FBI Has Gained Access to Sci-Hub Founder's Apple Account, Email Claims

Post by stjohnswarts » Sat, May 15, 2021, 4:05 PM UTC

kodah wrote: post #101

__s wrote: post #47

Earlier quoted context omitted.

Not technically. You'd just have to apply encryption at a higher level Send email bodies encrypted to base64 along with a public key fingerprint, then receiver's client would decrypt if it had the private key for that fingerprint But this isn't compelling enough to get a network effect to topple in-browser gmail

Common misconception. The three letter agencies do not really need to know the contents of your email body. They're much more interested in to/from, timestamps, and subject. Establishing that you communicate with a person and then getting their emails is much easier than playing with your encrypted email body.

Post by wolverine876 » Sat, May 15, 2021, 5:27 PM UTC

dane-pgp wrote: post #235

wolverine876 wrote: post #150

Earlier quoted context omitted.

> People routinely do end to end encryption with email every day using either OpenPGP or S/MIME. Those solutions encrypt only the content and not the headers, which are just as important. Also, encrypting the content prevents some webmail services from functioning, such as search. Email can't really be made secure.

> Those solutions encrypt only the content and not the headers, which are just as important. There are implementations which encrypt the headers, for example Delta Chat, which says[0] in its FAQ: 'Many other e-mail headers, in particular the “Subject” header, are end-to-end-encryption protected, see also this upcoming IETF RFC.' If you mean that the sender's server and the recipient's server can see the recipient's a…

Post by msbarnett » Sat, May 15, 2021, 6:18 PM UTC

giantrobot wrote: post #266

msbarnett wrote: post #178

Earlier quoted context omitted.

Anyone who's worked on the PGP project would be the first to tell you that PGP does not and cannot encrypt the email's metadata (to/from, subject, timestamps, etc). All PGP does is encrypt the inner message body. All of the metadata that TLAs love to analyze is sent in the clear (at best inside a TLS connection, although the SMTP protocol unfortunately makes it incredibly easy for well-positioned network attackers to…

While not a silver bullet, anonymous remailers can strip out a lot of metadata. Mixmaster remailers can also help against traffic analysis. While not as popular as they once were networks of remailers are fairly easy to spin up.

Post by titoCA321 » Sat, May 15, 2021, 11:14 PM UTC

justinclift wrote: post #16

shockeychap wrote: post #13

If the email is genuine, then we are officially lost. Apple has gone from the company that refused to break into the San Bernadino shooter's phone (Anyone remember the feature by Last Week Tonight and Tim Cook talking about writing "the software equivalent of cancer"?) to the company that dutifully does what the authorities demand when they bring down the hammer over copyright claims.

And apparently the request to Apple happened in Feb 2019. So, not a recent change?

Post by spankyspangler » Sun, May 16, 2021, 2:07 AM UTC

chaosharmonic wrote: post #199

temp8964 wrote: post #57

Earlier quoted context omitted.

There is nothing new about Russia interfering with foreign elections. What is new is that a presidential candidate can be accused of colluding with Russia. You can't just go back to say "Russian collusion" means something else, when in fact the mainstream media and the Democrat Party members at the time was claiming Trump colluded with Putin.

It's also new for a presidential candidate to literally ask for their assistance on live TV.