to have a mind-blowing life of its own. Protected by our governments, we deal right now with a secret, unregulated and antidemocratic monster.
Translated to the world population, they have enough capacity to store the data of every single one of us for practically forever.
9/11 was a switch point in the history.
These secret services didn’t make the world a better or more secure place. There are no signs for that. All the official statements and numbers about crimes and terrorism they allegedly avoided turned out so far as a flop.
The risks of dying because of terrorism are against zero. The risk of getting kidnapped and deported by the US Secret Service is significant higher.
The NYT published End of November 2013 a NSA document from 2012. Headline „SIGINT Strategy“. It contains irritating words like „Vision“, „Mission“ and „Values“
Of all things in the passus „Values“ there is a phrase that upsets, alarms but explains a lot: [phrase]
Customers? Products? Since when does a secret service have customers and products? Not only that there is evidence for the underrated dimension of industrial espionage, it is worse… (self-picture)
Since the privatisation of the US prison industry in the beginning of the 70th, the amount of prisoners octuplicated from 300k to 2,4mio. […] Means the civil society pays with their tax-money for the limitation of their freedom!
Edward Snowden itself was since 2009 no longer a cicil servant but an employee of private companies like Dell and Booz Allen Hamilton.
The NSA-scandal is a profit driven attack on human rights. And the attack will not stopp by itself. The phrase has a second part […]
Without any doubt: this is the most scary exclamation mark of the 21 century!
I am questioning that we have to balance security and privacy!
A civil rights approach must be in the center of everything we do, if we want to be a free and liberal society. There is nothing to balance. Civil rights are invulnerable rights and there must be a very good reason to restrict them in a single case.
If the polices tries to prevent a school schooting, trying to catch a muder and if they have leads, suspects or proofs – then it is perfectly fine to offend ones privacy. But they surveill people they know that they are innocent!
I thought as much: Do not let anybody tell you that we already knew – because we did not know.
I dont mind: With zero percent irony!!!! Let me know, if you are one of the people who say so, because then i would never share a secret with you…
But we shouldn’t forget that the confidentiality of conversations between lovers, members of a family or friends is the basis for building sustainable relationships. Being watched while we talk about our personal issues turns us from being individuals to being what the watchers expect us to be.
The possibility to meet in a private protected space is a basic requirement for the work of labor union representatives, journalists, lawyers, political activists and many more. This people are the backbone of any free society. Watching people while they organize themself is turning everything we believe in upside down. Governments don’t have to control their people, people have to control their governments. That’s the natural order of things, not the other way around.
Moreover: confidential talks are the fundament of successful business operations. What they do right now is simply called “industrial espionage”. It’s a drawback for the development of an open market.
Facebook is surveilled: [Ask the ausdience about the last 5 tech products they used] Fb, Twitter, Windows, Android, Google, Dropbox, Skydrive….
1. They supportet them! Means: They have been involved in commiting a crime.
2. They knew about it, but did‘nt support it! Means: They should have informed the national governments. But if they said nothing, the governments did harm not to protect their citizens.
3. They knew about it, but did‘nt inform the government! Means: They did a serious violation of their obligations.
4. They didnt know about it! Means: They are totally incapable and can be suspended.
A no-spy agreement with the USA will not help. And as industrial espionage is one of the main tasks of secret services, we need also pressure and contracts in that area.
We dont live in a surveillance state. We live in a surveillance world: called Internet! The big internet service provider may make our life easier – but at the price of total mass surveillance.
They are trying to sabotage right now encryption algorithm on purpose by implementing backdoors. That means you take an encryption algorythm that is so secure that it would take for all computers in this planet millions of years to just decrypt one file and you weaken it on purpose. Same like giving your local police station a key to your house…
I think in our case, the fact that we’re located in Romania represents a valuable asset. The European Union offers a higher standard in data security laws than the US, and it became less of a secret that in this field, Europe is structurally ahead of the USA. We could take this as a good opportunity to develop businesses around privacy and data security and kick some Silicon Valley asses. CyberGhost is right now on the way to do exactly that by building a big, sustainable privacy company.
If we have a look over the ocean right now, there are two current shutdowns of USA privacy companies due to the US National Security Agency’s pressure of installing backdoors that allow the government to access their data. First Lavabit, an email service provider, last week CryptoSeal, a VPN provider decided to close down rather than risk exposure to government monitoring. The message is pretty clear: Encryption technology from US-based companies is not to trust and the USA are not the place to run privacy-based services.
In 2009, the Romanian Constitutional Court decided against a new data retention law which asked for the storage from ISPs of data like telephone calls made and received, emails sent and received and websites visited. It declared the whole law as unconstitutional because it breaches the right to correspondence and to privacy, considering that “taking surveillance measures without adequate and sufficient safeguards can lead to destroying democracy on the ground of defending it”.
So based on the high data security standards of the European Union and the legal situation in Romania, we made a business out of privacy. We don’t collect data like everybody in the Valley is. While others make money with big data, we make money with no data. Kinda cool, isn’t it?