Live data from Hacker News

Patriot Act amendment needing a warrant for browsing history fails

theregister.co.uk

171–180 of 184 posts

Re: Patriot Act amendment needing a warrant for browsing history fails

#171
post #135

A point from Enlightenment Now that I wish was better understood. Groups that use terrorism to get their way almost always fail. This should not surprise us. Terrorism is the last available option for a weak interest group that has no better way to make their will felt. Therefore as scary as it is to face, the fact that they are resorting to it is evidence that they are underdogs and we should not be surprised that t…

> Groups that use terrorism to get their way almost always fail. Totally untrue. When the US used atomic bombs to level cities in Japan, that was terrorism. The goal was to strike fear into the regime and the people for an unconditional surrender. It was not an attack against the military or government, it was an act of terrorism. When the US uses drone strikes to blow up weddings, that's terrorism. They are not acti…

It is a question of how you define terrorism.

What I meant was asymmetric use of violence where a much weaker force uses their ability to show up unexpectedly and cause damage to cause fear and terror far out of proportion with the true damage that they are capable of inflicting. Those are the defined underdogs.

This is as opposed to war where a force capable of large sustained violence actually engages in sustained violence (though often by following certain rules of conduct - see the Geneva conventions) to force an enemy to capitulate. This use of force may indeed cause terror but does not indicate an inherent weakness in the force using the tactic.

Re: Patriot Act amendment needing a warrant for browsing history fails

#172
post #113

Earlier quoted context omitted.

You assume that every terrorist (or most terrorists) acts rationally and has the knowledge you know. That is a huge assumption for your reasoning to work. I think terrorists make mistakes (or take risks), and I'm not convinced that we catch all of those either.

In the context of droning terrorist, I think the anthropic principle applies. The ones who don't act rationally or have that knowledge are dead.

Once again, that is just your opinion, presented as fact. Personally I would argue that people acting rationally stay away from the terrorism business.

Re: Patriot Act amendment needing a warrant for browsing history fails

#173
post #62

Earlier quoted context omitted.

Indeed, let's break it down: The scheme (https) is implied but isn't transmitted anywhere. An adversary can infer you used HTTPS because it was port 443 and looks like TLS traffic. The hostname (www.duckduckgo.com) is somewhat implied by the destination IP address on the connection, and is also transmitted in the clear as part of TLS Server Name Indication so that the receiving server knows which service you wanted.…

None of it really matters though if the certificate authorities are compromised.

How so?

If a CA is compromised (which was very rare, even under historically more lax oversight than today) the bad guys would need to issue themselves a cert from this compromised CA, get it logged, and then from an on-path position use the certificate to MITM you and capture your URL which presumably they wanted very badly as this seems like a really expensive approach.

The CA does not have the ability to decrypt eavesdropped HTTPS traffic for example.

Re: Patriot Act amendment needing a warrant for browsing history fails

#174
post #151

Earlier quoted context omitted.

Pseudo-anonymity is sufficient for those whose life is not in danger (like a journalist or dissenter). Personally identifying yourself to websites is an optional use of the Internet, as is participation in ad networks such as Google and Facebook. You are correct that ad networks have more information than your ISP does. The VPN will protect you from your ISP. Pseudo-anonymity is what protects you from ad networks. An…

>You are correct that ad networks have more information than your ISP does. The VPN will protect you from your ISP. So to be clear, they'd get the data from the ISP? I'm not surprised DNS queries get saved but whole URLs is another thing. I guess I shouldn't be surprised, but I am a little bit, that they'd expend the $$$ to store that info longer than necessary for core business functions. >An easy implementation is…

It became legal for ISPs to sell their logs during the beginning of the Trump administration. I began using a VPN consistently at that time.

Re: Patriot Act amendment needing a warrant for browsing history fails

#175

Earlier quoted context omitted.

I do stats for a living, and while I think it's good to back up claims with data when possible, inductive reasoning is still a validate tool for understanding the world. The logic is that active, dedicated terrorist groups already know: "They literally get a drone strike for having called a known terrorist or for going to a wedding other terrorists with cell phones go to." The reasoning that knowing this information…

> inductive reasoning is still a validate tool for understanding the world. And here it has led you astray. Terrorist organisations have propaganda mouthpieces, and use social media like any other. One of my previous jobs involved building network analysis tools to identify and locate terrorists combing through their Twitter feeds. For some, you could easily identify the point in their lives when they were radicalize…

You are talking about the past when they were radicalized,if this happened online then you are right but I thought it was clear that I meant internet usage for organizing and planning terrorism. Propaganda and radicalization is a dragnet, you will catch many but the one cell that recruits in person and communicates on paper only by code will succeed. It's not a volume game,it's a binary game.

Re: Patriot Act amendment needing a warrant for browsing history fails

#176
post #16

Earlier quoted context omitted.

Indeed. Even worse, Chrome calls this "incognito mode", which is even less accurate. This isn't incognito. The joke about calling it "porn mode" was way more honest.

It's about as incognito as throwing on the hat and glasses the icon shows is. i.e. "works until someone actually cares enough to take active measures to track you."

To be fair, right below said icon it gives a pretty clear explanation of what it does and who could still track your activity.

Re: Patriot Act amendment needing a warrant for browsing history fails

#177
post #172

Earlier quoted context omitted.

In the context of droning terrorist, I think the anthropic principle applies. The ones who don't act rationally or have that knowledge are dead.

Once again, that is just your opinion, presented as fact. Personally I would argue that people acting rationally stay away from the terrorism business.

If you were in their shoes and america exterminated your family,how would you react? Killing civilians is evil and horrible but in their case they are being very rational.

Was the US being irrational with nuking of japan?

Re: Patriot Act amendment needing a warrant for browsing history fails

#178

Earlier quoted context omitted.

I do stats for a living, and while I think it's good to back up claims with data when possible, inductive reasoning is still a validate tool for understanding the world. The logic is that active, dedicated terrorist groups already know: "They literally get a drone strike for having called a known terrorist or for going to a wedding other terrorists with cell phones go to." The reasoning that knowing this information…

If terrorists know not to touch digital comms, then how would they get caught by being at a wedding with other terrorists with cell phones? Do terrorists use cell phones or not? The claim directly conflicts with the supporting anecdote.

Both, they adopt. This isn't a video game you get to beat after figuring out the enemy, unlike games real life enemies adopt to your tactics.

Re: Patriot Act amendment needing a warrant for browsing history fails

#179
post #122

Earlier quoted context omitted.

I do stats for a living, and while I think it's good to back up claims with data when possible, inductive reasoning is still a validate tool for understanding the world. The logic is that active, dedicated terrorist groups already know: "They literally get a drone strike for having called a known terrorist or for going to a wedding other terrorists with cell phones go to." The reasoning that knowing this information…

Plenty of people are dumb. Including the ones who decide to join terrorist organization. Actual terrorists were found because of using cell phones or internet.

9/11 terrorists were well educated. Show me how absent flight security 9/11 can't happen again in 2020?

Re: Patriot Act amendment needing a warrant for browsing history fails

#180
post #139

Earlier quoted context omitted.

Smart terrorists don't use cellphones because stupid terrorists do.

So let's catch the stupid ones then?

Even the stupid ones slip through! It takes one smart cell to repeat 9/11. The way you catch them is by targeted surveillance not by dragnet collection of information. The IC does this all the time,they do a powergrab make noise about it, achieve nothing and retain their power. Look at wmds in iraq,torturing,drone bombing,mass surveillance.

Theatrics to make it look like they are doing enough. Truth is, if someone immigrated or gets radicalized without detectio, the IC is relying on them not having good opsec. Spying on everyone (instead of with a warrant) , E2EE subversion,and these silly laws won't give them additional capacity when the actual terrorists and mass shooters that slip through already have bad opsec,don't use mainstream platforms or E2EE

Post reply on HN