4 ms·
> to rifle through your shit. I keep pcap files of all my network traffic to protect myself against this. If anyone has been targeted by the NSA and can send
by londons_explore 3y ago
> to rifle through your shit.
I keep pcap files of all my network traffic to protect myself against this. If anyone has been targeted by the NSA and can send me example traffic, then please do.
I so far haven't caught anyone doing anything nefarious, but with terabytes of traffic logged it's a bit of a needle in the haystack task. I keep the logs, because even if now their traffic is well hidden, I'm sure future analysis techniques will reveal them if they're there.
- saagarjha 3y agos/your/journalists and family members of politicians/
- Jenda_ 3y ago> I keep pcap files of all my network traffic to protect myself against this. How does this work if you receive the payload via HTTPS? Do you MITM all your apps? (advanced version: can the payload be encrypted using an application-level Diffie-Hellman? e.g. if a JavaScript does a DH exchange and decrypts the payload with it)
- londons_explore 3y agoI run everything in a recorded VM, allowing me to replay all the code on my machine to get those keys if I need to.
- Jenda_ 3y agoThat sounds interesting, what is the technical solution for this? Are the logs extremely huge?
- TheDong 3y agoSorry, you store terrabytes of traffic, and then _also_ store all memory read/writes for all your browsing using a VM? What tooling do you use to record the VM? I'm unable to, with simple googling, find any tooling for VMs to do this, with all my results either being point-in-time snapshotting or video recording related. How much data does that generate in a month? No offense, but this claim just sounds fantastical to me.