Live data from Hacker News

Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

electrospaces.net

61–70 of 243 posts

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#62
post #24

All these comments about metadata not being useful are missing the point. Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself. Knowing what sites a target visits, access patterns, changes in behavior: all this can be fed into ML algorithms to come up with fingerprints. You don't need to be able decrypt the data in transit if you know the endpoints and can somehow compromise the…

[deleted]

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#63
post #24

All these comments about metadata not being useful are missing the point. Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself. Knowing what sites a target visits, access patterns, changes in behavior: all this can be fed into ML algorithms to come up with fingerprints. You don't need to be able decrypt the data in transit if you know the endpoints and can somehow compromise the…

I will randomly upvote or downvote a link here and there just to confuse them

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#64
post #39
post #27

Earlier quoted context omitted.

That metadata is surely still useful when you know frequency and target IP addresses. In addition not everyone uses google services and browsers, and so its really narrow to say 'chrome is encrypted, so who cares?'... This metadata by the way is exactly how you can calculate correspondence and association of graphs of people and information. How is that not exactly a breach of exactly what people fear most? It doesnt…

No the 90% I was refering to is chrome web traffic, not google service (toward the bottom, “Percentage of pages loaded over HTTPS in Chrome by platform”)

Right, and chrome is trying _Hard_ to make that happen, whereas opera, firefox, etc, are not necessarily automatically upgrading to https:// where possible from http:// URIs, etc. Its highly unrepresentative of anything but a google chrome user experience.

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#65
post #34

It's very important that we keep Huawei out of our 5G networks! (what if they discovered things like this and told the citizens about it?)

As a european , i d rather have my surveillance camera phone china than the US. Google already knows too much about where and what i m doing, they dont need access to my camera. China OTOH doesnt have any kind of legal jurisdiction on me, we don't have some the kind of alliances that we share with US. Like during the cold war, arbitraging between spies was a safe bet.

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#66
post #57

Earlier quoted context omitted.

People have gone to jail for metadata. That is exactly what you are saying. That is its importance. And that is only speaking of something within the Rule of Law (accessing metadata with a warrant)... Outside of the Rule of Law, people have been killed for metadata.

Ed: > Outside of the Rule of Law, people have been killed for metadata. Indeed: https://theintercept.com/2014/02/10/the-nsas-secret-role/ > According to a former drone operator for the military’s Joint Special Operations Command (JSOC) who also worked with the NSA, the agency often identifies targets based on controversial metadata analysis and cell-phone tracking technologies. Rather than confirming a target’s ident…

Thanks. Too lazy to search for specific examples.

Also, obviously, Mafias and the USSR, PRC...

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#67

Earlier quoted context omitted.

Please stop equating totalitarian regimes with democracies.

in terms of domestic espionage on private citizens they are pretty similar now days

Data collection and political system are VERY different. All governments collect data on their private citizens, but not all sell their organs for profit or do forced sterilization

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#68
post #24

All these comments about metadata not being useful are missing the point. Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself. Knowing what sites a target visits, access patterns, changes in behavior: all this can be fed into ML algorithms to come up with fingerprints. You don't need to be able decrypt the data in transit if you know the endpoints and can somehow compromise the…

Just chiming in here: it’s almost all about the graph. If you have the graph, the content is almost irrelevant.

This is why Signal hiding the graph as best they can, using SGX, is incredibly important work. Say what you want about Secure Enclaves, we know of no better way to conceal social graphs.

Yes there is still potentially some metadata analysis that can be done at the server to coordinate IP addresses but we know signal doesn’t keep those logs because of their response to the sealed subpoena (which they successfully sued with the ACLU to unseal):

https://signal.org/bigbrother/eastern-virginia-grand-jury/

We can only dream of a world where companies are held to this standard of transparency and user privacy.

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#69
post #24

All these comments about metadata not being useful are missing the point. Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself. Knowing what sites a target visits, access patterns, changes in behavior: all this can be fed into ML algorithms to come up with fingerprints. You don't need to be able decrypt the data in transit if you know the endpoints and can somehow compromise the…

> Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself. Just adding an example for the people who don't see the value of metadata: WhatsApp is still a viable revenue source for Facebook even as they have no access to the text of the messages due to E2EE. Knowing who talks to who, at what times, the type and approximate size of messages, the members of groups, and the contents of…

> WhatsApp is still a viable revenue source for Facebook even as they have no access to the text of the messages due to E2EE.

A friendly reminder to everyone that even if the encryption that is used to send the messages in WhatsApp seems to be solid they upload your entire chat history as unencrypted dumps to the cloud.

Even if you turn it off your chats will still end up there as long as whoever you are chatting with doesn't also disable this.

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#70
post #24

All these comments about metadata not being useful are missing the point. Metadata is incredible valuable and sometimes just as valuable as the decrypted data itself. Knowing what sites a target visits, access patterns, changes in behavior: all this can be fed into ML algorithms to come up with fingerprints. You don't need to be able decrypt the data in transit if you know the endpoints and can somehow compromise the…

I can't believe that anyone that was around here during the snowden stuff hitting the fan would even remotely say metadata isn't useful.

"Law enforcement agencies have claimed that metadata helps to eliminate suspects by revealing their networks and contacts. But there is no information regarding the use of metadata by government bodies that are not officially enforcement agencies within the meaning of the data retention laws."

https://theconversation.com/think-your-metadata-is-only-visi...

Post reply on HN