111–120 of 243 posts
Earlier quoted context omitted.
It honestly worries me that this is the top comment on hacker news. Not because it is wrong (it isn't) but because of all places that website filled with tech workers and experts in the full software stack, full of people that work on and exploit meta data, it still needs to be discussed how important metadata is. If we can't convince people with their ear to the ground, how does one convince the general public. Espe…
The people who visit this website are the people who are paid to create and administer all of this technology. They're not only the last people you would be able to convince of something that would affect their livelihoods, but even the ones who do understand feel like it is part of their duty to deceive the less technically adept about the capabilities and dangers of the technology that they're surrounded with. The…
Exactly, some falsely assume all technologists somehow share an enthusiasm for morality. Many of the most successful technologists I know simply work for the highest pay from military/intelligence contracts.
I honestly don't know who should be blamed if there's not enough political capital to reign in these agencies globally. Either the electorate accept it, or don't know about it, which is bad enough in itself.
[0] https://apnews.com/article/32814a611e84011e93894e4ab37bb11c
Earlier quoted context omitted.
Just chiming in here: it’s almost all about the graph. If you have the graph, the content is almost irrelevant. This is why Signal hiding the graph as best they can, using SGX, is incredibly important work. Say what you want about Secure Enclaves, we know of no better way to conceal social graphs. Yes there is still potentially some metadata analysis that can be done at the server to coordinate IP addresses but we kn…
>...we know signal doesn’t keep those logs because of their response to the sealed subpoena ... That doesn't prove that. If Signal was, say, a NSA project they would have to respond to such things in that way to protect the signal intelligence value of the metadata they were collecting for their primary mission. After Crypto AG we know it is a bad idea to trust any particular entity. Something like Signal can only be…
I submit that there is no better option right now.
Earlier quoted context omitted.
Just chiming in here: it’s almost all about the graph. If you have the graph, the content is almost irrelevant. This is why Signal hiding the graph as best they can, using SGX, is incredibly important work. Say what you want about Secure Enclaves, we know of no better way to conceal social graphs. Yes there is still potentially some metadata analysis that can be done at the server to coordinate IP addresses but we kn…
> Say what you want about Secure Enclaves, we know of no better way to conceal social graphs. I'm not following. Secure Enclaves have nothing to do with protecting the social graph of Signal users. They're used to store the contact list (and other things) in the "cloud" in a safe way – things that weren't even shared / stored anywhere by Signal before Secure Value Recovery was introduced.
This is the relevant blog post.
It's very important that we keep Huawei out of our 5G networks! (what if they discovered things like this and told the citizens about it?)
Please stop equating totalitarian regimes with democracies.
Earlier quoted context omitted.
Are you looking for more oversight than is expressed in the article? It says the Danes check to make sure what the NSA searches for on that system does not include Danish citizen identifiers.
The very concept that people should have their basic human right to privacy protected or denied based on the happenstance of their location of birth is insanity. Governments that gate human rights on nationality are fundamentally amoral, and should never be trusted to self-regulate.
I love how the politicians presume NSA is safe partner and their danish citizens are not in the data. It does not really help if every other neighbouring country does the same. NSA will get danish info elsewhere. Everyone gets played. It works as long as USA is an trusthworthy ally. They wouldn't dare to abuse the information for private gains... right?
Do you have any evidence to make this claim?
Or perhaps politicians are the experts at both telling and detecting lies and manipulations?
Maybe they know the risks very well and yet chose their own personal interest e.g. non making enemies of the US...
Yep, TOR is not secure. The other thing not mentioned enough is how insecure blockchain is. Both are vulnerable to time-correlation. https://www.wired.com/story/theres-no-good-reason-to-trust-b...
I wish people would emphasize this more. Bitcoin isn't anonymous, and with the legal requirements for reporting transactions, much of what happens on there can be corellated to real-world identities. Far as privacy goes, it's probably a step backwards even from bank accounts and credit cards since there's no warrant needed to access it.
Earlier quoted context omitted.
> If we can't convince people with their ear to the ground, how does one convince the general public. Convince them of what? Some of us don't believe the NSA are bad actors and and possibly we also believe they're doing their jobs and support them in that.
You're one of the people this [0] comment is talking about. Also, how can you possibly believe that the NSA are not bad actors? Between trying to hobble encryption, spying on everything, and enabling bad individual actions, and having a horrible success rate [1], what is left to defend? [0] https://news.ycombinator.com/item?id=24962802 [1] https://www.newamerica.org/international-security/policy-pap...