5 ms·
I assume they were encrypted. All the same, it seems like it would've been far easier & less risky to mail them. Postal service is pretty near anonymous & tam
by fiatmoney 13y ago
I assume they were encrypted. All the same, it seems like it would've been far easier & less risky to mail them. Postal service is pretty near anonymous & tamper-evident with a minimum of effort.
- alan_cx 13y agoIt says encrypted thumb drives.
- srhngpr 13y agoOr send it with someone who is NOT the partner of the journalist who's been credited with the Snowden leaks.
- fixxer 13y agoI'm very confused: they're already encrypted... why not email?
- burke 13y agoAs a hypothetical, imagine the NSA has unlimited ability to spy on the entire internet, and has cracked every crypto algorithm known to man, and that these documents shouldn't be known to the NSA. Sneakernet becomes the only viable option. I'm not saying this is the case, but some less drastic version of it may be a partial reason.
- joe_the_user 13y agoIt is somewhat hard to imagine the documents of people in the lime light having any chance of remaining secure under those circumstances. Also, I'd imagine that if the NSA could just decrypt anything, they would have quietly secured the materials, copied the data and returned the devices in as unobtrusive manner as possible. Seizing and keeping the materials seems more like an effort to keep Greenwald from having the documents.
- fixxer 13y agoThen why not stop the source? Seems like petty bullshit to me; the work of a bureaucrat.
- joe_the_user 13y agoIt could be as simple as the documents being too large.
- Nrsolis 13y agoWould you insert a USB drive into your "secure" non-Internet connected machine if it came via the mail? I wouldn't. Part of the security is trusting the chain-of-possession. Once you no longer have that, you have lost the trust.
- tlrobinson 13y agoWhat are you running, Windows XP? If you're paranoid, use a "burner" computer to copy the file to your "secure" machine, then verify a signature and decrypt. A Raspberry Pi would probably be suitable.
- Nrsolis 13y agoUh huh. You gonna trust that setup with your life? Why not just continue to trust the one person you're SURE can tip you to compromise? If Miranda ever gets his laptop/phone/drives back, they're as good as useless. Straight to the trash heap.
- malandrew 13y agoA micro-sim card is extremely easy to hide somewhere and you can guarantee some chain of possession by wrapping the card in some way that would indicate tampering. On top of that, you don't need to send things from person of interest A to person of interest B. Instead person of interest A can mail the tamper proof sim to non-person of interest C who is friends with person of interest B. In addition, it can be mailed with the return address and name of trust friend of person A that is not a person of interest him or herself. The chances of such a package being intercepted is slim to none.
- Nrsolis 13y agoUh, if you KNOW you're on their radar, you can't trust the mail. And you're mailing a letter which involves a whole lot of people carrying it and handling it. You've got a whole alphabet of persons. Remember that this is a state level adversary. You're not going to get one past them. They know ALL the tricks. ALL of them. Please don't talk tradecraft to me. You are doing it way wrong. There is a way to use the mail, but not the way you are describing it.