Live data from Hacker News

Inside the Operating System Edward Snowden Used to Evade the NSA

wired.com

71–80 of 83 posts

Re: Inside the Operating System Edward Snowden Used to Evade the NSA

#71
post #40
post #39

Earlier quoted context omitted.

I don't quite know how this works, so forgive me if this is a stupid question, but couldn't someone just take the difference between your inbound and outbound tor traffic to find how much traffic originates from your computer?

They might know how much, but they wouldn't know which traffic was yours.

They can see all of the packets in both directions. Which mean they could tell when more was coming out than being relayed in.

Re: Inside the Operating System Edward Snowden Used to Evade the NSA

#72

Earlier quoted context omitted.

What is Tails, if not an operating system?

A distribution of the Linux operating system. It's a Debian distribution with some userspace tools bundled.

A distribution of an operating system, is itself, also an operating system.

Re: Inside the Operating System Edward Snowden Used to Evade the NSA

#73
post #64
post #63

Earlier quoted context omitted.

> Encryption keys can exist in memory for up to a week in live memory with power on. No. After some high-enough RAM area contained the keys and you keep it powered and your OS uses much less physical RAM than physically available there's no hard limit. Just forget the "week."

Updated comment for HN pedanticism.

You really should replace the words 'for up to a week' with 'indefinitely'. Mentioning a time limit at all is misleading in that context. This isn't pedantry: it's mere correctness.

Re: Inside the Operating System Edward Snowden Used to Evade the NSA

#74
post #62
post #53

Earlier quoted context omitted.

Data can be retrieved from DRAM not after weeks (your claim is "even if you shut your computer down (...) Your encryption keys can be in your computers memory for weeks") but only http://en.wikipedia.org/wiki/Cold_boot_attack "in the seconds to minutes after power has been removed." The reason is explained here: http://en.wikipedia.org/wiki/Memory_refresh And even the electrons from SRAM, which doesn't need refreshes…

Thanks, this is true. Encryption keys can exist in memory for up to a week [edit: or longer] in live memory with power on. This is well after they've been used on the machine, or say after you close your Truecrypt volumes. The vast majority of people rarely shutdown their laptops for extended periods of time and often just suspend to disk, instead of a full power-off. This is why it's good to power down or sdmem when…

Why would the encryption keys sit around in RAM? Properly designed cryptographic software wipes the keys when they are no longer needed.

Re: Inside the Operating System Edward Snowden Used to Evade the NSA

#76
post #62

Earlier quoted context omitted.

Thanks, this is true. Encryption keys can exist in memory for up to a week [edit: or longer] in live memory with power on. This is well after they've been used on the machine, or say after you close your Truecrypt volumes. The vast majority of people rarely shutdown their laptops for extended periods of time and often just suspend to disk, instead of a full power-off. This is why it's good to power down or sdmem when…

Why would the encryption keys sit around in RAM? Properly designed cryptographic software wipes the keys when they are no longer needed.

In real life, keys actually can unintentionally remain in RAM even if in the ideal case they shouldn't. And you want more than just the keys to be wiped: your secrets you want to keep, the reason you decided to use Tails. And the fact that the Tails cares about implementing RAM wiping is the top post from dmix.

Re: Inside the Operating System Edward Snowden Used to Evade the NSA

#77
post #51

> How do we now it isn’t some government plot designed to snare activists or criminals? A couple of ways, actually. One of the Snowden leaks show the NSA complaining about Tails in a Power Point Slide; if it’s bad for the NSA, it’s safe to say it’s good for privacy. And all of the Tails code is open source, so it can be inspected by anyone worried about foul play. It does not follow that either, or both, of these poi…

Yeah, safe and open source are not necessarily synonymous. (see openssl "heartbleed")

Re: Inside the Operating System Edward Snowden Used to Evade the NSA

#78
post #65

Earlier quoted context omitted.

A more cynical person would say you've not worked in many corporate environments ;)

Good thing there are no cynics here. ;) x2

Hi! I am writing this on my win Xp desktop from my corporate offices. Nice to meet you

Re: Inside the Operating System Edward Snowden Used to Evade the NSA

#79
post #61
post #50

Earlier quoted context omitted.

For some perspective, this was back in the days where it was actually quite a bit of work to get get linux configured and running correctly on your at home desktop. Knoppix was quite a miracle.

Knoppix came out in 2000, a lot of time had passed since it was "actually quite a bit of work to get get linux configured and running correctly on your at home desktop ." If you were mot using a thinkpad or ibook a laptop could still cause some trouble.

I started using linux around 2004 and it still required quite a lot of technical knowledge to get working. Drivers were a big issue around sound, graphics, and network.

Re: Inside the Operating System Edward Snowden Used to Evade the NSA

#80

Earlier quoted context omitted.

What is Tails, if not an operating system?

A distribution of the Linux operating system. It's a Debian distribution with some userspace tools bundled.

This depends. technically linux isn't an OS, just a kernel (hence the whole GNU/linux stuff). But even the GNU + linux isn't really a full OS. I feel calling a distribution an OS is pretty valid (though it is a member of the linux family and based off of debian).

I guess the main thing would be the OS is everything which isn't an application, and Tails is definitely not a single application, though it is specialised.

Post reply on HN