4 ms·

Encrypt everything. I wouldn't trust the political process to work itself out in the near future, so a technical approach may be the answer in the meantime. I'v

Encrypt everything. I wouldn't trust the political process to work itself out in the near future, so a technical approach may be the answer in the meantime. I've moved all my friends to Signal not because we're having sensitive conversations, but because we're voting with our actions.

mirimir 9y ago
Yes. And privacy does give you more options. But be careful not to be too obvious about it, because that makes you a target.
- funnyfacts365 9y ago
  When everybody is a target, nobody is a target...
  - unit91 9y ago
    Tell that to Anne Frank.
    - funnyfacts365 9y ago
      She was part of a subset of Everybody.
- spaceribs 9y ago
  > But be careful not to be too obvious about it, because that makes you a target. Good. It's probably better that a young curmudgeonly asshole like myself that has zero respect for unquestioned authority go through the years long process of bringing a clear case of 4th and 5th amendment violations through to the supreme court. I personally would rather rot in jail in contempt if it meant that these questions of personal property, privacy and self-incrimination were discussed and settled legally. It's a question of civic duty at that point.
  - braveo 9y ago
    No you wouldn't, that's internet badassery coupled with youth at work.
    - spaceribs 9y ago
      Versus grumpy old person pessimism? Don't pretend to know my convictions.
      - braveo 9y ago
        I'm not old, I'm just not young enough to romanticize prison.
- mirimir 9y ago
  Too late to edit, but here's a citation: > ... Once the amount of risk is determined, consider cost, time, and effort of implementing OPSEC countermeasures to mitigate risk. Factors to consider include: > (1) The benefit and the effect of the countermeasure on reducing risk to the mission. > (2) The cost of the proposed countermeasure compared with the cost associated with the impact if the adversary exploited the vulnerability. > (3) The possibility that the countermeasure could create an OPSEC indicator. DoD OPSEC manual at pp 13-14 https://www.opsecprofessionals.org/official/081103_DOD_OPSEC_Manual.pdf https://www.opsecprofessionals.org/official/081103_DOD_OPSEC...
endymi0n 9y ago
I'm sorry to be the party pooper here, but... Signal was intercepted: http://heavy.com/tech/2017/03/wikileaks-vault-7-cia-bypasses-signal-telegram-whatsapp-vulnerable-insecure-hacked-encrypted-apps-update/ http://heavy.com/tech/2017/03/wikileaks-vault-7-cia-bypasses... My favorite most depressing take on this by Peter Gutmann - "Crypto won't save you either" http://regmedia.co.uk/2014/05/16/0955_peter_gutmann.pdf http://regmedia.co.uk/2014/05/16/0955_peter_gutmann.pdf
- spaceribs 9y ago
  The OS was hacked, big distinction there. Also, they would have to actively target your phone for surveillance. I'm much more concerned about the passive interception aspect, and I don't for a second believe that I'm preventing myself from being surveilled. The fact that they should have to go out of their way to break the 4th amendment is important to me.
- nannal 9y ago
  The thing about endpoint-to-endpoint security is that it really sucks if one of your endpoints is compromised. The "Signal" was not broken & the encryption worked, the part that didn't was when the encryption was removed and the user presented with plain text.
blahbwah777 9y ago
Along those lines: I've setup family members and closest friends with a Raspberry Pi or in a couple cases cheap Intel Atom machines, that I can configure with Ansible. I run a minimalist "Facebook clone" UI with photo gallery on each box. From their phones or laptop people drop files into a bucket, mostly just photos, and it's SyncThinged over to all nodes. When on local wifi, we can browse each others content. It wasn't too difficult as we're a DIY group. Not at all interested in feeling like we're friends with the world or even just our former high school classmates. I have no problem with notions that our government and laws should require our society fair and protective of everyone. That sort of thing. But giving it all up for private interests to enrich themselves, while life generally gets more expensive for the rest of us is bullshit. Undermining this thing is do-able, in a simple to manage way these days thanks, once again, to open-source and commodity computing.
- spaceribs 9y ago
  Very cool, do you have a github or suggestions on technical choices?

mirimir 9y ago

Yes. And privacy does give you more options. But be careful not to be too obvious about it, because that makes you a target.

funnyfacts365 9y ago
When everybody is a target, nobody is a target...
- unit91 9y ago
  Tell that to Anne Frank.
  - funnyfacts365 9y ago
    She was part of a subset of Everybody.
spaceribs 9y ago
> But be careful not to be too obvious about it, because that makes you a target. Good. It's probably better that a young curmudgeonly asshole like myself that has zero respect for unquestioned authority go through the years long process of bringing a clear case of 4th and 5th amendment violations through to the supreme court. I personally would rather rot in jail in contempt if it meant that these questions of personal property, privacy and self-incrimination were discussed and settled legally. It's a question of civic duty at that point.
- braveo 9y ago
  No you wouldn't, that's internet badassery coupled with youth at work.
  - spaceribs 9y ago
    Versus grumpy old person pessimism? Don't pretend to know my convictions.
    - braveo 9y ago
      I'm not old, I'm just not young enough to romanticize prison.
mirimir 9y ago
Too late to edit, but here's a citation: > ... Once the amount of risk is determined, consider cost, time, and effort of implementing OPSEC countermeasures to mitigate risk. Factors to consider include: > (1) The benefit and the effect of the countermeasure on reducing risk to the mission. > (2) The cost of the proposed countermeasure compared with the cost associated with the impact if the adversary exploited the vulnerability. > (3) The possibility that the countermeasure could create an OPSEC indicator. DoD OPSEC manual at pp 13-14 https://www.opsecprofessionals.org/official/081103_DOD_OPSEC_Manual.pdf https://www.opsecprofessionals.org/official/081103_DOD_OPSEC...

endymi0n 9y ago

I'm sorry to be the party pooper here, but... Signal was intercepted: http://heavy.com/tech/2017/03/wikileaks-vault-7-cia-bypasses-signal-telegram-whatsapp-vulnerable-insecure-hacked-encrypted-apps-update/ http://heavy.com/tech/2017/03/wikileaks-vault-7-cia-bypasses... My favorite most depressing take on this by Peter Gutmann - "Crypto won't save you either" http://regmedia.co.uk/2014/05/16/0955_peter_gutmann.pdf http://regmedia.co.uk/2014/05/16/0955_peter_gutmann.pdf

spaceribs 9y ago
The OS was hacked, big distinction there. Also, they would have to actively target your phone for surveillance. I'm much more concerned about the passive interception aspect, and I don't for a second believe that I'm preventing myself from being surveilled. The fact that they should have to go out of their way to break the 4th amendment is important to me.
nannal 9y ago
The thing about endpoint-to-endpoint security is that it really sucks if one of your endpoints is compromised. The "Signal" was not broken & the encryption worked, the part that didn't was when the encryption was removed and the user presented with plain text.

blahbwah777 9y ago

Along those lines: I've setup family members and closest friends with a Raspberry Pi or in a couple cases cheap Intel Atom machines, that I can configure with Ansible. I run a minimalist "Facebook clone" UI with photo gallery on each box. From their phones or laptop people drop files into a bucket, mostly just photos, and it's SyncThinged over to all nodes. When on local wifi, we can browse each others content. It wasn't too difficult as we're a DIY group. Not at all interested in feeling like we're friends with the world or even just our former high school classmates. I have no problem with notions that our government and laws should require our society fair and protective of everyone. That sort of thing. But giving it all up for private interests to enrich themselves, while life generally gets more expensive for the rest of us is bullshit. Undermining this thing is do-able, in a simple to manage way these days thanks, once again, to open-source and commodity computing.

spaceribs 9y ago
Very cool, do you have a github or suggestions on technical choices?