What's new

Yahoo Sells All Its Users Private Email Contents to U.S. Agencies for a Small Price

Treetops

Active member
(Mathaba) Yahoo isn’t happy that a detailed menu of the spying services it provides to "law enforcement" and spy agencies has leaked onto the web.

After earlier reports this week that Yahoo had blocked an FOIA Freedom of Information release of its "law enforcement and intelligence price list", someone helpfully provided a copy of the Yahoo company’s spying guide to the whistleblower web site Cryptome.org.

The 17-page guide, which Yahoo has tried to suppress via legal letters to the Cryptome.org site run by freedom of information champion John Young, describes Yahoo’s policies on keeping the data of Yahoo Email and Yahoo Groups users, as well as the surveillance and spying capabilities it can give to the U.S. government and its agencies.

The Yahoo document is a price list for these spying services and has already resulted in many people closing down their accounts in protest. However, closing a Yahoo account is not as easy as one might expect: users have reported great difficulty in finding the link to delete their account, and, Yahoo will still keep data for another 90 days.


If you ask Yahoo! to delete your Yahoo! account, in most cases your account will be deactivated and then deleted from our user registration database in approximately 90 days. This delay is necessary to discourage users from engaging in fraudulent activity.

Please note that any information that we have copied may remain in back-up storage for some period of time after your deletion request. This may be the case even though no information about your account remains in our active user databases.


Many government leaders and officials around Africa, Asia and Latin America are known by Mathaba to widely be using Yahoo, Gmail, and Hotmail in spite of these Email services being hosted on U.S. computers and the ease that gives the hosts to access their data.. Mathaba has also long been aware of a great many business people, politicians and even Presidents who use the "free" web-based email services of Yahoo for their Email communications, thus making it easy for the U.S. and its owners to spy on them with negligible cost.

Cryptome also published lawful data-interception guides for Cox Communications, SBC, Cingular, Nextel, GTE and other telecoms and Internet service providers.

But of all those companies, it appears to be Yahoo’s lawyers alone who have been stupid enough to try to issue a "DMCA takedown notice" to Cryptome demanding the document be removed. Yahoo claims that publication of the document is a copyright violation, and gave Cryptome owner John Young a Thursday deadline for removing the document.

We estimate Yahoo stand a near-zero chance of success given that Young has thousands of intelligence and other leaked documents on his site and in the past decade has yet to remove a single document upon legal threats, the same 10-year track record held by Mathaba on documents on British Intelligence in spite of having computers seized and properties raided.

Mathaba is now also hosting the Yahoo leaked document on its servers around the world, and the cat is long out of the bag with the original document having been downloaded and distributed by many already.

When John Young was asked if there was anything he wouldn't reveal on his site -- a fault in the President's Secret Service detail, for instance -- he said, "Well, I'm actually looking for that information right now", much to the chagrin of those who believe that the U.S. government and its hopelessly corrupt agencies should have a right to supress information from the public.

The Compliance Guide reveals, as has been known to Mathaba prior to the leak via our own sources, that Yahoo does not retain a copy of e-mails that an account holder sends unless that customer sets up the account to store those e-mails. Yahoo also cannot search for or produce deleted e-mails once they’ve been removed from a user’s trash folder.

The guide also reveals that the company retains the IP addresses from which a user logs in for just one year. But the company’s logs of IP addresses used to register new accounts for the first time go back to 1999. The contents of accounts on Flickr, the photo sharing and storage site which Yahoo also owns, are purged as soon as a user deactivates the account.

Chats conducted through the company’s Web Messenger service may be saved on Yahoo’s server if one of the parties in the correspondence set up their account to archive chats. This pertains to the web-based version of the chat service, however. Yahoo does not save the content of chats for consumers who use the downloadable Web Messenger client on their computer.

Instant message logs are retained 45 to 60 days and includes an account holder’s friends list, and the date and times the user communicated with them.

Young responded to Yahoo’s takedown request with a defiant note:


I cannot find at the Copyright Office a grant of copyright for the Yahoo spying document hosted on Cryptome. To assure readers Yahoo’s copyright claim is valid and not another hoary bluff without substantiation so common under DMCA bombast please send a copy of the copyright grant for publication on Cryptome.

Until Yahoo provides proof of copyright, the document will remain available to the public for it provides information that is in the public interest about Yahoo’s contradictory privacy policy and should remain a topic of public debate on ISP unacknowledged spying complicity with officials for lucrative fees.

Note: Yahoo’s exclamation point is surely trademarked so omitted here.

The company responded that a copyright notice is optional for works created after March 1, 1989 and repeated its demand for removal on Thursday. For now, the document remains on the Cryptome site.

Threat Level reported Tuesday that muckraker and Indiana University graduate student Christopher Soghoian had asked all agencies within the Department of Justice, under a Freedom of Information Act (FOIA) request, to provide him with a copy of the pricing list supplied by telecoms and internet service providers for the surveillance services they offer government agencies. But before the agencies could provide the data, Verizon and Yahoo intervened and filed an objection on grounds that the information was proprietary and that the companies would be ridiculed and publicly shamed were their surveillance price sheets made public.

Yahoo wrote in its objection letter that if its pricing information were disclosed to Soghoian, he would use it “to ’shame’ Yahoo! and other companies — and to ’shock’ their customers.”

“Therefore, release of Yahoo!’s information is reasonably likely to lead to impairment of its reputation for protection of user privacy and security, which is a competitive disadvantage for technology companies,” the company added.

The price list that Yahoo tried to prevent the government from releasing to Soghoian appears in one small paragraph in the 17-page leaked document. According to this list, Yahoo charges the government about $30 to $40 for the contents, including e-mail, of a subscriber’s account. It charges $40 to $80 for the contents of a Yahoo group.

Facebook, Twitter, MySpace and other U.S. "social networking" sites are at minimum providing information in similar fashion to U.S. agencies, and in some cases have also received substantial funding by U.S. government related entities as a most efficient and cost-effective means of spying on their users around the world. -- Mathaba


-- Includes extensive reporting by Wired.com's Kim Zetter.

http://www.mathaba.net/news/?x=622292:santa1:
 

j6p

Member
Hahaha! Yahoo is upset about THEIR privacy being violated, because one small document, which reveals nothing we don't already know, gets posted on the net. Meanwhile, Yahoo has been mining and selling detailed information about its subscribers for years.

I read the entire leaked document, and saw nothing surprising. It contains Yahoo's alleged guidelines for releasing subscriber data in response to subpoenas, court orders and warrants. It also contains a few lines which summarize Yahoo's cost estimates for pulling and releasing data: $30-$40 per subscriber including email, and $40-$80 per group.

Someone at Yahoo must be pissed because they denied a request for information, but their document was released posted anyway. Which publicly humiliated them. Then Yahoo's "spy" document received that negative spin, mostly because Yahoo was being such a PITA about it. Now we have Yahoo managers in strategy meetings, trying to restore their own tarnished image while the campaign to smear Cryptome continues. What a bunch of grade-school kids. LOL
 

watson540

Member
this makes me sick. I've had my yahoo mail account since the late 90's. I always just used it for convenience. ISP's come and go, so it never did well to use their pop3 service.

I would love to protest and close my account there, but where exactly CAN you go and not get spied on?? I guess it's high time I start running my own mail server, I already own a domain, so all I need to do is 'emerge qmail' or 'emerge dovecot' ,,havent decided yet, but this looks like a good project for the next few days
 

love?

Member
If you don't want to get spied on either don't use email or only use well encrypted email. Emails are transmitted as plain text and anyone on the same network can read them. Sad but true.
 

sorcival

Member
There is NO privacy or anonymity anymore.
There is ALWAYS someone watching you.
Be aware...George Orwell's book 1984 was a primer guide for todays Govt.

Big Brother is ALways watching you.
 

weedhead

Member
I just deleted my yahoo accounts. No reason why those assholes should make money off of me when I see advertisements on their site when they would sell me out for a nominal fee.
 

ArcticBlast

It's like a goddamned Buick Regal
Veteran
agreed, i might have to delete my yahoo accounts i've had for years. this is truly disgusting.

ArcticBlast
 
J

JackTheGrower

Why don't we all switch to encoded data so it's somewhat safer.

I do know a little on how to write such a codec.

The idea is to encode the data to make it harder to read.
 

SvenB

Member
Umm yeah, basically every email service sells their users info. Hush mail even gives you up if the govt ask for it.
 

watson540

Member
Why don't we all switch to encoded data so it's somewhat safer.

I do know a little on how to write such a codec.

The idea is to encode the data to make it harder to read.


you mean ummm..ssl? :)

I'm pretty sure there are some ssl email services..i believe someone mentioned hushmail (which I see now, supposedly sells info) but they're ssl

I guess the safest route is to run your own mail server (ssl if possible) or find someone who does (Who you can trust).
 
D

DoffCocker

lol any of you actually read the guide?

its basically yahoo making it easy for themsleves when LEO *HAVE ALREADY TURNED UP WITH A WARRANT!!* i.e. when you are already fucked!!!.

the $ is what they are entilted to under law for the their time under these circumstances.

you cant expect a free email providor to protect you from the law, actually producing a guide on this makes them sound like ****s, but im guessing they have had this happen lots and made the guide becuase they were bored of repeating themselves.
 

j6p

Member
lol any of you actually read the guide?

its basically yahoo making it easy for themsleves when LEO *HAVE ALREADY TURNED UP WITH A WARRANT!!* i.e. when you are already fucked!!!.

the $ is what they are entilted to under law for the their time under these circumstances.

you cant expect a free email providor to protect you from the law, actually producing a guide on this makes them sound like ****s, but im guessing they have had this happen lots and made the guide becuase they were bored of repeating themselves.
Yep, the Yahoo document is trivial. Apparently the collector wanted a copy to post on his web site, Yahoo refused, then the collector found a "leaked" pdf copy and put it on his site. That blown-up article was most likely an attempted retaliation caused by Yahoo's refusal to hand its little file over. What a joke.
 

ArcticBlast

It's like a goddamned Buick Regal
Veteran
they shouldn't store any of my private data, period. then when the cops come with a warrant, they can say "we don't store any private data, fuck off". doesn't it take time and cost a lot of money to save every email and conversation? from a business perspective, wouldn't they be saving TONS of money if they didn't save that shit?

ArcticBlast
 
D

DoffCocker

they shouldn't store any of my private data, period. then when the cops come with a warrant, they can say "we don't store any private data, fuck off". doesn't it take time and cost a lot of money to save every email and conversation? from a business perspective, wouldn't they be saving TONS of money if they didn't save that shit?

ArcticBlast

um, it tends to be the users that save the emails.
 

whiterabbit9

Active member
Veteran
Hahaha! Yahoo is upset about THEIR privacy being violated, because one small document, which reveals nothing we don't already know, gets posted on the net. Meanwhile, Yahoo has been mining and selling detailed information about its subscribers for years.

the irony.

fuck them.
 
Top