LinuxQuestions.org

LinuxQuestions.org (/questions/)
-   General (https://www.linuxquestions.org/questions/general-10/)
-   -   NSA has circumvented much of internet encryption (https://www.linuxquestions.org/questions/general-10/nsa-has-circumvented-much-of-internet-encryption-4175476133/)

rdx 09-21-2013 07:07 AM

Quote:

Originally Posted by Arcane (Post 5031189)
Then you are insane and wish for death if you really plan going against them alone or in small group..ye i agree you can prepare for home visit etc. but that is defense move not offense move. Although the best defense is not offense but illusion that you are nothing special so they will not waste time on you.

Yup..internet just prooves there is no 100% freedom. Your price for it is giving them data. If you want to be safe either give them incomplete data or misleading fake data or become decoy.
Don't be so sure about death as escape of this O-space. They are not that stupid. They probably know answer to if soul exists or not therefore might give you false premise of reincarnation and how to manipulate it to their advantage. Again - we might live only once but if we do it right it is enough.

Ummm, I'm not sure who you called insane but your ideas on reincarnation suggest the pot is calling the kettle black. (lol) Besides, death isn't so bad after you get old. I'm convinced that old age is nature's way of easing you into the idea of accepting death. Every year more of your body falls apart and you get more aches and pains but the worst part is you know its all downhill from here.

tangle 09-21-2013 09:25 AM

Quote:

Originally Posted by H_TeXMeX_H (Post 5031885)
As much as you want these things to be equal so you feel good about using social media, they just aren't the same.

I do not use social media. But then again I do not tell myself I am safe when I am not.

tangle 09-21-2013 09:27 AM

Quote:

Originally Posted by rdx (Post 5031956)
Blah, blah, blah. Here's an idea: Less complaining and more solutions. Anyone can criticize but constructive criticism is much harder. And remember that it is not a simple problem so no simple solution is going to help.

I really want to know if they have cracked, what they have cracked and how did they do it. Until that is explained in detail, I can not consider anything safe.

H_TeXMeX_H 09-21-2013 09:56 AM

Quote:

Originally Posted by rdx (Post 5031953)
Uplifting message. Impractical in reality but a reassuring fiction. Have you noticed that Google grabs your traffic with three trackers ON THIS SITE. GoogleAnalytics is nearly everywhere. We are being attacked from every direction and we have been lulled into complacency by decades of "spin." Everyone has your Social Security number, everyone. You can thank the Republicans for that. Voter ID laws tighten the noose. In short, there is no hope for us, but we're nearly extinct from global warming so it'll all work out in the end.

Yes, Google anything is completely disabled in noscript, and I know it is everywhere.

I don't vote.

I don't give anyone my SSN unless they absolutely need it.

They will have to call it Global Climate Change in order to keep extracting money from the fools that believe in such nonsense.

sundialsvcs 09-21-2013 09:58 AM

I don't regard the US National Security Agency as "the enemy." What concerns me is any government agency, especially a very sensitive agency like this one, operating without aggressive and effective oversight. No one under any circumstances is permitted to "lie to Congress," and it is also unacceptable for any Member to "lack the proper security clearances" (oh, how convenient ...) to know exactly where money is being spent and why.

Face it: if we have #CLASSIFIED# million ordinary-IT-Joes with "top secret crypto" clearances, we can afford to have 650 more.

The problem, especially, is the phalanx of "military contractors" who swallow #CLASSIFIED# dollars a #CLASSIFIED# on programs ostensibly so "secret" that, if you so much as breathe the name of a program in the newspapers, they'll jail you for 120 years. "If the cat's away ..."

Esteemed Generals including Butler and (President) Eisenhower specifically warned that "war is a racket," and that things were being done that (a) not only had no bona-fide military purpose, but that (b) would siphon-off the very lifeblood of the nation in the pursuit of irrelevancy ... corrupting every legislator with its Midas touch. This is precisely what has happened, and, IMHO as well as Eisenhower's, it represents an altogether new type of threat: "the enemy Within." As I have said, human nature.

---
And, by the way, it is senseless to vilify someone with arguments like "if you had nothing to hide, you wouldn't worry." Knowledge is power, and it's also extremely lucrative. I have no doubt that contractors to the NSA have found a way to siphon the data that (they are siphoning, so that) NSA is getting, to sell that data for commercial purposes ... again, all without scrutiny or meaningful safeguards. I assert this, once again, simply because I know that human nature is such that, if a vulnerability exists (especially a profitable one ...), it will be exploited. Especially if that vulnerability is secret, both to the public and to the Congress (and, who knows, maybe even being done under-the-nose-of NSA?).

tangle 09-21-2013 10:25 AM

Quote:

Originally Posted by rdx (Post 5031953)
Everyone has your Social Security number, everyone. You can thank the Republicans for that.

Really, according to this, it was an overwhelming Democrat act. Without the illegal Social Security Act, there would be no Social Security.

Arcane 09-22-2013 01:40 PM

Quote:

Originally Posted by sundialsvcs (Post 5032037)
I don't regard the US National Security Agency as "the enemy."{...}

Even if evidence suggests or shows otherwise? Afterall..they have resources to pull of such stunts. What can average Joe do? Like for example if we wanted to find someone what can we do? Even with internet existance it is very hard to use in such way to find specific persons and if we will try it will be considered terrorism. It will be like searching for needle in needle stack instead of usual needle in hay.

D.V 09-25-2013 08:18 AM

Not sure if anyone though about this but could NSA be lying about breaking encryption to discourage us from using it. After all, they broke the law on surveillance of USA citizens. Second, they're human, and humans lie.

H_TeXMeX_H 09-25-2013 08:45 AM

Quote:

Originally Posted by D.V (Post 5034524)
Not sure if anyone though about this but could NSA be lying about breaking encryption to discourage us from using it. After all, they broke the law on surveillance of USA citizens. Second, they're human, and humans lie.

They have discouraged me from using encryption made with the help of the NSA. I do, however, still use encryption, and maybe even more than I did before. At least it has forced me to study up on cryptography a bit and decide on which algorithms to use and how.

Steve R. 09-25-2013 09:53 AM

Quote:

Originally Posted by D.V (Post 5031369)
Besides the only people who should worry about the NSA spying on our privacy are the ones who want to harm us.

That is a massive slippery slope. Who are those people? They can be anyone. As an example,The IRS is currently under scrutiny for allegedly improperly investigating groups associated with the "Tea Party". As another potential example: What if PETA sues the NSA to obtain recordings of all conversation dealing with animal abuse. This data collection opens the door to virtually all special interest groups, in the name of saving the children, to demand that the NSA collect data on their behalf to protect the public from people/organizations that they assert are vile criminals.

Arcane 09-25-2013 12:19 PM

Quote:

Originally Posted by D.V (Post 5034524)
Not sure if anyone though about this but could NSA be lying about breaking encryption to discourage us from using it. After all, they broke the law on surveillance of USA citizens. Second, they're human, and humans lie.

Some people groups are forced to lie.. :(

H_TeXMeX_H 09-29-2013 12:35 PM

http://yro.slashdot.org/story/13/09/...-cripple-sha-3

H_TeXMeX_H 10-01-2013 08:38 AM

Silent Circle Moving Away From NIST Cipher Suites After NSA Revelations
http://yro.slashdot.org/story/13/10/...sa-revelations

I'm not the only one who has stopped trusting NSA and NIST standards like SHA and AES.

They say they will be moving to Twofish (my choice) and Skein.

I have looked at Skein, but I don't feel that it is the best choice ATM. Although it was developed by Bruce Schneider, it already has a good number of collisions:
http://eprint.iacr.org/2010/538
Like the article says, it does not yet threaten full round Skein. I feel the numbers are getting close tho, so I'll stick to twofish.

As for a hash function, that's a harder decision. I have gone with:
http://en.wikipedia.org/wiki/BLAKE2

sundialsvcs 10-01-2013 09:33 AM

Generally, I consider that the NSA is "the good guys" ... but that NSA contractors have been having a field-day without proper legislative oversight. It concerns me most-profoundly that people have knowingly lied-to Members of Congress, and that some Members (having security clearances) have lied to and/or withheld information from their Colleagues. The Constitution expressly states that the Congress may "meet in Secret," and that certain parts of the Congressional Record can be Secret. But it never suggests that the representation from one State may withhold anything from those of any other.

There's a Good Reason for that!

We not only do not have adequate oversight within Congress, but we also do not have adequate oversight of Congress. We are spending tens if not hundreds of Billions of dollars every day ... even as we "sequester" social programs, claiming that we "can't afford" them. And, guys and gals, being human-beings ourselves, we know what human-beings will do if no one is guarding the pot-of-gold.

FDR sort-of said it well when he said: "I agree with you. Now, make me do it."

I expect the NSA to possess the capability to "crack" civilian-grade cipher systems. (Indeed, if they do not, then "what the hell am I paying trillions of dollars for?!?!") But I also expect NSA to participate (and it does ...) in helping to make those cipher systems very strong, because the definition of "national security" covers more than just foreign governments and military ops. It clearly also covers the cipher systems that protect the vast, "civilian," infrastructure.

That infrastructure will be betrayed if there exists a vast system to "un-encipher everything and archive everything somewhere in un-enciphered form." That would be a bigger pot-of-gold: "Knowledge Is Power." And there are a'plenty of "Top Men" (epilogue of Raiders of the Lost Ark ... youtube it...) who would find a way to get their paws on it. Industrial espionage on a grand scale. It will happen . . .

And there really is "an expectation of privacy," and there really is a valid need for prohibition against "unreasonable search." Just because you can do it, and just because there are Billions/Trillions of Dollars sitting un-guarded on the table, does not make it "okay." Indeed, NSA could be undermining its Mission by doing so. "The Due Process of Law" does not make the system weaker; does not "get in the way." It makes it stronger. It is yet another form of: "The Need To Know."

H_TeXMeX_H 10-03-2013 07:43 AM

I think this is a very good article:
Security After the Death of Trust
http://programming.oreilly.com/2013/...ath-trust.html


All times are GMT -5. The time now is 06:14 PM.