3 ms·

Exactly. The only real solution is client-side encryption. If the encryption is implemented correctly, it does not matter where it is hosted.

illumen 11y ago
Client side encryption, and no physical access to the outside... and... Considering that many encryption systems around seem to get broken, I don't think that's the only solution needed.
adrianN 11y ago
You can still learn a lot about a social network just by analyzing traffic patterns and meta data. Encryption by itself is not a panacea.
nickpsecurity 11y ago
The real solution is high assurance systems: those designed in a rigorous way with an argument that they'll remain secure against any known classes of attack. That's every layer of the stack and sideways as my proprietary framework [1] used to show. Here's an example [2] of what that's like applied to Tor. Ottela's Tinfoil Chat is only one I know that applies high assurance at the design level to eliminate risk of High Strength Attackers. He took a lot of feedback from us on Schneier's blog and applied it well. Client-side encryption using C libraries on Linux or whatever is just asking to be hacked. Best will be secure hardware, drivers, kernel, and trusted components. See CHERI processor [4], EROS documentation [5] (esp "Principle-driven...") and Mikro-SINA VPN [6] for examples of The Right Thing in security-critical development. Need more like that. [1] http://pastebin.com/y3PufJ0V http://pastebin.com/y3PufJ0V [2] https://www.schneier.com/blog/archives/2014/09/identifying_dre.html#c6678915 https://www.schneier.com/blog/archives/2014/09/identifying_d... [3] https://github.com/maqp/tfc-otp https://github.com/maqp/tfc-otp [4] https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/ https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/ [5] http://eros-os.org/eros.html http://eros-os.org/eros.html [6] http://genode-labs.com/publications/mikro-sina-2005.pdf http://genode-labs.com/publications/mikro-sina-2005.pdf

illumen 11y ago

Client side encryption, and no physical access to the outside... and... Considering that many encryption systems around seem to get broken, I don't think that's the only solution needed.

adrianN 11y ago

You can still learn a lot about a social network just by analyzing traffic patterns and meta data. Encryption by itself is not a panacea.

nickpsecurity 11y ago

The real solution is high assurance systems: those designed in a rigorous way with an argument that they'll remain secure against any known classes of attack. That's every layer of the stack and sideways as my proprietary framework [1] used to show. Here's an example [2] of what that's like applied to Tor. Ottela's Tinfoil Chat is only one I know that applies high assurance at the design level to eliminate risk of High Strength Attackers. He took a lot of feedback from us on Schneier's blog and applied it well. Client-side encryption using C libraries on Linux or whatever is just asking to be hacked. Best will be secure hardware, drivers, kernel, and trusted components. See CHERI processor [4], EROS documentation [5] (esp "Principle-driven...") and Mikro-SINA VPN [6] for examples of The Right Thing in security-critical development. Need more like that. [1] http://pastebin.com/y3PufJ0V http://pastebin.com/y3PufJ0V [2] https://www.schneier.com/blog/archives/2014/09/identifying_dre.html#c6678915 https://www.schneier.com/blog/archives/2014/09/identifying_d... [3] https://github.com/maqp/tfc-otp https://github.com/maqp/tfc-otp [4] https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/ https://www.cl.cam.ac.uk/research/security/ctsrd/cheri/ [5] http://eros-os.org/eros.html http://eros-os.org/eros.html [6] http://genode-labs.com/publications/mikro-sina-2005.pdf http://genode-labs.com/publications/mikro-sina-2005.pdf