lainchan / sec

A small question:

Incognito · 2017-04-26 03:33
Are we losing the crypto wars?
Mario Rossi · 2017-04-26 03:52
No. We had won, but now we have Crypto War 2.0
Meddler · 2017-04-26 11:39
>>299 Yes we are losing.
A filthy Scrub · 2017-04-26 13:02
Crypto wars have always been on the side of losing and winning, but for the time being unless you're doing something super fuarrrking illegal (corporate espionage, treason etc..). Most likely using stuff like signal for private comms, vpn's to hide yo traffic, trucryprt for data encryption. Don't use tor, to many issues with exit nodes being comprised over the past few years. There's a lot more I could mention but just using those listed above you should be able to hide what you want to hide as long as your not an idiot.
Dujour · 2017-04-26 13:37
>>307 what if I want to hide my idiocy
TheMalwareBear · 2017-04-26 14:08
>>308 You can hide it, but usually idiocy gets in the way. But if you ever want to get around your idiocy just think of the risks and ya weigh it up. If that doesn't help ya, just punch yourself in the gut and make a decision.
Agent Jones · 2017-04-26 20:30
>>307 >Don't use tor, to many issues with exit nodes being comprised over the past few years. sauce, and explanation of why that's an issue.
Terzibashjian · 2017-04-26 20:40
>>307 >vpn's to hide yo traffic https://gist.github.com/joepie91/5a9909939e6ce7d09e29 I don't agree with everything that it says but it still makes a few interesting points. I hope most lains already understand the limitations of VPNs but more information is always a good thing.
Miho Iwakura · 2017-04-26 20:40
>Don't use tor, to many issues with exit nodes being comprised over the past few years Here let me rephrase that for you: I have no idea how tor works or what are directory authorities, what I'm actually trying to point at is a sybil attack.
Mitnick · 2017-04-26 22:19
Don't use tor. If all those bad people would stop using tor and not getting caught maybe CloudFuck would stop fuarrrking the rest of our lives with captchas. Don't use tor. Why would you not want to be constantly and eternally fingerprinted on www? Right? Right?
Project 2501 · 2017-04-26 22:40
>>307 VPNs are hardly a means to hide your traffic.
Dr. X · 2017-04-26 23:30
>>321 You'd have to have every single relay be a compromised one to be at identified, and the chances of that are near impossible. Snowden leaks showed that the government isn't even bothering to try it anymore, and it's way easier to take over sites through manipulating the direction of discussion and tell people not to use Tor. The solution to a sybil attack, which are not done anymore, is setting up your own relay so that there is 1 less compromised relay on the Tor network. Although there are very few compromised relays anyway.
Jean Dupont · 2017-04-27 06:40
>>334 ...this is just absurd
Unidentified · 2017-04-27 13:00
>>307 >signal for private comms Yes, an app that links you to a phone number. Good Idea. >vpn's to hide yo traffic https://gist.github.com/joepie91/5a9909939e6ce7d09e29 >trucryprt for data encryption >truecrypt Truecrypt's been deprecated, abandoned and vulnerable for years. Go away FBI, you're not fooling anyone.
Hiro Protagonist · 2017-04-27 17:44
>>345 >he bought the "VPNs do literally nothing" meme VPNs aren't tor but they are better than nothing.
Roy Batty · 2017-04-27 20:15
>>345 >https://gist.github.com/joepie91/5a9909939e6ce7d09e29 I don't really the get the point of that gist. The selling point of privacy oriented VPNs is exactly that they provide privacy. The same can't be said about ISPs. Furthermore, even if you assume every VPN provider logs, the logging still happens in a potentially different country. E.g., if you live in a totalitarian state, then surely using a VPN placed in a free'er country is preferable, than using a potentially state controlled ISP, no?
Apoc · 2017-04-27 23:15
No one has actually provided any reason why were losing the crypto wars or not. >>306 >>300 Why? >>307 >Don't use tor, to many issues with exit nodes being comprised over the past few years. What are these issues and what's your source material? >There's a lot more I could mention but just using those listed above you should be able to hide what you want to hide as long as your not an idiot. Don't give me so much credit, I'm an idiot and I need explaining. >>334 >Snowden leaks showed that the government isn't even bothering to try it anymore Which documents exactly? >The solution to a sybil attack, which are not done anymore Why can you assume this?
Vasya Pupkin · 2017-04-28 06:20
Do you guys really understand the concept of cryptowar? No, it's not about "what software we should use to hide ourselves". It's about a war... using crypto, wow. It's about US trying to crack NK crypto to get informations if they will release bombs on SK or a cruise missile in the center of fuarrrking Berkeley. It's about predicting if Russia will do some more nasty friendship with China. It's much more than we, individual beings. And what "we" represents here? There's people from any country here. US is winning cryptowars, at this time. It was proved by the crack of GHOST cypher, from Russia.
TheMalwareBear · 2017-04-28 13:36
>>319 >>358 I'll leave a few links down below on TOR issues below, they mightn't be directly related to exit nodes being comp'd but take it as you will. https://www.quora.com/Has-the-Tor-Network-really-been-compromised-by-the-US-government-What-are-the-loop-holes-present-in-the-exit-and-entry-nodes-of-Tor-network-that-can-be-used-to-track-the-real-ip-of-the-user >Good general overview of Tor and vuln's multiple links and some fairly decent answers. https://en.wikipedia.org/wiki/Tor_(anonymity_network)#Weaknesses >Its wikipedia, take it with a grain of salt and refer the citations there's alot, so dont kill me please. https://www.defcon.org/html/defcon-24/dc-24-speakers.html#Noubir >Nice lil article I found, while looking for Tor Vuln's. Personally IMO for anything major it would have to be on the scale of a large attack to do anything major to affect a normal person really. >Signal uses a phone number Purchase a pre-paid sim card, get phone number, link it to signal for auth, throw into river. You can enter in all fake info for a pre-paid sim and get it delivered to work or have it delivered to a middle man that will then deliver it for you. >Trucrypt deprecated, abandoned and vuln for years True, it has one vuln in it which I cant remember if its remote exec or something else. But its encryption still stands tall so if you're that scared just slam it on VM, not that hard at all really. >>358 >I'm an idiot and I need explaining Eh, I get around this by just thinking if I care or not and is it worth the time. You can probably find alot of stuff from just this username, but I don't care. If you end up caring then you'll figure a way how to hide it, simple. >>363 I do, but talking about software like this can be quite cool as people have different perspectives on what is within there risk appetite and what isn't. But discussing crypto wars and who is winning is tough, to much goes on beyond closed doors to actually know who the hell is making advancements and what ideas are actually coming out of crypto wars. Just wait for quant comps and wait for it to be for fuarrrking nothing. TOP KEK.
Liet Kynes · 2017-04-28 20:42
>>363 >condescending post >"US is winning cryptowars, at this time. It was proved by the crack of GHOST cypher, from Russia." you believe in whole US vs Russia cold war propaganda? seriously? Okay, well, let me ask a question. See a pic related? I want you to explain to me why every year, around the same date vasts numbers of people would Google "cold war". And I want you to eliminate all impossible and crazy hypothesis until you are left with most probably true one. Then when you got that one hypothesis get back to me and tell me what you think about this US vs Russia idea.
Roy Batty · 2017-04-28 20:47
>>371 Considering the bump is at the beginning of winter, I'm guessing it's people who have absolutely no idea what the cold war was wondering if it has something to do with the weather.
Marly Krushkhova · 2017-04-28 21:16
>>373 >people who have absolutely no idea what the cold war was How is that even possible?
Tyrell Wellick · 2017-04-28 21:18
>>371 >ignore everything I've said about NK, SK, China >focus only on Russia, while I have never even cited "cold war" sure, good job. This generalized apophenia is completely insane these days. People just can't discuss anymore, it's just a bunch of selective thoughts and belief revision in an ad infinitum. >condescending post Of course it is. You guys iniciate a thread about cryptowar and start the talk about >don't use VPN!!!!11!1 >don't use Tor!1!!!!1 wtf? seriously? people just can't read anymore, it's the liquid modernity.
H.R. Giger · 2017-04-28 21:18
>>377 nah, just play his game :^^) >>373 Most of heartbeats are based around May, which is in beginning of summer. Your hypothesis is wrong. Want to give me another?
Splicer · 2017-04-28 21:21
>>378 >>ignore everything I've said about NK, SK, China the whole US vs Russia is a simple idea that can be applied on NK and China. >while I have never even cited "cold war" you crying about Russia sounded like it came from cold war era tho So I give you that one >Of course it is why did you whine about "People just can't discuss anymore" when you are part of the problem buddy boi
Zero Cool · 2017-04-28 21:37
Wikipedia says that May 9 is "Victory Day" in Russia with military parade on Moscow's Red Square
Unidentified · 2017-04-28 21:41
>>379 > nah, just play his game I have sincerely no idea what's going on at this point.
Zhora · 2017-04-29 09:20
If your goal is to hide your WWW traffic from your ISP then the best you can do is to use the Tor network. Regardless of Tor being 'compromised' or not, your ISP would not be in a position to exploit that fact if it were true. That would remain in the hands of nation state actors. To purchase the service of a VPN requires money, whilst you're freely allowed to use the Tor network in exchange for the service you yourself are providing to it: by using Tor you're adding your own noise to the network which strengthens it. The only use cases I can think of that require a VPN are bitrate intensive uses that you want to hide from your ISP. What this usually boils down to is: I could accomplish x anonymously, but being anonymous takes too long so I'll pay for a VPN and bask in its fragile pseudonymity, because convenience.
Ivan Petrov · 2017-04-29 11:44
>>371 >>379 Is it when movies come out?
Splicer · 2017-04-29 13:00
>>395 Aww, naisu. Couldn't have explained better myself.
The Phantom Phreak · 2017-04-29 15:17
>>377 oh lainon. sweet, innocent lainon. I'm truly sorry for this. https://richarddawkins.net/2014/02/1-in-4-americans-thinks-the-sun-goes-around-the-earth-survey-says/
vantablack · 2017-04-29 16:26
>>379 Props on your choice of music, Lain!
Bob Arctor · 2017-04-29 17:31
>>371 It's people in school looking it up because around that time is when exams are ya dummies
Emmanuel · 2017-04-30 23:54
>>299 We can't win it without free hardware. FLOSS doesn't work in a vacuum, Intel and AMD wanna rule your hardware from their offices and check what are you doing.