5 ms·

No, but take a gander at 21). Does using encryption, "password-protected websites", IP Anonymization make me a terrorist? I think that describes a significant f

No, but take a gander at 21). Does using encryption, "password-protected websites", IP Anonymization make me a terrorist? I think that describes a significant fraction of people here. Sure, that should be taken in context to the rest of the questions, but should that even be a flag? Should we regularly detain and question pentesters now if they have a middle-eastern background?

Godel_unicode 10y ago
That's hardly the only question like that. Many things on this list would, if taken in isolation, not be indicative of terrorist leanings. I'm assuming that's why there are many questions on this list.
- noobermin 10y ago
  Alright, I was about to delete my comment above when I saw a reply to another comment which had similar sentiment to mine. I guess what we need then is what weight they assign to each of these. That "using encryption" is on the same level as a listing on "express[ing] a desire to travel overseas to engage violence"[0] doesn't inspire my confidence. It makes me think that this questionnaire won't be as effective. [0] according to the leaked document. If they weights are assigned by some other rubric in another document not leaked or part of this article at least, then I guess I am wrong.
  - ucaetano 10y ago
    But the document doesn't talk about "using encryption", it says: Has the subject engaged in or discussed tradecraft to hide their online activities contextually different from previous activity?
    - noobermin 10y ago
      After the "check all that apply" Encryption is listed on the next line.
darawk 10y ago
No, but that isn't the only question on the list. Encryption combined with fundamentalism, tactical training, and a keen interest in prior attacks is definitely a red flag in my book. And the use of encryption/privacy software definitely strengthens that case.
- benchaney 10y ago
  Fundamentalism, tactical training and a keep interest in prior attacks is a red flag on its own. I don't think that encryption adds anything.
  - ucaetano 10y ago
    Someone like that who suddenly starts using encryption is a major red flag. Fundamentalism, tactical training and a keep interest in prior attacks aren't enough to single out someone who's preparing an attack, but someone like that who went off the grid, started using encryption and just maxed out his credit card needs far more attention than someone spreading have from their basement.
    - benchaney 10y ago
      Again, maxing credit cards and going to the grid are red flags, but I still don't see what encryption adds.
      - darawk 10y ago
        Encryption suggests active planning. Using encryption is what you do when you are actively trying to hide your activity. The others are indicators of susceptible traits - but encryption suggests imminence and active involvement. If you have gone beyond just developing radical beliefs and start actually planning an attack, that's when you're likely to start using encryption and taking operational security seriously.
      - ucaetano 10y ago
        Look at the actual wording: Has the subject engaged in or discussed tradecraft to hide their online activities contextually different from previous activity? The relevant part isn't the encryption, but the context. If you have two email accounts, one for general usage, unencrypted, and one encrypted that you rarely use, but suddenly see a spike in usage, that's a red flag. It isn't if you use encryption, but how you use it.

Godel_unicode 10y ago

That's hardly the only question like that. Many things on this list would, if taken in isolation, not be indicative of terrorist leanings. I'm assuming that's why there are many questions on this list.

noobermin 10y ago
Alright, I was about to delete my comment above when I saw a reply to another comment which had similar sentiment to mine. I guess what we need then is what weight they assign to each of these. That "using encryption" is on the same level as a listing on "express[ing] a desire to travel overseas to engage violence"[0] doesn't inspire my confidence. It makes me think that this questionnaire won't be as effective. [0] according to the leaked document. If they weights are assigned by some other rubric in another document not leaked or part of this article at least, then I guess I am wrong.
- ucaetano 10y ago
  But the document doesn't talk about "using encryption", it says: Has the subject engaged in or discussed tradecraft to hide their online activities contextually different from previous activity?
  - noobermin 10y ago
    After the "check all that apply" Encryption is listed on the next line.

darawk 10y ago

No, but that isn't the only question on the list. Encryption combined with fundamentalism, tactical training, and a keen interest in prior attacks is definitely a red flag in my book. And the use of encryption/privacy software definitely strengthens that case.

benchaney 10y ago
Fundamentalism, tactical training and a keep interest in prior attacks is a red flag on its own. I don't think that encryption adds anything.
- ucaetano 10y ago
  Someone like that who suddenly starts using encryption is a major red flag. Fundamentalism, tactical training and a keep interest in prior attacks aren't enough to single out someone who's preparing an attack, but someone like that who went off the grid, started using encryption and just maxed out his credit card needs far more attention than someone spreading have from their basement.
  - benchaney 10y ago
    Again, maxing credit cards and going to the grid are red flags, but I still don't see what encryption adds.
    - darawk 10y ago
      Encryption suggests active planning. Using encryption is what you do when you are actively trying to hide your activity. The others are indicators of susceptible traits - but encryption suggests imminence and active involvement. If you have gone beyond just developing radical beliefs and start actually planning an attack, that's when you're likely to start using encryption and taking operational security seriously.
    - ucaetano 10y ago
      Look at the actual wording: Has the subject engaged in or discussed tradecraft to hide their online activities contextually different from previous activity? The relevant part isn't the encryption, but the context. If you have two email accounts, one for general usage, unencrypted, and one encrypted that you rarely use, but suddenly see a spike in usage, that's a red flag. It isn't if you use encryption, but how you use it.