Stack Exchange Network

Stack Exchange network consists of 175 Q&A communities including Stack Overflow, the largest, most trusted online community for developers to learn, share their knowledge, and build their careers.

Visit Stack Exchange

Questions tagged [government]

A group of people that governs a community or unit.

13
votes
2answers
442 views

Let's Encrypt is based in the US and subject to US laws

Let's Encrypt is based in the United States and subject to the laws of the United States, including National Security Letters. What are the implications for foreign sites that use Let's Encrypt? Here'...
59
votes
4answers
9k views

Is there a way to make sure my government does not swap out SSL certificates?

I was recently wondering whether there exists a way to make sure my government is not swapping out SSL certificates in order to intercept the traffic. I know almost all browsers are complaining in ...
19
votes
4answers
5k views

Is strategic cyber-warfare feasible today?

Cyber attacks that target a nation's infrastructure are a documented fact and as such a danger that political and military leadership across the world needs to worry about and act proactively. These ...
53
votes
2answers
10k views

How do US government agencies open their email attachments?

I suppose the FBI receives email with attachments, like any other government agency: documents, resumes/CVs, etc. I also suppose they are very careful not to get infected, more than the average user, ...
2
votes
1answer
249 views

Server protection measures from authorities

I am on a project which is illegal in my nation but is not illegal anywhere in the world. In order not to get a 100yr sentence I should be prepared for seizures and forensics. I am running a server ...
1
vote
1answer
328 views

Understanding ANSI/AAMVA encoded data (pdf417 data matrix) on back of NYS ID card

Background I am developing an Android application for work which runs on a Zebra TC51 bar code scanner, which I have been playing around with.. I scanned my NYS drivers license and inspected the ...
4
votes
3answers
217 views

How significant is the invalid SSL cert at aoprals.state.gov?

For up to 4 weeks, the US Department of State's Office of Allowances web site has been using a security certificate whose chain of trust only goes to the State Dept's own CA, with no root CA. Browsers ...
3
votes
1answer
115 views

Is there some type of x-ray that can see through HSM or shielded integrated circuit?

I know that security-oriented products can easily protect their contents from even the most sensitive commercial x-rays, which can see objects at about 0.5µm. But let's put cost limits aside (or ...
-1
votes
1answer
69 views

International communications after nuclear fallout [closed]

Is there a (nuclear fallout) scenario imaginable where international communications are thrown back to the stone age? Meaning: Satellites are EMP'd out of the sky Transoceanic cables are cut ...
0
votes
2answers
148 views

What would 'best practice' look like in protecting critical infrastructure against state actor cyber attack?

I was reading this article from the New York Times, which details the alarming degree to which the IT systems running critical civic infrastructure have allegedly been compromised by Russian cyber ...
7
votes
2answers
2k views

How do people in China get past the Great Firewall in practice?

I know that China prevents access to many resources/content on the Internet via a "great firewall". While there are multiple ways of getting past/through this firewall - some are more involved and ...
2
votes
1answer
220 views

Are there technical reasons why state actors may be more able of carrying out malware cyberattacks against critical infrastructure, than individuals?

The US and the UK have publicly accused the Russian military of orchestrating attacks using the NotPetya malware: Foreign Office minister Lord Ahmad of Wimbledon said: "The UK government judges ...
1
vote
2answers
84 views

Possible setup for a direct democracy voting system to prevent fraud

My Government is designing a direct democratic voting system and would like the system to be open sourced and unable to be corrupted by individuals and other stakeholders. Some requirements as of now:...
0
votes
2answers
550 views

Risks and challenges of an online voting system. Any recent updates? [closed]

I'm studying and preparing a document for implementing an online voting system (internet based system) which can be used for governmental voting purposes. I would like to ask for your advise and ...
1
vote
0answers
34 views

What Does “State Sponsored” Cyber Attacks Mean? [duplicate]

I am hearing on the news this morning that a government of country "A" found tens of thousands of instances of "state sponsored attacks" against it's information systems. What is meant by "state ...
58
votes
13answers
26k views

Why not use a national ID as username for every website?

Everyday we visit many websites, including our university's website, maybe Google, Yahoo, etc. But on each of them, we have a unique username, while each person in a country can have a "national code" ...
0
votes
2answers
107 views

Is it possible for a company such as Apple to encrypt users' data such that they cannot trace identities? [closed]

More precisely: is it possible for a company such as Apple to encrypt users' data such that neither they nor anyone else can trace identities while still being able to monetize demographic data? If ...
0
votes
2answers
118 views

Can I have the same military grade security standards with Fedora than Red Hat? [closed]

Can I have the same security Government Standards with Fedora than with RedHat?
7
votes
3answers
3k views

What countries are at highest risk of espionage on personal devices? [closed]

When co-workers travel internationally for business there seems to be risk of bringing a regular work laptop to some countries: the risk is that the government might try to spy on the dta stored on ...
0
votes
1answer
148 views

Differences in classified data handling

Is the difference in the strength of the cryptographic algorithms the only difference between handling TOP SECRET and SECRET information? Say in NSA Suite B, the following is recommended: - SECRET: ...
5
votes
1answer
130 views

Are there any modern governments which use a proprietary encryption algorithm?

Germany used Enigma during WWII. The Soviet Union used GOST during the cold war. USA used to use DES. Now that encryption algorithms are believed best as open source, are there any modern governments ...
4
votes
3answers
551 views

Is encryption key length limitations by governments norm?

Today my internet service provide gave me a customer agreement form to fill in. I found following line in it: Permission limit for Encryption is 40 bit key per length in RSA algorithms, If customer ...
1
vote
1answer
129 views

Can encryption really be “overcome” (by government) and how?

I just came across this article. I am confused as to how, save MITM attacks or similar nefarious tactics, anyone can "overcome" PKI, which is founded on the substrate of asymmetric encryption, meaning ...
-2
votes
1answer
147 views

How do government organizations eavesdrop on its citizens? [closed]

I know many governments perform this act for various reasons from state security to political gains. I heard more of them are performing SSL strip attacks and are listening to https communications as ...
24
votes
7answers
8k views

A government agency sent our website admin an email that our website had been defaced

We got an official email saying that our website had been hacked. They cited the URL to use to see the new suspicious file that had been dropped in our web root folder (s.htm). Just some text about a "...
14
votes
2answers
1k views

Why would an organization like the DoD prefer to use its own Root Certificate(s)?

While browsing some US military and governmental sites, I noticed their HTTPS connection to rely on DoD Root Certificates. As most of us know, web browsers are pre-loaded with a default set of root ...
3
votes
2answers
556 views

Mutually Assured Destruction and Cyber Warfare [closed]

During the Cold War, the U.S. and the former Soviet Union pursued a policy of mutually assured destruction (MAD). I am wondering if it is safe to assume that organizations such as the National ...
4
votes
2answers
545 views

Can a Government block a specific app traffic, even with a VPN running?

A few minutes ago, there was a terror attack on a nightclub in Istanbul/Turkey(Thoughts and prayers to the victims and families), usually, the Government limits most of the communications apps traffic ...
5
votes
2answers
305 views

How can intelligence services be so sure that Russia is the culprit? [closed]

Recently, US and non-US media has been publishing many articles regarding Russia being involved in the "Podesta-hack" or even accusing Putin of being directly responsible. For example: "Putin ...
1
vote
3answers
181 views

What would be the effects of a limited Russian/US cyber conflict be on cyber-security professionals? [closed]

In an interview with NPR's Steve Inskeep that is airing Friday on Morning Edition, Obama said, "I think there is no doubt that when any foreign government tries to impact the integrity of our ...
0
votes
1answer
64 views

Services disclosing private data to a third country

Can I be sure that providers such as google, aws, DO, hetzner, rackspace, etc. won't disclose my private data to a third country like Russia (which resident I am). I started a dialog with AWS support ...
5
votes
2answers
1k views

Government Surveillance VPN or TOR [closed]

As some of you may be aware the UK government has pretty much passed a new surveillance bill. For those that wish to read in more detail can do so here http://www.computerworlduk.com/security/draft-...
1
vote
1answer
90 views

For government warrants and data requests, is client side encryption the way to go? [closed]

I know client side encryption is generally not seen as ideal. However, I can't imagine how server side encryption can ever give the user full peace of mind. If data is encrypted on the client and the ...
0
votes
0answers
69 views

What Is The Authorities' Stance On The Use of Microsoft Office For Sensitive Information?

I want to know what the U.S. (or E.U. countries) policy is towards the use of Microsoft Office (particularly local versions) and potentially sensitive information requiring clearance. In particular, ...
2
votes
2answers
64 views

Could Common Vulnerabilities and Exposures (CVE) be used by the US government before being released?

Since CVEs are centralised by MITRE, which is part of the US department of homeland security, I was wondering if some CVEs could be purposefully "delayed" before being communicated or even hidden from ...
1
vote
2answers
232 views

Why is HTTPS security allowed in most countries

I have heard of some countries not allowing some type of encryption for data transfer along web applications, because the key length is too high (or other reasons), aka: "Datagram"... Now, for HTTPS, ...
0
votes
1answer
67 views

What is estiamted risk of corrupt public officials accessing survivelance and cloud data in UK?

If company Trade Inc setups cloud email and cloud server and also uses mobiles and business broadband, if the owner of the competing company let's say RougeTrade Inc. has friends in UK police, he may ...
22
votes
5answers
8k views

What is the best way to respond to phishing emails sent from a government domain?

In the past day or so, I've received two emails from different .gov addresses that purport to be from Intuit and encourage me to click on a link to "restore access to your QuickBooks account." They ...
1
vote
1answer
198 views

Is the story about getting a visit by police for googling pressure cookers true? [closed]

Its from The Guardian and it was not published in April. I know Google was always collecting data about me and I have so far decided to let it slip as a compromise in light of their contributions to ...
7
votes
1answer
550 views

What does Obama's phone say about Android and phone hardware?

The recent article Goodbye Obamaberry, hello Obamadroid describes the decision to move Obama's phone from the Blackberry to the Samsung Galaxy S4. The Galaxy 4S is of course an old, foreign phone. ...
4
votes
3answers
5k views

Why aren't there FIPS level 4 devices on the market?

While searching for a secure USB to use, I came across the Aegis secure key, which has FIPS Level 3 (140-2) security. I believe that it's the securest flash drive on the market. I found that the ...
3
votes
1answer
135 views

How difficult is it for ISPs to understand a user is using VPN?

If a user is using VPN, how difficult is it for an ISP to know that a user is using VPN ? If the government demands, isn't it possible for the ISP to provide a list of customers who could be using VPN ...
-2
votes
1answer
112 views

Can government query company, such as Google, to get list of accounts associated with some information, such as IP address or phone number? [closed]

UPD: My naive thought was that government requests should explicitly point account for which they requesting information. And that a broad requests like getting list of accounts logged during some ...
1
vote
1answer
86 views

Is it possible to give legal value to signed web services?

The context is using digitally signed webservices (with XML-DSIG for example) for e-government interoperability between databases. The idea is to give endorsement to both the data publisher and the ...
-4
votes
1answer
186 views

How is it technically possible for Apple to unlock the San Bernardino shooter's iPhone? [duplicate]

If the iPhone of the San Bernadino shooters is locked, how would it even be possible for Apple to acquiesce to the FBI's request for them to unlock the phone? Does that mean Apple has some kind of "...
3
votes
2answers
352 views

Is it dangerous to have Tor exit node?

If I buy VPS and create Tor exit node there what would happen if someone did bad thing using my exit node? (terrorism, hacking goverment sites etc) VPS provider will share information about me to FBI ...
0
votes
2answers
114 views

Using Two Different Brands of Security Tools To Block Backdoors

There's this idea of using 2 brands of firewalls both inline that is usually brought up: {Internet}<-->FW(A)<-->FW(B)<-->{Internal Network} Or using 2 algorithms: {Plain ...
31
votes
1answer
1k views

Any known cases of government backdoors creating exploitable security holes? [closed]

As the Apple v FBI battle unfolds, government backdoors will become a hot topic. As background to that, I have two questions: Are there any known cases where governments have forced tech companies to ...
6
votes
2answers
2k views

Apple vs DOJ - how strong is the 10-try wipe brute force barrier?

Out of curiosity and with the hope of helping other beginners and journalists. The current Apple vs DOJ standoff in a nutshell - Apple is resisting DOJ with statements like what they're asking is "...
50
votes
3answers
5k views

Why would the government collect Wi-Fi SSIDs via manual door-to-door questioning of citizens?

I live in a country with little freedom on the Internet (not as strict as in China, but some sites, particularly anti-government sites are inaccessible without a VPN). Recently the government just ...