[deleted]
Prism Break
41–50 of 205 posts
Re: Prism Break
#42If you're going to continue using Google Mail, it's a dumb idea to deliberately switch away from Chrome. The connection between Gmail and Chrome is among the more carefully guarded TLS connections on the Internet.
How does Google create one of the most carefully guarded TLS connections? Should other sites model their implementation?
I think it uses perfect forward secrecy, unlike almost any other SSL connection:
http://blogs.computerworld.com/encryption/22366/can-nsa-see-...
Prefect forward secrecy is a lot more secure since if google's private key were compromised any traffic -- including traffic captured in the past -- would still be secure (baring some further compromise).
Each connection has 2 possibly transient negotiated public/private key pairs made just for that connection. In theory, google could store all these pairs as well and they could be compromised, but that adds up to a lot more ifs.
As near as I can tell, the extra computation required to do perfect forward secrecy is a large part of why its not more frequently implemented.
Re: Prism Break
#43I really do not understand the thought process behind this page: Why is chromium not listed as a free alternative to Chrome/IE/Safari? What components of DDG are partly proprietary and which are not? (not a criticism of DDG just this page) What is a "free search engine" anyway? Why are Firefox and Thunderbird listed alongside Iceweasel and Icedove? How do you list OpenNIC if they have not adopted an official privacy/…
> What components of DDG are partly proprietary and which are not? (not a criticism of DDG just this page) What is a "free search engine" anyway?
These parts are open source: https://github.com/duckduckgo. I've added this note to PRISM Break. A free search engine would be a search engine where users have the freedom to run, copy, distribute, study, change and improve the software. YaCy fits this description, but there are currently not a lot of people using YaCy at the moment.
> Why is chromium not listed as a free alternative to Chrome/IE/Safari?
Chromium will be added once I get a list of good Chromium extensions that rival the Firefox addons.
> Why are Firefox and Thunderbird listed alongside Iceweasel and Icedove?
Iceweasel and Icedove are difficult to install on Windows and OS X. If users are unable to switch to Linux, Firefox and Thunderbird are still really good options.
> How do you list OpenNIC if they have not adopted an official privacy/anonymization policy?
Good point. OpenNIC will be removed for the time being.
>Speaking of official privacy policies; I see that you tried to load /analytics/piwik.js. Where is the privacy policy for prism-break?
PRISM Break does not track the last 2 bytes of your IP - e.g. 192.168.xxx.xxx. A Privacy Policy is on the todo list.
Re: Prism Break
#44Interesting, I learned about the Autistici/Inventati collective only from this link, even though they seem to already be a large (>1k users) organization and in existence for a decade now. Useful info.
I've signed up for their email service and will now use it as my primary email id.
Re: Prism Break
#45For cloud storage I also recommend https://mega.co.nz/#fm
Re: Prism Break
#46It is important to mention that "self-hosted" by itself, does not make one Prism-Free.
In most cases, if the hosting platform provider will be asked to provide access to the infrastructure, it is most likely that SSL private keys that stored on the virtual machine will be taken along with other data.
Re: Prism Break
#47Several of these suggestions seem somewhat disingenuous - e.g. many of them to be about free software more than actual concerns about tracking, as reflected in the labels "Proprietary" and "Free alternatives". In particular: - None of the proprietary browsers will track you - well, beyond what's specified in the privacy policy. Two of the alternatives are Tor applications, but the other two are Firefox (which provide…
In relation to OSX, Windows, Chrome, IE, etc, I thought it was more to do with the fact that Apple, Microsoft and Google have all willingly turned over data to the feds...
Re: Prism Break
#48New poster here, but someone needs to say this. Tor is amazing and great, but if you don't think the US/NSA don't know how to run their own Tor hops and cache the very same traffic that you think is on "anonymous" servers. . . then you have a more serious problem of understanding how this works. It's easy to run Tor servers. Even easier when you have an NSA budget. Also, ask yourself why wouldn't they be running thousands to tens of thousands of them knowing that most of that traffic is "suspicious".
Be safe. Not ignorant.
Re: Prism Break
#49Several of these suggestions seem somewhat disingenuous - e.g. many of them to be about free software more than actual concerns about tracking, as reflected in the labels "Proprietary" and "Free alternatives". In particular: - None of the proprietary browsers will track you - well, beyond what's specified in the privacy policy. Two of the alternatives are Tor applications, but the other two are Firefox (which provide…
> None of the proprietary browsers will track you. Can you elaborate a bit on this, how do you know they won't? My default assumption is that anything I can't see the source code of and compile myself is compromised.
>My default assumption is that anything I can't see the source code of and compile myself is compromised.
Did you also write and compile the compiler that compiled your compiler?
Re: Prism Break
#50Earlier quoted context omitted.
I was wondering the other way. If you just open Chrome in incognito mode and search Google without logging in, is it very much different from DDG? Except for the results quality, of course. Is the big difference being your IP tracked with the searches by Google?
Google will track your IP and probably store the searches you made alongside it. These can easily be linked back to your google accounts. Duckduckgo claim not to log your searches.
Yes but how much is a claim worth? Anything centralized is at risk to be tracked by the government. It's not as if Google put in the TOS that the NSA is monitoring their data.