3 ms·

> At least one Jira support ticket shows evidence of plaintext capture of email I would be surprised if western governments didn't do the same, and folks shoul

> At least one Jira support ticket shows evidence of plaintext capture of email I would be surprised if western governments didn't do the same, and folks should act accordingly.

nilamo 1y ago
We don't need to guess, we know they do. That was one of Snowden's big reveals.
oogali 1y ago
The US has been doing this for a long time (1997), on a targeted basis. https://en.wikipedia.org/wiki/Carnivore_(software) https://en.wikipedia.org/wiki/Carnivore_(software)
perihelions 1y ago
The NSA was storing bulk plaintext emails from (at least) Microsoft, as of the time of the Snowden leaks. Microsoft actively assisted them. https://www.theguardian.com/world/2013/jul/11/microsoft-nsa-collaboration-user-data https://www.theguardian.com/world/2013/jul/11/microsoft-nsa-... ("Microsoft handed the NSA access to encrypted messages") > "Microsoft helped the NSA to circumvent its encryption to address concerns that the agency would be unable to intercept web chats on the new Outlook.com portal;" > "The agency already had pre-encryption stage access to email on Outlook.com, including Hotmail;"
brookst 1y ago
In general none of the disclosures of what GFW is doing g should be seen as evidence that western governments do not do the same thing. Hope nobody is drawing that conclusion.
- bjt 1y ago
  Western governments do not routinely block VPNs.
  - hulitu 1y ago
    Different phylosophy: why block VPNs when you can monitor them. Most Root CAs are in US.
    - immibis 1y ago
      Certificate transparency is mandatory in browsers; interception certificates appear in certificate logs to be accepted. Have you found one? Edit: OCSP has been ended.
      - edgineer 1y ago
        He might be referring to OCSP. Browsers ping CAs by default, revealing to them the sites that are visited.
        arcfour 1y ago
        OCSP is very much on the way out, this is hardly true anymore; although some things still check OCSP, many things do not.
  - bigyabai 1y ago
    Western governments effectively control 99% of consumer technology, and hack whatever else they can't have. VPNs are a false sense of security going up against a nation-sized adversary like the US.
    - throwaway48476 1y ago
      They also can correlate packet streams in and out of the tor network.

> At least one Jira support ticket shows evidence of plaintext capture of email I would be surprised if western governments didn't do the same, and folks should act accordingly.

nilamo 1y ago

We don't need to guess, we know they do. That was one of Snowden's big reveals.

oogali 1y ago

The US has been doing this for a long time (1997), on a targeted basis. https://en.wikipedia.org/wiki/Carnivore_(software) https://en.wikipedia.org/wiki/Carnivore_(software)

perihelions 1y ago

The NSA was storing bulk plaintext emails from (at least) Microsoft, as of the time of the Snowden leaks. Microsoft actively assisted them. https://www.theguardian.com/world/2013/jul/11/microsoft-nsa-collaboration-user-data https://www.theguardian.com/world/2013/jul/11/microsoft-nsa-... ("Microsoft handed the NSA access to encrypted messages") > "Microsoft helped the NSA to circumvent its encryption to address concerns that the agency would be unable to intercept web chats on the new Outlook.com portal;" > "The agency already had pre-encryption stage access to email on Outlook.com, including Hotmail;"

brookst 1y ago

In general none of the disclosures of what GFW is doing g should be seen as evidence that western governments do not do the same thing. Hope nobody is drawing that conclusion.

bjt 1y ago
Western governments do not routinely block VPNs.
- hulitu 1y ago
  Different phylosophy: why block VPNs when you can monitor them. Most Root CAs are in US.
  - immibis 1y ago
    Certificate transparency is mandatory in browsers; interception certificates appear in certificate logs to be accepted. Have you found one? Edit: OCSP has been ended.
    - edgineer 1y ago
      He might be referring to OCSP. Browsers ping CAs by default, revealing to them the sites that are visited.
      - arcfour 1y ago
        OCSP is very much on the way out, this is hardly true anymore; although some things still check OCSP, many things do not.
- bigyabai 1y ago
  Western governments effectively control 99% of consumer technology, and hack whatever else they can't have. VPNs are a false sense of security going up against a nation-sized adversary like the US.
  - throwaway48476 1y ago
    They also can correlate packet streams in and out of the tor network.