nanog mailing list archives

Re: US and UK spy agencies defeat privacy and security on the internet


From: Phil Gardner <phil.gardnerjr () gmail com>
Date: Mon, 09 Sep 2013 13:50:49 -0400

On 09/09/2013 11:58 AM, Mike A wrote:
On Thu, Sep 05, 2013 at 07:12:36PM +0000, Warren Bailey wrote:
Anyone else see this coming?

US and UK spy agencies defeat privacy and security on the internet

http://gu.com/p/3thvv

Yes, long, long ago. I just didn't expect to see it revealed.


This is really only a 'work-around' by the NSA, meaning they get around strong encryption by going directly to the source of the unencrypted data (eg. google/yahoo/M$ servers), or by potentially posing as a "trusted" CA. Like Snowden said back in June, good encryption still works. There still isn't enough compute power available to bruteforce open-spec encryption, using peer-reviewed, popular open source software. I say "popular" because it should be a project in active development that has the code monitored and reviewed often (I'm no software engineer, so I can't read source code).

PGP still works...assuming the NSA already doesn't have a backdoor in your modem/chipset firmware (since there aren't any free firmware/libs for any modern SoC that I know of)...or a backdoor trojan on your system...or a super secret root kit on your old Fedora Core 2 system (swear I don't have any Fedora Core systems left..).

Moral of the story, stay away from the centralized services and commercial encryption software. And write your own custom firmware for you phone's wifi/cell chip. Start by helping these guys out - http://replicant.us/ ;)

--
_____________________
Phil Gardner
PGP Key ID 0xFECC890C
OTR Fingerprint 6707E9B8 BD6062D3 5010FE8B 36D614E3 D2F80538


Current thread: