A UK VPN provider has defended handing over logs relating to a member of
LulzSec after it was ordered to by the courts.
In a blog statement entitled “LulzSec Fiasco”, Hide My Ass said that it had
previously come to its attention that a member of the hacktivist group was
using the service, following the leak of some IRC chat logs.
However, the company took no action at the time as there was no proof of any
wrongdoing, nor was there any indication which services were being used by
which accounts.
“At a later date it came as no surprise to have received a court order
asking for information relating to an account associated with some or all of
the [...] cases,” the firm said.
Hide My Ass offer a range of services that enable users to surf anonymously,
including VPN and web proxies.
However, it is stated in the organisation’s privacy policy that this is not
intended to help those who choose to break the law, and that they will
cooperate should they receive an order from a UK court.
“It is very naive to think that by paying a subscription fee to a VPN
service you are free to break the law without any consequences,” the company
further pointed out.
It went on to say that any such service that refuses to cooperate with the
authorities on matters such as this are likely to “have their entire VPN
network monitored and tapped by law enforcement, thus affecting legitimate
customers.”
VPNs are often used by companies who have employees who work from different
locations in order to ensure their data remains secure.
They can also be used to secure data whilst connected to an unsecured Wi-Fi
network or access television services in other countries which would otherwise
be blocked, ideal for ex-pats.
Hide My Ass can also bypass censorship in other countries and the company
initially founded the service with this in mind in 2005.
“We truly believe the worldwide-web should be worldwide and not censored in
any way,” the company blog states.
The firm’s services were used by protestors during the uprising in Egypt, to
spread their message through sites such as Twitter, Facebook and Youtube, which
were blocked by the Egyptian government.
Hide My Ass further defends its service by stating that they don’t log any
users activity online.
Whilst they do keep track of when an account logs in and out, they “do not
log in any shape or form your actual internet traffic.”
This enables them to be able to keep track of “abusive users” such as
spammers and ensure that their existing customer base is protected.
This is essential for the service the company provides and as they point
out, they would quickly lose their reputation if they allowed illegal
activities to be carried out and could not track such users.
Whilst they will comply with UK court orders, the company says that they
will not respond to requests for information from overseas unless they are
carried out through channels which will require them to provide evidence by UK
law.
It seems that the company has come under some criticism for handing over the
LulzSec info, more than likely by the remaining members of the group and their
supporters.
However, should they have defied the court order, Hide My Ass would have
been liable for prosecution themselves and most likely would have been forced
out of business.
The company provides a legitimate service which has also been used to help
further free speech in countries under a dictatorship, so it seems somewhat
childish to accuse them of hypocrisy in this case.