[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Re: deprecated options in openssh



On Fri 10 Sep 2021 at 17:55:59 (-0400), rhkramer@gmail.com wrote:
> On Friday, September 10, 2021 02:52:42 PM Dan Ritter wrote:
> > David Wright wrote:
> > > If you make a telephone call on speaker, and you have a tape recorder
> > > in the room recording the conversation, the speaker at the other end
> > > of the call doesn't need to have permission for their words to be
> > > recorded on /your/ tape.
> > 
> > Please don't consider that analogy true in the real world.
> > 
> > Various jurisdictions will demand:
> > 
> > one-party consent: Anyone clearly on the call can consent to
> > record all of it
> > 
> > two-party consent: Everyone on the call must consent or else
> > recordings are not legal
> > 
> > zero-party consent: The NSA, FBI, or vague equivalent will
> > record your call without your knowledge
> > 
> > Other laws might apply, such as the requirement to take calls
> > without recording when a party objects, or the requirement to
> > delete or redact calls after the fact.
> 
> +1

There is no analogy above: you snipped the paragraph that contained it:

 "When you commence your call, both you and the person at the other end
  probably exchange some pleasantries, which confirm that you're both
  who you say you are. These all get recorded too."

IOW before the substantive conversation takes place, information is
exchanged along the same channel, and can be recorded along with it.

Similarly, ssh clients and servers exchange information about each
other, and information that is about one end can be captured at the
other end in the logs, all before the user's own data starts to flow.

Legality has nothing to do with it, as telephones, tape recorders and
computers aren't human beings. (Debian-user is a technical list.)

Cheers,
David.


Reply to: