Earlier quoted context omitted.
There were plenty of small samples in the various Snowden powerpoint slides of stuff NSA incepted from the pipes. It seems a ton of mobile apps are sending information with identifiers over HTTP (the ID is a key part for them legally to pick it up and store it in a DB, forever). I notified one developer that was sending real-time GPS data + an email address highlighted in one of the PPT slide's (just a screenshot of…
I'm curious about stats for iOS, with its app transport security being enforced for store submissions. There are exceptions, but I certainly hope that Apple is verifying that those are actually necessary before allowing them. I'd love it if Apple took a step forward and warned periodically for http use (similar to how it periodically reminds you that apps have location permissions). Aside: I know at least for some or…
South African authorities admit to mass surveillance
71–80 of 145 posts
Re: South African authorities admit to mass surveillance
#72Earlier quoted context omitted.
Isn’t it more likely to be low grade android devices in poor countries with outdated government, banking, and education portals? I doubt kernel hackers make up a large enough demographic to skew the metrics...
Android is separate from Linux in the report. Developers and tech people make up a significant (if not majority) share of Linux users. A lot of popular Linux and developer related pages are HTTP only. I did a quick Google search for some Linux related tasks, and found plenty of sites that don't use HTTPS. e.g. man7.org, linuxhowtos.org, linuxcommand.org The report does break down HTTPS traffic by country, and you're…
Wikis arent the problem!
Re: South African authorities admit to mass surveillance
#73> worrying is that the SSA has said that such surveillance and data collection is "common practice" globally I think if you believe that any major country is not intercepting all undersea fibre cable traffic within their reach or even beyond it then you’re being very naive. I can’t understand how this news would surprise anyone.
Re: South African authorities admit to mass surveillance
#74Re: South African authorities admit to mass surveillance
#75Earlier quoted context omitted.
How do you think they're decrypting in real time? Do you think there are backdoors in the crypto/protocols? Severe accidental flaws? How many times a speedup are you imagining? State of the non-TLA art is that modern https is completely impractical to break, even with enormous server farms working for years, let alone in real time.
How do you think they're decrypting in real time? I have no idea how they're doing it. But I believe it can be done simply because the intelligence agencies have the best, largest, fastest, most advanced machines that money can buy. Machines that none of us have even heard of, that are years ahead of anything any of us will ever touch in our lifetimes.
Re: South African authorities admit to mass surveillance
#76Earlier quoted context omitted.
if they don't have the expertise, someone else with the expertise interested in access to the data will help them.
Often at exorbitant cost in our case. The SSA is an unaccountable financial black hole. Our former president send to have also used them for his political gain, this Fraser chap is responsible for many misdeeds. Now parts of our country are literally burning, yet there's no crime intelligence about the very threats to the state that SSA should be monitoring for. There was an act of terror that was nearly committed 2…
Please can you provide a link to more info on this?
Re: South African authorities admit to mass surveillance
#77It's worrying that developing countries can buy off-the-shelf solutions to surveil its citizens without going through the decades of cultural and social change other countries have. We asked questions like "Is this ethical?" before the technology became possible. For them, the tech is here and the social discussions were never started. Maybe this is the same thing. We haven't upheld our ideals on privacy anyway.
Re: South African authorities admit to mass surveillance
#78When you buy a new SIM card, you have to register it using your identification document and proof of residence. Every legally obtained SIM card is accountable. That way they wil know they are intercepting communication of the right person.
Re: South African authorities admit to mass surveillance
#79Earlier quoted context omitted.
if they don't have the expertise, someone else with the expertise interested in access to the data will help them.
Hasn't China been doing this all over Africa and South America?
Re: South African authorities admit to mass surveillance
#80As if the South Africans can decrypt anything. They can enjoy receiving non-SSL traffic. They're not going to get my shit.
It’s also just telling how paranoid governments are about their own citizens, they are the enemy as far as they are concerned!