Live data from Hacker News

Prism Break

prism-break.org

161–170 of 205 posts

Re: Prism Break

#161

Earlier quoted context omitted.

People still puts locks and alarms in their house, even though they could avoid being burglarized through community watches and educating the public about the morals, ethics, and long term costs of stealing people's stuff.

Is it a crime for a hungry man to steal bread? None of your proposed solutions would address his needs. America's government is so corrupt it is no longer democratic. Watch this video: https://www.youtube.com/watch?v=mw2z9lV3W1g

...yes, it is.

Re: Prism Break

#162

Earlier quoted context omitted.

You can always run Wireshark to see if/when they phone home.

Unless they frequency-modulate the packets they send home to transmit additional data and you'd probably never figure it out looking at Wireshark output that they are sending more than meets the eye. This is a simple trick; there are probably many other I can't even think of.

I've never heard the term "frequency-modulate" applied to software, and Wikipedia only knows about the radio kind of modulation. Can you please explain what this is?

Re: Prism Break

#163
post #76

While I understand and sympathise with the compulsion to resist surveillance in this practical, technological way, I think it might be the wrong reaction to the information. It's typical of techie people to seek technical solutions to social problems, and this is one such case. It may well be possible to mitigate their ability to watch you by wearing enough tin-foil hats. Even if you succeed, all you've achieved is t…

I'm starting to think people should begin to create "crypto-selves". I've seen a lot of talk saying essentially "get off facebook! get off gmail!" But that's a lot of persistent effort even for fairly technical people. Plus even in secure, anonymous environment interacting with your real life friends, purchasing your favorite books on amazon etc will reveal who you are anyway. In non-web life we have private and publ…

The problem is that the selves bleed into each-other. For instance, making up a completely different city to claim you live in while still talking to other people from your own city is hard.

If the NSA spots half a dozen people on Crypto-Reddit's /r/boston who claim to be from San Francisco, New York, Seattle, Chicago, rural Tennessee, and Miami respectively, then it knows it has probably found six actual Bostonians.

Individuals are in many ways an expression of our context. To remove all information leakage that would tell what our context is or, more simply, who we are, you basically have to remove the person entirely. Even 4chan-grade anonymity won't cut it, since writing style and narrative threading can be used to extract some sense of pseudonymity from even a /b/ thread.

Re: Prism Break

#164

Earlier quoted context omitted.

People still puts locks and alarms in their house, even though they could avoid being burglarized through community watches and educating the public about the morals, ethics, and long term costs of stealing people's stuff.

Is it a crime for a hungry man to steal bread? None of your proposed solutions would address his needs. America's government is so corrupt it is no longer democratic. Watch this video: https://www.youtube.com/watch?v=mw2z9lV3W1g

> America's government is so corrupt it is no longer democratic.

Unfortunately yes, absolutely.

And you begin to see a direct cause-and-effect relationship between the level of corruption and the "quality" of the policy decisions that are made, example: The Iraq war. Another one: the "inertia" regarding climate change action (it's just corporate power effing it all up for us).

It really has a grave effect on all human beings on this planet. It's clear that this has become a fundamentally global problem.

Re: Prism Break

#165
post #24
post #19

Earlier quoted context omitted.

Although proprietary software may be easier for a government to compel to be modified to add tracking, it still runs the risk of being noticed in most reasonable cases, and there is in fact no evidence that any Western government is doing any such thing. It does increase the chance that you are being tracked due to incompetence, but I don't think this is particularly likely for such well-known software. True, there i…

You seem to be assuming that tracking only happens either through incompetence or government mandate? Companies also track users to make money . Just today there was the news that twitter is starting to track its users, for example (at least it is opt-out).

Twitter has been and will continue to track users' (and possible non-users') external web activity through their embedded buttons on so many pages. They're now beginning to sell that data, and that's what you can opt out of.

Re: Prism Break

#166
post #133

Earlier quoted context omitted.

https://en.wikipedia.org/wiki/NSAKEY

https://www.schneier.com/crypto-gram-9909.html#NSAKeyinMicro... Let's be honest, Why would NSA force MS to add a key like that, in such a way?

Up until 2000, export control regulations made it illegal for a U.S company to release cryptographic tools internationally with a key size greater than 40 bits. Lotus Notes got around this by making a deal with the NSA to let them encrypt an additional 24 bits with an NSA key to allow greater security from everyone else but let the NSA still access things easily. At least some have speculated the Windows NSAKEY was for a similar purpose.

Re: Prism Break

#167
post #43
post #13

I really do not understand the thought process behind this page: Why is chromium not listed as a free alternative to Chrome/IE/Safari? What components of DDG are partly proprietary and which are not? (not a criticism of DDG just this page) What is a "free search engine" anyway? Why are Firefox and Thunderbird listed alongside Iceweasel and Icedove? How do you list OpenNIC if they have not adopted an official privacy/…

> What components of DDG are partly proprietary and which are not? (not a criticism of DDG just this page) What is a "free search engine" anyway? These parts are open source: https://github.com/duckduckgo . I've added this note to PRISM Break. A free search engine would be a search engine where users have the freedom to run, copy, distribute, study, change and improve the software. YaCy fits this description, but the…

Would you please add rsync.net to the "cloud storage" section ?

If you're not familiar:

http://www.rsync.net/resources/notices/canary.txt

We explicitly support duplicity and git-annex which makes us very versatile for secure cloud storage.

Re: Prism Break

#168

Earlier quoted context omitted.

I know I can select a webmail provider that is not beholden to the United States of America's government. If you think Google is the only company that can secure webmail, I bet you are an employee.

If you really bet that, it says more about you than me. But anyways: what does it matter if your webmail provider isn't beholden to the government, if a suitably motivated teenager can read your mail because of software vulnerabilities? Google Mail isn't likely to be more secure just because Google is inherently better at building software than anyone else. Rather, it's because they allocate more resources to the pro…

[deleted]

Re: Prism Break

#169
post #74

Let's pretend I'm the NSA. I don't care right now about what your saying, I just care about who you associate with and where you are hanging out. If those raise my suspicions then I will also track the where/who connections and create a map of activity. Those dots might start to line up and create further interest. If suspicions are founded as actual threats I will do anyone of the following and probably more. FISA r…

You completely missed the point. The NSA is tracking everyone. They're building a database of everyone's activities. Nobody knows who the "terrorists" are going to be 20 years from now. The moment you become a suspect, they can bring up everything they've recorded you saying or doing and use it against you. The NSA is above the law and the rules they follow are set by a secret court appointed by a single man who has…

If you are a suspect I don't care if you encrypt your internet surfing habits because I have a lot of tools at my disposal, that was my simple point.

Threads like this are silly because actual suspects already know this, and average joe is getting a false sense of security.

Re: Prism Break

#170
post #153
post #107

Earlier quoted context omitted.

Jitsi supports ZRTP and Jingle (experimental).

Ive tried it, it sucks and crashed too many times, bugs reported, but gave up. Jitsi also doesnt run on our phones last time I checked. Basically we have these smart-phones, awesome hardware, good devices, but we cant use them to talk confidentially with our friends.

You are on Hacker News. Go fix it then or write a better one. Just keep in mind that you must make it open and non-proprietary, or else it will suffer the same fate as Skype. You see the conundrum here?

Maybe help project Tox? https://github.com/irungentoo/ProjectTox-Core/blob/master/do...

Post reply on HN