Well this is big news, even if your not a tech person...
12 years ago
General
http://www.theguardian.com/world/20.....codes-security
I'm honestly not sure what to say about this, take it as you will but most encryption programs are now null and useless... What do you guys think? Also I'm not here to spread fear, im hear to spread the news and give you knowledge.
Have a good day everyone.
I'm honestly not sure what to say about this, take it as you will but most encryption programs are now null and useless... What do you guys think? Also I'm not here to spread fear, im hear to spread the news and give you knowledge.
Have a good day everyone.
FA+

Why, why in hell would that matter? If you've nothing illicit to hide, you've not reason to be pissed. It's not like they deliberately allocate time to stalk innocent people.
[you isn't directed anywhere specifically]
Among other things, the program is designed to "insert vulnerabilities into commercial encryption systems". These would be known to the NSA, but to no one else, including ordinary customers, who are tellingly referred to in the document as "adversaries".
"These design changes make the systems in question exploitable through Sigint collection … with foreknowledge of the modification. To the consumer and other adversaries, however, the systems' security remains intact."
Here's another question, then: IF the government really does have unfettered access to all this information, and has been collecting it for years and years, and we're only just now becoming aware of it ... how would we judge the government's handling of that information, in hindsight? Have they oppressed us? Have they turned into thought police? Some would say they have .. but most wouldn't.
The problem with giving any entity that much power, no matter how responsible they may really be, is that it will eventually corrupt that entity and turn them from the best intentions.
It's all to find those who DO have something to hide...
The government is constantly lying about what its doing. The people want answers at this point...
They're lying for a reason.
The government isn't the enemy.
The expectation of privacy is also very important for business and financial transactions, medical records and prescription drug use, not to mention for the protection of government communications themselves. If the technology by which they do this encryption gets into the wrong hands, or if the data they have collected is leaked to the wrong people, all hell will break loose. Hell, we flip out every time some jerk hacks into a bank and steals credit card numbers, and/or they steal our money. That's just a drop in the bucket of privacy violation compared to what the government says it is doing.
"They who can give up essential liberty to obtain a little temporary safety, deserve neither liberty nor safety." -- Benjamin Franklin
And that's just wrong.
We shouldn't be monitored 24x7 by people we don't even know. It doesn't even need to be more complex than that. But even if that's not enough reason, let's explore the various kinds of fundamental privacy we enjoy but don't often think about or take for granted:
*) Would you be okay with the government putting a camera in your house?
*) Would you be okay with the government listening to every phone conversation you have?
*) Would you be okay with the government knowing whether or not you (or a female you're close to) are taking birth control pills and when your next period's gonna be?
*) Would you be okay with the government knowing what you look like naked?
Now replace the word 'government' with 'criminal', 'stranger', 'neighbor', 'employer', and 'parents'. Because all it takes is one disgruntled employee like Eric Snowden to take that information the government has and make it accessible to the people you don't want having it (like me ^_^). I'm not comfortable with any of those possible outcomes, so I really don't want them having that information in the first place.
You might say: "but they're not putting cameras in our houses, that's just silly; they're just decrypting our web communications, and recording who we're making phone calls to and when, but not the actual phone conversations themselves." True, but 10 years ago they weren't decrypting our encrypted communications. 10 years before that they didn't know who we were calling and when and why, or what medications we were taking. These things weren't very well centralized. Now they are. So 10 years from now, maybe they will be peeking into our houses without us knowing. Maybe they will be recording every phone conversation. What will they do with that information? Well, hopefully nothing, 'cause we're all law-abiding citizens, and they're all good people in the government, right? But even if we trust them with all that (that's a big if!), what about the people it could accidentally leak out to? What about some disgruntled government employee who has a bone to pick with the world? Or with furries? Or with me specifically?
For me, I don't want strangers knowing what products I buy, what my hobbies are, what anime I'm watching, what my friend and I are fighting about in email, what my sleep schedule is, what family dramas are unfolding, whether I'm thinking about switching jobs, what my financial passwords are, what kind of massages I like, what my identity codewords are, what my PayPal password is, what my social security # is, .... all of this is easily discerned if the 's' in https becomes moot. Yes, some commercial entities know some of this data (but not all of it), and yes, internet sites are hacked all the time and little bits of this information leak out occasionally or be abused by evildoers. But that's different than all of this information leaking out simultaneously, which is basically what's happening with the government decrypting all this data and storing it somewhere for 'safe keeping'.
Think about the many things you transmit over secure channels, such as anything with 'https' at the front. Now imagine that getting into the wrong hands. That's what we're talking about. If you don't want it escaping into the wrong hands, you should resist it being collected on such a massive scale in the first place.
Point is, it doesn't have to be something you've done wrong, or bad, or illegal that you want to cover up. It could simply be embarrassing, irrelevant, inconvenient if discovered (like a password!), or just "none of your business" kinda things that you'd prefer to keep to yourself and your loved ones. No single entity should have so much knowledge about you except you, and the people you trust. If you trust every single person who works for the government to know all this information that you exchange with friends and businesses and keep it secure, then you're right, there's no reason to protect this myth we call "privacy". If you've never kept a single secret in your life, then you also have no reason to worry about all your web activity being monitored (or other things like cameras, which will inevitably follow if we just roll over every time the government chips away at our privacy).
(PS - I didn't really mention it, but the potential for rampant identity theft is immense, and in today's society, our identity is extremely important to how we live day-to-day .. arguably more important than who we're calling or what we like to do with our time)
Government people just don't get paid to stalk you, ok?
Are you saying that it's ok for the government to collect as much data as it wants on you, so long as it doesn't look at that data?
The sheer act of collecting it without approval is an intrusion on your privacy. Whether a human flips through your files daily, or a computer does it, doesn't make a difference.
I'm tired of this
I want to be clear: I'm not picking on you, I'm not upset with you or judging of you. You're asking the right questions and making cases in the right way to draw contrast on this issue.
Your thoughts?
Reagan's no saint, either, but this really got ugly with Nixon and just snowballed from there.
They still serve to protect us from everyone but the government. At least until the 'adversaries' (or anyone really) get a hold of this technology or data. Then you'll be right.
It'll be interesting to see where this drives cryptology technology. There's already been some fascinating research on the use of quantum computers to do on-the-fly decryption far beyond what even the NSA is capable of. Really it's only a matter of time before 256-bit AES is as useless as you state. Heck, the encryption we were using 10 years ago is already useless .. will we reach a point where the march toward 'unbreakable' consumer-grade encryption is matched or overtaken by the march toward consumer-grade technology to defeat it?
Toshiba has quantum cryptography available to consumers? Really? O.o
I read through the article, it seems good but the title may be a bit sensationalist...
I didn't realize they were that far along already. 64 end users is probably just the beginning. Hell, the infant Internet was only able to have something like 16 nodes, and started out with just 4 (although they were in geographically different parts of the US). I'm sure this quantum thing will grow pretty rapidly just from demand that the NSA leak caused (ooo, could there be a conspiratorial connection? Quick, dig up all the NSA employees who are making tons of money on Toshiba stock! *grin*)
The thing is, even if the data can't be intercepted without detection, the interception detectors (and the receivers themselves, and the transmitter that encrypts the data) need to be bullet-proof or they'll be the targets of attack. I once saw a seminar TEN YEARS AGO describing how VPNs can be infiltrated without detection (Virtual Private Network -- a very similar concept with more rudimentary technology designed to detect when the signal is being intercepted or tampered with). I'm holding out for a counter-article from some hacker martial artist describing how easy it would be to get the data in transit.
Or put another way: anytime some claim comes out saying "doing X is impossible", it's later shown to be possible. Case in point: teleportation.
I think the point I'm trying to make is something you've also touched on: absolute privacy is a myth. When you live in a community, you give up some degree of privacy in exchange for some greater good. Franklin would say that giving some up for the sake of safety isn't good enough. What his quote didn't cover (though his books might) was that there may be other elements to the calculus that does make the small sacrifice better overall. Perhaps it's just an improvement in convenience, or efficiency, or life expectancy, or clearer communication, or better entertainment (?!), but ... it can add up and make for less-than-absolute privacy becoming more tolerable.
I'm probably not making sense, I'm just trying to explain it in the best way I can and I'm sorry that I'm not good at explaining things even though I have a grasp on whats being talked about and have good knowledge on whats going on. I really hope I'm not sounding weird... ^^;
you just like informing people but worry you scare people :3
thats a good thing so dont be upset about it :D