4 ms·

you're doing something neat with your Us but I, unfortunately, came of age after lots of the cool times were over. All the hackers got jobs in industry and it f

you're doing something neat with your Us but I, unfortunately, came of age after lots of the cool times were over. All the hackers got jobs in industry and it feels like if I poke anything that isn't hackthebox I'll either A. have the FBI up my ass immediately or worse, B. have created a record somewhere of having committed one felony or another that will appear at an appropriate time for someone else and inappropriate time for me.

baremetal 5y ago
set up your own testing environments.
- arendtio 5y ago
  As long as your country allows you to even own the tools...
  - dpwm 5y ago
    Which countries don’t?
    - arendtio 5y ago
      I have no idea about the global situation, but in Germany there was a lot of discussion when they introduced §202c StGb 15 years ago. - https://www.schneier.com/blog/archives/2007/08/new_german_hack.html https://www.schneier.com/blog/archives/2007/08/new_german_ha... - https://www.gesetze-im-internet.de/stgb/__202c.html https://www.gesetze-im-internet.de/stgb/__202c.html However, it seems it is not about owning the tools, but rather about creating them.
DeathArrow 5y ago
You've surely heard about Tor, socks proxies, VPNs, SSH tunnels.
- lazide 5y ago
  But which ones are really setup by the NSA to get said evidence that will be inconvenient for him at some point in the future? (I suspect Tor, and at least a few of the commercial VPN providers)
  - hungrigekatze 5y ago
    Some recent news out of the commercial VPN universe... From a cryptographer professor at Johns Hopkins: https://twitter.com/matthew_d_green/status/1449356742689689604 https://twitter.com/matthew_d_green/status/14493567426896896... Kape, an Israeli 'adware' company that renamed itself to distance itself from its prior history as an adware company, recently bought up ExpressVPN and several other services and rebranded itself as a VPN services company. Kape also bought VPN ranking websites and juiced the rankings (into positions #1 and #2) for the VPN companies that it just bought: https://restoreprivacy.com/kape-technologies-owns-expressvpn-cyberghost-pia-zenmate-vpn-review-sites/ https://restoreprivacy.com/kape-technologies-owns-expressvpn... I suspect that Kape is probably a CryptoAG repeat - https://en.wikipedia.org/wiki/Crypto_AG https://en.wikipedia.org/wiki/Crypto_AG - and is doing double duty for the US IC along with the Israelis, but it could be just a pure Israeli shop too.
    - wiz21c 5y ago
      The CryptoAG story is super interesting for seeing how super powers handle the issue, thx for the wikipedia.
    - sizzle 5y ago
      Oof, what VPN is the best for privacy nowadays?
  - DeathArrow 5y ago
    It might be true. But what if you chain multiple defenses, each one in states that do not get well with each other? Every investigation will need collaboration.
    - 5y ago

baremetal 5y ago

set up your own testing environments.

arendtio 5y ago
As long as your country allows you to even own the tools...
- dpwm 5y ago
  Which countries don’t?
  - arendtio 5y ago
    I have no idea about the global situation, but in Germany there was a lot of discussion when they introduced §202c StGb 15 years ago. - https://www.schneier.com/blog/archives/2007/08/new_german_hack.html https://www.schneier.com/blog/archives/2007/08/new_german_ha... - https://www.gesetze-im-internet.de/stgb/__202c.html https://www.gesetze-im-internet.de/stgb/__202c.html However, it seems it is not about owning the tools, but rather about creating them.

DeathArrow 5y ago

You've surely heard about Tor, socks proxies, VPNs, SSH tunnels.

lazide 5y ago
But which ones are really setup by the NSA to get said evidence that will be inconvenient for him at some point in the future? (I suspect Tor, and at least a few of the commercial VPN providers)
- hungrigekatze 5y ago
  Some recent news out of the commercial VPN universe... From a cryptographer professor at Johns Hopkins: https://twitter.com/matthew_d_green/status/1449356742689689604 https://twitter.com/matthew_d_green/status/14493567426896896... Kape, an Israeli 'adware' company that renamed itself to distance itself from its prior history as an adware company, recently bought up ExpressVPN and several other services and rebranded itself as a VPN services company. Kape also bought VPN ranking websites and juiced the rankings (into positions #1 and #2) for the VPN companies that it just bought: https://restoreprivacy.com/kape-technologies-owns-expressvpn-cyberghost-pia-zenmate-vpn-review-sites/ https://restoreprivacy.com/kape-technologies-owns-expressvpn... I suspect that Kape is probably a CryptoAG repeat - https://en.wikipedia.org/wiki/Crypto_AG https://en.wikipedia.org/wiki/Crypto_AG - and is doing double duty for the US IC along with the Israelis, but it could be just a pure Israeli shop too.
  - wiz21c 5y ago
    The CryptoAG story is super interesting for seeing how super powers handle the issue, thx for the wikipedia.
  - sizzle 5y ago
    Oof, what VPN is the best for privacy nowadays?
- DeathArrow 5y ago
  It might be true. But what if you chain multiple defenses, each one in states that do not get well with each other? Every investigation will need collaboration.
  - 5y ago