Connect with us

Hi, what are you looking for?

SecurityWeekSecurityWeek

Network Security

Amid Privacy Outcry, Yahoo Denies Surveillance Allegations

Yahoo on Wednesday denied conducting mass email surveillance after a report alleging it built a special scanning program at the behest of US intelligence which sparked an outcry from privacy activists.

The report, which said the US internet giant had secretly scanned millions of emails to help American intelligence, was “misleading,” Yahoo said in a statement.

Yahoo on Wednesday denied conducting mass email surveillance after a report alleging it built a special scanning program at the behest of US intelligence which sparked an outcry from privacy activists.

The report, which said the US internet giant had secretly scanned millions of emails to help American intelligence, was “misleading,” Yahoo said in a statement.

“We narrowly interpret every government request for user data to minimize disclosure,” the company said in a statement to AFP. “The mail scanning described in the article does not exist on our systems.”

The report Tuesday by Reuters news agency, citing former employees of the internet firm as sources, said Yahoo had built a custom program in 2015 which scanned all its emails to help US intelligence and the FBI.

According to the Reuters account, Yahoo’s top security officer, who had been unaware of the program, quit after learning that the company had complied with the request.

Yahoo initially issued a brief statement which neither confirmed nor denied the claims.

“Yahoo is a law abiding company, and complies with the laws of the United States,” the statement on Tuesday said.

The NSA and FBI declined to comment to AFP on the report.

Advertisement. Scroll to continue reading.

The report was described by some activists as a “bombshell” which could, if proven true, reveal a new level of surveillance by the National Security Agency, which was roiled by disclosures in 2013 by former contractor Edward Snowden.

“There’s still much that we don’t know at this point, but if the report is accurate, it represents a new — and dangerous — expansion of the government’s mass surveillance techniques,” the Electronic Frontier Foundation said in a statement.

Bruce Schneier, a cryptographer and fellow at the Berkman Klein Center for Internet & Society who has clashed with the NSA over surveillance, said he was not surprised by the latest claims.

“The NSA is spying on the internet, they use different techniques,” Schneier told AFP.

The report nonetheless would be at odds with Yahoo’s transparency report which claimed it received a relatively small number of US government requests in 2015.

Yahoo also backed Apple’s effort to challenge a US government effort to force the iPhone maker to build a program to help decrypt a handset used by one of the shooters in a California shooting spree.

‘Not comforting

Julian Sanchez, a fellow at the Cato Institute and critic of NSA surveillance, said he was not persuaded by Yahoo’s statement.

“Yahoo’s meticulously worded statement not terribly comforting,” Sanchez said on Twitter.

“‘Does not exist on our systems’ sounds a hell of a lot like ‘currently under this program.’ DID it exist? Does it exist somewhere else?”

The Reuters report also suggested that other US tech companies may have received similar requests, but it was not immediately clear how these firms may have responded.

Facebook, in a statement to AFP, said it “has never received a request like the one described in these news reports from any government, and if we did we would fight it.”

Microsoft said in a statement, “We have never engaged in the secret scanning of email traffic like what has been reported today about Yahoo.”

Twitter also denied receiving any such request. “We’ve never received a request like this, and were we to receive it we’d challenge it in a court,” a Twitter spokesman said.

Twitter also noted it was suing the US Justice Department “for the ability to disclose more information about government requests.”

Written By

AFP 2023

Click to comment

Trending

Daily Briefing Newsletter

Subscribe to the SecurityWeek Email Briefing to stay informed on the latest threats, trends, and technology, along with insightful columns from industry experts.

Join the session as we discuss the challenges and best practices for cybersecurity leaders managing cloud identities.

Register

SecurityWeek’s Ransomware Resilience and Recovery Summit helps businesses to plan, prepare, and recover from a ransomware incident.

Register

People on the Move

Cody Barrow has been appointed as CEO of threat intelligence company EclecticIQ.

Shay Mowlem has been named CMO of runtime and application security company Contrast Security.

Attack detection firm Vectra AI has appointed Jeff Reed to the newly created role of Chief Product Officer.

More People On The Move

Expert Insights

Related Content

Identity & Access

Zero trust is not a replacement for identity and access management (IAM), but is the extension of IAM principles from people to everyone and...

Cybersecurity Funding

Network security provider Corsa Security last week announced that it has raised $10 million from Roadmap Capital. To date, the company has raised $50...

Network Security

Attack surface management is nothing short of a complete methodology for providing effective cybersecurity. It doesn’t seek to protect everything, but concentrates on areas...

Application Security

Virtualization technology giant VMware on Tuesday shipped urgent updates to fix a trio of security problems in multiple software products, including a virtual machine...

Application Security

Fortinet on Monday issued an emergency patch to cover a severe vulnerability in its FortiOS SSL-VPN product, warning that hackers have already exploited the...

Network Security

A zero-day vulnerability named HTTP/2 Rapid Reset has been exploited to launch some of the largest DDoS attacks in history.

Identity & Access

Hackers rarely hack in anymore. They log in using stolen, weak, default, or otherwise compromised credentials. That’s why it’s so critical to break the...

Cyberwarfare

Websites of German airports, administration bodies and banks were hit by DDoS attacks attributed to Russian hacker group Killnet