Information Security: Have we gone down the wrong rabbit hole?

[Elsie N]

Yep, do a lot of forum stuff here and researching technical stuff on pretty simple pages in bed (used to be when I was very sick) . But not,much to see so doesn't worry me. I wonder if it might be an eye tracking exercise to see what you are reading and tapping, but if so they are probably very disappointed as there is a lot of screen resizing and movement around pages. Plus also not so great a way to track movement. All you need to do is transmit a low quality image or vectors, to track these things requiring a very small fraction of data and much less processing, not heating the phone. I came up with a scheme a number of years ago to do this for software. Another patent opportunity lost (among many, many).

While trying to be protective of critical personal data, I've sort of adopted the attitude of not spending more time protecting non-critical data than it's worth. I certainly don't want a hacker to infect any of my machines, but generally put my trust in the gate-keepers to eventually identify a breach and remove it.

 

[Wayne Morellini]

The gate keepers are a big part if the issue unfortunately. I shudder at the thought or kinect being hacked and optical sensor touch display pixels. The hackers could, theorectically, see and hear everything in your room with no guarantee that gate keepers will catch it in time it if ever. At least it is American technology. But the issue with backdoors is that your enemies can also use them. The way around thus is to unique key each placement, so that observing you reveals only the locsl placement in question, which your enemy might not be interested in too much, as it us one if theirs. Of course they can crack the whole system eventually, but by that time hopefully the hardware is so outdated hardly anything of any importance happens in front of it because all the important people have upgraded. But the moral and philosophical issue is that eventually regimes, in the extreme, might start spying on their own important people to keep check of them, revealing encrypted secrets that can be intercepted and recorded somewhere along the internet chain, and cracked eventually by the regimes enemies. Sounds like the start of a good novel.

So it is important not to leave security issues open, to the open market, and to close holes and tie it down and bring balance. That is how you can restrict insecurity to the right people/gatekeepers. But most people don't know how to do that. They have to realise it is systems not mathematics that brings security, and the system of secrecy. I can probably outdo every person they have working for the NSA in systems design. Most people that disagree with me often merely can't see how they are wrong even though they think they know everything. I always work on my feet about what the situation can actually be, which means seeing new things. It is a very interesting intellectual skill I could teach people if my brain had not been so fried, but still half a brain is often better than a full 1/8 of a brain of many intellectuals working on an idea.


A structured environment with no holes is the starting point, which is the security system I worked on for my is years ago, no hacking possible. Even if you sent the data unencrypted only the intended software systems could see it Next level is a system to stop unintended trusted hardware from seeing the data, which I achieved. The next level is a system to detect hacks of hardware and network lines, as it is pretty difficult to protect such things from illicit access. Along with this is attempts to protect the hardware chain from access. Now you get down to the level of secrecy of the actual data. To protect against interception of actual data feeds, encrypted or not, along the network chain down stream from the local network and secondary network. Using many to many network connections, bits of data, and aggregates, can be mixed up and sent through separate network paths to drift into the destination, and validation code returned. As long as there are enough network paths each one has to be compromised to get the full picture, or any segment before the many to many break up happens. But even in these initial limited linear or limited some to some sections, the data could be divided in the source machine along different packets/channels (I'm glad the industry is catching up to my 90's channel technology) mixed in with other data, and in each network level. Pretty Wideband. I'm making this up new splitting system quicker than I can type. There are a few big issues, the encryption system to split and recombine can be an issue and performance as it is an untimed system (I'm in a casino cafe bar at the moment and they are blasting Roam if you want to over the speakers) and the other I forgot, I think it was setting up the seed system for the split and paths. However, there is a encryption validation system a little related I've got planned into some if my designs. That's a simple version, there would be other things to work on. Given enough time and know how I can reorganise it

Years ago, when they invented quantum optical security etc, and said they couldn't be observed without it being revealed, I said nonsense and proceeded in determining a way it could be achieved quick smart. Same with the cat in the box. Anything dumb a scientist may say a good engineer can crack. As a writer I think of end universe and even end all universes scenarios, and how they could be achieved, and answers to quantum paradoxes, and many such things, and am mildly happy when science eventually agrees. So here I am getting hacked.

Of the warm phone thing, it could be something else, but I know they have not garbage cleanup on my edition of android. It is the mental illness of the average person to blissfully think things are not connected, to selfishly get his way and that things are unobjectively positive (which actually works because it causes us to try and achieve more). The older you are the more you might realise everything is connected, but most of the time it doesn't matter that much and that things can be happen independently.

 

[Elsie N]

The gate keepers are a big part if the issue unfortunately. I shudder at the thought or kinect being hacked and optical sensor touch display pixels. The hackers could, theorectically, see and hear everything in your room with no guarantee that gate keepers will catch it in time it if ever. At least it is American technology. But the issue with backdoors is that your enemies can also use them. The way around thus is to unique key each placement, so that observing you reveals only the locsl placement in question, which your enemy might not be interested in too much, as it us one if theirs. Of course they can crack the whole system eventually, but by that time hopefully the hardware is so outdated hardly anything of any importance happens in front of it because all the important people have upgraded. But the moral and philosophical issue is that eventually regimes, in the extreme, might start spying on their own important people to keep check of them, revealing encrypted secrets that can be intercepted and recorded somewhere along the internet chain, and cracked eventually by the regimes enemies. Sounds like the start of a good novel.

So it is important not to leave security issues open, to the open market, and to close holes and tie it down and bring balance. That is how you can restrict insecurity to the right people/gatekeepers. But most people don't know how to do that. They have to realise it is systems not mathematics that brings security, and the system of secrecy. I can probably outdo every person they have working for the NSA in systems design. Most people that disagree with me often merely can't see how they are wrong even though they think they know everything. I always work on my feet about what the situation can actually be, which means seeing new things. It is a very interesting intellectual skill I could teach people if my brain had not been so fried, but still half a brain is often better than a full 1/8 of a brain of many intellectuals working on an idea.


A structured environment with no holes is the starting point, which is the security system I worked on for my is years ago, no hacking possible. Even if you sent the data unencrypted only the intended software systems could see it Next level is a system to stop unintended trusted hardware from seeing the data, which I achieved. The next level is a system to detect hacks of hardware and network lines, as it is pretty difficult to protect such things from illicit access. Along with this is attempts to protect the hardware chain from access. Now you get down to the level of secrecy of the actual data. To protect against interception of actual data feeds, encrypted or not, along the network chain down stream from the local network and secondary network. Using many to many network connections, bits of data, and aggregates, can be mixed up and sent through separate network paths to drift into the destination, and validation code returned. As long as there are enough network paths each one has to be compromised to get the full picture, or any segment before the many to many break up happens. But even in these initial limited linear or limited some to some sections, the data could be divided in the source machine along different packets/channels (I'm glad the industry is catching up to my 90's channel technology) mixed in with other data, and in each network level. Pretty Wideband. I'm making this up new splitting system quicker than I can type. There are a few big issues, the encryption system to split and recombine can be an issue and performance as it is an untimed system (I'm in a casino cafe bar at the moment and they are blasting Roam if you want to over the speakers) and the other I forgot, I think it was setting up the seed system for the split and paths. However, there is a encryption validation system a little related I've got planned into some if my designs. That's a simple version, there would be other things to work on. Given enough time and know how I can reorganise it

Years ago, when they invented quantum optical security etc, and said they couldn't be observed without it being revealed, I said nonsense and proceeded in determining a way it could be achieved quick smart. Same with the cat in the box. Anything dumb a scientist may say a good engineer can crack. As a writer I think of end universe and even end all universes scenarios, and how they could be achieved, and answers to quantum paradoxes, and many such things, and am mildly happy when science eventually agrees. So here I am getting hacked.

Of the warm phone thing, it could be something else, but I know they have not garbage cleanup on my edition of android. It is the mental illness of the average person to blissfully think things are not connected, to selfishly get his way and that things are unobjectively positive (which actually works because it causes us to try and achieve more). The older you are the more you might realise everything is connected, but most of the time it doesn't matter that much and that things can be happen independently.

In my case, I don't use the smart part of my phone... just the phone part.. and sparingly of the phone part. I seldom speak aloud in my home (home alone... and loving it!) other than to laugh out loud at something funny on TV. The Internet is my main concern of being monitored. Oh, forgot, my land line phone once made a noise suggesting it was being monitored. That was found by the fiber optic guys who converted my Internet from phone based to fibre optic DSL, or whatever. Didn't follow up on it because like I said, I don't talk out loud much. '-)

 

[Wayne Morellini]

You don't need to use the smart part or be connected. I suspect back doors and manufacturer/telco backdoors. They allegedly turn on the phone from complete off and listen by the separate radio/air processor like used in a dumb phone. Was reading something about it last week, but the article confused how it could not be done with reality, rather than how it can be done. There are now a market for dumb phones, with people paying big money for old phones. So manufacturers are releasing new dumb phones. Still you could involve the sim processor too which can also be used to ad smart phone features to dumb phones (specialised sim, Java etc).

So your phone calls, phone call log and contacts could be read, even by your manufacturer and telco (we need laws to prevent addiction to your private data) as even a dumb phone is not that dumb. Maybe I should revisit my plans for a add on for dumb phones to give them smart features.

In the end, wreckless security threatens national security. How many phones used by Americans are manufactured by the Chinese government companies. Now Motorola has also gone to China I can by less sure, as anything manufactured there, or in Asia could be compromised by independent agents in the system. Even in other parts of the world. So you need national manufacturers with lock down security. Maybe one day we will even be able to by simplified locked down air processor modules to plug in side of your phone, even without hackable type of processor system to totally ensure that an enemy of the state can't turn it on or use it to spy on you, so your phone can be off with certainty. Not paranoia just realities, I don't give it much thought or care too much, it is beyond my control.

Now, back to that Batman movie. Many years ago, before the movie I came up with the idea for a forensic examination of audio to give a basic 3d map of a room. Maybe you could never achieve anywhere near the quality suggested by movie, unless with specialised equipment etc, but imagine if you have important people on the phone down the street or cafe restraint or anywhere with a dynamic cloud of smart phones around them being turned on to listen. So it doesn't matter if they have an unhackable dumb phone or no phone... Even sitting in a park alone with nobody in ear shot, turning on the phone of people around could reveal enough bits and pieces of information and triangulation to piece together a remote conversation. Somebody has come up with a remarkably simple small design like I would do, that can be dispersed widely and cheaply to record peoples conversation. However, I have to review it to see if it isn't an April invention, as the claims for being able to detect the direction of any conversation from just one device that particular design seems a bit much. But all they have to do is to use a laser from. a satellite or a drone to detect sound, as they have been doing with common terrestrial surveillance for years.

An old artist is on the TV saying she likes to be alone when she makes her art because she has to grab invisible things and make them visible, how true.

 

[Eric Santiago]

I am about to do a bank transfer (wire transfer) with someone overseas.

They are sending me money and asking for my bank info.

My bank tells me there are risks involved but didnt get into what they are.

Anyone have any tips on this matter?

 

[Wayne Morellini]

Once they know your bank details they know where to raid and because they have your bank details they have more of your ID verification information and can work on expanding that to access your account. I would ask for a bank security expert to ask what you should do, and Google a bit. Most people are not going to try to do anything with it.

Somebody else here night know more details.

 

[Steve Sherrick]

The bottom is falling out. The number of companies I do business with that have alerted me to security breaches is climbing every month. I now have to seriously consider how I do business online. The banks admit the system is broken. The government has acknowledged severe vulnerabilities that affect national security. We're witnessing the dark side of an otherwise positive technological feat.

Also, there is nothing subtle about Google's purchase of Dropcam. Along with Google Glass, they now have eyes and ears inside your home. Think of that for a moment. Think about one company having that much power and access. Wow!

 

[Wayne Morellini]

Think what can be done where ever they intend it would or not. The only profession in the world with significantly higher average IQ is stand up comedian they say, and one of them Woody Allen, once made a film where the whole world was run by corporations as the government. Now only one corporation has that power (overtly) that Apple and Facebook only wished they had.

On another subject, I wanted to get broad band but have been jerked around for nearly ten years., my alternative option was to wait for wireless national broadband. Wireless broadband is very insecure for business, they only need to record and crack at a future date and it wont be obvious anybody is doing it. At least on fix line they have to hack into the network system or physically access infrastructure which severely limits the range of people that can try to more 'trusted players' and as for hacking your computer, you could do something about. On wireless anybody with some instructions and handful or components can set up shop along your signal path (everywhere for mobile, line of sight in front it behind you for microwave, and anywhere they can get reflections and see wave dispersal) and start recording. According to reports, intelligence patches equipment into some mobile phone towers in order to divert your signal through that tower. I live between two towers one with a very strong signal and one a very weak signal (often one bar or less) closer to the action in the city, yet my phone keeps diverting to the weak tower half the time, which should not happen, it even losses sensitivity to incoming calls so I miss them and bad reception. Maybe it could be, but rather unnecessary and drains the battery out.

 

[Steve Sherrick]

Apple App store got whacked. Does anyone else see where this is all heading? Enjoy your electricity now because in my opinion these hackers are not going to stop at big corporations. They will eventually try to go all the way and show how much "power" they have. Sick of dealing with it. So many letters of breaches, seemingly no accountability. I hate letting this stuff get to me but it's so obvious where it's heading.

 

[Gavin Greenwalt]

Nobody hacked the Apple App store. They uploaded a compromised copy of XCode which would add malware to everything compiled. Pretty clever. And *that* is why you only ever download from trusted sources. In fact ironically enough if they had downloaded it from an app store like the App Store they would have been safe. Moral of the story, don't download random stuff from the internet. In this case lazy developers didn't bother downloading the dev kit from Apple and downloaded it off of the Chinese equivalent of Downloads.com