Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
61–70 of 243 posts
Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
#62All these comments about metadata not being useful are missing the point. Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself. Knowing what sites a target visits, access patterns, changes in behavior: all this can be fed into ML algorithms to come up with fingerprints. You don't need to be able decrypt the data in transit if you know the endpoints and can somehow compromise the…
Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
#63All these comments about metadata not being useful are missing the point. Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself. Knowing what sites a target visits, access patterns, changes in behavior: all this can be fed into ML algorithms to come up with fingerprints. You don't need to be able decrypt the data in transit if you know the endpoints and can somehow compromise the…
Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
#64Earlier quoted context omitted.
That metadata is surely still useful when you know frequency and target IP addresses. In addition not everyone uses google services and browsers, and so its really narrow to say 'chrome is encrypted, so who cares?'... This metadata by the way is exactly how you can calculate correspondence and association of graphs of people and information. How is that not exactly a breach of exactly what people fear most? It doesnt…
No the 90% I was refering to is chrome web traffic, not google service (toward the bottom, “Percentage of pages loaded over HTTPS in Chrome by platform”)
Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
#65It's very important that we keep Huawei out of our 5G networks! (what if they discovered things like this and told the citizens about it?)
Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
#66Earlier quoted context omitted.
People have gone to jail for metadata. That is exactly what you are saying. That is its importance. And that is only speaking of something within the Rule of Law (accessing metadata with a warrant)... Outside of the Rule of Law, people have been killed for metadata.
Ed: > Outside of the Rule of Law, people have been killed for metadata. Indeed: https://theintercept.com/2014/02/10/the-nsas-secret-role/ > According to a former drone operator for the military’s Joint Special Operations Command (JSOC) who also worked with the NSA, the agency often identifies targets based on controversial metadata analysis and cell-phone tracking technologies. Rather than confirming a target’s ident…
Also, obviously, Mafias and the USSR, PRC...
Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
#67Earlier quoted context omitted.
Please stop equating totalitarian regimes with democracies.
in terms of domestic espionage on private citizens they are pretty similar now days
Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
#68All these comments about metadata not being useful are missing the point. Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself. Knowing what sites a target visits, access patterns, changes in behavior: all this can be fed into ML algorithms to come up with fingerprints. You don't need to be able decrypt the data in transit if you know the endpoints and can somehow compromise the…
This is why Signal hiding the graph as best they can, using SGX, is incredibly important work. Say what you want about Secure Enclaves, we know of no better way to conceal social graphs.
Yes there is still potentially some metadata analysis that can be done at the server to coordinate IP addresses but we know signal doesn’t keep those logs because of their response to the sealed subpoena (which they successfully sued with the ACLU to unseal):
https://signal.org/bigbrother/eastern-virginia-grand-jury/
We can only dream of a world where companies are held to this standard of transparency and user privacy.
Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
#69All these comments about metadata not being useful are missing the point. Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself. Knowing what sites a target visits, access patterns, changes in behavior: all this can be fed into ML algorithms to come up with fingerprints. You don't need to be able decrypt the data in transit if you know the endpoints and can somehow compromise the…
> Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself. Just adding an example for the people who don't see the value of metadata: WhatsApp is still a viable revenue source for Facebook even as they have no access to the text of the messages due to E2EE. Knowing who talks to who, at what times, the type and approximate size of messages, the members of groups, and the contents of…
A friendly reminder to everyone that even if the encryption that is used to send the messages in WhatsApp seems to be solid they upload your entire chat history as unencrypted dumps to the cloud.
Even if you turn it off your chats will still end up there as long as whoever you are chatting with doesn't also disable this.
Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA
#70All these comments about metadata not being useful are missing the point. Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself. Knowing what sites a target visits, access patterns, changes in behavior: all this can be fed into ML algorithms to come up with fingerprints. You don't need to be able decrypt the data in transit if you know the endpoints and can somehow compromise the…
"Law enforcement agencies have claimed that metadata helps to eliminate suspects by revealing their networks and contacts. But there is no information regarding the use of metadata by government bodies that are not officially enforcement agencies within the meaning of the data retention laws."
https://theconversation.com/think-your-metadata-is-only-visi...