A broad program of constant observation/interception of communications and behavior of individuals and organizations by state and (rarely) non-state actors, including foreign and domestic intelligence agencies.

learn more… | top users | synonyms

-5
votes
1answer
41 views

Software intrusion via sweeping firmware updates? [closed]

I have a lot of different hardware ranging from smart phones and smart TVs to Unix servers and everything in-between. Within the last few weeks everything I own has needed an update or upgrade. ...
1
vote
1answer
37 views

Can I be identified across different access points to same ISP?

The ISP I use at home also provides access points in caf├ęs etc. Can they, for example with my MAC address, match my identity when I'm using one of these access points to when I'm at home? And what ...
-9
votes
1answer
126 views

ip address hack [closed]

I believe someone knows my IP through accessing public WiFi and accounts such as BT sport. Now I know I'm being monitored but not sure how. I believe this person is a hacker and that they know the ...
-4
votes
2answers
99 views

TV and audio hacking [closed]

I have been stalked now for over a year. I think they are doing it over the DirectTV because they can hear me and I can hear them. Is it possible they are recording me like a movie live through ...
8
votes
4answers
663 views

Can governments intercept end-to-end encrypted Whatsapp communication through lawful interception?

Since Whatapp started end-to-end encryption with an option for users to verify keys, many government security agencies, like the Indian one, red-flagged such use of encryption. Now, Yesterday the ...
0
votes
0answers
25 views

USB TEMPEST attacks: viable range?

Is there any published research into the viability of reading Universal Serial Bus signals at a distance from the connection, using electromagnetic radiation emitted from the bus? If not, what is the ...
4
votes
1answer
76 views

Can IP Security camera be tampered by flash of another camera? [duplicate]

We have been using a new IP camera (Cleverdog) to monitor work in our clothing line factory since a week. It has new features like Infrared, Motion detection, Sound and we can also give instructions ...
1
vote
1answer
75 views

Is a reversible microphone kill switch in hardware plausible? [closed]

I'm forking this from this question, to which I gave a partial answer. These folks claim that their hardware includes a physical kill switch for the internal microphone that reversibly interrupts the ...
41
votes
2answers
532 views

What leaked mass surveillance capabilities have not been explained by vulnerabilities we have learned about since 2014?

At the end of 2014, there were reports and talks about the cracking capabilities of the NSA and other Five Eyes agencies, based on documents leaked by Edward Snowden. The analyzed data revealed that, ...
3
votes
7answers
674 views

Am I exposing too much via port range forward on home security system

Just installed a lorex home security system. This is an nvr system much like this one: http://www.amazon.com/Lorex-LNR400-Channel-Security-Cameras/dp/B00QLA2V28/ref=sr_1_3?ie=UTF8&qid=1455913618&...
-1
votes
4answers
166 views

Securely enable FBI backdoor for phones [duplicate]

Most of the issues raised by Apple and others about giving the FBI access to the terrorists iPhone, seem to stem from a concern about reducing the overall security for regular users. Does this ...
31
votes
6answers
6k views

Why did Poitras and Greenwald put their batteries in the fridge?

cnet.com says: Even in Snowden's room, the group took precautions not to be overheard. Greenwald and Poitras would remove the batteries from their mobile phones and put them in refrigerator of ...
4
votes
2answers
257 views

Purely as a technical matter, is it possible to make otherwise-strong encryption implemetations that contain governmental backdoors?

So to be clear right-off-the-bat: I think re-designing modern encryption to include governmental "backdoors" is, on balance, a quite bad idea, for any number of good reasons. Nor (FWIW) do I actually ...
48
votes
2answers
4k views

Why would the government collect Wi-Fi SSIDs via manual door-to-door questioning of citizens?

I live in a country with little freedom on the Internet (not as strict as in China, but some sites, particularly anti-government sites are inaccessible without a VPN). Recently the government just ...
0
votes
1answer
54 views

What's the best practice for MitM'ing https traffic to distinguish self-signed certs?

My organisation is concerned about viruses and attacks coming into our network. Since http traffic has been declared persona non grata by some browser makers and other parties, it becomes ...
1
vote
3answers
176 views

Can bad guys record phone conversations without the carrier's knowledge?

I know that, in most of the world, phone conversations are transmitted as digital data (whether frames in circuit switched protocols or packets). I know that several companies offer products which ...
0
votes
1answer
62 views

What effect would removal of RSA tokens from mobile phone have on surveillance? [closed]

Reading the comments at Bruce Schneier's blog, I came across this recommendation by someone where they write: @Michael_H - Here you go, buy yourself a cheap Huawei G6620 on eBay, any network, ...
3
votes
1answer
486 views

Can the government monitor my online activity when I use VPN?

Many social networking and popular websites are blocked where I live. There are certain workarounds to access these services however, including VPN services provided by certain local providers with ...
5
votes
1answer
276 views

Government/ISP tracking of internet activity trivial to evade?

The recently announced Investigatory Powers Bill in the United Kingdom will mean that ISPs must store the internet activity of everyone for one year. Anyone who wishes to evade such tracking can use ...
1
vote
1answer
134 views

What browsing history exactly would police have under proposed UK law change? Plain english

It's very unclear what '12 months' browsing history being kept by network provider' actually means to an uninformed person. Thunderbird? VPN? Startpage searches? Bit-torrent downloads? Epic browser (...
4
votes
3answers
77 views

How risky is to use non-free wireless network driver?

Intel wireless network adapter in my computer requires a non-free driver to work. I don't want to install non-free software to my debian system. However it is a notebook and without wireless network ...
2
votes
1answer
168 views

Any real-world examples of root certificate store compromises?

Apart from the infamous Superfish/Lenovo case this year, are there any other known cases of a malicious root certificate being installed on a target machine to allow transparent MITM attacks, whether ...
2
votes
0answers
70 views

What is the cost of CALEA in the US? (Lawful intercept) [closed]

The Computer Assistance for Law Enforcement Act (CALEA) is a law in the US that provides for lawful intercept of communications by law enforcement (namely, the FBI). Specifically, as I understand it: ...
0
votes
1answer
163 views

The spyware spooks use to hack mobiles [duplicate]

With regards to the report and video link below: How do I guard against this sort of snooping? Is it only possible if unwittingly install some kind of trojan? BBC Click Report: Surveillance ...
-1
votes
1answer
140 views

A cctv system for a small shop [closed]

I am not sure if I should ask here but I really can't find any information anywhere else. A family member of mine (let's say X) runs a small fashion shop in Hong Kong, China. The problem is that ...
7
votes
1answer
944 views

How long does the system encryption key stay in RAM

The thread title says it, i would like to know how long a system encryption key will stay in RAM or CPU and will be therefore be extractable using boot attacks. I read somewhere that encryption in ...
2
votes
0answers
79 views

I need a secure laptop tethered to a mobile internet connection. [closed]

I invent things. Think energy, IT security algorithms, etc. I'm actively targeted for information breaches by the largest corporations on the planet. All paranoia aside... I'd like a secure ...
25
votes
5answers
5k views

Never spell a word the same way twice?

A long time ago I was reading about Renaissance-era ciphers and I remembered this quote: David Kahn, author of The Codebreakers, quotes Giovanni Battista Porta who published, in 1563, a famous ...
3
votes
4answers
247 views

Is password + second factor more secure than public key auth now? (SSH)

I ask this question because, I think, we now can reasonably assume the following: NSA can break VPN and SSH: This is stated many times in the unclassified slides. Also, GCHQ has demonstrated (and ...
4
votes
1answer
249 views

Does HTTPS protect you from fingerprinting by the NSA?

We've established that, for all intents and purposes, HTTPS hides what page you visit on a given server from NSA backbone wiretapping, but not the domain itself. But that's only IP / domain ...
11
votes
4answers
3k views

Does HTTPS encryption on a site prevent the NSA from knowing you visited its domain / the URL?

The reason I ask whether HTTPS protects the metadata of your Internet activity from a wiretapping entity on the backbone like the NSA or not, is the following scenario: Say I am browsing the ...
7
votes
2answers
257 views

How to find out whether an ISP adds a perma-cookie to my requests?

I am interested in finding out whether my (or any) current ISP (Internet Service Provider) uses a technology known as "perma-cookie" oder "sticky cookie" when I am browsing the internet. This ...
1
vote
3answers
103 views

What security implications are there when sending video feed over unknown applications, and how can we protect ourselves?

This might sound broad -- but it has to be considering the details are truly unknown. Context: Our university (and many more) have begun rolling out mandatory webcam recording for certain portions of ...
6
votes
5answers
241 views

What steps can be taken to secure snail mail?

Alice has decided to stop using electronic communication with her friends and relatives. She believes analog media are generally more secure and private. Her friends and relatives, however, neither ...
3
votes
1answer
103 views

Detect air signals

Is it at all possible to detect all air type signals for a given location? For example, if I wanted to get a list of all air signals (i.e. wifi, bluetooth, radio, 3g, 4g, and all other air type ...
5
votes
2answers
190 views

Are there any known cases were antivirus software have deliberately ignored malware?

Are there any known cases were antivirus companies for some reason have choosen to make their product allow/ignore malicious software? The reason could be government coercion or former trustworthy ...
2
votes
1answer
568 views

How ATM Surveillance Camera works? [closed]

I would like to know how the ATM pin hole camera works.Whether the pin hole camera works only once the card is inserted in ATM or during the cash withdrawal or it works always?
3
votes
1answer
249 views

Do we have to take algorithm substitution attacks seriously?

Bruce Schneier's blog drew my attention to algorithm substitution attacks which may leak symmetric keys through IV or padding or other covert channels, encrypted with escrow keys. The major premise is ...
6
votes
3answers
5k views

how can I tell if I'm under IMSI cell phone surveillance

I've recently had an encounter with the law, the details of which I won't disclose here since the case is still in court. They took my phone, naturally. I deactivated it as soon as I was released ...
12
votes
1answer
508 views

What is going on with my download of the recent Apple security update?

The update in question is the Mavericks combined update which, among other things, claims to fix the recent SSL vulnerability/gaping hole. This issue really annoyed me, so I decided to procure Apple'...
7
votes
4answers
717 views

airgap a smartphone?

I'm looking to use my smartphone purely as a portable computer, with no network functionality in order to protect my privacy. Is removing the sim cards from it enough to airgap it or do I need to go ...
2
votes
2answers
302 views

Indirectly relaying intranet server to outside world

I have an internal network of IP network cameras. The feeds from these cameras are ingested by a single server and presented from a unified web interface both internally and to the outside world (both ...
4
votes
2answers
814 views

Tor traffic correlation attacks by global adversaries

I recently came across a paper called "Users Get Routed: Traffic Correlation on Tor by Realistic Adversaries" (Aaron Johnson et al) ... which seems to be saying that adversaries (like the NSA) that ...
5
votes
1answer
2k views

Is my ISP BGP/DNS hijacking?

I've noticed some very suspicious activity from my ISP. Sometimes I would notice that when I ping google.com it would resolve to an IP which is owned by my ISP. I currently don't have an example ...
2
votes
2answers
78 views

What steps remain for a robust, neutral and surveillance-proof Internet? [closed]

Recent leaks about widespread NSA surveillance have brought privacy and security to the forefront of the public consciousness as we strive to determine best practices in governance for the Internet ...
10
votes
2answers
4k views

Surveillance: blocking laptop's microphone from spying on you?

It is a known fact that your laptop camera can be hacked to spy on you. While the most often mentioned remedy is very low tech yet effective, everyone seems to omit the fact that the microphone can be ...
68
votes
2answers
15k views

Best practices for Tor use, in light of released NSA slides

It has been known in the security community that a tool as versatile as Tor is likely the target of intense interest from intelligence agencies. While the FBI has admitted responsibility for a Tor ...
9
votes
2answers
589 views

If we can no longer trust NIST, what are viable alternatives? [closed]

Regarding the Guardian article about NSA control over encryption, there was this gem deep inside: Independent security experts have long suspected that the NSA has been introducing weaknesses into ...
70
votes
3answers
3k views

Did US and UK spy agencies defeat privacy and security on the internet?

This question is meant as a canonical question in regard to the US and UK spy agencies compromising end nodes and encryption between nodes to spy on people they suspect to be terrorists. However, this ...
6
votes
7answers
2k views

Is PGP combined with a regular web-based email service secure?

With the disappearance of private email services like Lavabit and Tormail (http://www.dailydot.com/news/email-anonymous-hushmail-lavabit-nsa/) it seems that we will need to resort back to standard ...