3 ms·

I am a bit disturbed of him calling virtualized hardware safe. It by definition is not. I think that every person should have personal encryption router from w

I am a bit disturbed of him calling virtualized hardware safe. It by definition is not. I think that every person should have personal encryption router from whih to access the cloud services

saraid216 13y ago
> whih I thought this was some technology I wasn't aware of until I realized it was just missing a 'c'. :P
grugq 13y ago
You got that so close, but wrong. Cloud services are inherently insecure because you don't have physical control over the devices containing your data. You have to trust that the remote end is secure, and exploiting trust is what intelligence agencies do best. For an encrypted router, here is my script for making a RaspberryPi into a PORTAL: https://github.com/grugq/PORTALofPi https://github.com/grugq/PORTALofPi And an older blog post on why encryption and tradecraft only get you so far: http://grugq.github.io/blog/2013/03/12/anonymity-is-hard/ http://grugq.github.io/blog/2013/03/12/anonymity-is-hard/ Here is the Ruckus Society's manual on "security culture" which has some brief info on why you need physical control over your data storage devices. Includes also some pointers on how to establish strong(er) physical security for your data. http://ruckus.org/article.php?id=789 http://ruckus.org/article.php?id=789
devindotcom 13y ago
I don't think that just any virtualized hardware is safe fundamentally or anything, I just meant it as a practical option instead of multiplying machines. Obviously trust, as I wrote, can't enter the equation. But if you are sure (in the mathematical sense) that the virtualized machine cannot be doing anything but running tangential software and relaying your info without the possibility of decrypting, it seems safe to me. Obviously if I'm wrong let me know, but I just meant it as a general alternative to people having their own entirely isolated physical server, local or remote.

I am a bit disturbed of him calling virtualized hardware safe. It by definition is not. I think that every person should have personal encryption router from whih to access the cloud services

saraid216 13y ago

> whih I thought this was some technology I wasn't aware of until I realized it was just missing a 'c'. :P

grugq 13y ago

You got that so close, but wrong. Cloud services are inherently insecure because you don't have physical control over the devices containing your data. You have to trust that the remote end is secure, and exploiting trust is what intelligence agencies do best. For an encrypted router, here is my script for making a RaspberryPi into a PORTAL: https://github.com/grugq/PORTALofPi https://github.com/grugq/PORTALofPi And an older blog post on why encryption and tradecraft only get you so far: http://grugq.github.io/blog/2013/03/12/anonymity-is-hard/ http://grugq.github.io/blog/2013/03/12/anonymity-is-hard/ Here is the Ruckus Society's manual on "security culture" which has some brief info on why you need physical control over your data storage devices. Includes also some pointers on how to establish strong(er) physical security for your data. http://ruckus.org/article.php?id=789 http://ruckus.org/article.php?id=789

devindotcom 13y ago

I don't think that just any virtualized hardware is safe fundamentally or anything, I just meant it as a practical option instead of multiplying machines. Obviously trust, as I wrote, can't enter the equation. But if you are sure (in the mathematical sense) that the virtualized machine cannot be doing anything but running tangential software and relaying your info without the possibility of decrypting, it seems safe to me. Obviously if I'm wrong let me know, but I just meant it as a general alternative to people having their own entirely isolated physical server, local or remote.