Oct. 26, 2014   54°F   School Closings
Listen Live WCPN / WCLV
ideastream
Mission 4
Values 1
Values 2
Values 3
Vision 3
Vision 4
Vision 5
Values 4
Values 5
Values 6
Vision 1
Vision 2

Choose a station:

90.3 WCPN
WCLV 104.9
WVIZ/PBS

Choose a station:

90.3 WCPN
WCLV 104.9
WVIZ/PBS

How Snowden's Email Provider Tried To Foil The FBI Using Tiny Font

Posted: October 3, 2013

Share on Facebook Share Share on Twitter Tweet

Newly unsealed documents detail the usually secret process of a national security request made to technology companies. It also details a fascinating fight against a government request.

A scan of the printed SSL key handed over by Lavabit owner Ladar Levison.

A scan of the printed SSL key handed over by Lavabit owner Ladar Levison.

Right before Edward Snowden told the world it was he who had leaked information about some of the government's most secret surveillance programs, the FBI was hot on his trail.

One of the places agents looked was Lavabit, the company that hosted Snowden's email account. As we told you back in August, Lavabit shuttered its service, saying it could not say why because a government gag order was issued.

The insinuation was clear: Lavabit had been served with a so-called national security letter, in which the FBI demands information about a user, but the service provider isn't allowed to tell the user or anyone else that it was even asked about this.

On Wednesday, the documents filed (pdf) with the United States District Court for the Eastern District of Virginia were unsealed. Even though Snowden's name is redacted, we can surmise this concerns him because of the charges against the person and the timing of the investigation. Perhaps more importantly, however, the documents give us detail of what's usually a secret process. And it illuminates how Ladar Levison, Lavabit's owner, tried to fight the government's request for information on one of his users and then a subsequent request for an encryption key that would allow agents to read the communication of all its users.

Wired Magazine details the ordeal, which began with a June 28 "pen register" order, demanding so-called metadata for one user. After a few back and forths with the court — which included the threat of jail time for contempt — Levison finally complied on Aug. 2.

But he took a final stand against the government: He sent over five, 2,560 character SSL encryption keys, but he did so on an 11-page printout in pretty much illegible 4-point type.

"To make use of these keys, the FBI would have to manually input all 2,560 characters, and one incorrect keystroke in this laborious process would render the FBI collection system incapable of collecting decrypted data," prosecutors complained.

The court ordered a $5,000-a-day fine and on Aug. 7, Levison finally relented, handing over digital copies of the keys. That was the same day Levison posted a note on his website saying he was shuttering his business, because he did not want to "become complicit in crimes against the American people."

Copyright 2014 NPR. To see more, visit http://www.npr.org/.

Tags

The Two-Way

Leave a Comment

Please follow our community discussion rules when composing your comments.