Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Encrypt your Google chats and make the NSA sad

github.com

Post reply on HN
Print view View original

61–70 of 195 posts

Re: Encrypt your Google chats and make the NSA sad

#61

Post by 6d0debc071 »

davidjgraph wrote: post #41
freshhawk wrote: post #8

This would definitely be the level of security that falls under this statement from Snowden: Q: Is it possible to put security in place to protect against state surveillance? A: "You are not even aware of what is possible. The extent of their capabilities is horrifying. We can plant bugs in machines. Once you go on the network, I can identify your machine. You will never be safe whatever protections you put in place.…

This doesn't make sense to me. There are two main stages to having your data analysed by such an organisation. In the first stage everybody's data is run through, let's call it, pattern matching, to narrow down a very specific number of cases that have the highest likelihood of doing, having done or planning "something". In the second stage, you might apply more resources to gather more data from your suspects, for e…

I was wondering the opposite: How do you get as many people as possible to trigger the match so that it becomes a losing proposition to do this sort of traffic monitoring.

Re: Encrypt your Google chats and make the NSA sad

#62

Post by adventured »

leot wrote: post #57

Google, Yahoo, and Microsoft could all make the vast majority of email vastly more secure by implementing PGP-by-default. Send: You enter an email address, a little key appears beside it if it's recognized as having an associated public key, and a warning appears that the email can't be encrypted if an additional email address is entered that doesn't have an associated key. Receive: email encrypted with your public k…

This will only work for average email users if you can pull it off without ever using any of the industry language, or requiring anybody to ever actually do anything with a key. Find other descriptive language to use, and make it require zero extra effort, and you've got a winner.

Re: Encrypt your Google chats and make the NSA sad

#66

Post by 6d0debc071 »

leot wrote: post #57

Google, Yahoo, and Microsoft could all make the vast majority of email vastly more secure by implementing PGP-by-default. Send: You enter an email address, a little key appears beside it if it's recognized as having an associated public key, and a warning appears that the email can't be encrypted if an additional email address is entered that doesn't have an associated key. Receive: email encrypted with your public k…

Most people aren't going to get themselves into webs of trust - and certificate authorities and webmail servers and the like can be compromised. The only thing you can vest any significant trust in, with NSLs and so on flying around, is what's on your computer.

And, if you want to be really sure, what's on a computer with no radio protected by an airgap into which you never insert removable media....

Re: Encrypt your Google chats and make the NSA sad

#67

Post by rorrr2 »

JJAbhrams2244 wrote: post #58
rorrr2 wrote: post #28

Earlier quoted context omitted.

"We can plant bugs in machines" doesn't mean that they can do it remotely. That would actually be a serious serious backdoor and would put all kinds of businesses in mortal danger - banking, credit card, online shopping, etc. Imagine what one rogue NSA employee can do with that kind of backdoor access. So ENCRYPT EVERYTHING, and don't believe this propaganda. If your hardware has a backdoor, you're fucked no matter w…

I see no reason that this couldn't be true. There are probably many checkpoints to access the backdoors. The reason they don't use it is because once they admit it, there would be a huge backlash

Assuming all hardware has backdoors (an unlikely scenario) and giving up basic encryption that can protect you in case when there are no hardware backdoors (a likely scenario) is counterproductive.

I see no reason that Zeus shouldn't exist. Should I be worried that he would strike me with a lightning? Not until I see evidence of Zeus existing.

Re: Encrypt your Google chats and make the NSA sad

#68

Post by guelo »

leot wrote: post #57

Google, Yahoo, and Microsoft could all make the vast majority of email vastly more secure by implementing PGP-by-default. Send: You enter an email address, a little key appears beside it if it's recognized as having an associated public key, and a warning appears that the email can't be encrypted if an additional email address is entered that doesn't have an associated key. Receive: email encrypted with your public k…

That would probably break email search and ads.

Re: Encrypt your Google chats and make the NSA sad

#69

Post by patrickaljord »

icelancer wrote: post #52
gnaritas wrote: post #48

Earlier quoted context omitted.

Glenn Greenwald is a partisan hack, his opinion is worth basically nothing.

Partisan towards... what? He is a very strong civil libertarian.

Here's Glenn either being intellectually dishonest or intellectually incompetent.

http://www.samharris.org/blog/item/dear-fellow-liberal2

Post reply on HN