Advice
the Internet belongs us - Bruce Schneier: LINK ¤ the GUARDIAN
_________________________________________
- "the NSA - must not undermine the fundamental - social contract !"
_________________________________________
- "( multi-layered - platforms ! )"
_________________________________________
- "also not the companies - that build and manage - the Internet infrastructure !"
_________________________________________
- "create hardware - and software - or host the data !"
_________________________________________
- "that was not the Internet - its creators envisioned !"
_________________________________________
- "not the Internet - the world needs !"
_________________________________________
- "we need ethical - Internet stewards !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "that we can - trust !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "yes - this is primarily a - political challenge !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "a policy matter - that requires political intervention !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
- "but this is also an - engineering challenge !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "there are several things - engineers can - and should - do !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "one - engineers should - expose !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
- "to know how exactly - they handled - routers !"
_________________________________________
- "switches - the Internet backbone - encryption technologies - and cloud systems !"
_________________________________________
- "two - engineers can - design !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
- "we need to figure out - how to re-engineer - the Internet !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "to prevent - that kind of behaviour !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "we need new techniques - to prevent communications intermediaries - from leaking private information !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "we can make it - expensive - harder - for them !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "we need - open protocols !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "open implementations - and open systems !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
- "three - we can influence - governance !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "we need ethical stewards - of the Internet !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "we need to demand - transparency - oversight - and accountability !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "from our governments - and corporations !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "we need to create - truly international - governance !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
- "that cannot be influenced - by any one country !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "generations from now - when people look back !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "on these early decades - of the Internet !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "hopefully they will not be - disappointed in us !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "we can ensure that they do not - only if each of us - makes this a priority !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "and engages - in the debate !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "we have a moral duty - to do this - and we have no time to lose !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
a Guide to staying Secure - Bruce Schneier : LINK ¤ the GUARDIAN
_________________________________________
- "Bruce Schneier - is the engineer - who read for "the Guardian" !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "status report - after status report - about the NSA !"
_________________________________________
- "( programs - discussed capabilities - operational details - planned upgrades ! )"
_________________________________________
- "they showed - each individual problem !"
_________________________________________
- "( electronic signals from fiber - terabyte streams - filtered out the interesting stuff ! )"
_________________________________________
- "had its own group - dedicated to solving it !"
_________________________________________
- "and they had - limited resources - and money !"
_________________________________________
- "the primary way - on Internet communications - was in the network !"
_________________________________________
- "programs - automatically collected - and analyzed - network traffic !"
_________________________________________
- "anything on an individual - endpoint computer - was significantly more costly !"
_________________________________________
- "and risky for them - and they would do those things - carefully - and sparingly !"
- "in cases where they did not had a friendly access - they tried !"
_________________________________________
- "communications channels - undersea cables - satellite communications !"
_________________________________________
- "interesting traffic - could be defined in many ways - by the source !"
_________________________________________
- "the destination - the content - the individual involved !"
_________________________________________
- "data was funneled - into a system - for future analysis !"
- "with all this in mind - there are five pieces - of advice !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!":
- "hide - in the network !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "implement hidden services - use "Tor" - to anonymize yourself !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "it was work for them - the less obvious you are - the safer you are !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "encrypt - your communications !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "use "TLS" - use "IPsec" !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "you are much better protected - than if you communicate in the clear !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "assume that while a computer - could be compromised !"
_________________________________________
- "it would take work - and risk - on the part of them !"
_________________________________________
- "so it probably - is not !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "if you have something - really important - use an air gap !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "when he started working with the Snowden documents - he bought a new computer !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "that has never been connected - to the Internet !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "if he wants to transfer a file - he encrypts the file - on the secure computer !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "and walks it over - to his Internet computer - using a USB stick !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "be suspicious - of commercial encryption - software !"
_________________________________________
- "especially from - larger vendors ! - ( back door ! )"
_________________________________________
- "try to use - public-domain encryption !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "that has to be compatible - with other implementations !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "prefer symmetric cryptography - over public-key cryptography !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "prefer conventional - discrete-log-based systems !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "over elliptic-curve systems - with constants !"
- "since he started working - with Snowden's documents !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "he is using - "GPG" - "Silent Circle" !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- ""Tails" - "OTR" - "TrueCrypt" - "BleachBit" !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "trust the - math !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "encryption - is your friend !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "use it well - and do your best to ensure - that nothing can compromise it !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "that is - how you can remain - secure !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
______________________________________________________________________________
ADVICE - Wikipedia EN: LINK ¤ ADVICE
_________________________________________
- "an advice message - is a recommendation - about what might be done !!!!!!!!!!!!"
_________________________________________
- "to address a problem - make a decision - or manage a situation !!!!!!!!!!!!"
Verschlüsselung - Spiegel online: LINK ¤ SPIEGEL ONLINE
_________________________________________
- "Bruce Schneier - ein Kryptografie-Experte - der für den "Guardian" !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "die Snowden Dokumente - durchgegangen war !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "erteilt Ratschläge - für Verschlüsselungen !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "er hat sich eingehend - mit den Dokumenten befasst !"
_________________________________________
- "es waren zuerst allgemeine Strukturen - und Programme !"
_________________________________________
- "ein einzelner Computer - wäre für diese aufwendig - und riskant !"
_________________________________________
- "daher rät er dazu - die eigene Kommunikation zu tarnen !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "Nutzer sollten über das sogenannte - Tor-Netzwerk - anonym surfen !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "und ihre Kommunikation - so gut wie möglich - verschlüsseln !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "auch um es für diese so aufwendig - und teuer - wie möglich zu machen !"
_________________________________________
- "vertrauen Sie der - Mathematik !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "Verschlüsselung - ist Ihr Freund !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
- "allerdings sollte man bei - kommerzieller Software !"
_________________________________________
- "von größeren Firmen - vorsichtig sein ! - ( Hintertür ! )"
_________________________________________
- "Dokumente der NSA beschrieben - Strukturen - und Plattformen !"
_________________________________________
- "für das Internet - aber deren Aktivitäten - unterliegen wirtschaftlichen Grenzen !"
_________________________________________
- "bei jedem einzelnen Problem - das aufgetaucht war !"
_________________________________________
- "bildeten diese - eine eigene spezielle - Arbeitsgruppe !"
_________________________________________
- "und diese hatten - limitierte Möglichkeiten - und Geld !"
_________________________________________
- "unsere beste Verteidigung - ist es !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "es diesen so schwer - wie möglich zu machen !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
- "Mathematiker und Kryptograf Rüdiger Weis - empfiehlt !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "man sollte immer die aufwendigste - Verschlüsselungsmöglichkeit - wählen !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "den längsten Schlüssel - die stärkste Absicherung !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "denn - gute Kryptografie - hält !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "er ist ein großer Anhänger - von Open-Source-Produkten !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "auch das Verschlüsseln von E-Mails - mit der PGP-Technik - ist ratsam !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
_________________________________________
- "es ist davon auszugehen - dass es hinreichend sicher ist !!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!!"
RATSCHLAG - Wikipedia DE: LINK ¤ RATSCHLAG
_________________________________________
- "ein Ratschlag gibt Hinweise - auf mögliche Lösungen !!!!!!!!!!!!"