A group of people that governs a community or unit.

learn more… | top users | synonyms

21
votes
5answers
5k views

What is the best way to respond to phishing emails sent from a government domain?

In the past day or so, I've received two emails from different .gov addresses that purport to be from Intuit and encourage me to click on a link to "restore access to your QuickBooks account." They ...
1
vote
1answer
136 views

Is the story about getting a visit by police for googling pressure cookers true? [closed]

Its from The Guardian and it was not published in April. I know Google was always collecting data about me and I have so far decided to let it slip as a compromise in light of their contributions to ...
5
votes
1answer
149 views

What does Obama's phone say about Android and phone hardware?

The recent article Goodbye Obamaberry, hello Obamadroid describes the decision to move Obama's phone from the Blackberry to the Samsung Galaxy S4. The Galaxy 4S is of course an old, foreign phone. ...
20
votes
6answers
9k views

Why does the government/military not use special operating systems?

Why does military and government not use special operating systems? I mean, if they do not use generic operating system based on Windows, Linux and Mac and create their own operating system, they will ...
1
vote
1answer
44 views

Why aren't there FIPS level 4 devices on the market?

While searching for a secure USB to use, I came across the Aegis secure key, which has FIPS Level 3 (140-2) security. I believe that it's the securest flash drive on the market. I found that the ...
-1
votes
2answers
797 views

How to minimize your fingerprint, or become invisible on the web? [duplicate]

With all of these news stories about the government reading emails and snooping information from other sources, what are ways to minimize or eliminate an organization's ability to actually track and ...
3
votes
1answer
72 views

How difficult is it for ISPs to understand a user is using VPN?

If a user is using VPN, how difficult is it for an ISP to know that a user is using VPN ? If the government demands, isn't it possible for the ISP to provide a list of customers who could be using VPN ...
12
votes
5answers
728 views

What steps should one take to provide “reasonable” levels of privacy from a government?

I'm highly uncomfortable with the recent news surrounding government snooping in the UK. If we define a typical user to mean somebody who: Browses web sites such as BBC News and Stack Overflow Uses ...
-2
votes
1answer
68 views

Can government query company, such as Google, to get list of accounts associated with some information, such as IP address or phone number? [closed]

UPD: My naive thought was that government requests should explicitly point account for which they requesting information. And that a broad requests like getting list of accounts logged during some ...
7
votes
3answers
218 views

Found a security vulnerability on gov related site

So I'm unsure how to go about dealing with what I found. It's a really simple security hole, but opens lots of personal data if exploited. I was on a government utility (being vague intentionally) ...
1
vote
1answer
45 views

Is it possible to give legal value to signed web services?

The context is using digitally signed webservices (with XML-DSIG for example) for e-government interoperability between databases. The idea is to give endorsement to both the data publisher and the ...
0
votes
2answers
86 views

Using Two Different Brands of Security Tools To Block Backdoors

There's this idea of using 2 brands of firewalls both inline that is usually brought up: {Internet}<-->FW(A)<-->FW(B)<-->{Internal Network} Or using 2 algorithms: {Plain ...
-4
votes
1answer
122 views

How is it technically possible for Apple to unlock the San Bernardino shooter's iPhone? [duplicate]

If the iPhone of the San Bernadino shooters is locked, how would it even be possible for Apple to acquiesce to the FBI's request for them to unlock the phone? Does that mean Apple has some kind of "...
3
votes
2answers
119 views

Is it dangerous to have Tor exit node?

If I buy VPS and create Tor exit node there what would happen if someone did bad thing using my exit node? (terrorism, hacking goverment sites etc) VPS provider will share information about me to FBI ...
6
votes
2answers
1k views

Apple vs DOJ - how strong is the 10-try wipe brute force barrier?

Out of curiosity and with the hope of helping other beginners and journalists. The current Apple vs DOJ standoff in a nutshell - Apple is resisting DOJ with statements like what they're asking is "...
30
votes
1answer
1k views

Any known cases of government backdoors creating exploitable security holes? [closed]

As the Apple v FBI battle unfolds, government backdoors will become a hot topic. As background to that, I have two questions: Are there any known cases where governments have forced tech companies ...
105
votes
4answers
17k views

How would a resourceful government block Tor?

I came across this article saying that after the November 2015 Paris attacks, some French police officers proposed to ban Tor. Tor is used to circumvent censorship! What security techniques would ...
48
votes
2answers
4k views

Why would the government collect Wi-Fi SSIDs via manual door-to-door questioning of citizens?

I live in a country with little freedom on the Internet (not as strict as in China, but some sites, particularly anti-government sites are inaccessible without a VPN). Recently the government just ...
5
votes
1answer
292 views

Government/ISP tracking of internet activity trivial to evade?

The recently announced Investigatory Powers Bill in the United Kingdom will mean that ISPs must store the internet activity of everyone for one year. Anyone who wishes to evade such tracking can use ...
1
vote
1answer
89 views

why don't we measure the strength of crypto against the cost it would take to crack it? [closed]

I hear all the time how many hours it would take to break a certain type of encryption. I think this may be the wrong metric to look at ever since scaling became an easy to implement solution. Sure ...
2
votes
0answers
64 views

Can a Tsunami early warning turn “on” remotely some cell phones in Japan?

In Japan, some televisions and radios seem to be capable of getting out of sleep mode if a tsunami warning is issued. If tsunami warnings are issued, the Emergency Warning Broadcast system ...
-1
votes
4answers
11k views

SIPR, NIPR and Centrix Military systems [closed]

This is going to branch into a bunch of separate questions.....here is some background for the question: The Rijndael algorithm was crowned the new AES by Uncle Sam for sensitive, but unclassified ...
0
votes
1answer
116 views

Why does healthcare.gov exclude some special characters from passwords?

The site does not allow the following characters: = ?<> ( ) ‘ " / \ & It also limits maximum password length to 20 characters. This makes me suspicious that they might be being stored in ...
7
votes
2answers
277 views

How does a government shutdown Internet (and how to bypass it)?

Recently the government of India shutdown Internet in the state of Gujarat due to riots. How does this "internet shutdown" work? How can someone who is in the country circumvent this? What can a ...
23
votes
4answers
3k views

NSA Suite A Cryptography: Security through obscurity?

What is the opinion of scholars, cryptographers on NSA Suite A? Containing unpublished algorithms. Could it really be that much better than the published algorithms besides being obscure and not ...
7
votes
3answers
2k views

How are leaked government credentials possible and what's the point?

In the wake of all these leaked/stolen/hacked government login/passwords being stolen it got me thinking. How is the leaking of these passwords even possible? Or are they of any real use? Aren't all ...
-1
votes
1answer
49 views

Should security documentation referencing “state sponsored exploits” be revised to include large corporations also?

Security-related documentation (and casual conversation) often describes threats that require a lot of resources as "state sponsored" Given that large mega-national corporations have more income ...
-2
votes
1answer
166 views

Government policy toward open source software? [closed]

What are the government policies, specially security organizations, regarding open source? Are they using these types of software? Also, there are some papers related to this topic? I have found: ...
147
votes
8answers
26k views

What are the implications of NSA surveillance on the average internet user?

It would appear as though the tinfoil hat-wearing were vindicated today, as news broke of the true scale of the U.S. government's surveillance of its citizens' online activities, conducted primarily ...
-2
votes
1answer
90 views

Official proof (document) that Linux is safer and faster than Windows [closed]

I work for the Mexican government, and even though everyone involved in Linux knows that it is safer and runs faster in most instances, I have not found an official document or authority that I can ...
1
vote
4answers
479 views

When do governments allow export of cryptography software?

I see this notice in the TextSecure README: The U.S. Government Department of Commerce, Bureau of Industry and Security (BIS), has classified this software as Export Commodity Control Number (ECCN) ...
3
votes
3answers
864 views

Why have export controls for cryptography?

I've always heard someone justify the means for export restrictions with "it's for governmental control/spying". In most reasonable countries, the justice system asks people to adhere to the "spirit ...
0
votes
1answer
51 views

Encryption of instructions to and from satellites in space [duplicate]

The mars rover, like most other things man has directed into outer space, receives, faithfully executes, and responds to instructions sent to it from its controllers on Earth. Presumably (and ...
1
vote
1answer
60 views

Is a government entity capable of establishing a secure virtual currency system? [closed]

After reading about BitCoins, I can't help but contemplate the idea of the a government withdrawing paper money and bringing all currency transactions digital, via a bitcoin-like method where every ...
-6
votes
2answers
65 views

how do vpns secure the encyption key? [closed]

VPNs are accessed by the user with credentials so that the information is encrypted. There are credentials that you download to allow this. Since you don't physically, in person get the credentials ...
3
votes
1answer
212 views

Is BSI’s process good? (Informing email address owners that their address/password (of unknown/different accounts) was stolen)

The German BSI (Federal Office for Information Security) claims to have got a list of 18 million email addresses and passwords – supposed to be the result of identity theft. They allow to check if ...
3
votes
7answers
1k views

Which forensic techniques should I use to identify intrusion or monitoring of my computer or cellphone

If I suspect my computer or cellphone is being monitored by an unknown attacker, what tools or techniques could I use to detect or identify such monitoring?
13
votes
7answers
1k views

Online Government Elections System - Is it possible?

I am from Bulgaria and currently some groups here are promoting the idea of referendum among the people, about the possibility for establishing a system for ONLINE GOVERNMENT ELECTIONS. The idea is ...
-1
votes
2answers
203 views

Are there any mail services that don't store encryption keys?

According to this article => http://www.howtogeek.com/166507/why-most-web-services-dont-use-end-to-end-encryption/ Gmail doesn't store the encryption key. But Gmail reads whole of users' email for ...
52
votes
17answers
4k views

Can we still provide confidentiality when cryptography is outlawed?

In certain jurisdictions, use of cryptography by the private sector is limited: e.g. there are reports that in the UAE and other countries not all of the encryption capabilities of the BlackBerry are ...
11
votes
5answers
453 views

Government / State cyberwarfare organizations

I am working on some research regarding advanced persistent threats. Within this effort, discussion of cyber-warfare started. Looking further into the subject, I have found a plethora of links ...
0
votes
2answers
226 views

What was the Lavabit's backdoors to their customers' e-mails? [closed]

There has been some talk about the Lavabit's case. New info was published today, but not important. I'd like to know how Lavabit worked. First I thought they just did something with OpenPGP. Then I ...
10
votes
3answers
746 views

Can we make sure that the new Lavabit certificate is not under control of the FBI?

After the Lavabit shutdown, Ladar Levison (founder of Lavabit) announced that he’s "looking into setting up a site where users can download their data". Such a site is now online: https://liberty....
4
votes
2answers
543 views

Why is Elliptic Curve Cryptography not used much outside of government? [closed]

It seems that Elliptic Curve Cryptography, being required by the US government, is not being used outside of the government. Why is this? And why does the government support it's use for government? ...
7
votes
2answers
512 views

Is personal email hosting really secure?

One of my friends has his own personal email hosting. Let's assume for the sake of argument that it is "secure", meaning that no third party can read the emails in his server either through hacking or ...
9
votes
4answers
3k views

Can a VPN avoid the Prism Surveillance Programme?

This is causing me major concern and i can understand it is for a lot of users as well. I have nothing to hide but it's the moral aspect of snooping which has ticked me off. Can a VPN avoid the ...
0
votes
4answers
179 views

Control over IT security

In pharmacy the safety of drugs is under fairly tight control by national authorities, e.g. FDA in US. The risks of patients taking drugs are thus very effectively minimized, though understandably ...
5
votes
2answers
287 views

Configuring election website to prevent MITM attacks

Consider an election web site that will be used for voting over the Internet. What steps should the administrator of such a web site take to provide adequate security against man-in-the-middle attacks ...
2
votes
4answers
573 views

FOUO on hosted sharepoint

I and few of my fellow employees were asking if it was okay to put FOUO (NSA issued) documents on SharePoint. The main justification was that its password protected (which is correct). But its a ...
2
votes
1answer
147 views

Considerations for information exchange agreement between governmental agencies

Question: When drafting an information exchange agreement between governmental agencies what security related sections should be considered for inclusion? Example agreements? What is the security ...