6 ms·
I don't get why we are making websites that are supposed to be whistle-blowing platforms. It's already been established that numerous corruptible parties can b
by alexandercrohde 8y ago
I don't get why we are making websites that are supposed to be whistle-blowing platforms. It's already been established that numerous corruptible parties can break https (e.g. by hacking a cert).
Depending on the nature of the leak, perhaps it'd be best to get it into a safe public store that won't be disappeared (e.g. the blockchain) in an encrypted fashion, and then release the key to select parties.
- therein 8y agoThere is really no reason to involve the blockchain here unless you care about who leaked it first and who gets to claim credit for it. Just put it up as a torrent and share the magnet link.
- subcosmos 8y agoOr you want to make a fortune on a new LeakCoinTokenICNo What would get the most buzz? FreedomChain?
- tajen 8y agoThe IP of the source torrent is published.
- Sir_Substance 8y agoSo stick a raspberry pi rigged to automatically upload the file in your pocket and go use the free wifi at your local library?
- senectus1 8y agogiven how many camera's are around I wouldn't be surprised if they tracked you down fairly quickly.
- GW150914 8y agoHow about bolting it to a small drone and flying around until you find an open WiFi you can use? Then fly it into the nearest body of water.
- Sir_Substance 8y agoPossibly, depends on how generic a drone you can get though, it might be possible to trace through the drone purchase and/or serial number. If you don't care about time and are willing to spend a bit of money, you could potentially attach an automatic wifi connecting and uploading raspberry pi or similar to the underside of a random car and just let it drive around. In most cities it'll eventually park near an open wifi. You might want to deploy two or three I guess.
- Sir_Substance 8y agoMy pockets are generally opaque.
- nyolfen 8y agothat’s exactly what assange did with his insurance file, and the guardian editor he was in contact with published the password for the archive of unredacted diplomatic cables in a book
- endgame 8y agoI can imagine a file-hosting blockchain platform that pays out people who host, and charges people who request files. The tokens to participate in the service then get sold on the usual exchanges.
- jdc 8y agoWho can break it with HKPK enabled?
- schoen 8y agoNote that HPKP enforcement is being dropped as a mainstream browser feature, so we may not be able to rely on this particular argument much in the future. (Although an attacker might not know for sure whether some target might not still be enforcing a pin, presumably not many sites will keep announcing pins at some point.)
- Avamander 8y agoIt's really a pity they're removing the functionality. Would it be possible to have a browser extension enforce it?
- schoen 8y agoThat would be interesting. It sounds like the deprecation became effective and Chrome stopped enforcing it just two weeks ago. I don't know whether Chrome provides appropriate extension APIs to allow an extension to do this, but I have a number of colleagues who work on browser extension development whom I could ask.
- a1369209993 8y ago> and then release the key to select parties. Don't do this; it has all the same problems of just giving the data to select parties directly. Instead use http://www.gwern.net/Self-decrypting-files http://www.gwern.net/Self-decrypting-files and post that to the blockchain. This ensures that anyone can access the data without depending on a trusted third party, but the data will already be irrevocably committed by the time anyone realizes that they want to censor it. Then publish the decryption key for convenience; if that get censored, it's merely mildly annoying.
- schoen 8y ago> It's already been established that numerous corruptible parties can break https (e.g. by hacking a cert). * Scandal and investigation when they do, potentially leading to removal of trust from an associated CA. * Easier and easier to detect (recently mandatory disclosure of all publicly-trusted certs https://groups.google.com/a/chromium.org/forum/#!topic/ct-policy/wHILiYf31DE https://groups.google.com/a/chromium.org/forum/#!topic/ct-po... and you can sign up to get alerts when a certificate is logged for a particular domain name). * Onion sites also derive cryptographic security from the onion name itself. (I'm working on getting them to be allowed to have DV certs, but even without certs, the onion rendezvous protocol confirms that you've reached a party that controls a key specified in the name itself.) (Someone else mentioned HPKP, which I've also touted in the past as improving HTTPS security, but it seems HPKP enforcement is going away, so we can't necessarily tout it for this purpose anymore...)
- a1369209993 8y ago> Onion sites also derive cryptographic security from the onion name itself. (I'm working on getting them to be allowed to have DV certs, Is it possible to derive a fully secure HTTPS-or-equivalent connection purely from the site's curve25519 key? It seems like that would make DV (and CAs in general) completely redundant. (And if not, is there a explanation of why not?)
- Boulth 8y agoThat's basically what onion addresses v3 are.
- schoen 8y agoI wrote an explanation about why not in https://cabforum.org/pipermail/public/2017-November/012451.html https://cabforum.org/pipermail/public/2017-November/012451.h... See the section "Why do people want certificates for onion names?". It's correct that both v2 and v3 onions provide end-to-end encryption based on the onion service key. In v3 onions that encryption uses more modern cryptographic primitives than in v2 onions, so the incremental cryptographic benefit would be much larger in v2, where unfortunately for historical reasons the CA industry is reluctant to allow DV certs.
- mirimir 8y agoRecipients can setup as a Tor onion service. Just as with SecureDrop. Or sources can just publish using OnionShare.
- jampekka 8y agoGlobaLeaks is very explicit, also to the user, that HTTPS is not secure and strongly recommends using tor.