Essays: NSA Surveillance: A Guide to Staying Secure – Schneier on Security(schneier.com)
schneier.com
Essays: NSA Surveillance: A Guide to Staying Secure – Schneier on Security
https://www.schneier.com/essays/archives/2013/09/nsa_surveillance_a_g.html
42 comments
You're missing Tor, and metadata reducing messaging like https://cwtch.im/
Also Mullvad Browser is a worthy addition given that its basically Tor Browser with the VPN instead of Tor-gateway. Same excellent metadata reduction tweaks, and you don't have to configure anything.
Oh and since this is against APTs my work might be useful for messaging: https://github.com/maqp/tfc It's as close to NSA-proof you can get. Naturally, if the government parks their flower van across the street and grabs your keyboard cable's spurious radio waves* or installs a cam in your house you're SoL, but otherwise you should be pretty good.
* https://en.wikipedia.org/wiki/Tempest_(codename)
Also Mullvad Browser is a worthy addition given that its basically Tor Browser with the VPN instead of Tor-gateway. Same excellent metadata reduction tweaks, and you don't have to configure anything.
Oh and since this is against APTs my work might be useful for messaging: https://github.com/maqp/tfc It's as close to NSA-proof you can get. Naturally, if the government parks their flower van across the street and grabs your keyboard cable's spurious radio waves* or installs a cam in your house you're SoL, but otherwise you should be pretty good.
* https://en.wikipedia.org/wiki/Tempest_(codename)
> NetGuard(Android)
GrapheneOS warns of NetGuard leaking connections: https://discuss.grapheneos.org/d/8330-app-compatibility-with...
GrapheneOS warns of NetGuard leaking connections: https://discuss.grapheneos.org/d/8330-app-compatibility-with...
[deleted]
> Tails/Whonix/Qubes/Heads/BSDs... Mullvad, NetGuard(Android)
I don't even know what kind of things these are... ?
I don't even know what kind of things these are... ?
Tails is an immutable distribution of Linux that runs entirely out of RAM, persisting nothing to long term disks. Typically used in a LiveCD like manner.
https://tails.net/
Heads similar.
https://heads.dyne.org/
Qubes is an OS endeavoring to isolate literally everything conceivable from each other.
https://www.qubes-os.org/
BSD is a kernel specifically focused, iiuc, on being as secure and straightforward as possible.
https://en.m.wikipedia.org/wiki/FreeBSD
Whonix seems to be focused around decreasing online or browser based metadata leakage?
Mullvad is a paid VPN service.
https://en.m.wikipedia.org/wiki/Whonix
Calyx/Pure/GrapheneOS
Apparently security focused Android distros.
KeePassXC, password manager, self hosted.
TrueCrypt/VeraCrypt: Encrypted volume management.
Bitwarden, FDE solution iirc.
Notably no mention of Wireguard, managing your firewalls/routers/network architecture, IDS's/Intrusion response plans, key hygiene, and focusing on getting end users prepped for the infosec environment; noting that an ineffective infosec engagement with end users completely undermines everything you're trying to work for. Trying to go all in on most of those tools is a recipe for disaster for any org that actually has something else to do other than jumping through endless security hoops.
Tools aren't the be all end all. Educated and invested users are.
https://tails.net/
Heads similar.
https://heads.dyne.org/
Qubes is an OS endeavoring to isolate literally everything conceivable from each other.
https://www.qubes-os.org/
BSD is a kernel specifically focused, iiuc, on being as secure and straightforward as possible.
https://en.m.wikipedia.org/wiki/FreeBSD
Whonix seems to be focused around decreasing online or browser based metadata leakage?
Mullvad is a paid VPN service.
https://en.m.wikipedia.org/wiki/Whonix
Calyx/Pure/GrapheneOS
Apparently security focused Android distros.
KeePassXC, password manager, self hosted.
TrueCrypt/VeraCrypt: Encrypted volume management.
Bitwarden, FDE solution iirc.
Notably no mention of Wireguard, managing your firewalls/routers/network architecture, IDS's/Intrusion response plans, key hygiene, and focusing on getting end users prepped for the infosec environment; noting that an ineffective infosec engagement with end users completely undermines everything you're trying to work for. Trying to go all in on most of those tools is a recipe for disaster for any org that actually has something else to do other than jumping through endless security hoops.
Tools aren't the be all end all. Educated and invested users are.
> BSD is a kernel specifically focused, iiuc, on being as secure and straightforward as possible.
No it is not, or at least it doesn't use any modern tools or make a serious attempt to do so. It's a family of OSes written by the kind of people who think if you grow a beard and stare very hard at your C code it will become secure and bug free.
It does change slowly, which is a good technique for avoiding introducing bugs, but it's barely heard of techniques like regression testing.
The secure one in particular has a lot of mitigations that especially feel like they just dreamed up what they think a security mitigation is, instead of engaging with research.
No it is not, or at least it doesn't use any modern tools or make a serious attempt to do so. It's a family of OSes written by the kind of people who think if you grow a beard and stare very hard at your C code it will become secure and bug free.
It does change slowly, which is a good technique for avoiding introducing bugs, but it's barely heard of techniques like regression testing.
The secure one in particular has a lot of mitigations that especially feel like they just dreamed up what they think a security mitigation is, instead of engaging with research.
>It's a family of OSes written by the kind of people who think if you grow a beard and stare very hard at your C code it will become secure and bug free.
Staring hard at a set of C primitives and learning the way the primitives actually utilize modern hardware and compose is a fundamental part of computing. Part of programming is not just writing your code in the sense of what it does, but also knowing what it doesn't. All computation is at the bottom deterministic. We've just piled on so much abstraction (if not in high-level languages then in shit like uCode) that most practitioners will just tell you to embrace the madness of unbounded abstraction. You don't have to follow their advice. Tighter code is yours for the taking. Learn your hardware.
The price though tends to be portability. Also, compiler writers are completely deranged, and known for completely turning shit on it's head. Read your language spec, embrace your debugger, and go with God.
Staring hard at a set of C primitives and learning the way the primitives actually utilize modern hardware and compose is a fundamental part of computing. Part of programming is not just writing your code in the sense of what it does, but also knowing what it doesn't. All computation is at the bottom deterministic. We've just piled on so much abstraction (if not in high-level languages then in shit like uCode) that most practitioners will just tell you to embrace the madness of unbounded abstraction. You don't have to follow their advice. Tighter code is yours for the taking. Learn your hardware.
The price though tends to be portability. Also, compiler writers are completely deranged, and known for completely turning shit on it's head. Read your language spec, embrace your debugger, and go with God.
> The price though tends to be portability.
The BSDs are all designed to be portable tho.
The BSDs are all designed to be portable tho.
Just adding a small correction: you might be thinking of Bitlocker for FDE -- Bitwarden is a password manager. Thanks for the details on the other stuff, I didn't know what Whonix and Heads were
If your adversary is someone who can … quite literally … send ninjas in attack helicopters at you. You’re probably going to lose.
The idea is to prevent them from developing a motivation to do that by keeping them out of your business in the first place.
I get the motivation. But good luck keeping an organization out of anything you care about when they can:
. Legally kill you
. Legally compel corporations to embed backdoors
. Legally seize all your equipment
. Throw away millions of dollars pursing “petty” crimes.
Technical means of defending against something like the NSA is, in my opinion, a lost cause.
I believe the way to deal with this is by being politically active. Getting people engaged and limiting the powers of these organizations.
. Legally kill you
. Legally compel corporations to embed backdoors
. Legally seize all your equipment
. Throw away millions of dollars pursing “petty” crimes.
Technical means of defending against something like the NSA is, in my opinion, a lost cause.
I believe the way to deal with this is by being politically active. Getting people engaged and limiting the powers of these organizations.
Becoming politically active is one of the fastest ways to get "legally killed," in countries where that actually happens...
Totally agree. I would think part of a good defense is to simply not care about politics on any level.
Personally, I think all these counter measures are a fool's game. It most likely ends up being a form of self labeling as a person to look into.
My defense is to be a boring person, not trying to hide anything, lost in a sea of noise.
Personally, I think all these counter measures are a fool's game. It most likely ends up being a form of self labeling as a person to look into.
My defense is to be a boring person, not trying to hide anything, lost in a sea of noise.
> Getting people engaged and limiting the powers of these organizations.
My impression is that most people want more government; thus, getting more people engaged will lead to increasing the powers of these organizations.
My impression is that most people want more government; thus, getting more people engaged will lead to increasing the powers of these organizations.
For the context, this from September 6, 2013.
If only we knew how bad things really are.
I completely agree. For example, I don’t think people are aware to what extent China is attempting to infiltrate the US energy sector. No one could imagine to what extent Russia would attempt to influence our elections, either.
I’m hopeful it won’t get worse. It probably has something to do with the capabilities others are alluding to in this thread.
I’m hopeful it won’t get worse. It probably has something to do with the capabilities others are alluding to in this thread.
What do people think of SimpleX?
https://simplex.chat/
https://simplex.chat/
There's a LOT of SimpleX shilling lately on HN.
tldr, it's snake oil. The company lies about its system being able act as a server without knowing anything about the users. The SimpleX clients don't route via Tor so the server will by definition know the IP addresses of the conversing parties. SimpleX claims to be the most metadata secure app, yet it fails to address the first issue of hiding IP addresses. Also a server has access to each IP addresses' social graph when they see to which target IPs they are forwarding packets. So much for metadata-free.
tldr, it's snake oil. The company lies about its system being able act as a server without knowing anything about the users. The SimpleX clients don't route via Tor so the server will by definition know the IP addresses of the conversing parties. SimpleX claims to be the most metadata secure app, yet it fails to address the first issue of hiding IP addresses. Also a server has access to each IP addresses' social graph when they see to which target IPs they are forwarding packets. So much for metadata-free.
Either you didn't understand the design, or this is not genuine criticism.
Every server that user connects to of course knows IP address of the user, be it Tor relay, VPN provider, Nym node, or SimpleX relay - the user chooses which server to trust.
Neither of the approaches guarantees transport anonymity.
Recently added private message routing protects IP addresses of the users from the destination servers: https://simplex.chat/blog/20240604-simplex-chat-v5.8-private... , which was #1 point of criticism that IP addresses are not protected by default.
Every server that user connects to of course knows IP address of the user, be it Tor relay, VPN provider, Nym node, or SimpleX relay - the user chooses which server to trust.
Neither of the approaches guarantees transport anonymity.
Recently added private message routing protects IP addresses of the users from the destination servers: https://simplex.chat/blog/20240604-simplex-chat-v5.8-private... , which was #1 point of criticism that IP addresses are not protected by default.
Lol that article says
>We believe that Tor may be the wrong solution for some users for one of the reasons: much higher latency, error rate and resource usage.
Yet you provide no options for Tor, as in https://simplex.chat/docs/server.html your idea for anonymizing users is... For the user to hop through roughly 20 page document of dozens of commands to create the equivalent of personal VPN server, and amidst it, to connect anonymously to contacts' servers, you need to install... Tor https://simplex.chat/docs/server.html#tor-installation-and-c...
So if you don't have any options for Tor, maybe you should just default to Tor.
As for the hoops, you know, you can just write an install script for the user to auto-configure this stuff correctly. In its current state it's definitely something an average Joe is going to do. If this is there just to shut down criticism, maybe you should instead address the criticism, and make it metadata-private by default, without these insane hoops.
If it doesn't get to the point of anonymity by copying a one-liner that runs an install script, i.e. if it's not on par with
sudo apt install simplex,
it's not going to catch on.
Also, your technical documentation how this stuff actually works has 404 issues https://github.com/simplex-chat/simplexmq/blob/stable/rfcs/2...
>We believe that Tor may be the wrong solution for some users for one of the reasons: much higher latency, error rate and resource usage.
Yet you provide no options for Tor, as in https://simplex.chat/docs/server.html your idea for anonymizing users is... For the user to hop through roughly 20 page document of dozens of commands to create the equivalent of personal VPN server, and amidst it, to connect anonymously to contacts' servers, you need to install... Tor https://simplex.chat/docs/server.html#tor-installation-and-c...
So if you don't have any options for Tor, maybe you should just default to Tor.
As for the hoops, you know, you can just write an install script for the user to auto-configure this stuff correctly. In its current state it's definitely something an average Joe is going to do. If this is there just to shut down criticism, maybe you should instead address the criticism, and make it metadata-private by default, without these insane hoops.
If it doesn't get to the point of anonymity by copying a one-liner that runs an install script, i.e. if it's not on par with
sudo apt install simplex,
it's not going to catch on.
Also, your technical documentation how this stuff actually works has 404 issues https://github.com/simplex-chat/simplexmq/blob/stable/rfcs/2...
> Yet you provide no options for Tor, as in https://simplex.chat/docs/server.html your idea for anonymizing users is... For the user to hop through roughly 20 page document of dozens of commands to create the equivalent of personal VPN server, and amidst it, to connect anonymously to contacts' servers, you need to install...
You need to understand things you criticise. There is no contradiction here. We don't think Tor should be default, because Tor has bad threat model for many people, and bad usability for most people.
This is a separate conversation, but you think that Tor is panacea for anonymity and that it provides "good enough" anonymity for most people, you need to read this rather old presentation: https://ritter.vg/p/tor-v1.6.pdf, in particular the pages titled "Guards - Math". In short, the conclusion should be that Tor provides ok anonymity for web browsing, with only occasional streams being de-anonymised, but it provides really bad anonymity for hidden services, because it is enough to deanonymise one stream to deanonymise the hidden service IP address - which is a catastrophic failure of threat model.
So, persistent hidden services simply should not be used as means to provide anonymity, and yet they are used as permanent user addresses in Cwtch... If you think I am wrong, we can debate it further, but you really should not be recommending Tor as panacea without understanding limitations of its threat model.
Yet, some people do like using Tor, both to access servers via onion addresses that we provide on preset servers, and to host their own servers, either because they don't understand or because they accept the risks of hidden service deanonymisation.
The nice side effect of private routing is that it allows people who don't use Tor, send messages to SMP servers available only as Tor hidden services.
> As for the hoops, you know, you can just write an install script for the user to auto-configure this stuff correctly. In its current state it's definitely something an average Joe is going to do.
I believe that an average Joe must not host his own server, and for people who understand what they are doing following these steps takes 10 minutes.
> If this is there just to shut down criticism, maybe you should instead address the criticism, and make it metadata-private by default, without these insane hoops.
Meta-data is private by default, without any hoops, and Tor is not required for it - it is absolutely optional. Tor configuration is only needed to allow users using Tor access servers, and to bridge non-Tor users to Tor servers - so it is about better network connectivity, and not about metadata privacy.
> Also, your technical documentation how this stuff actually works has 404 issues
Moved to "done" folder, will update. You could have guessed ;)
https://github.com/simplex-chat/simplexmq/blob/stable/rfcs/d...
It's also included in protocol spec now:
https://github.com/simplex-chat/simplexmq/blob/stable/protoc...
You need to understand things you criticise. There is no contradiction here. We don't think Tor should be default, because Tor has bad threat model for many people, and bad usability for most people.
This is a separate conversation, but you think that Tor is panacea for anonymity and that it provides "good enough" anonymity for most people, you need to read this rather old presentation: https://ritter.vg/p/tor-v1.6.pdf, in particular the pages titled "Guards - Math". In short, the conclusion should be that Tor provides ok anonymity for web browsing, with only occasional streams being de-anonymised, but it provides really bad anonymity for hidden services, because it is enough to deanonymise one stream to deanonymise the hidden service IP address - which is a catastrophic failure of threat model.
So, persistent hidden services simply should not be used as means to provide anonymity, and yet they are used as permanent user addresses in Cwtch... If you think I am wrong, we can debate it further, but you really should not be recommending Tor as panacea without understanding limitations of its threat model.
Yet, some people do like using Tor, both to access servers via onion addresses that we provide on preset servers, and to host their own servers, either because they don't understand or because they accept the risks of hidden service deanonymisation.
The nice side effect of private routing is that it allows people who don't use Tor, send messages to SMP servers available only as Tor hidden services.
> As for the hoops, you know, you can just write an install script for the user to auto-configure this stuff correctly. In its current state it's definitely something an average Joe is going to do.
I believe that an average Joe must not host his own server, and for people who understand what they are doing following these steps takes 10 minutes.
> If this is there just to shut down criticism, maybe you should instead address the criticism, and make it metadata-private by default, without these insane hoops.
Meta-data is private by default, without any hoops, and Tor is not required for it - it is absolutely optional. Tor configuration is only needed to allow users using Tor access servers, and to bridge non-Tor users to Tor servers - so it is about better network connectivity, and not about metadata privacy.
> Also, your technical documentation how this stuff actually works has 404 issues
Moved to "done" folder, will update. You could have guessed ;)
https://github.com/simplex-chat/simplexmq/blob/stable/rfcs/d...
It's also included in protocol spec now:
https://github.com/simplex-chat/simplexmq/blob/stable/protoc...
>We don't think Tor should be default, because Tor has bad threat model for many people, and bad usability for most people.
Here's the thing. If you're going to say your system doesn't have identifiers, you better make sure the server can't use the (queue_number, IP-address) tuples it accumulates over time about users as a persistent identifiers it can link all ciphertexts and their send/receive timestamps.
To be able to make your claim, you need to do what's doable. "Tor has bad threat model" is so vaguely put I don't buy it. Bad usability would come at the cost of using p2p architecture like Cwtch/Briar/OnionShare/TFC does. You're still using servers so the only thing Tor is adding is some bandwidth limitations, slight latency, and connection establishment times.
>but it provides really bad anonymity for hidden services, because it is enough to deanonymise one stream to deanonymise the hidden service IP address
Sorry which slide exactly mentions hidden services? All of them talked about exit nodes, i.e. non-onion-service chains. Also, if there's something wrong with Tor, it's in Tor's domain, not yours. Your domain is to use the best option available, and if needed improve it. Feel free to work with Tor so it suits your use case. Do you know about a better option than Tor? Exactly. If Tor fails, it's as good as not using Tor, nothing more terrible comes from that. There's no extra-jailtime awarded for using Tor for your dissident activities in your Banana Republic. If using Tor is itself illegal, it's probably the case encrypted messengers are categorically banned, and the citizens have thus bigger problems.
"...deanonymise the IP address - which is a catastrophic failure of threat model."
So a system that leaks the user's IP-address to a third party fails catastrophically in providing privacy. Got it. Well, SimpleX does that by default. You're switching between two positions without fixed value system. You need to be extremely clear about when the user should not use Tor, and when they should. And most importantly, you should not claim the system has no persistent identifiers, when the server can build one about the user trivially, and if the user who opts-in to use Tor ever fails their manual configuration, their account is deanonymized retroactively. All user activity can be bound together with a list of (QueueID, IP-address) tuples. If any of those tuples contains the user's real IP-address, every session is deanonymized.
>but you really should not be recommending Tor as panacea without understanding limitations of its threat model.
Again, you need to understand there is no better option than Tor. Just because Tor isn't perfect doesn't mean it's not the best option. I'm sure you have seen the top secret NSA Tor Stinks slides. If not, see slide 2 of https://www.theguardian.com/world/interactive/2013/oct/04/to...
>"So, persistent hidden services simply should not be used as means to provide anonymity, and yet they are used as permanent user addresses in Cwtch"
And? If the user is deanonymized, they are deanonymized. The question is who can do that. Anyone who runs a SimpleX server and a global passive adversary? Or only a global passive adversary.
>Yet, some people do like using Tor, both to access servers via onion addresses that we provide on preset servers, and to host their own servers, either because they don't understand or because they accept the risks of hidden service deanonymisation.
So wait what, you're saying you're not even providing Tor because you understand the benefits, but because you want to cater to uninformed peoples' needs. This is comedy gold, you need another shovel do dig yourself even deeper?
>The nice side effect of private routing is that it allows people who don't use Tor, send messages to SMP servers available only as Tor hidden services.
Sending message to someone else's SMP proxy without Tor means SimpleX leaks your IP to that proxy, and that's the problem. That is what you described "catastrophic failure in threat model". If on the other hand you own the SMP proxy, then that's the last hop of your endpoint. The IP-address of that proxy represents you, and it will be traced back to you. You adding complexity to what the user's endpoint client looks like doesn't change the principles underneath.
>I believe that an average Joe must not host his own server, and for people who understand what they are doing following these steps takes 10 minutes.
His own server? You really need to provide graphs and explain in high level terms what the functions of each node in the chain is, when they should be used, what security do they add, and where Tor should be used, and when. Security-by-nobody-reads-the-RFCs-anyway is not what you want.
>Meta-data is private by default
"We just redefine IP-address to be non-private information." You know, the stuff that if it leaks in Tor, it's catastrophic. But if you don't even try to hide it, then it's ok.
>so it is about better network connectivity, and not about metadata privacy.
And what do you suppose the reason people use Tor for, is? Is it to hide IP-address?
If you're offering single-hop proxy, you're gonna get all the shit you deserve, there's a good reason Tor offers three nodes in the chain. VPNs are considered secondary ISP because they know who you are, and what you do. If you're stating the user runs their own proxy, then the user's proxy IP is tied to the user and tada, there's effectively no proxy in use.
Finally, would you please stop running to he hills every time the Queue aspect is discussed, and answer posts
https://news.ycombinator.com/item?id=41364503
and
https://news.ycombinator.com/item?id=41364884
Here's the thing. If you're going to say your system doesn't have identifiers, you better make sure the server can't use the (queue_number, IP-address) tuples it accumulates over time about users as a persistent identifiers it can link all ciphertexts and their send/receive timestamps.
To be able to make your claim, you need to do what's doable. "Tor has bad threat model" is so vaguely put I don't buy it. Bad usability would come at the cost of using p2p architecture like Cwtch/Briar/OnionShare/TFC does. You're still using servers so the only thing Tor is adding is some bandwidth limitations, slight latency, and connection establishment times.
>but it provides really bad anonymity for hidden services, because it is enough to deanonymise one stream to deanonymise the hidden service IP address
Sorry which slide exactly mentions hidden services? All of them talked about exit nodes, i.e. non-onion-service chains. Also, if there's something wrong with Tor, it's in Tor's domain, not yours. Your domain is to use the best option available, and if needed improve it. Feel free to work with Tor so it suits your use case. Do you know about a better option than Tor? Exactly. If Tor fails, it's as good as not using Tor, nothing more terrible comes from that. There's no extra-jailtime awarded for using Tor for your dissident activities in your Banana Republic. If using Tor is itself illegal, it's probably the case encrypted messengers are categorically banned, and the citizens have thus bigger problems.
"...deanonymise the IP address - which is a catastrophic failure of threat model."
So a system that leaks the user's IP-address to a third party fails catastrophically in providing privacy. Got it. Well, SimpleX does that by default. You're switching between two positions without fixed value system. You need to be extremely clear about when the user should not use Tor, and when they should. And most importantly, you should not claim the system has no persistent identifiers, when the server can build one about the user trivially, and if the user who opts-in to use Tor ever fails their manual configuration, their account is deanonymized retroactively. All user activity can be bound together with a list of (QueueID, IP-address) tuples. If any of those tuples contains the user's real IP-address, every session is deanonymized.
>but you really should not be recommending Tor as panacea without understanding limitations of its threat model.
Again, you need to understand there is no better option than Tor. Just because Tor isn't perfect doesn't mean it's not the best option. I'm sure you have seen the top secret NSA Tor Stinks slides. If not, see slide 2 of https://www.theguardian.com/world/interactive/2013/oct/04/to...
>"So, persistent hidden services simply should not be used as means to provide anonymity, and yet they are used as permanent user addresses in Cwtch"
And? If the user is deanonymized, they are deanonymized. The question is who can do that. Anyone who runs a SimpleX server and a global passive adversary? Or only a global passive adversary.
>Yet, some people do like using Tor, both to access servers via onion addresses that we provide on preset servers, and to host their own servers, either because they don't understand or because they accept the risks of hidden service deanonymisation.
So wait what, you're saying you're not even providing Tor because you understand the benefits, but because you want to cater to uninformed peoples' needs. This is comedy gold, you need another shovel do dig yourself even deeper?
>The nice side effect of private routing is that it allows people who don't use Tor, send messages to SMP servers available only as Tor hidden services.
Sending message to someone else's SMP proxy without Tor means SimpleX leaks your IP to that proxy, and that's the problem. That is what you described "catastrophic failure in threat model". If on the other hand you own the SMP proxy, then that's the last hop of your endpoint. The IP-address of that proxy represents you, and it will be traced back to you. You adding complexity to what the user's endpoint client looks like doesn't change the principles underneath.
>I believe that an average Joe must not host his own server, and for people who understand what they are doing following these steps takes 10 minutes.
His own server? You really need to provide graphs and explain in high level terms what the functions of each node in the chain is, when they should be used, what security do they add, and where Tor should be used, and when. Security-by-nobody-reads-the-RFCs-anyway is not what you want.
>Meta-data is private by default
"We just redefine IP-address to be non-private information." You know, the stuff that if it leaks in Tor, it's catastrophic. But if you don't even try to hide it, then it's ok.
>so it is about better network connectivity, and not about metadata privacy.
And what do you suppose the reason people use Tor for, is? Is it to hide IP-address?
If you're offering single-hop proxy, you're gonna get all the shit you deserve, there's a good reason Tor offers three nodes in the chain. VPNs are considered secondary ISP because they know who you are, and what you do. If you're stating the user runs their own proxy, then the user's proxy IP is tied to the user and tada, there's effectively no proxy in use.
Finally, would you please stop running to he hills every time the Queue aspect is discussed, and answer posts
https://news.ycombinator.com/item?id=41364503
and
https://news.ycombinator.com/item?id=41364884
I don't see why one would try to protect himself from the NSA.
I understand privacy from my neighbor and criminals.
But I want the government to spy on potential criminals.
I trust the courts and the process.
If you don't, you're just paranoid.
I understand privacy from my neighbor and criminals.
But I want the government to spy on potential criminals.
I trust the courts and the process.
If you don't, you're just paranoid.
> But I want the government to spy on potential criminals.
> I trust the courts and the process.
Good luck then. You _will_ need it.
> I trust the courts and the process.
Good luck then. You _will_ need it.
Seriously, what are you so afraid of?
We don't live in China or Russia, what matters is political culture, not hiding from the government.
What is the worst that ever happened?
Do you think corporations would use the NSA to influence the government?
Or do you think the NSA would become a shadow government?
I understand the fear of 1984, but 1984 described China and Russia, not the US.
Assange and Snowden might sound like heroes to you, but to me they are not.
We don't live in China or Russia, what matters is political culture, not hiding from the government.
What is the worst that ever happened?
Do you think corporations would use the NSA to influence the government?
Or do you think the NSA would become a shadow government?
I understand the fear of 1984, but 1984 described China and Russia, not the US.
Assange and Snowden might sound like heroes to you, but to me they are not.
> Seriously, what are you so afraid of?
The law changing, and by then the law enforcers have a family member's web searches for reproductive care and throw someone in jail for murder.
People are going to jail for things this year that were legal last year.
> We don't live in China or Russia
Yet. Freedom takes work, and vigilance against its incremental loss.
“Eternal vigilance is the price of liberty.” -- early 1800s saying (https://www.monticello.org/research-education/thomas-jeffers...)
“Freedom is a fragile thing and it's never more than one generation away from extinction. It is not ours by way of inheritance; it must be fought for and defended constantly by each generation, for it comes only once to a people.” -- Reagan, 1967 (https://www.reaganlibrary.gov/archives/speech/january-5-1967...)
The law changing, and by then the law enforcers have a family member's web searches for reproductive care and throw someone in jail for murder.
People are going to jail for things this year that were legal last year.
> We don't live in China or Russia
Yet. Freedom takes work, and vigilance against its incremental loss.
“Eternal vigilance is the price of liberty.” -- early 1800s saying (https://www.monticello.org/research-education/thomas-jeffers...)
“Freedom is a fragile thing and it's never more than one generation away from extinction. It is not ours by way of inheritance; it must be fought for and defended constantly by each generation, for it comes only once to a people.” -- Reagan, 1967 (https://www.reaganlibrary.gov/archives/speech/january-5-1967...)
Snowden, Assange, China, Russia it's all uncorrelated and a distraction to the "Nothing to hide" argument.
You can review it here: https://en.m.wikipedia.org/wiki/Nothing_to_hide_argument
I will also add: that hiding has a very successful track record (for all life forms) over time, because you don't ever really know what the future holds.
I also have a pet theory that there is underlying physics/information theory here that explains this (similar to thermodynamics/entropy, might even be the same phenomenon) ->
You can review it here: https://en.m.wikipedia.org/wiki/Nothing_to_hide_argument
I will also add: that hiding has a very successful track record (for all life forms) over time, because you don't ever really know what the future holds.
I also have a pet theory that there is underlying physics/information theory here that explains this (similar to thermodynamics/entropy, might even be the same phenomenon) ->
too much concentrated asymetric information becomes a single point of failure, and yields brittle systems.
As the dependencies on a single process rise, the probability of the entire system failing approaches 1.wow you're so smart
Because I noticed that lying to people constantly, and mass surveillance controlled by a small parties is probably a bad strategy in the long run?
I think evolution figured it out a few billion years before me. I think it's just easy to forget.
Of course I could be entirely wrong. Just a hypothesis of mine.
I think evolution figured it out a few billion years before me. I think it's just easy to forget.
Of course I could be entirely wrong. Just a hypothesis of mine.
Right on. People complained about the camera in my bathroom so I told them the same thing. If you’ve done nothing wrong you should have nothing to hide.
You aren’t wrong for the most part. HN hive mind has a really bad habit of consistently acting incredibly paranoid while actually doing nothing to actually understand how any of this works either from a legal or technical perspective and then on top of all that they have no understanding of what their actual threat model looks like and anyone who dares to interrupt the paranoia is treated like they are some kind of moron.
Honestly it’s like listening to a Q-Anon group in here sometimes.
Honestly it’s like listening to a Q-Anon group in here sometimes.
I don't even know where to begin on how incorrect that is.
Just trust the courts, bro. Civil Asset Forfeiture totally doesn't violate due process or the 5th amendment, bro. Big brother knows best, bro.
Let's update this for 2024:
Signal/Session/Matrix/^, Tails/Whonix/Qubes/Heads/BSDs, VeraCrypt/Cryptomator/^, GrapheneOS/CalyxOS/PureOS/^, KeePassXC/Bitwarden/^, Mullvad, NetGuard(Android)
^ represents others that I am leaving out for convenience.