Feds tell Web firms to turn over user account passwords

It seems the Feds can be more direct if they want your data. They can demand hashed passwords from companies that you have an account with. Google have denied ever giving a hashed password to the government.

" The U.S. government has demanded that major Internet companies divulge users' stored passwords, according to two industry sources familiar with these orders, which represent an escalation in surveillance techniques that has not previously been disclosed.

If the government is able to determine a person's password, which is typically stored in encrypted form, the credential could be used to log in to an account to peruse confidential correspondence or even impersonate the user. Obtaining it also would aid in deciphering encrypted devices in situations where passwords are reused."

If true this is a small escalation of the surveillance problem. Being able to impersonate someone seems pretty dodgy. There appears to be some question over whether they have the legal right to demand this information. Tech companies have pushed back from these demands, but I am sure the Feds will wait for an appropriate opportunity to persuade compliance.

something else to tell your congress man/woman

Link news.cnet.com...

um, this has been well documented here www.abovetopsecret.com...
you don't even need to use the search function, just hit the 'new topics' button, you'll see this discussion thread there in the second column of newest flags.

reply to post by bladdersweat


Apologies.

Thank you.