3 ms·
There is a fundamental problem with being truly secure online. That flaw is that the sites and services we use are compromised. In order to me to write this com
by dkokelley 13y ago
There is a fundamental problem with being truly secure online. That flaw is that the sites and services we use are compromised. In order to me to write this comment, I'm relying on the free wifi at Starbucks to not log my actions. I'm relying on their ISP to not log the traffic to HN's servers. I'm relying on Google's Chrome browser to correctly recognize HN's certificate and encrypt my packets properly, and I'm relying on Entrust Certification Authority to correctly assert that I am actually sending my data to HN and not an intermediary. Then I'm relying on HN to receive my data and store it securely (well, as secure as I should expect a public forum to be, but the scenario applies just as well to banks and email providers). Finally, I'm relying on all software installed on my laptop (including the operating system) to respect my privacy by not logging keystrokes.
Any 3-letter agency that wanted to track my internet usage only needs to collude with one of these services to compromise my privacy. I think the solution to privacy is a combination between government transparency and accountability, and our own due diligence to carefully vet the programs and services we use.
- eurleif 13y ago>In order to me to write this comment, I'm relying on the free wifi at Starbucks to not log my actions. No, you aren't. Hacker News is HTTPS-exclusive.
- dkokelley 13y agoThey still know where to send my packets, and it's possible that they are proxying the SSL (although that requires a secondary breach in Chrome's CA list and/or Entrust).