[liberationtech] Interesting Q&A

[Bernard Tyers - ei8fdb]

-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

On 17 Jun 2013, at 22:23, Richard Brooks wrote:

> From Guardian Q&A with Snowden
> 
> http://www.guardian.co.uk/world/2013/jun/17/edward-snowden-nsa-files-whistleblower
> 
> Is encrypting my email any good at defeating the NSA survelielance? Id
> my data protected by standard encryption?
> 
> Answer:
> 
>    Encryption works. Properly implemented strong crypto systems are one
> of the few things that you can rely on. Unfortunately, endpoint security
> is so terrifically weak that NSA can frequently find ways around it.

Encryption does work but it needs to be something that everyone can install configure and use.

I wonder what encryption software would look like if Apple made it as friendly as their products....


What was also interesting was the following:

Question: 1) Define in as much detail as you can what "direct access" means.
(Anthony De Rosa 17 June 2013 2:18pm)

Answer:

1) More detail on how direct NSA's accesses are is coming, but in general, the reality is this: if an NSA, FBI, CIA, DIA, etc analyst has access to query raw SIGINT databases, they can enter and get results for anything they want. Phone number, email, user id, cell phone handset id (IMEI), and so on - it's all the same. The restrictions against this are policy based, not technically based, and can change at any time. Additionally, audits are cursory, incomplete, and easily fooled by fake justifications. For at least GCHQ, the number of audited queries is only 5% of those performed.

Bernard
- ---------------------------
Bernard / bluboxthief / ei8fdb

IO91XM / www.ei8fdb.org

-----BEGIN PGP SIGNATURE-----
Version: GnuPG/MacGPG2 v2.0.17 (Darwin)
Comment: GPGTools - http://gpgtools.org

iQEcBAEBAgAGBQJRv4g6AAoJENsz1IO7MIrrOpoIALrbBA6OthlKhPs8sY/xk6JU
W8nTnPE6fLH0vCgTwsg/EnF71Ac5isJRfhOWozV82RtMvbZtbZtiSm2z8bqP+/1p
41Yxk5KaZ08vIFOdEsPZ5e4W2CzSePagicNKCmC8d2amFQ3wMzSEJSweqZ/WxMQu
raRSmtuI+U5sGYkiwwwmEEM7/OIn8/Ob6V6KuhmJMcxHe1KD3OLTDE0AASdIGDWr
/BKLDLgi3Tr8Bdb9BkyfiOTfHnAuskMqjK8yqid4dkUJ4MQnIk7sKgBBDgewd5Sz
Sh1BEtIB0R0DAlZyHFH0kn57t/2YWt/uQKF2sdvR1qusmnuO1mb592lCoBAk8+4=
=HRib
-----END PGP SIGNATURE-----