While Reddit mods and admin try to keep up with the site's "no violence" terms of use, Facebook and LinkedIn is reacting with tens of thousands of laughing emojis.
Make them spend more resources doing deanonymizations. First they have to get the IP from instance admins, then trace the tor routing, then the VPN that I use, then ask for my ISP. Make them do all that work.
(Or maybe they already have access by simply activating their backdoors within Intel ME, AMD PSP, and whatever baseband backdoor on the phones they have, and have just gotten everyone’s real identities in an instant, we can’t know for sure.)
It wouldn’t be impossible. There are like so many different certificate issuers, any one of them collaborating with a government would allow them to create a certificate that would be accepted by your browser.
It is almost never a question of whether it’s possible or not. You WILL make a mistake. It’s just a question of how much effort you’re worth as an individual.
You think having a fake online name will stop them from finding out who you are? Did you even pay attention to the Snowden leaks?
Make them spend more resources doing deanonymizations. First they have to get the IP from instance admins, then trace the tor routing, then the VPN that I use, then ask for my ISP. Make them do all that work.
(Or maybe they already have access by simply activating their backdoors within Intel ME, AMD PSP, and whatever baseband backdoor on the phones they have, and have just gotten everyone’s real identities in an instant, we can’t know for sure.)
They also have backdoors in most implementations of TLS, according to a person I know who worked government security.
It wouldn’t be impossible. There are like so many different certificate issuers, any one of them collaborating with a government would allow them to create a certificate that would be accepted by your browser.
Still takes more work than just giving them that information.
deleted by creator
Sure, if we’re talking about code vulnerabilities only. It’s most likely a compromised root cert though.
deleted by creator
Right, this would be a MitM vulnerability, which could be reasonably viable for targeted attacks.
It is almost never a question of whether it’s possible or not. You WILL make a mistake. It’s just a question of how much effort you’re worth as an individual.
right, don’t make it easy for them. plus they got prolly got half a country to put on the list now.
When everyone is on the list, noone is.
No, they said we already knew about that and didn’t give it another thought.