5 ms·
Is there any theoretical way to defeat these programs and ensure anonymity? I'm even suspect of SSL given private keys can probably be demanded through FISA cou
by pvnick 13y ago
Is there any theoretical way to defeat these programs and ensure anonymity? I'm even suspect of SSL given private keys can probably be demanded through FISA court.
- tmandarano 13y agoWell, not fully defeat, but you could make yourself less of a target by using a series of shell accounts and effectively laundering the money. Just Google laundering. Techniques are widely publicized and accessible.
- zachrose 13y agoUse separate hardware on public wifi. Take the battery out when you're done.
- gasull 13y agoWhy taking the battery out? Are you talking about a smartphone or a laptop?
- tlrobinson 13y agoWas that a joke? What does public WiFi have to do with anything? We're talking about the NSA wiretapping Internet backbones and forging SSL certificates.
- zachrose 13y agoWe're talking about anonymity, not secrecy.
- tlrobinson 13y agoOh I see. That works as long as nothing you do online can identify you. That rules out the vast majority of things people do online.
- sneak 13y agoWe're not talking about forging ssl certs and never have been. NSA doesn't do that and never will, for reasons which are totally obvious if actually think about what would happen if they did.
- nwh 13y agoAssume they have access to the original pricate keys.
- tlrobinson 13y agoBy "forge" I meant using the private keys (obtained through FISA, or possibly cracked) to either decrypt or MITM SSL sessions, not using one of their own CAs to create a valid but obviously fake certificate, which I assume is what you thought I meant. Maybe "forge" was the wrong word.
- Robin_Message 13y agoI think (not an expert) that with elliptic curve Diffie-Hellman (which e.g. Google uses), even with the private key and the whole session, you still can't decrypt the session (Diffie-Hellman provides a secure channel, public/private proves the server is who it says it is).
- sneak 13y agoThat is correct. These are referred to as ECDHE, or DHE for the non-ECC variant (vanilla DH). The last e is "ephemeral", referring to the lifetime of the session key. The property that this provides is known as "forward secrecy".
- drcode 13y agoThe 100% theoretically guaranteed method is the zerocoin extension: http://zerocoin.org/ http://zerocoin.org/
- MacsHeadroom 13y agoCaveat, much higher bandwidth and data storage requirement. One ZeroCoin transaction takes the bandwidth/storage space of something like 100 (or was it 1000?) Bitcoin transactions. That could add up fast.