This! "Don't mind me, just putting important & sensitive personal information on the internet backed by the power of an easily guessible password and hints. P

This! "Don't mind me, just putting important & sensitive personal information on the internet backed by the power of an easily guessible password and hints. Pre-Encrypt -> [OwnCloud || SpiderOak || AWS S3 || etc.] And re leaked docs ... I still don't understand the mindset that some people have (maybe someone can help me). When people say, "oh, but the US Gov isn't worried about you" all I can do is roll my eyes. * How can you verifiably prove that? (they can't) * How can you verifiably prove other governments aren't? * How can you verifiably prove chaos agents aren't? * How can you verifiably prove someone isn't silently watching you? * etc. Just because it was or wasn't in a leaked document does not mean that the ability does not exist nor does it mean that such capability is only in the hands of 1 government. In my eyes, the leaked docs showed "this is the current level" re: security/privacy/surveillance. We have to assume all other governments, corps, & individuals have equally or more powerful systems in place. Why? Because it's the only safe assumption. That assumption has no bearing on the merits of legality with how the NSA conducts its mission, nor bearing on how others act. The documents merely give evidence and a base-level run down of additional attack vectors. This has absolutely zero to do with a "legal vs. illegal"-action debate and everything to do with technological security and infrastructure. I encourage everyone to consider RFC 7258 [1] in their future projects. Do it for your users, whomever they may be. Consider RFC 7258 your USSINT 18 (if you're American) ... that is, fucking read it, understand it, and internalize it. Maybe the gov is good, maybe they're bad - that is irrelevant when there is more than just 1 gov in the world. [1] http://tools.ietf.org/html/rfc7258 http://tools.ietf.org/html/rfc7258