46 karma · joined November 23, 2016
I'm getting a replacement (Model Up actually, Dell did a 12% off offer) so we'll see how it is. I look forward to UHD Touch & Fingerprint Reader.
I have a 1700X/16GB/SSD build and a Dell XPS 15 9560, both of which are very fast, but the Ryzen just flies!
I bet that made it some much more secure! /s
The time to stop encryption is gone. TOR & Signal have seen to that.
I imagine that MITM on a large scale is par for the course for GCHQ.
That's pretty clear. It does depend of what level/technology is used in the Encryption, but broadly, against nation state actors with full virtual and physical hardware access, you are to put it bluntly, stuffed.
I don't have anything to hide- but a malicious attacker could easily cause me to.
Step One: Maliciously cause the target to click on a link or open a url (Phishing, Exploit, RFE, XSS etc)
Step Two: With JS, one can easy introduce HTTP connections to any number of websites, such as maybe the Talibans official website (They have one!), Google Searches for (to think of a few) "Gaziantep Places to Stay", "Turkey Flights", "Opposition to the Kuffar at home", "Dabiq Magazine", "how to join the Khalifah" etc
This could easily be done in a realisic appearing manner, especially to ISP/GCHQ filters and alerts.
Step Three: If any of this tallies with any physical activity (Let's say the target wanted to go Clay Pigeon Shooting, or Visited a Gun Club because he has in interest in .22 target shooting), then they have a case.
Sure, it's defendable, and this is a really simplistic example. But it's basically ruined the target's life.
Remember, it's probably not the "Government" doing this, as this info will be leaked.
Step One: Maliciously cause the target to click on a link or open a url (Phishing, Exploit, RFE, XSS etc)
Step Two: With JS, one can easy introduce HTTP connections to any number of websites, such as maybe the Taliban's official website (They have one!), Google Searches for (to think of a few) "Gaziantep Places to Stay", "Turkey Flights", "Opposition to the Kuffar at home", "Dabiq Magazine", "how to join the Khalifah" etc
This could easily be done in a realisic appearing manner, especially to ISP/GCHQ filters and alerts.
Step Three: If any of this tallies with any physical activity (Let's say the target wanted to go Clay Pigeon Shooting, or Visited a Gun Club because he has in interest in .22 target shooting), then they have a case.
Sure, it's defendable, and this is a really simplistic example. But it's basically ruined the target's life.
Remember, it's probably not the "Government" doing this, as this info will be leaked.
EDIT: heck, I'll be stuffed- I tend to actively visit /r/combatfootage...
I would urge everyone who can to sign the petition against it.
This, in my mind is a problem, not because of the obvious costs (ISPs storing _literally all_ metadata for a year), and the insidous privacy concerns, but how bad Govts are at keeping information secure. Below are 3 recent and well known examples of Government Mass Data leaks- this information will be compromised at some point, for profit or espionage.
https://en.wikipedia.org/wiki/Office_of_Personnel_Management...
http://news.bbc.co.uk/1/hi/uk/7449927.stm
https://www.troyhunt.com/when-nation-is-hacked-understanding...
IMHO, trotting out "If you've got nothing to hide, you've got nothing to fear" BS doesn't mean that at some point, that data will be misused, even if the UK (My) Government doesn't suddenly turn dictatorial.
I'm not so sure that many portions of this law will stand up to legal scrutiny.
This, in my mind is a problem, not because of the obvious costs (ISPs storing _literally all_ metadata for a year), and the insidous privacy concerns, but how bad Govts are at keeping information secure. Below are 3 recent and well known examples of Government Mass Data leaks- this information will be compromised at some point, for profit or espionage.
https://en.wikipedia.org/wiki/Office_of_Personnel_Management...
http://news.bbc.co.uk/1/hi/uk/7449927.stm
https://www.troyhunt.com/when-nation-is-hacked-understanding...
IMHO, trotting out "If you've got nothing to hide, you've got nothing to fear" BS doesn't mean that at some point, that data will be misused, even if the UK (My) Government doesn't suddenly turn dictatorial.
Would it be possible to offer a LAMP install for two hours?
I spent 20 minutes thinking I had something horribly wrong until I read this comment.
(This works in FF 52.0a2)