A broad program of constant observation/interception of communications and behavior of individuals and organizations by state and (rarely) non-state actors, including foreign and domestic intelligence agencies.

learn more… | top users | synonyms

-7
votes
1answer
89 views

ip address hack [on hold]

I believe someone knows my IP through accessing public WiFi and accounts such as BT sport. Now I know I'm being monitored but not sure how. I believe this person is a hacker and that they know the ...
-4
votes
2answers
90 views

TV and audio hacking [on hold]

I have been stalked now for over a year. I think they are doing it over the DirectTV because they can hear me and I can hear them. Is it possible they are recording me like a movie live through ...
8
votes
4answers
488 views

Can governments intercept end-to-end encrypted Whatsapp communication through lawful interception?

Since Whatapp started end-to-end encryption with an option for users to verify keys, many government security agencies, like the Indian one, red-flagged such use of encryption. Now, Yesterday the ...
0
votes
0answers
25 views

USB TEMPEST attacks: viable range?

Is there any published research into the viability of reading Universal Serial Bus signals at a distance from the connection, using electromagnetic radiation emitted from the bus? If not, what is the ...
4
votes
1answer
66 views

Can IP Security camera be tampered by flash of another camera? [duplicate]

We have been using a new IP camera (Cleverdog) to monitor work in our clothing line factory since a week. It has new features like Infrared, Motion detection, Sound and we can also give instructions ...
1
vote
1answer
67 views

Is a reversible microphone kill switch in hardware plausible? [closed]

I'm forking this from this question, to which I gave a partial answer. These folks claim that their hardware includes a physical kill switch for the internal microphone that reversibly interrupts the ...
41
votes
2answers
521 views

What leaked mass surveillance capabilities have not been explained by vulnerabilities we have learned about since 2014?

At the end of 2014, there were reports and talks about the cracking capabilities of the NSA and other Five Eyes agencies, based on documents leaked by Edward Snowden. The analyzed data revealed that, ...
3
votes
7answers
651 views

Am I exposing too much via port range forward on home security system

Just installed a lorex home security system. This is an nvr system much like this one: ...
-1
votes
4answers
165 views

Securely enable FBI backdoor for phones [duplicate]

Most of the issues raised by Apple and others about giving the FBI access to the terrorists iPhone, seem to stem from a concern about reducing the overall security for regular users. Does this ...
31
votes
6answers
6k views

Why did Poitras and Greenwald put their batteries in the fridge?

cnet.com says: Even in Snowden's room, the group took precautions not to be overheard. Greenwald and Poitras would remove the batteries from their mobile phones and put them in refrigerator of ...
4
votes
2answers
241 views

Purely as a technical matter, is it possible to make otherwise-strong encryption implemetations that contain governmental backdoors?

So to be clear right-off-the-bat: I think re-designing modern encryption to include governmental "backdoors" is, on balance, a quite bad idea, for any number of good reasons. Nor (FWIW) do I actually ...
48
votes
2answers
4k views

Why would the government collect Wi-Fi SSIDs via manual door-to-door questioning of citizens?

I live in a country with little freedom on the Internet (not as strict as in China, but some sites, particularly anti-government sites are inaccessible without a VPN). Recently the government just ...
0
votes
1answer
47 views

What's the best practice for MitM'ing https traffic to distinguish self-signed certs?

My organisation is concerned about viruses and attacks coming into our network. Since http traffic has been declared persona non grata by some browser makers and other parties, it becomes ...
1
vote
2answers
157 views

Can bad guys record phone conversations without the carrier's knowledge?

I know that, in most of the world, phone conversations are transmitted as digital data (whether frames in circuit switched protocols or packets). I know that several companies offer products which ...
0
votes
1answer
58 views

What effect would removal of RSA tokens from mobile phone have on surveillance? [closed]

Reading the comments at Bruce Schneier's blog, I came across this recommendation by someone where they write: @Michael_H - Here you go, buy yourself a cheap Huawei G6620 on eBay, any network, ...
3
votes
1answer
293 views

Can the government monitor my online activity when I use VPN?

Many social networking and popular websites are blocked where I live. There are certain workarounds to access these services however, including VPN services provided by certain local providers with ...
5
votes
1answer
247 views

Government/ISP tracking of internet activity trivial to evade?

The recently announced Investigatory Powers Bill in the United Kingdom will mean that ISPs must store the internet activity of everyone for one year. Anyone who wishes to evade such tracking can use ...
1
vote
1answer
126 views

What browsing history exactly would police have under proposed UK law change? Plain english

It's very unclear what '12 months' browsing history being kept by network provider' actually means to an uninformed person. Thunderbird? VPN? Startpage searches? Bit-torrent downloads? Epic browser ...
4
votes
3answers
75 views

How risky is to use non-free wireless network driver?

Intel wireless network adapter in my computer requires a non-free driver to work. I don't want to install non-free software to my debian system. However it is a notebook and without wireless network ...
2
votes
1answer
165 views

Any real-world examples of root certificate store compromises?

Apart from the infamous Superfish/Lenovo case this year, are there any other known cases of a malicious root certificate being installed on a target machine to allow transparent MITM attacks, whether ...
2
votes
0answers
65 views

What is the cost of CALEA in the US? (Lawful intercept) [closed]

The Computer Assistance for Law Enforcement Act (CALEA) is a law in the US that provides for lawful intercept of communications by law enforcement (namely, the FBI). Specifically, as I understand it: ...
0
votes
1answer
159 views

The spyware spooks use to hack mobiles [duplicate]

With regards to the report and video link below: How do I guard against this sort of snooping? Is it only possible if unwittingly install some kind of trojan? BBC Click Report: Surveillance ...
-1
votes
1answer
126 views

A cctv system for a small shop [closed]

I am not sure if I should ask here but I really can't find any information anywhere else. A family member of mine (let's say X) runs a small fashion shop in Hong Kong, China. The problem is that ...
7
votes
1answer
921 views

How long does the system encryption key stay in RAM

The thread title says it, i would like to know how long a system encryption key will stay in RAM or CPU and will be therefore be extractable using boot attacks. I read somewhere that encryption in ...
2
votes
0answers
78 views

I need a secure laptop tethered to a mobile internet connection. [closed]

I invent things. Think energy, IT security algorithms, etc. I'm actively targeted for information breaches by the largest corporations on the planet. All paranoia aside... I'd like a secure ...
25
votes
5answers
5k views

Never spell a word the same way twice?

A long time ago I was reading about Renaissance-era ciphers and I remembered this quote: David Kahn, author of The Codebreakers, quotes Giovanni Battista Porta who published, in 1563, a famous ...
3
votes
4answers
240 views

Is password + second factor more secure than public key auth now? (SSH)

I ask this question because, I think, we now can reasonably assume the following: NSA can break VPN and SSH: This is stated many times in the unclassified slides. Also, GCHQ has demonstrated (and ...
3
votes
1answer
244 views

Does HTTPS protect you from fingerprinting by the NSA?

We've established that, for all intents and purposes, HTTPS hides what page you visit on a given server from NSA backbone wiretapping, but not the domain itself. But that's only IP / domain ...
11
votes
4answers
3k views

Does HTTPS encryption on a site prevent the NSA from knowing you visited its domain / the URL?

The reason I ask whether HTTPS protects the metadata of your Internet activity from a wiretapping entity on the backbone like the NSA or not, is the following scenario: Say I am browsing the ...
7
votes
2answers
246 views

How to find out whether an ISP adds a perma-cookie to my requests?

I am interested in finding out whether my (or any) current ISP (Internet Service Provider) uses a technology known as "perma-cookie" oder "sticky cookie" when I am browsing the internet. This ...
1
vote
3answers
103 views

What security implications are there when sending video feed over unknown applications, and how can we protect ourselves?

This might sound broad -- but it has to be considering the details are truly unknown. Context: Our university (and many more) have begun rolling out mandatory webcam recording for certain portions of ...
6
votes
5answers
229 views

What steps can be taken to secure snail mail?

Alice has decided to stop using electronic communication with her friends and relatives. She believes analog media are generally more secure and private. Her friends and relatives, however, neither ...
3
votes
1answer
101 views

Detect air signals

Is it at all possible to detect all air type signals for a given location? For example, if I wanted to get a list of all air signals (i.e. wifi, bluetooth, radio, 3g, 4g, and all other air type ...
5
votes
2answers
185 views

Are there any known cases were antivirus software have deliberately ignored malware?

Are there any known cases were antivirus companies for some reason have choosen to make their product allow/ignore malicious software? The reason could be government coercion or former trustworthy ...
2
votes
1answer
532 views

How ATM Surveillance Camera works? [closed]

I would like to know how the ATM pin hole camera works.Whether the pin hole camera works only once the card is inserted in ATM or during the cash withdrawal or it works always?
3
votes
1answer
243 views

Do we have to take algorithm substitution attacks seriously?

Bruce Schneier's blog drew my attention to algorithm substitution attacks which may leak symmetric keys through IV or padding or other covert channels, encrypted with escrow keys. The major premise is ...
6
votes
3answers
5k views

how can I tell if I'm under IMSI cell phone surveillance

I've recently had an encounter with the law, the details of which I won't disclose here since the case is still in court. They took my phone, naturally. I deactivated it as soon as I was released ...
11
votes
1answer
503 views

What is going on with my download of the recent Apple security update?

The update in question is the Mavericks combined update which, among other things, claims to fix the recent SSL vulnerability/gaping hole. This issue really annoyed me, so I decided to procure ...
7
votes
4answers
706 views

airgap a smartphone?

I'm looking to use my smartphone purely as a portable computer, with no network functionality in order to protect my privacy. Is removing the sim cards from it enough to airgap it or do I need to go ...
2
votes
2answers
297 views

Indirectly relaying intranet server to outside world

I have an internal network of IP network cameras. The feeds from these cameras are ingested by a single server and presented from a unified web interface both internally and to the outside world (both ...
4
votes
2answers
773 views

Tor traffic correlation attacks by global adversaries

I recently came across a paper called "Users Get Routed: Traffic Correlation on Tor by Realistic Adversaries" (Aaron Johnson et al) ... which seems to be saying that adversaries (like the NSA) that ...
5
votes
1answer
1k views

Is my ISP BGP/DNS hijacking?

I've noticed some very suspicious activity from my ISP. Sometimes I would notice that when I ping google.com it would resolve to an IP which is owned by my ISP. I currently don't have an example ...
2
votes
2answers
78 views

What steps remain for a robust, neutral and surveillance-proof Internet? [closed]

Recent leaks about widespread NSA surveillance have brought privacy and security to the forefront of the public consciousness as we strive to determine best practices in governance for the Internet ...
9
votes
2answers
4k views

Surveillance: blocking laptop's microphone from spying on you?

It is a known fact that your laptop camera can be hacked to spy on you. While the most often mentioned remedy is very low tech yet effective, everyone seems to omit the fact that the microphone can be ...
68
votes
2answers
15k views

Best practices for Tor use, in light of released NSA slides

It has been known in the security community that a tool as versatile as Tor is likely the target of intense interest from intelligence agencies. While the FBI has admitted responsibility for a Tor ...
9
votes
2answers
570 views

If we can no longer trust NIST, what are viable alternatives? [closed]

Regarding the Guardian article about NSA control over encryption, there was this gem deep inside: Independent security experts have long suspected that the NSA has been introducing weaknesses into ...
70
votes
3answers
3k views

Did US and UK spy agencies defeat privacy and security on the internet?

This question is meant as a canonical question in regard to the US and UK spy agencies compromising end nodes and encryption between nodes to spy on people they suspect to be terrorists. However, this ...
6
votes
7answers
2k views

Is PGP combined with a regular web-based email service secure?

With the disappearance of private email services like Lavabit and Tormail (http://www.dailydot.com/news/email-anonymous-hushmail-lavabit-nsa/) it seems that we will need to resort back to standard ...
16
votes
3answers
405 views

What expectation of privacy is there with US-based vendors with the LavaBit and SilentCircle shutdown?

Lavabit hosts a secure messaging service that was recently shut down. Likewise SilentCircle has preemptively done the same thing with their email-based service. It seems that the justification for ...
8
votes
3answers
1k views

Does excluding Tor nodes by country improve privacy? [closed]

Here's the situation: the government of West Nauru is known to run a lot of TOR exit nodes and to collect a lot of data on the traffic, using extra large arithmometers to collate & correlate ...