4 ms·
Has the EFF ever been publicly targeted by proficient hacking entity before? If anyone is capable of describing the appropriate response to this kind of threat
by breatheoften 7y ago
Has the EFF ever been publicly targeted by proficient hacking entity before?
If anyone is capable of describing the appropriate response to this kind of threat — it has to be them.
- acct1771 7y agoWant a security starter pack? | Surveillance Self-Defense https://ssd.eff.org/en/playlist/want-security-starter-pack https://ssd.eff.org/en/playlist/want-security-starter-pack https://www.eff.org/issues/security https://www.eff.org/issues/security https://ssd.eff.org/en/module/your-security-plan https://ssd.eff.org/en/module/your-security-plan Links from (E)lectronic (F)rontier (F)oundation. Should point someone in the right direction.
- dontbenebby 7y ago>If anyone is capable of describing the appropriate response to this kind of threat — it has to be them. I'd be willing to bet any competent actor would realize trying to use something on EFF would probably result in their staff noticing their computer acting oddly and passing along the malware sample to a place like Citizen Lab. Then they can wave bye bye to their zero day. I don't have a source but I could have sworn some leaked doc at some point mentioned they (various intel agencies) don't like to use fancy 0 days on savvy targets. Probably something that's used on places that want to Free Tibet or let Saudi women drive, not savvy tech people. I also think EFF probably practice what they preach (another poster mentioned their great surveillance self defense guide). There's also lot to be said for just leaving your phones in the other room, turning on the radio, then having a meeting in a conference room free of electronics. People often focus too much on infosec, instead of opsec IMHO.