111–116 of 116 posts
I think this is the saddest aspect of these spying programs and the ensuing paranoia... it actually might discourage people from using encryption or anonymizing proxies... for fear it will get them on a watch list. If you start using PGP for all your email, then you by inference "have something to hide". Brilliant logic. What a mess.
Earlier quoted context omitted.
Also, if you don't want to run a node on your home network/machine http://cloud.torproject.org/ makes it ridiculously easy to set up one on EC2 (for as little as ~$3/month)
I'm running one of these on my free EC2 account and can attest to the ridiculously easy part. It took me < 5 min to setup. If you want to avoid paying any fees, just have to make 1 change to the torrc file bandwidth settings. Also, make a great ubuntu sandbox to play with. For example, I'm running a joomla test server with it.
Earlier quoted context omitted.
I'm running one of these on my free EC2 account and can attest to the ridiculously easy part. It took me < 5 min to setup. If you want to avoid paying any fees, just have to make 1 change to the torrc file bandwidth settings. Also, make a great ubuntu sandbox to play with. For example, I'm running a joomla test server with it.
I also am running a Tor relay on EC2, and I was under the assumption that I wouldn't have to worry about charges with a stock install. Can you provide more detail about what I should do to my instance to prevent charges?
This will reduce the monthly usage to 12GB and keep you under the 15GB limit. I've been running this bridge for a few months now and have never gone over.
Earlier quoted context omitted.
I suppose you need a large carrier for a large message to be hidden. Very high resolution home movies maybe? I assume you can't use content that is already public, as then the original can be compared with the modified version to prove that hidden data exists.
porn. It gets transcoded enough that the stego could fly through as just another lossy transcoding. Better yet, lossy transcode it to something and back, then stego, as long as your target has a copy of the same transcoder and knows what you're using as reference. You should also be careful to strip metadata as to which transcoder you're using. They're PETABYTES of the stuff floating around. And if you're willing to…
Since I (and the majority of global internet users) are not "US persons", they're claiming they're entitled to intercept and store all my communications anyway - so my personal reaction to this is going to be to increase the use of tor and crypto for random everyday stuff. I'll start GPG encrypting email to anybody I know will be able ro deal with it. I might even start randomly mailing GPG encrypted mail for no reas…
"I will start GPG encrypting email to anybody I know who will be able to deal with it" As sad as it is to say, lets be honest and admit that this is a fairly small number. How long do you think it will be till your less committed friends get tired of decrypting your emails and just ignore what you send? Make sure you only pick people that use actual email clients because gpg and Gmail is no fun. As far as the "Thomas…
Earlier quoted context omitted.
It makes sense for the NSA to run exit nodes for the same reason it makes sense for the U.S. Office of Naval Research to have funded its creation and for the U.S. State Dept. to heavily fund its upkeep. There is a vested U.S. national security interest in residents of hostile regimes to be able to freely access the Internet without being traced, even with the knowledge that it may be used to make it more difficult fo…
If you look at the history of anonymity networks, you'll notice that tor totally replaced mixing networks. Considering the fact that mixing nets are more secure against government, with regards to email, it is interesting that the u.s only invests in and promotes tor. But in a world where individuals have access to extremely powerfull tech, something has to be done. I think the solution for privacy might look like so…
And I agree -- high latency systems are far more secure. Something with 5-10 day latency should be secure under a lot of assumptions. Sadly the old mixmaster code is lame, and mixminion never really took over.