Hacker News Reader

Comment by gentoomenpls | Hacker News Reader

wut.

Occam's razor says he replaced the compromised ssl key (the one the court ordered him to hand over)

Ladar shut down his servers than accept snooping on all his users, I certainly doubt he just decided after all this fighting to just give up.

View on HN

So then he suddenly, after all this time, woke up and decided, "hey, you know all those hosts I shut down and mothballed? I'm going to fire them up NOW, spend some time restoring backups, reconfiguring things where necessary, while facing possible contempt charges, for an arbitrary number of hours, with a new keypair, signed by a US certification authority, without ephemeral keys, and invite everyone who has been avoiding snooping by state entities to log in with their private credentials!" ?

He could have done this a while ago, but he didn't.

He could have relaunched fully, under a new entity, but he didn't.

He chose NOW, to relaunch for only 72 hours. Why?

The warrant that was given to him only asked for the ssl keys.

The court records were just unseal on October 2nd.

>He could have done this a while ago, but he didn't.

Maybe he's been working on it since the 2nd?

>He could have relaunched fully, under a new entity, but he didn't.

Why would that change anything? This would only serve to hurt his existing customers.

>He chose NOW, to relaunch for only 72 hours. Why?

Again, maybe he's been working on it since the 2nd?

Well, it's certainly possible, but I'd like to point out one thing. IANAL, but I've been through enough to know that courts will often/always consider the aspect of compliance known as "good faith". It's almost certain that handing over the key and them immediately changing it would be seen by the presiding judge as compliance in bad faith, and would put him in a substantially worse position with regard to possible contempt. Given this, unless Levison is legally suicidal, I think it's a fair bet that any relaunch using a new key pair was done, at the very least, with the blessing of the feds and/or the judge. And I can only think of one reason the feds would give such a blessing.

Here, let me add a bit to your theory.

He's flying back from Brussels to DC tomorrow. Then back to Dallas on 20 Oct.

So he's in DC while the server is up.

source: personal communication (SMS)

With or without ephemeral keys, when people log in, the servers will, at the time of login, have access to the passwords of the users — the same passwords used to decrypt the private keys which can access those users' encrypted email messages.

Reply on news.ycombinator.com