At a weak endpoint content may be collected without actually doing any encryption.drhowarddrfine said:I wonder if I'm the only one who got your point (and I agree).
At a weak endpoint content may be collected without actually doing any encryption.drhowarddrfine said:I wonder if I'm the only one who got your point (and I agree).
drhowarddrfine said:The government cannot close any US business. The Lavabit guy closed it on his own. Business in the US is private enterprise and only regulated by federal laws if they do business that crosses state lines. Even then, the owner can be thrown in jail and go bankrupt but the business can continue to run if it has someone to do it and have the funds.
I do not. They were silly closing a source they can use. With a gag order usually customers do not get any knowledge on what's going on.cpu82 said:Thanks for clear things up, but I'm sure that US Government pressured to conduct closing it. I think that Lavabit founder isn't a criminal :\
Love that site; found out about it just a few months ago. RequestPolicy is a nice alternative to noScript - if people don't want to research links and deal with a lot of pop-ups.pkubaj said:If you want alternatives, check http://prism-break.org/ out.
tzoi516 said:Love that site; found out about it just a few months ago. RequestPolicy is a nice alternative to noScript - if people don't want to research links and deal with a lot of pop-ups.
vanessa said:S
And if you are really concerned - don't use email or IM at all! What Snowden told us is:
- Encrypted emails have first class priority for the agencies and do get tracked down.
- They can decrypt them (though the confirmation is still missing).
vanessa said:Skype lives nowadays on the smartphone, not on the desktop. So if you and your family have iPhones, be sure to check Acrobits' Groundwire
kpa said:Snowden can claim just about anything now and people who don't understand cryptography will believe without a single question. I'd be very careful of making such claims as 2. because there are encryption schemes that are practically impossible to crack unless the secret key gets compromised trough social engineering or some other method. GNUPG is one product that offers such encryption methods and used properly it is very safe.
No. Lavabit founder closed it on his own because he claims he didn't want to user data to be potentially turned over, or something like that.cpu82 said:Thanks for clear things up, but I'm sure that US Government pressured to conduct closing it.
drhowarddrfine said:No. Lavabit founder closed it on his own because he claims he didn't want to user data to be potentially turned over, or something like that.
jrm said:The NSA wanted him to hand over all his private keys. You can listen to Ladar Levison describe what happened in this interview.
Granted, noScript stops scripts. However, a lot of scripts call to external sites - I'd say that 75% of the scripts I stopped with noScript are also stopped with RequestPolicy, and most local scripts are necessary for content (i.e. banks, webmail, etc). So just as long as I keep to good sites, RequestPolicy was a lot easier to use on a user-level than noScript. Just my experience.pkubaj said:Actually, it's not an alternative. Neither has what the other one offers - they should both be used in conjunction.
fernandel said:How is https://jitsi.org/ on FreeBSD?
Electronic privacy is a crime zone with blood freshly spilled all over. None of the existing tools are fully good enough. We have to get used to the fact that relevant new tools will come out all the time, and you will want to switch to a new software twice a year.
I'm not making any point, just threw out some thoughts. Otherwise, I'm in agreement with you. It's like gossiping, once it leaves your lips (or mind for that matter) it's not private anymore. Plus, unless you build something yourself you can never be guaranteed 100% it will function as advertised - why did the NSA backoff in the end? I still use GPG, but I wouldn't be surprised if it came out that it could be hacked.Erratus said:@tzoi516 I'm not sure what's the point you want to make. Mine is, that just using email adresses compromizes privacy. The content may be safely encrypted, but the game is also about metadata.