5 ms·
It's safe to assume such well funded attackers will use zero day. You could force all your traffic through Tor with a router. That way your compromised end poi
by Canada 12y ago
It's safe to assume such well funded attackers will use zero day.
You could force all your traffic through Tor with a router. That way your compromised end point won't easily reveal your public IP. The attacker would be forced to generate some traffic they could fingerprint or use the microphone and camera to spy on you.
- x0x0 12y agoTrue, so don't engage in behavior like child porn worth burning a zero-day for.
- CapitalistCartr 12y ago"Like - having the same characteristics or qualities as; similar to" Who decides what is worth compromising basic security and a zero-day? In the recent past, the US federal gov't has shown itself far more hostile to those who challenged them, or ratted on their actions than actual dangerous people. Is the "similar to" being a whistle-blower? Maybe being person who criticizes the policies of the gov't while being employed by it? If I trusted my gov't to restrain itself to child pornographers and actual threats to the country (not government, country), I'd sleep easier.
- csandreasen 12y agoWho decides what is worth compromising basic security and a zero-day? Ultimately, lawmakers and the people who elected them. Additionally, elected presidents and the people who elect them, as well as the court system.
- coldtea 12y agoI don't think that's how modern democracy works, if it works at all. Direct democracy in 4 b.C Athens, maybe.
- csandreasen 12y agoIt's a slow system with a lot of flaws, but ultimately if Congress were to pass a law saying who the FBI could or could not use a 0-day against, they'd be legally bound to comply. Ditto for presidential directives. If you're arrested as a result evidence acquired through use of a 0-day, you can make an argument in court if you really think you have a compelling case. There's a whole lot of little details that make these easier or harder under certain circumstances, but none of these are impossible, especially if you have popular support for your cause. If you don't like the way something works, you can talk to your congressmen, vote, support organizations that promote your cause, etc. Just complaining on the internet won't change much.
- justizin 12y agoUnfortunately, not everything "worth burning a zero-day" to some misguided government agent is as clear cut of an activity to categorize as child porn. Obviously, I mean, it's fine if the government just walks into your house once a week for inspection because, pff, what have you got to hide?
- Sami_Lehtinen 12y agoYeah, so many fails. First they failed to use Whonix or similar separation which forces all traffic to go only through tor. Secondly you shouldn't ever mess with, normal (daily use), secure (secret / confidential), and anonymous (no identifying information what so ever) systems. All of those should be completely separate, as deep as hardware level, preferably with individual Internet connections. For secure systems it's good idea to use separation with extremely limited connectivity (rs-serial cable in my case), it's enough to pass ASCII armored pgp messages. AS well for anonymous systems you'll use prepaid data with burner phone and also replace hardware from time to time. You'll also boot the system from read only media, so when ever you'll reset it, it'll be clean again. But if you're lazy and don't care, it's easy to fail. If you use your normal system for all three settings, the results will probably be pretty bad. Also always check signatures, without signature(s) checking it's trivial to give you version which contains well, what ever.