199 reputation
16
bio website
location
age
visits member for 2 years, 10 months
seen Feb 8 at 4:44

Jun
11
awarded  Supporter
Jun
11
comment How likely/possible is it that the NSA have broken common encryption techniques such as SSL/TLS?
not sure why the downvotes
Nov
19
comment Petraeus scandal - what would have been a better way to communicate electronically
I have no idea what your talking about. My point was that the head of the CIA and an extremely well-credentialed intelligence expert chose NOT to use pgp. Communicating within NSA has nothing to do with it. In the case of the Jill Kelley character, the FBI became involved because of the knowledge of comings and goings of generals by a random person (ie a potentially nationally-significant disaster). You seem to be arguing my side but I can't really tell. Oh well, lets just let it be.
Nov
19
awarded  Commentator
Nov
19
comment Petraeus scandal - what would have been a better way to communicate electronically
honestly, I'd be hard pressed to find anybody amongst my friends who wouldn't know what I was talking about. It's fine to close it - it's your choice.
Nov
19
comment Petraeus scandal - what would have been a better way to communicate electronically
odd this is argued as not a real question when this is considered a real question: security.stackexchange.com/questions/24048/…
Nov
19
comment Petraeus scandal - what would have been a better way to communicate electronically
thx tylerl, to best of my knowledge, he didn't use standard unencrypted webmail; they used gmail effectively as shared storage. She did use unencrypted email from the SAME account thus leading to the messages in the drafts folder. Clearly, she wasn't a standard biographer based upon her background in terms of information security. I was speculating about pgp and NSA - to be honest but I do find it interesting. Granted, there was an affair involved.
Nov
19
revised Petraeus scandal - what would have been a better way to communicate electronically
edited title
Nov
19
comment Petraeus scandal - what would have been a better way to communicate electronically
right, I updated the question. They clearly knew that standard secure email wasn't secure. Agreed that some ssh based sol'n might do the trick for person-person communication but might be other issues esp if secured email is used in conjunction with non-standard. Perhaps, the fact that these two people (one of whom obviously had the highest security clearance) used this strategy tells us something about the security of pgp.
Nov
19
revised Petraeus scandal - what would have been a better way to communicate electronically
added 1185 characters in body
Nov
19
comment Petraeus scandal - what would have been a better way to communicate electronically
thx - the bad guys have definitely watched The Wire so not any secrets going out. I'm tending to think this is the closest to an answer but would really like a computer based sol'n (hardware by itself would be incriminating). I'd say your last point is not excessively paranoid; I wouldn't be surprised if it weren't sufficient.
Nov
19
comment Petraeus scandal - what would have been a better way to communicate electronically
if you think it's a current events question, then I guess you don't understand.
Nov
17
comment Petraeus scandal - what would have been a better way to communicate electronically
thx, it seems like the real breakdown was using an email account for a shared communication path for saving messages in the drafts folder. Her use of it for sending emails from that account was the downfall. What they needed was something like that, that didn't have the way to send out. Dropbox might be suspicious due to being on a specific port.
Nov
17
asked Petraeus scandal - what would have been a better way to communicate electronically
Sep
19
comment HTTPS vs. HTTP - Is there a security reason for HTTPS for a site that only does Facebook login?
I agree with the general point. Honestly, hesitant to make this jump due to time / testing contraints. Have to think through this a little bit more. Do https and Varnish work well together?
Sep
19
asked HTTPS vs. HTTP - Is there a security reason for HTTPS for a site that only does Facebook login?
Aug
14
awarded  Notable Question
Apr
11
awarded  Popular Question
Mar
21
comment Encrypting email for gmail
agreed - suffers from the reset password attack. Only as secure as email which we said before is insecure
Oct
19
awarded  Nice Question