5 ms·

and all of this had zero effect on revenue and customer retention, congratulations you played yourself also the FBI has merely made suggestions to Reykjavik Po

and all of this had zero effect on revenue and customer retention, congratulations you played yourself also the FBI has merely made suggestions to Reykjavik Police to infiltrate servers and they did > After the initial revelation of the server's location in a data center in Reykjavik, Iceland, the filing explains that Reykjavik police accessed and secretly copied the server's data. As agents of a foreign government, the prosecution argues, they weren't required to seek a warrant from any US authority. The owner of those servers is in US prison right now serving a double life sentence Iceland's domestic laws didn't help here, and the lack of a formal arrangement with cross-sharing intelligence communities didn't help here So you are either implementing a zero-knowledge service to begin with, or wasting your time

mirimir 8y ago
Where are you getting that quote from? I don't see it in TFA, and you don't provide any reference. If the server uses full-disk encryption, and if it's well locked down, it would be nontrivial to secretly access and copy the server's data. I mean, adversaries could attach a keyboard and monitor, but they couldn't log in. And you can even delete the root password, and allow only key-based login via SSH.
- caprese 8y ago
  source of quote: https://www.wired.com/2014/09/the-fbi-finally-says-how-it-legally-pinpointed-silk-roads-server/ https://www.wired.com/2014/09/the-fbi-finally-says-how-it-le... additional: https://nakedsecurity.sophos.com/2014/10/10/fbis-warrantless-hack-of-silk-road-was-legal-prosecutors-claim/ https://nakedsecurity.sophos.com/2014/10/10/fbis-warrantless... > If the server uses full-disk encryption, and if it's well locked down, it would be nontrivial to secretly access and copy the server's data. OP's article mentions this, part of the reason they move out of the US is because RAM can be trivially read even if full disk encryption is used. Reading RAM still works in Iceland.
  - mirimir 8y ago
    Thanks. > RAM can be trivially read even if full disk encryption is used I wouldn't say "trivially", but yes, it can be. But if you're that paranoid, you can embed key parts of the motherboard in alumina-filled epoxy. Its thermal conductivity is good, and you can add fins and fans as needed. You can even embed trip wires in the epoxy, to trigger system shutdown if tampered with.
    - dylz 8y ago
      They're running on VMs, not bare metal, presumably, because their (new) server's reverse DNS is vps-*, and previously on Digitalocean. You can just dump the VM's memory space while unlocked, can't you? A lot of this seems like security theater, especially while still hosted behind Cloudflare.
      - mirimir 8y ago
        Oops. Yeah, here it does seem security theater. But still, it was a good writeup. I mean, dropbear and all. I have no clue why they're using VPS, after all that. I mean, if they're a real business, they ought to just setup a server, and ship it to Iceland. If the want the ease of VPS, it's easy to do secure KVM in a FDE server. Even with Docker containers within KVM, if you like.
        philliphaydon 8y ago
        “If they’re a real business” - this is the sort of dribble HN is reduced to? A real business can’t run on a VPS?
        hal009 8y ago
        I believe the point here is that they claim that they care about security, while their Icelandic VPS hosting provider can just dump the host server memory, which would include the encryption keys.

mirimir 8y ago

Where are you getting that quote from? I don't see it in TFA, and you don't provide any reference. If the server uses full-disk encryption, and if it's well locked down, it would be nontrivial to secretly access and copy the server's data. I mean, adversaries could attach a keyboard and monitor, but they couldn't log in. And you can even delete the root password, and allow only key-based login via SSH.

caprese 8y ago
source of quote: https://www.wired.com/2014/09/the-fbi-finally-says-how-it-legally-pinpointed-silk-roads-server/ https://www.wired.com/2014/09/the-fbi-finally-says-how-it-le... additional: https://nakedsecurity.sophos.com/2014/10/10/fbis-warrantless-hack-of-silk-road-was-legal-prosecutors-claim/ https://nakedsecurity.sophos.com/2014/10/10/fbis-warrantless... > If the server uses full-disk encryption, and if it's well locked down, it would be nontrivial to secretly access and copy the server's data. OP's article mentions this, part of the reason they move out of the US is because RAM can be trivially read even if full disk encryption is used. Reading RAM still works in Iceland.
- mirimir 8y ago
  Thanks. > RAM can be trivially read even if full disk encryption is used I wouldn't say "trivially", but yes, it can be. But if you're that paranoid, you can embed key parts of the motherboard in alumina-filled epoxy. Its thermal conductivity is good, and you can add fins and fans as needed. You can even embed trip wires in the epoxy, to trigger system shutdown if tampered with.
  - dylz 8y ago
    They're running on VMs, not bare metal, presumably, because their (new) server's reverse DNS is vps-*, and previously on Digitalocean. You can just dump the VM's memory space while unlocked, can't you? A lot of this seems like security theater, especially while still hosted behind Cloudflare.
    - mirimir 8y ago
      Oops. Yeah, here it does seem security theater. But still, it was a good writeup. I mean, dropbear and all. I have no clue why they're using VPS, after all that. I mean, if they're a real business, they ought to just setup a server, and ship it to Iceland. If the want the ease of VPS, it's easy to do secure KVM in a FDE server. Even with Docker containers within KVM, if you like.
      - philliphaydon 8y ago
        “If they’re a real business” - this is the sort of dribble HN is reduced to? A real business can’t run on a VPS?
        hal009 8y ago
        I believe the point here is that they claim that they care about security, while their Icelandic VPS hosting provider can just dump the host server memory, which would include the encryption keys.