Stories
Slash Boxes
Comments

Dev.SN ♥ developers

posted by mattie_p on Tuesday February 25 2014, @02:00AM   Printer-friendly
from the I'm-not-directly-spying-on-you dept.

Angry Jesus writes:

"German language magazine 'Bild am Sonntag' reports that, in response to Obama's recent order to stop spying on Angela Merkel and other heads of 'friendly' states, the NSA has instead ramped up spying on everybody Merkel communicates with. Cory Doctorow points out that this action demonstrates that the NSA is out of control and deliberately disobeying a presidential order with a level of duplicity worthy of a four year-old."

 
This discussion has been archived. No new comments can be posted.
Display Options Breakthrough Mark All as Read Mark All as Unread
The Fine Print: The following comments are owned by whoever posted them. We are not responsible for them in any way.
  • (Score: 5, Interesting) by MichaelDavidCrawford on Tuesday February 25 2014, @03:28AM

    by MichaelDavidCrawford (2339) on Tuesday February 25 2014, @03:28AM (#6457) Homepage

    Be careful when you wrestle with demons. For when you stare into the abyss, the abyss also stares into you.

    -- Friedrich Nietzche

    I haven't used google much at all for a couple of years. I use DuckDuckGo [duckduckgo.com] instead. It doesn't record your IP address in its logs.

    There are some other search engines that are similar, but are just front-ends to google. So google still knows what you're looking for, just not who you are. My understanding is that DuckDuckGo does its own search, rather than outsourcing it.

    For extra credit, use the DuckDuckGo Tor Hidden Service [torproject.org]. That works just like the Silk Road did, in that the entire transaction is encrypted as well as obfuscated. While DuckDuckGo does not record your IP, a man in the middle can see you.

    It would help either to use HTTP Everywhere, or to just use SSL manually, as DuckDuckGo [duckduckgo.com]. While that will encrypt your queries, the fact that you made a connection at a particular timestamp is still easy to discern.

    If you do use Tor, READ THE FINE MANUAL!

    The reason Ross Ulbricht got busted was not Tor's fault. There is a distinction between a cipher and a cryptosystem.

    Alice: We Have A New Cryptosystem!

    Bob: Yes, we do!

    (New York City is blown into fine, radioactive stratospheric dust.)

    Charlie: No You Didn't.

    If you use any manner of cryptography, it's important to understand the distinction between codes, codebooks, ciphers, keys and cryptosystems.

    It's not actually the case that Turing cracked the Enigma. He only cracked the rotor settings, which changed throughout the war.

    We only won the war in the atlantic because a German admiral and a German caption did not comply to the enigma's cryptosystem: a three rotor enigma was left out in plain sight in an abandoned polish naval base after the nazi's moved on to the soviet union, so two polish cryptographers put the arm on it then sent it to turing.

    The NAZIs figured they'd been had so they eventually added a fourth rotor. That resulted in the sinking of many convoy ships and many deaths. But eventually the British captured a german ship with an intact four-rotor enigma.

    the enigma rotor cipher is commonly thought to be insecure. My understanding is that that's not the case. It's a good way to concatenate an unchanging key with a second key that is frequently changed, therefore it doesn't help much to capture lots of ciphertext.

    The technicians who soldered the leads on the rotors were only permitted to view the one side they were soldering. They were manufactured in such a way that the technician who soldered the other side of your rotor did not see the wires you just soldered. Thus it is readily apparent that whoever designed the Enigma knew what a cryptosystem was.

    Too bad for Der Führer that he didn't turn on his Navy to the cryptosystem.

    Simlarly the US won the battle of midway through social engineering. The japanese thought they had a cryptosystem but they did not in reality. We got them to read us their codebook!

    --
    I have a major product announcement [warplife.com] coming 5:01 PM 2014-03-21 EST.
    Starting Score:    1  point
    Moderation   +4  
       Troll=1, Interesting=3, Underrated=2, Total=6
    Extra 'Interesting' Modifier   0  

    Total Score:   5  
  • (Score: 0, Troll) by Anonymous Coward on Tuesday February 25 2014, @03:58AM

    by Anonymous Coward on Tuesday February 25 2014, @03:58AM (#6472)

    DuckDuckGo uses Bing

    • (Score: 3) by everdred on Tuesday February 25 2014, @12:55PM

      by everdred (110) on Tuesday February 25 2014, @12:55PM (#6735) Homepage Journal

      Why was this modded Troll? Duckduckgo uses other search engines as its backend, and I believe it may have used Bing at one point. Currently it uses Yandex.

      --
      We don't take no shit from a machine.
      • (Score: 1) by HiThere on Tuesday February 25 2014, @10:34PM

        by HiThere (866) on Tuesday February 25 2014, @10:34PM (#7065)

        I thought it used a mix of search engines...or possibly several at the same time.

        Whatever, not logging your IP address is good, but since your communications to are probably monitored on the way to it, it probably doesn't matter. Someone else logged it.

        (Yes, I know you mentioned ways to obscure that trail. I doubt that they will be successful if you are a person of interest. If you aren't, they probably aren't needed...though that may be foolish optimism.)

        --
        Put not your faith in princes.
        • (Score: 2) by everdred on Wednesday February 26 2014, @04:13AM

          by everdred (110) on Wednesday February 26 2014, @04:13AM (#7194) Homepage Journal

          It looks like you're right [duck.co]. But interestingly, I found that page through a link that said read "In partnership with Yandex," which seems to appear alongside the results of all queries I try now.

          --
          We don't take no shit from a machine.
  • (Score: 0, Flamebait) by HyperQuantum on Tuesday February 25 2014, @08:21AM

    by HyperQuantum (2673) on Tuesday February 25 2014, @08:21AM (#6565)

    If you use any manner of cryptography, it's important to understand the distinction between codes, codebooks, ciphers, keys and cryptosystems.

    And that is why most people don't bother trying to use it. If you want everyone to use something, then make it easy to use!