Welcome to our community

Be a part of something great, join today!

Log in
  • Hey all, just changed over the backend after 15 years I figured time to give it a bit of an update, its probably gonna be a bit weird for most of you and i am sure there is a few bugs to work out but it should kinda work the same as before... hopefully :)

Information Security: Have we gone down the wrong rabbit hole?

Hrvoje Simic said:
http://en.wikipedia.org/wiki/DARPA_LifeLog

http://en.wikipedia.org/wiki/Regina_E._Dugan

https://play.google.com/store/apps/details?id=com.sonymobile.lifelog




n37yg2.png



:emote_popcorn:
Click to expand...


That poor girl. That's the worst case of breast inflammation and swelling I've ever seen.
 
Brice Ansel said:
Steve,
give a try to Gohstery for Safari. Don't download it from the Apple Store. ;-)

And yes +1 for Duck duck go, because they don't keep your research in a cache,
Duck duck go doesn't use a stupid algorithm like Google who try to guess what you prefer in the research engine.
Best
B.
Click to expand...

I do have Gohstery installed... But I guess is just too much info for me... :)

I have no idea if block all Privacy, Advertisements, Widgets, Analytics and Beacons, I imagine some are needed??

But, wow, as an example "Variety" site amongst many, just has a crap loaded of specialty sites tracking you, and makes you double click over and over... One of the worst sites, I visited for info on the industry, then stopped all together.

I installed Gohstery because I kind of got pissed to see what ever gear I looked up on B&H show up on all the sites I visited were they advertised... Goes to show you how private your internet searches are... NOT!!

And sites like B&H really do take your info for a RIDE!!
 
Elsie N said:
That poor girl. That's the worst case of breast inflammation and swelling I've ever seen.
Click to expand...

Hey, stop talking about my future wife like that. ;)
 
Something interesting happened, I mentioned that my phone overheats on the forum for no reason, and figured out it must be hackers taxing the phone processing circuits and come up with disparities in data used (likely heavily compressed video).

Anyway, I was watching Elementary this year and Holmes starts examining a phone stating it as common knowledge this happens, in close to the way I normally state it. Now it should be common knowledge and doubt it has anything to do with me. Anyway, interesting stuff, if it was quoted on actual knowledge it just proves I was right about it. :)
 
In 2 days "Reset the Net" is happening... I for my part will participate for sure :)

Info and best practices here; resetthenet.org

If you have any questions regarding stuff like VPN's, Tor or other Anonymity & Security-tools feel free to contact me and I'll try to help :)
Despite registering and surfing with PureVPN (-> not U.S.-based) I use stuff like the Disconnect Browser-Plugin and for the 'real stuff' concerning online privacy (e.g. online banking or critical Bitcoin operations) I boot up Tails from a USB-Stick to leave a minimum trail - on my physical machine at least...

Edit: Forgot to mention recent reasons WHY you should do so -> just for example;
http://www.theregister.co.uk/2014/0...sh_intelligence_middleeast_internet_spy_base/
 
Last edited:
Peter Stelzhammer said:
In 2 days "Reset the Net" is happening... I for my part will participate for sure :)

Info and best practices here; resetthenet.org

If you have any questions regarding stuff like VPN's, Tor or other Anonymity & Security-tools feel free to contact me and I'll try to help :)
Despite registering and surfing with PureVPN (-> not U.S.-based) I use stuff like the Disconnect Browser-Plugin and for the 'real stuff' concerning online privacy (e.g. online banking or critical Bitcoin operations) I boot up Tails from a USB-Stick to leave a minimum trail - on my physical machine at least...

Edit: Forgot to mention recent reasons WHY you should do so -> just for example;
http://www.theregister.co.uk/2014/0...sh_intelligence_middleeast_internet_spy_base/
Click to expand...
Although it sounds like a worthwhile initiative, the common sense part of my brain is telling me that online security is going to be an uphill battle for years to come. Three years ago, I would probably be saying that I'm a bit paranoid. Now, considering all of the revelations about online surveillance, the large number of data security breaches at major corporations, and the lack of bona fide bulletproof security tools and solutions, one must proceed at their own risk when connecting to the net. If someone wants your information bad enough, they are going to get it. We live in that kind of world.
 
Sure, but why not try to make it a bit more of an effort to them (you're paying their work with your tax money anyways)... Just for one day at least ;)

Another topic would be E-Mail security (SSL and TLS/STARTTLS), which - just for example - is still not supported by Apple-Services (iCloud)...
https://www.eff.org/deeplinks/2013/11/encrypt-web-report-whos-doing-what#crypto-chart

The EFF (Electronic Frontier Foundation) is a great source for information on these and other related topics btw :)
 
KETCH ROSSi said:
I do have Gohstery installed... But I guess is just too much info for me... :)

I have no idea if block all Privacy, Advertisements, Widgets, Analytics and Beacons, I imagine some are needed??
Click to expand...

On the last version you can have a look at what is needed or not and then choose what to block or not.

Steve Sherrick said:
Although it sounds like a worthwhile initiative, the common sense part of my brain is telling me that online security is going to be an uphill battle for years to come. Three years ago, I would probably be saying that I'm a bit paranoid. Now, considering all of the revelations about online surveillance, the large number of data security breaches at major corporations, and the lack of bona fide bulletproof security tools and solutions, one must proceed at their own risk when connecting to the net. If someone wants your information bad enough, they are going to get it. We live in that kind of world.
Click to expand...


The fact is, if every one was using a more serious method to encrypt their data, it would be too expensive for the spy agency to look into your privacy.

Edit: If I had a smart phone, this is the type of app I would install asap: https://silentcircle.com/
B.
 
Peter Stelzhammer said:
In 2 days "Reset the Net" is happening... I for my part will participate for sure :)

Info and best practices here; resetthenet.org

If you have any questions regarding stuff like VPN's, Tor or other Anonymity & Security-tools feel free to contact me and I'll try to help :)
Despite registering and surfing with PureVPN (-> not U.S.-based) I use stuff like the Disconnect Browser-Plugin and for the 'real stuff' concerning online privacy (e.g. online banking or critical Bitcoin operations) I boot up Tails from a USB-Stick to leave a minimum trail - on my physical machine at least...
Click to expand...

Thanks Peter. Another is that they are adding unique ids to all sort of things, even your browser and processor that they can write programs to try to dig up, and if at any time you had been used the machine normally those id's are known and can link back. So even if something blocks all these a hack could theoretically dig them up. Now profiling, sections of your directory structure, your installed plugins, speed response and anomalies of execution can profile it might be an individual. Going a step further, just the way we use a net connection betrays us. So even using all the right security they can work it out, and the article I have here, which I thought might gave been an April 1 article a few years back SATs they are recording everything to decrypt it latter. At some time past or future you go to a website you have visited encrypted, their profiling reveals that who ever was visiting encrypted could be a handful of people around the world, but now they barrow down it is only you who visited the site unencrypted, and since they correlate more sites that only you and the encrypted user has visited the certainty gives up it was you. At sometime they can break the encryption proving the case. In the meantime, they try to load code in pages custom intercepted (as in the cade of Facebook in Cuba incidence) or in general examining what's going on even by remote execution as happens on many pages these days, to work out which user you are.

In my work on my OS security model I came across new ways you could transfer spied information covertly, and new ways to solve the problem. Listen up, this might even be beyond. what they are considering. Just making am pattern of execution calls can transfer information. The URL they give you that you bookmark can be unique, apart from whatever message inducing code us on your machine that can induce a message data code about what it sees (to minimise message passing) each session, so no data is stored. So even if you clean sweep each session it becomes impractical to surf the net widely as everything, including all the bookmarks have to be cleaned per session, per site, even per page. Now your reaction times and patterns feeding in the page names betray you, even your reading time and on time and toilet break times. The only solution is proper criminal legislation enforced against such things with a proper design, and don't mind the government exceptions. The government is designing super server farms with super processing power and quantum computing, so encryption is hiking to be a pass thing, enforcement of a right to privacy when not doing wrong us the only solution. I've been working on ideas to get better encryption, but my knowledge in that field is too limited. One of my friends was in signal intelligence decades ago, and the Australian stuff back then was an interesting starting point.

Sorry, a bit rough, tired.

Brice Ansel said:
The fact is, if every one was using a more serious m
ethod to encrypt their data, it would be too expensive for the spy agency to look into your privacy.
Click to expand...
 
Sure... Most people don't know that it's quite easy to identify and track individuals just with a few bytes(!) of browser statistics overhead including their System & Software-Overview... Even if there are Millions of people on the net the chance that the exactly same config and ID repeats itself with different users is very low.

Check online if your Browser identifies you as unique (99% chance that you are):
https://panopticlick.eff.org

EFF abstract (PDF):
https://panopticlick.eff.org/browser-uniqueness.pdf

That's just by using a Browser - as far as I know no cookies or other 'in depth' stuff involved here... Just try it with the 'private mode' of Firefox and you'd still get the same results. So you can imagine how it adds up with additional overhead and tracking data. And this is only passive stuff and nothing 'pro-active'...
 
Wayne Morellini said:
Something interesting happened, I mentioned that my phone overheats on the forum for no reason, and figured out it must be hackers taxing the phone processing circuits and come up with disparities in data used (likely heavily compressed video).

Anyway, I was watching Elementary this year and Holmes starts examining a phone stating it as common knowledge this happens, in close to the way I normally state it. Now it should be common knowledge and doubt it has anything to do with me. Anyway, interesting stuff, if it was quoted on actual knowledge it just proves I was right about it. :)
Click to expand...

Also used in a "Mentalist" script (recent re-run where a target noticed his cell phone got hot in his pocket during a meeting) and sure enough, in the script at least, the man was being bugged and later killed.

Watch your back Wayne! '-)

Or I suppose it could just be google curious about what's going on in your life.
 
Don't worry - I'm not one of the aluminum-hut guy's watching out for UFO-incidents and police-state oppression (even tho the latter is not unlikely - tho we're pretty safe in the western hemisphere)... Nothing special going on in my life really, maybe that's why I have time to surf the Net and find things like that ;)

I'm more like a Geek or Nerd fascinated with what's actually possible with technology...
And especially what's possible with technology if you have like unlimited resources like military/state grade projects sometimes get granted.
Tapping fibre cables in realtime with speech analysis and stuff, filtering out just single 'hot' words - worldwide... Somehow it's amazing. Only question is what will all of this data be used for in future, what gets stored for longer, what gets linked to other stuff... What will happen with it in case of stuff like world wars, brutally bad recessions or bankruptcy of whole states? I sometimes ask myself (not meant offensive in any way); How many Jews would have had the chance to escape the Nazis if all af this technology would have existed like 90 Years earlier - would they have been more in number or less actually? You can put those views to other political or social systems or structures as well I guess... In the meantime Apple announced a broader opening and use of actual life and health sensors... Again; Most of this can be used to do good stuff and to actually help people. But if in the wrong hands the opposite might be the case - always (even if just in theory tho)...
 
Elsie N said:
Also used in a "Mentalist" script (recent re-run where a target noticed his cell phone got hot in his pocket during a meeting) and sure enough, in the script at least, the man was being bugged and later killed.

Watch your back Wayne! '-)

Or I suppose it could just be google curious about what's going on in your life.
Click to expand...

I've taken to talking to my phone now. Just tonight I started complaining about how they expected to spy on me if I couldn't get anything done to spy on (from all the hacking gumming up the system)....Where's thats foil hat, time to take a walk down the city.:wink5:

Seriously, I don't usually have anything abnormally secret on a phone/tablet, the best place is in your head, and anonymous safety deposit boxes around the world controlled by lawyers and reporters who can publish (not that all the boxes are necessarily physical and not scripted time release and encrypted until then) so that they have incentive to wait to find out what you know rather than kill you. Takes years and years to setup. Lol! Just fooling you guys. ;)
 
Peter, I forgot caching, I figured you can track somebody by loading stuff into the cache and using them in other sites, if they are not reloaded you may have the same user. So, to tell if this is in use, you would have to see if the page loads and usage are always the same for a page, and no suspicious cross site loading.


Elsie.

I turned off Google uploading (sorry, backing up) my photos and videos years ago. Sometimes they push through critical updates, but this seems too regular and happens more when I'm on my bed (I have my case flip lid over the rear camera). ;)
 
Wayne Morellini said:
Peter, I forgot caching, I figured you can track somebody by loading stuff into the cache and using them in other sites, if they are not reloaded you may have the same user. So, to tell if this is in use, you would have to see if the page loads and usage are always the same for a page, and no suspicious cross site loading.


Elsie.

I turned off Google uploading (sorry, backing up) my photos and videos years ago. Sometimes they push through critical updates, but this seems too regular and happens more when I'm on my bed (I have my case flip lid over the rear camera). ;)
Click to expand...


:smilielol5::smilielol5::smilielol5:
 
Yep, do a lot of forum stuff here and researching technical stuff on pretty simple pages in bed (used to be when I was very sick) . But not,much to see so doesn't worry me. I wonder if it might be an eye tracking exercise to see what you are reading and tapping, but if so they are probably very disappointed as there is a lot of screen resizing and movement around pages. Plus also not so great a way to track movement. All you need to do is transmit a low quality image or vectors, to track these things requiring a very small fraction of data and much less processing, not heating the phone. I came up with a scheme a number of years ago to do this for software. Another patent opportunity lost (among many, many).
 
You must log in or register to reply here.
Back
Top