https://www.eevblog.com/forum? - Page 1
Forum section: electronics / general

author: madires
author_rank: Super Contributor
timestamp: July 25, 2013, 01:05:43 pm
content: After all the NSA revelations I'd love to see https support for the forum.

author: dr.diesel
author_rank: Super Contributor
timestamp: July 25, 2013, 01:10:13 pm
content: https won't help. The NSA demands the info, ISP/Corporation/etc compiles with a simple mysqldump. The data path between you and the website or service provider is irrelevant...Agreed though, it's BS.

author: MacAttak
author_rank: Unknown
timestamp: July 25, 2013, 11:35:27 pm
content: There's always Tor. If you really wanted to, you could start using Tor Bundle (easiest way to do it) and create a new account to post with. You would need to be careful to not say anything that links you back to your original account, and to be safest you wouldn't just stop immediately on one high-traffic account and start on another - would be easy to connect the dots and figure out they are the same person.Anything already posted here is essentially public knowledge at this point.

author: Phaedrus
author_rank: Frequent Contributor
timestamp: July 25, 2013, 11:45:22 pm
content: TOR is compromised. There are lots of poisoned nodes out there.

author: madires
author_rank: Super Contributor
timestamp: July 26, 2013, 11:10:16 am
content: Quote from: dr.diesel on July 25, 2013, 01:10:13 pmOf course, but without SSL/TLS the login is in clear text and we shouldn't make it too easy for them. And don't forget to enable PFS in SSL/TLS to prevent any decryption afterwards if someone has access to the private SSL key.

author: ampdoctor
author_rank: Frequent Contributor
timestamp: July 26, 2013, 11:19:49 am
content: hadn't heard anything that tor is compromised by anybody other than the hopelessly paranoid. but then again, if you're using tor you're already probably hopelessly paranoid.but anyway, i think if your privacy is important to you, your best shot at this point is pc -> PAID offshore vpn that does not log traffic(usually in sweden) -> tor. never use google, skype, facebook, yahoo, or any other social media site, and if you absolutely have to use a messenger stay with something like jabber that encrypts all inbound and outbound traffic and requires a private key.With the latest revelation that they're also demanding passwords and their salts from the major services, I'd also suggest even if you don't want to go as far as I've outlined above, to use a 12-14 character password with a combination of upper and lower case letters, numbers AND special characters. Use a different one for every location that needs a password and change it every thirty days. You'd also be well served to run firefox, noscript, and https everywhere, and if you want to go the extra mile, make sure you're running everything internet based in a sandbox.While none of this will make you bulletproof, it'll slow em down to a crawl.

author: BravoV
author_rank: Super Contributor
timestamp: July 26, 2013, 11:54:18 am
content: Quote from: madires on July 25, 2013, 01:05:43 pmUnless you already secured beforehand, its too late, by creating this thread alone, you have triggered tons of indicators in NSA and all your credentials & details captured, backdoor activated and priority watch list updated.Wait, by posting this post alone here also made me now listed in "da list".... damn..... j/k