Apart from the political conversation I've always tried to encourage a technical conversation about how our mobile phone infrastructure is <i>really terrible for privacy</i> on many levels.<p>CCC events have had many presentations about this in the last few years, about IMSI catchers and mobile crypto attacks and abusing roaming mechanisms and databases. And it seems there's more where that came from; the system is wide open in many respects to exploitation by a sophisticated attacker, governmental or not. (I read somewhere that people in China are buying and deploying IMSI catchers in order to send SMS spam to passersby.)<p>Some of the privacy problems are a result of economic factors including backwards compatibility and international compatibility goals. Some of the bad decisions for privacy were made by or at the behest of intelligence agencies, and some of those decisions <i>are continuing to be made</i> in standards bodies that deal with mobile communications security. Ross Anderson described some spy agency influence in early GSM crypto conversations (which is one reason A5/1 is so weak), and it's still happening at ETSI now.<p>I support political criticism of surveillance activities, but at moments when people feel overwhelmed and powerless, there is another front, which is trying to clean up the security posture of mobile communications infrastructure, or provide better alternatives to it.<p>We can find lots of reasons why this is hard ("Bellhead" communities are much less ideologically committed to privacy and opposed to surveillance; communications infrastructure is highly regulated in many places, and it's hard to get access to radiofrequency spectrum; people want worldwide compatibility; there's a huge installed base on both the client and server sides; many of the infrastructure providers around the world are directly beneficially owned by governments; spy agencies do actively try to influence standards-setting in this area, plus sabotaging implementations and stealing private key material) and it's probably going to stay hard. But maybe some of the people reading this are going to some day be tech billionaires or working in or running companies that have significant influence in the telecommunications space, and be in a position to personally make future generations of communication technology take privacy and security seriously.