Security holes can be in unexpected places - page 2.

shorena

copper member

Activity: 1498

Merit: 1528

No I dont escrow anymore.

Quote from: pooya87 on October 16, 2015, 12:00:54 AM

it would be an invasion but this is a public forum so anybody is seeing what we are all doing and there is no hiding that. and as long as i don't get f***ed for just using bitcoin legally i don't care.

Yet, if you read what the paper suggests.

Quote from: pooya87 on October 16, 2015, 12:00:54 AM

besides i agree with VirosaGITS, NSA watching us feels like conspiracy theories.

I think you missed the news over the last years. They watch everything and everyone.

n2004al

legendary

Activity: 1134

Merit: 1000

Quote from: Operand on October 16, 2015, 12:44:02 AM

Cant be that bad eh? I mean as if it's bad enough that governments are able to activate one's camera and microphone on laptops, computers and now mobile phones as confirmed by Snowden Wink

If you read well the question in that is not mentioned this thing answered by you but another. Is is about the things and your habitue on internet and not about things made in your home. Wink

So your answer is out of this topic. Cheesy

Operand

newbie

Activity: 31

Merit: 0

Cant be that bad eh? I mean as if it's bad enough that governments are able to activate one's camera and microphone on laptops, computers and now mobile phones as confirmed by Snowden Wink

n2004al

legendary

Activity: 1134

Merit: 1000

Quote from: Come-from-Beyond on October 15, 2015, 02:19:50 PM

This raises a question: Are you sure that Bitcoin-related websites visited by you are not monitored by NSA? Or maybe you don't care?

I don't care at all. I have nothing to hide and to have fear. Everyone who want can read everything I write or everything I do at internet. So no fear from NSA or every kind of Agencies who make the same or similar jobs. Wink

pooya87

legendary

Activity: 3472

Merit: 10611

it would be an invasion but this is a public forum so anybody is seeing what we are all doing and there is no hiding that. and as long as i don't get f***ed for just using bitcoin legally i don't care.

besides i agree with VirosaGITS, NSA watching us feels like conspiracy theories.

zencomp

full member

Activity: 182

Merit: 100

★ Nakedbitcoins.com ★

Quote from: VirosaGITS on October 15, 2015, 04:56:31 PM

Quote from: Pattart on October 15, 2015, 03:32:19 PM

This is kinda worrying that people can eavesdrop on our communications with any site, but it doesn't seem to be very prevalent. It isn't something that makes up a majority of the sites visited, so I don't think this particular vulnerability is worrying.

I think the NSA has better things to do than monitor everyone's International use of Bitcoin. Until your TX's are linked to suspected terrorist/criminal activity that affect the US or international policies in any way, i think you can put down the Tinfoil hat.

what you said is correct, they have lot of big problems to solve instead of wasting time here until they find any source of work related to this job.

VirosaGITS

legendary

Activity: 1302

Merit: 1068

Quote from: Pattart on October 15, 2015, 03:32:19 PM

This is kinda worrying that people can eavesdrop on our communications with any site, but it doesn't seem to be very prevalent. It isn't something that makes up a majority of the sites visited, so I don't think this particular vulnerability is worrying.

I think the NSA has better things to do than monitor everyone's International use of Bitcoin. Until your TX's are linked to suspected terrorist/criminal activity that affect the US or international policies in any way, i think you can put down the Tinfoil hat.

Pattart

hero member

Activity: 1190

Merit: 500

This is kinda worrying that people can eavesdrop on our communications with any site, but it doesn't seem to be very prevalent. It isn't something that makes up a majority of the sites visited, so I don't think this particular vulnerability is worrying.

Come-from-Beyond

legendary

Activity: 2142

Merit: 1010

Newbie

Quote from: achow101 on October 15, 2015, 02:48:22 PM

Well why should we care about the NSA?

So you don't care, got it.

achow101

staff

Activity: 3458

Merit: 6793

Just writing some code

Quote from: Come-from-Beyond on October 15, 2015, 02:19:50 PM

This raises a question: Are you sure that Bitcoin-related websites visited by you are not monitored by NSA? Or maybe you don't care?

Well why should we care about the NSA? I would be more worried about someone somehow using that to break into my account and stealing all of my Bitcoin.

Come-from-Beyond

legendary

Activity: 2142

Merit: 1010

Newbie

Imperfect Forward Secrecy: How Diffie-Hellman Fails in Practice - the best paper of ACM CCS 2015 is pretty interesting:

Quote

We investigate the security of Diffie-Hellman key exchange as
used in popular Internet protocols and find it to be less secure
than widely believed. First, we present Logjam, a novel flaw
in TLS that lets a man-in-the-middle downgrade connections
to “export-grade” Diffie-Hellman. To carry out this attack,
we implement the number field sieve discrete log algorithm.
After a week-long precomputation for a specified 512-bit
group, we can compute arbitrary discrete logs in that group
in about a minute. We find that 82% of vulnerable servers use
a single 512-bit group, allowing us to compromise connections
to 7% of Alexa Top Million HTTPS sites. In response, major
browsers are being changed to reject short groups.

We go on to consider Diffie-Hellman with 768- and 1024-bit
groups. We estimate that even in the 1024-bit case, the computations
are plausible given nation-state resources. A small
number of fixed or standardized groups are used by millions
of servers; performing precomputation for a single 1024-bit
group would allow passive eavesdropping on 18% of popular
HTTPS sites, and a second group would allow decryption
of traffic to 66% of IPsec VPNs and 26% of SSH servers. A
close reading of published NSA leaks shows that the agency’s
attacks on VPNs are consistent with having achieved such
a break. We conclude that moving to stronger key exchange
methods should be a priority for the Internet community.

This raises a question: Are you sure that Bitcoin-related websites visited by you are not monitored by NSA? Or maybe you don't care?

Topic: Security holes can be in unexpected places - page 2. (Read 1849 times)