Webmaster Forum

Go Back   Webmaster Forum > The Webmaster Forums > Forum Lobby

Forum Lobby The off-topic forum.


Reply
 
LinkBack Thread Tools Display Modes
Share |
  #1 (permalink)  
Old 09-05-2013, 08:40 PM
Contributing Member
Latest Blog:
None

 
Join Date: 09-19-08
Posts: 190
iTrader: 0 / 0%
US and UK spy agencies defeat privacy and security on the internet

http://www.theguardian.com/world/201...codes-security



Quote:
US and British intelligence agencies have successfully cracked much of the online encryption relied upon by hundreds of millions of people to protect the privacy of their personal data, online transactions and emails, according to top-secret documents revealed by former contractor Edward Snowden.

The files show that the National Security Agency and its UK counterpart GCHQ have broadly compromised the guarantees that internet companies have given consumers to reassure them that their communications, online banking and medical records would be indecipherable to criminals or governments.

The agencies, the documents reveal, have adopted a battery of methods in their systematic and ongoing assault on what they see as one of the biggest threats to their ability to access huge swathes of internet traffic "the use of ubiquitous encryption across the internet".

Those methods include covert measures to ensure NSA control over setting of international encryption standards, the use of supercomputers to break encryption with "brute force", and the most closely guarded secret of all collaboration with technology companies and internet service providers themselves.

Through these covert partnerships, the agencies have inserted secret vulnerabilities known as backdoors or trapdoors into commercial encryption software.

The files, from both the NSA and GCHQ, were obtained by the Guardian, and the details are being published today in partnership with the New York Times and ProPublica. They reveal:

A 10-year NSA program against encryption technologies made a breakthrough in 2010 which made "vast amounts" of data collected through internet cable taps newly "exploitable".

The NSA spends $250m a year on a program which, among other goals, works with technology companies to "covertly influence" their product designs.

The secrecy of their capabilities against encryption is closely guarded, with analysts warned: "Do not ask about or speculate on sources or methods."

The NSA describes strong decryption programs as the "price of admission for the US to maintain unrestricted access to and use of cyberspace".

A GCHQ team has been working to develop ways into encrypted traffic on the "big four" service providers, named as Hotmail, Google, Yahoo and Facebook.
 
Reply With Quote

Advertisement

Advertisement

  #2 (permalink)  
Old 09-09-2013, 06:41 AM
voodooKobra's Avatar
Contributing Member
Latest Blog:
None

 
Join Date: 09-04-13
Location: Florida
Posts: 79
iTrader: 0 / 0%
So far, from what I've been reading (via the LiberationTech mailing list, Twitter, and conversations with people who understand this stuff), it's believed that the NSA has the capability to break 1024-bit RSA or possibly RC4.

They also vacuum up non-encrypted communications (curiously, v7n.com doesn't employ HTTPS).

Your best bet, if you wish to protect your customers from the NSA, is to deploy HTTPS correctly (StartSSL gives away free certificates which most browsers trust) with Perfect Forward Secrecy.
 
Reply With Quote
Go Back   Webmaster Forum > The Webmaster Forums > Forum Lobby

Reply


Currently Active Users Viewing This Thread: 1 (0 members and 1 guests)
 
Thread Tools
Display Modes

Posting Rules
You may not post new threads
You may not post replies
You may not post attachments
You may not edit your posts

BB code is On
Smilies are On
[IMG] code is On
HTML code is Off
Trackbacks are Off
Pingbacks are Off
Refbacks are Off


Similar Threads
Thread Thread Starter Forum Replies Last Post
Google Vs Facebook on Privacy and Security [INFOGRAPHIC] snakeair Social Network Marketing 3 11-15-2011 09:42 AM
What is best for internet security and privacy? intmarketing Tech Talk 9 09-21-2009 05:41 PM


V7N Network
Get exposure! V7N I Love Photography V7N SEO Blog V7N Directory


All times are GMT -7. The time now is 03:49 AM.
Powered by vBulletin
Copyright 2000-2014 Jelsoft Enterprises Limited.
Copyright © 2003 - 2014 Escalate Media




Search Engine Optimization by vBSEO 3.6.0 RC 2 ©2011, Crawlability, Inc.