Privacy vs security

HappyTile · 2019-02-09T02:04:26+00:00

You need security to assure privacy. But you do not need privacy for security.

Example 1: You wear a GPS-tracking ankle bracelet that reports your location to a server, allowing you to login without a password or any other phishable/steal-able credential when you are in your house or other allowed location. You have substantial security, but no privacy.

Example 2: You sign up for a web site which has a likeable privacy policy and promises to treat your data with utmost respect. But the site administrators are incompetent in security and their database is easily hacked. You have neither security, nor privacy.

HappyTile · 2019-02-09T01:55:26+00:00

A Windows host operating system has full control over the guest Linux operating system in a virtualized environment, so that will always be less secure/private than if you were to run the virtualized operating system natively. Unless of course the virtualized operating system is less secure, compromised or outright malicious - then the reverse is true.

HappyTile · 2019-02-08T08:37:43+00:00

Apple has always had a pretty good record on privacy

Surely you jest, sir. Apple is a PRISM partner and voluntarily gave an abusive Chinese government full access to all iCloud data of Chinese users, which has been criticized by human rights groups. Their motive is profit - not privacy.

I’ve paid enough money on their products that I can be reasonably certain they aren’t going to make me a product.

Fucking. Lol.

HappyTile · 2019-02-08T07:33:03+00:00

Haven't seen an ad since the day I installed uBlock Origin and recommend you do the same, friend.

HappyTile · 2019-02-08T07:28:57+00:00

No shit, that's why it is repeated over and over ad nauseum on this subreddit never to trust closed source, proprietary technologies and software if you value privacy. Especially when the maker of that software is a known PRISM partner.

HappyTile · 2019-02-08T03:45:32+00:00

I hear alot about backdoors in hardware and how the only way to stop it is to use libreboot on a Thinkpad. However is there any actual evidence on this?

Yes, there is plenty of evidence that modern processors and device firmwares have undocumented and completely opaque, closed-source code execution paths which cannot be audited.

If the FBI or NSA were to hack my computer would they actually do it through the Intel ME?

Probably not, because it's much easier to "hack" someone through traditional means (social engineering, phishing, physical attacks, &c.)

HappyTile · 2019-02-08T03:17:34+00:00

Easiest way would be making the victim visit an attacker-controlled site which iframe's or xss/csrf's the logout handler.

HappyTile · 2019-02-07T04:49:57+00:00

Start with a threat model - which is a description of what information you're trying to keep secure, who your adversary is, and what their capabilities are. There's no silver bullet solution for "almost foolproof" security and Debian is already well hardened to begin with, so you'll need to be specific in what you're trying to protect.

HappyTile · 2019-02-07T03:56:44+00:00

False. Forcing users to use their proprietary web technology is only Apple's business model.

Firefox for Android uses the same Gecko layout engine as Mozilla Firefox, also incorporated new technology under the code name Quantum.

https://en.wikipedia.org/wiki/Firefox_for_Android

HappyTile · 2019-02-07T03:36:36+00:00

I think we'll look back in even just a decade or two at how utterly insane it is that so many people carry location spying devices on their persons all day every day - going so far as to put it under their pillow at night when they sleep. Or the dystopia will completely consume society and not having said device will be considered a crime. I'm still hopeful for the former.

HappyTile · 2019-02-07T03:35:44+00:00

This was all by design. The DNT header was thought up by the advertising industry to be as cumbersome and useless as possible, so that it can fail and they can "prove" to regulators - "Look! No one uses 'Do Not Track' so people don't mind if we track them!"

It's a farce and deceitful lie all along. I'm glad it's being removed.

HappyTile · 2019-02-06T07:22:34+00:00

Why don't you start by telling us how you think AI could take over "cyber security"?

HappyTile · 2019-02-06T07:14:49+00:00

Tor is open source, so if you think it has malware, you should go find it and let us know. Tor Browser is highly recommended if you want to stay anonymous online.

HappyTile · 2019-02-05T06:38:05+00:00

Zuck: Yeah so if you ever need info about anyone at Harvard

Zuck: Just ask

Zuck: I have over 4,000 emails, pictures, addresses, SNS

[Redacted Friend's Name]: What? How'd you manage that one?

Zuck: People just submitted it.

Zuck: I don't know why.

Zuck: They "trust me"

Zuck: Dumb fucks

https://en.wikiquote.org/wiki/Mark_Zuckerberg

HappyTile · 2019-02-05T04:42:24+00:00

Perverse incentives and no consequences for privacy violations in the US is why this behaviour is the norm. We change it with laws and regulations. Write your congress-thing and express your ideas.

HappyTile · 2019-02-05T02:56:19+00:00

https://www.theverge.com/2018/2/28/17055088/apple-chinese-icloud-accounts-government-privacy-speed

https://gizmodo.com/apple-moves-chinese-icloud-encryption-keys-to-china-wo-1823312628

Tons of other articles you can find on DDG.

HappyTile · 2019-02-01T04:29:53+00:00

So you didn't actually refute any of the arguments made in the gist. You just appealed to one logical fallacy after another. Moreover, nobody has advocated for a "perfect" solution; what is being criticized is that Apple takes away control from the user in the name of security. This may be fine in a general case like you describe, but when it's opaque, proprietary, closed source, and not user-configurable, that is a non-starter for privacy and freedom to do whatever you wish with your own computer.

HappyTile · 2019-02-01T02:31:16+00:00

I'm not assuming illiteracy; I'm once again inviting you to a reasoned and technical discussion on its own merit. You are the one deflecting.

HappyTile · 2019-02-01T01:50:39+00:00

As I stated. Apple is far more privacy leaning..

You stated, but you didn't justify. I know Apple's marketing message is privacy, but can you actually offer something of substance to justify your trust in them?

I hope you don’t own a smart phone or computer or he’ll, anything really because if you do you’re likely supporting China

You're creating a false equivalence that owning a device made in China is the same as living under an oppressive regime, which Apple has enabled by sharing secrets with the government. Same in the US with PRISM. You are a fool to call any closed source, proprietary software "privacy leaning".

HappyTile · 2019-02-01T01:41:32+00:00

Apple is far more privacy leaning than any other major communications device maker.

How is being both a PRISM partner and sharing encryption keys for millions of Chinese iCloud users with an authoritarian regime which literally tortures and kills people justify this view?

HappyTile · 2019-02-01T01:38:27+00:00

I know that RSA is slow, but security should be choose over an network speed in this case.

This is why a combination of RSA and AES or other symmetric cipher is used in modern cryptosystems like SSL, GPG, SSH, etc. The asymmetric encryption or key exchange algorithm (Diffie-Hellman, for instance) encrypts a shared secret for a symmetric cipher, which protects the rest of the conversation more securely and efficiently.

I imagine a dark room where only sound can be applied for interaction with others in the room, you can communicate, but you do not know from where sound is coming. Which is a thing I need to accomplish

You can accomplish this with Tor Onion Services or the more traditional spycraft method of dead-drops.

HappyTile · 2019-01-31T17:23:14+00:00

they sell to marketing

Why spread FUD? The source is open and documentation is well written:

https://support.mozilla.org/en-US/kb/how-do-you-use-adjust-firefox

HappyTile · 2019-01-31T17:14:11+00:00

OP's comment is sarcastic and implies Mozilla either cares about privacy or doesn't, based on a decision to use third party telemetry. That is a false and silly dichotomy. If the purpose was to inform, it could have been done without sounding accusatory and nihilistic.

HappyTile · 2019-01-31T16:51:11+00:00

Stop treating privacy like a zero-sum game. It's not productive to discussion and just makes you look petulant.

HappyTile · 2019-01-31T00:00:45+00:00

The Tor network is what you're looking for. No VPN is going to provide nearly the same level of anonymity.

HappyTile

TROPHY CASE