Forumi


Povratak   PC Ekspert Forum > Internet i mrežne tehnologije > Streaming/online servisi, linkovi i ostale zanimljivosti
Ime
Lozinka

Odgovori
 
Uređivanje
Staro 24.06.2024., 19:39   #181
lowrider
Premium
Moj komp
 
lowrider's Avatar
 
Datum registracije: May 2008
Lokacija: KR
Postovi: 1,152
Citiraj:
Autor mkey Pregled postova
Dokumenti i privatnost ne idu u isti koš. Dokumente i brojeve nisi stekao ni na koji način, nego su ti dodijeljeni, još si za njih platio i maltretirat će te ako ih nemaš. Naravno, to je bitna stavka za eventualnu krađu (digitalnog) identiteta i na kraju je samo pitanje povjerenja prema datoj "instituciji".
A to nije gore od čitanja mojih poruka na vacapu?

Ok, referirao sam se na nekakvo davanje osobnih podataka trećim stranama, koje nisi dužan/trebao dati.

Eh, da, nema borbe sa sustavom, ili se praviš pametan ili pustiš blesaF
__________________
Lowrider
lowrider je offline   Reply With Quote
Staro 25.06.2024., 21:35   #182
kasko
Premium
Moj komp
 
kasko's Avatar
 
Datum registracije: Apr 2007
Lokacija: Ivanić_Grad
Postovi: 2,000
Citiraj:
Autor Neo-ST Pregled postova
Anonimnost ≠ privatnost
osobno ≠ privatno

Sent from my 23078PND5G using Tapatalk
kasko je offline   Reply With Quote
Staro 25.06.2024., 21:57   #183
mkey
Premium
Moj komp
 
Datum registracije: Sep 2018
Lokacija: tu
Postovi: 3,284
Citiraj:
Autor lowrider Pregled postova
A to nije gore od čitanja mojih poruka na vacapu?

Ok, referirao sam se na nekakvo davanje osobnih podataka trećim stranama, koje nisi dužan/trebao dati.

Eh, da, nema borbe sa sustavom, ili se praviš pametan ili pustiš blesaF
Ne pravim se niti pametan niti blesav nego ti miješaš kruške i jabuke. Ako je tebi svejedno čega se odričeš, meni to ne predstavlja nikakav problem. Samo daj gas.
__________________
Citiraj:
Autor George Carlin
But there’s a reason. There’s a reason. There’s a reason for this, there’s a reason education sucks, and it’s the same reason that it will never, ever, ever be fixed. It’s never gonna get any better. Don’t look for it. Be happy with what you got. Because the owners of this country don't want that. I'm talking about the real owners now, the real owners, the big wealthy business interests that control things and make all the important decisions. Forget the politicians. The politicians are put there to give you the idea that you have freedom of choice. You don't. You have no choice. You have owners. They own you. They own everything. They own all the important land. They own and control the corporations. They’ve long since bought and paid for the senate, the congress, the state houses, the city halls, they got the judges in their back pockets and they own all the big media companies so they control just about all of the news and information you get to hear. They got you by the balls. They spend billions of dollars every year lobbying, lobbying, to get what they want. Well, we know what they want. They want more for themselves and less for everybody else, but I'll tell you what they don’t want: They don’t want a population of citizens capable of critical thinking. They don’t want well informed, well educated people capable of critical thinking. They’re not interested in that. That doesn’t help them. Thats against their interests. Thats right. They don’t want people who are smart enough to sit around a kitchen table to figure out how badly they’re getting f*cked by a system that threw them overboard 30 f*cking years ago. They don’t want that. You know what they want? They want obedient workers. Obedient workers. People who are just smart enough to run the machines and do the paperwork, and just dumb enough to passively accept all these increasingly shittier jobs with the lower pay, the longer hours, the reduced benefits, the end of overtime and the vanishing pension that disappears the minute you go to collect it, and now they’re coming for your Social Security money. They want your retirement money. They want it back so they can give it to their criminal friends on Wall Street, and you know something? They’ll get it. They’ll get it all from you, sooner or later, 'cause they own this f*cking place. It's a big club, and you ain’t in it. You and I are not in the big club. And by the way, it's the same big club they use to beat you over the head with all day long when they tell you what to believe. All day long beating you over the head in their media telling you what to believe, what to think and what to buy. The table is tilted folks. The game is rigged, and nobody seems to notice, nobody seems to care. Good honest hard-working people -- white collar, blue collar, it doesn’t matter what color shirt you have on -- good honest hard-working people continue -- these are people of modest means -- continue to elect these rich c*cksuckers who don’t give a f*ck about them. They don’t give a f*ck about you. They don’t give a f*ck about you. They don't care about you at all -- at all -- at all. And nobody seems to notice, nobody seems to care. That's what the owners count on; the fact that Americans will probably remain willfully ignorant of the big red, white and blue dick that's being jammed up their assholes everyday. Because the owners of this country know the truth: it's called the American Dream, because you have to be asleep to believe it.
mkey je offline   Reply With Quote
Staro 25.06.2024., 22:09   #184
rendula
Registered User
 
Datum registracije: Oct 2003
Lokacija: Zagreb, Trešnjevka
Postovi: 5,766
Citiraj:
Autor rendula Pregled postova
Zasto je bitno, sto nisu i jedan i drugi e2e enkriptirani? I whatsapp dapace podrzava isti protokol, mogli bi biti i interoperabilni da se signal odluci. Koga briga jel fotka ide preko wahatsappa ili signala?
Mi moze netko pliz odgovoriti, ozbiljno? Koja je razlika dal saljem slike ili pisem preko signala ili whatsappa? Kolko znam ni jedno ni drugo ne bude nitko izmedju citao.
rendula je offline   Reply With Quote
Staro 25.06.2024., 22:24   #185
The Exiled
McG
Moj komp
 
The Exiled's Avatar
 
Datum registracije: Feb 2014
Lokacija: Varaždin
Postovi: 8,053

Citiraj:
The Belgian presidency postponed a decision on the legislation, which proposed scanning encrypted messages for CSAM. Signal Protocol does not prevent a company from retaining information about when and with whom users communicate. There can therefore be differences in how messaging service providers choose to handle this information. WhatsApp can store encrypted copies of the chat messages onto the SD card, but chat messages are also stored unencrypted in the SQLite database file "msgstore.db"
__________________
AMD Ryzen 9 9950X | Noctua NH-U12A chromax.black | MSI MAG B650 Tomahawk Wi-Fi | 128GB Kingston FURY Beast DDR5-5200 | 256GB AData SX8200 Pro NVMe | 2x4TB WD Red Plus | Fractal Define 7 Compact | Seasonic GX-750
AMD Ryzen 5 7600 | Noctua NH-U12A chromax.black | MSI MAG B650 Tomahawk Wi-Fi | 128GB Kingston FURY Beast DDR5-5200 | 256GB AData SX8200 Pro NVMe | 2x12TB WD Red Plus | Fractal Define 7 Compact | eVGA 650 B5
The Exiled je online   Reply With Quote
Staro 25.06.2024., 22:26   #186
mkey
Premium
Moj komp
 
Datum registracije: Sep 2018
Lokacija: tu
Postovi: 3,284
Citiraj:
Autor rendula Pregled postova
Mi moze netko pliz odgovoriti, ozbiljno? Koja je razlika dal saljem slike ili pisem preko signala ili whatsappa? Kolko znam ni jedno ni drugo ne bude nitko izmedju citao.
Pa poanta bi bila u "master key" za otkuljučavanje komunikacije. Ali budu isto nametnuli i signalu kako su krenuli. Nije problem u samoj tehonologiji, nego u tome što 99.9% sveusrdno vjeruje da te neke budalaštine koje imbecilii u partiji škrabaju po papiru imaju težinu u stvarnosti. Bez da ikada i pročitaju naškrabano.
__________________
Citiraj:
Autor George Carlin
But there’s a reason. There’s a reason. There’s a reason for this, there’s a reason education sucks, and it’s the same reason that it will never, ever, ever be fixed. It’s never gonna get any better. Don’t look for it. Be happy with what you got. Because the owners of this country don't want that. I'm talking about the real owners now, the real owners, the big wealthy business interests that control things and make all the important decisions. Forget the politicians. The politicians are put there to give you the idea that you have freedom of choice. You don't. You have no choice. You have owners. They own you. They own everything. They own all the important land. They own and control the corporations. They’ve long since bought and paid for the senate, the congress, the state houses, the city halls, they got the judges in their back pockets and they own all the big media companies so they control just about all of the news and information you get to hear. They got you by the balls. They spend billions of dollars every year lobbying, lobbying, to get what they want. Well, we know what they want. They want more for themselves and less for everybody else, but I'll tell you what they don’t want: They don’t want a population of citizens capable of critical thinking. They don’t want well informed, well educated people capable of critical thinking. They’re not interested in that. That doesn’t help them. Thats against their interests. Thats right. They don’t want people who are smart enough to sit around a kitchen table to figure out how badly they’re getting f*cked by a system that threw them overboard 30 f*cking years ago. They don’t want that. You know what they want? They want obedient workers. Obedient workers. People who are just smart enough to run the machines and do the paperwork, and just dumb enough to passively accept all these increasingly shittier jobs with the lower pay, the longer hours, the reduced benefits, the end of overtime and the vanishing pension that disappears the minute you go to collect it, and now they’re coming for your Social Security money. They want your retirement money. They want it back so they can give it to their criminal friends on Wall Street, and you know something? They’ll get it. They’ll get it all from you, sooner or later, 'cause they own this f*cking place. It's a big club, and you ain’t in it. You and I are not in the big club. And by the way, it's the same big club they use to beat you over the head with all day long when they tell you what to believe. All day long beating you over the head in their media telling you what to believe, what to think and what to buy. The table is tilted folks. The game is rigged, and nobody seems to notice, nobody seems to care. Good honest hard-working people -- white collar, blue collar, it doesn’t matter what color shirt you have on -- good honest hard-working people continue -- these are people of modest means -- continue to elect these rich c*cksuckers who don’t give a f*ck about them. They don’t give a f*ck about you. They don’t give a f*ck about you. They don't care about you at all -- at all -- at all. And nobody seems to notice, nobody seems to care. That's what the owners count on; the fact that Americans will probably remain willfully ignorant of the big red, white and blue dick that's being jammed up their assholes everyday. Because the owners of this country know the truth: it's called the American Dream, because you have to be asleep to believe it.
mkey je offline   Reply With Quote
Staro 25.06.2024., 22:41   #187
rendula
Registered User
 
Datum registracije: Oct 2003
Lokacija: Zagreb, Trešnjevka
Postovi: 5,766
Citiraj:
Autor mkey Pregled postova
Pa poanta bi bila u "master key" za otkuljučavanje komunikacije. Ali budu isto nametnuli i signalu kako su krenuli. Nije problem u samoj tehonologiji, nego u tome što 99.9% sveusrdno vjeruje da te neke budalaštine koje imbecilii u partiji škrabaju po papiru imaju težinu u stvarnosti. Bez da ikada i pročitaju naškrabano.
Ne znam dal netko ozbiljno misli da ce se nesto aplicirati samo na whatsapp, a ne na signal i sve ostale aplikacije, naravno da ce navesti whatsapp jer ljudi to koriste.
Uglavnom, pokusavam skuziti zasto ljudi opsjednuti prisluskivanjem misle da su sigurniji na signalu, i da nam na whatsappu Bubba cita poruke uz flasu malvazije.
rendula je offline   Reply With Quote
Staro 25.06.2024., 23:32   #188
Bubba
E Pluribus UNIX
Moj komp
 
Bubba's Avatar
 
Datum registracije: Oct 2002
Lokacija: M82
Postovi: 6,727
Citiraj:
Autor rendula Pregled postova
i da nam na whatsappu Bubba cita poruke uz flasu malvazije.
Ne mogu ovo niti potvrditi niti opovrgnuti, blagodarim.
__________________
https://2.71828182845904523536028747...966967627.com/

Programer
Rok od dva mjeseca u stvari znači četiri, ali nikako ispod šest.
Bubba je offline   Reply With Quote
Staro 25.06.2024., 23:56   #189
De5tr0yer
Avocado
Moj komp
 
De5tr0yer's Avatar
 
Datum registracije: Aug 2005
Lokacija: Zagreb
Postovi: 7,850
Rješenje problema je već bilo navedeno i nadasve se slažem da je implementacija trivijalna.

Jednostavna chat aplikacija s enkripcijom van standarda po volji, testiram na svoja dva pametna telefona, stvar fercera.

Ono što nikako nije trivijalno jesu retorička pitanja poput:
Tko će meni vjerovati da ću poštovati privatnost?
Aplikacija bude pravo dobra, skupi se kritična masa korisnika. Hoće li fokus interesnih grupa, tzv. boraca za pravo na privatnost, prijeći na mene, prisiljavajući ekspoziciju podataka?
Prihvaćam li prisilu ili gasim servis?
Gubim li svoje životno vrijeme loveći Godota?
Je li Godot u cijeloj toj priči EU koja nam je direktivama obećala, kao što to političari uobičajeno čine prije izbora?

__________________
Spoiler alert!
De5tr0yer je offline   Reply With Quote
Staro 26.06.2024., 08:24   #190
Night
Premium
 
Datum registracije: Oct 2008
Lokacija: Dbk
Postovi: 1,236
Citiraj:
Autor rendula Pregled postova
Mi moze netko pliz odgovoriti, ozbiljno? Koja je razlika dal saljem slike ili pisem preko signala ili whatsappa? Kolko znam ni jedno ni drugo ne bude nitko izmedju citao.

Signal je open-source projekt gdje ljudi koji se malo bolje razumiju u implementacije sigurne e2e komunikacije mogu pogledati programski kod i vidjeti je li sve napravljeno po pravilima struke.
Whatsapp je Facebookova aplikacija zatvorenog koda gdje ako se dogodi da se sazna da se private key dijeli sa Metom ćemo imati Marka kako po 985-i put kaže "we're sorry" i idemo dalje. Zato preferiram Signal. Iako moguće je da i Whatsapp ima pravilno implementiranu e2e enkripciju.


Citiraj:
Autor De5tr0yer Pregled postova
Ono što nikako nije trivijalno jesu retorička pitanja poput:
Tko će meni vjerovati da ću poštovati privatnost?
Aplikacija bude pravo dobra, skupi se kritična masa korisnika. Hoće li fokus interesnih grupa, tzv. boraca za pravo na privatnost, prijeći na mene, prisiljavajući ekspoziciju podataka?
Prihvaćam li prisilu ili gasim servis?
Gubim li svoje životno vrijeme loveći Godota?
Je li Godot u cijeloj toj priči EU koja nam je direktivama obećala, kao što to političari uobičajeno čine prije izbora?


Yup, to je problem. Uzmimo najjednostavniji primjer, dopisivanje e-mailom preko PGP enkripcije korištenjem privatnog i javnog ključa. To je lagano za implementirati, a ključ nije lagano (vjerojatno i nemoguće) za probiti. Ali ti napraviš aplikaciju po svim pravilima enkripcije, ta se aplikacija opet vrti na Androidu koji ako Google tako hoće može jednostavno tvoj privatni ključ sa mobitela dostaviti nekoj trećoj strani. Sve sa tvoje strane napravljeno kako treba, enkripcija trivijalno razbijena. Zato se custom implementacija Androida ne može smatrati sigurnom jer ne možeš znati kakve sve backdoorove ima i kako ti može degradirati enkripciju. Jednostavno prosječan mobitel nije uređaj visoke sigurnosti i to je to. Sve što developer napravi po svim pravilima opet može Google zaobići svojim backdoorima. Isto vrijedi i za Windowse, posebno od desetke nadalje.


Naravno da je moguće i da ti neka zainteresirana strana priđe i iznudi backdoor u tvom softveru (znamo što se Yahoo-u dogodilo kad su to odbili), ali to donekle umanjuje korištenje open-source softvera koji je prošao brojne provjere.
Night je offline   Reply With Quote
Staro 26.06.2024., 10:36   #191
vex
Premium
Moj komp
 
vex's Avatar
 
Datum registracije: Aug 2003
Lokacija: sl. brod
Postovi: 1,313
A ako instaliraš Signal app na laptop sa linuxom ?? Ima li onda sigurnosti ?
vex je online   Reply With Quote
Staro 26.06.2024., 10:38   #192
medo
#erase startup-config
Moj komp
 
medo's Avatar
 
Datum registracije: Nov 2001
Lokacija: Zagreb
Postovi: 3,622
EU želi imati pristup vašem Whatsappu

Citiraj:
Autor rendula Pregled postova
Zasto je bitno, sto nisu i jedan i drugi e2e enkriptirani? I whatsapp dapace podrzava isti protokol, mogli bi biti i interoperabilni da se signal odluci. Koga briga jel fotka ide preko wahatsappa ili signala?

Očito brine tvrtke koje se bave securityjem čak i u ‘rvackoj. Oni komuniciraju preko Signala. I poruke i voice.

A zašto je Slatkaplanina iskrcao 19 milijardi $USD za vacap prije 10 godina kada je generirao samo gubitke u stotinama milijuna $USD godišnje? App je još uvijek ad-free, a koristimo ga besplatno. Gdje je tu povrat te kolosalne investicije?
__________________
"It's not a bug, it's a feature!"
1N6pJsvusP7afu23qs1uBscK16wfcG7C8m
medo je offline   Reply With Quote
Staro 26.06.2024., 10:51   #193
Colop
Premium
 
Datum registracije: Sep 2011
Lokacija: Split
Postovi: 1,105
Citiraj:
Autor De5tr0yer Pregled postova
Rješenje problema je već bilo navedeno i nadasve se slažem da je implementacija trivijalna.

Jednostavna chat aplikacija s enkripcijom van standarda po volji, testiram na svoja dva pametna telefona, stvar fercera.

Tjah, ako je tako jednostavno složiti nešto tako sigurno, uboli ste zlatni rudnik, i možete zaraditi milijune.




Citiraj:
Autor De5tr0yer Pregled postova
Ono što nikako nije trivijalno jesu retorička pitanja poput:
Tko će meni vjerovati da ću poštovati privatnost?
Aplikacija bude pravo dobra, skupi se kritična masa korisnika. Hoće li fokus interesnih grupa, tzv. boraca za pravo na privatnost, prijeći na mene, prisiljavajući ekspoziciju podataka?
Prihvaćam li prisilu ili gasim servis?
Gubim li svoje životno vrijeme loveći Godota?
Je li Godot u cijeloj toj priči EU koja nam je direktivama obećala, kao što to političari uobičajeno čine prije izbora?


Serveri (ako išta prolazi preko njih) ne smiju biti u nekoj civiliziranoj zemlji, nego idealno negdje ala Djevičanski otoci, ili neke zemlje gdje mozes novcem kupiti zaštitu od ovih drugih.
U tvom hipotetskom scenariju, fokus sigurno prelazi na tebe i prije ili poslje tražit će se otkrivanje podataka.


Citiraj:
Autor medo Pregled postova
A zašto je Slatkaplanina iskrcao 19 milijardi $USD za vacap prije 10 godina kada je generirao samo gubitke u stotinama milijuna $USD godišnje? App je još uvijek ad-free, a koristimo ga besplatno. Gdje je tu povrat te kolosalne investicije?

Data?
Colop je offline   Reply With Quote
Staro 26.06.2024., 11:10   #194
lowrider
Premium
Moj komp
 
lowrider's Avatar
 
Datum registracije: May 2008
Lokacija: KR
Postovi: 1,152
Citiraj:
Autor mkey Pregled postova
Ne pravim se niti pametan niti blesav nego ti miješaš kruške i jabuke. Ako je tebi svejedno čega se odričeš, meni to ne predstavlja nikakav problem. Samo daj gas.

Ako imaš osjetljive informacije za podijeliti, još uvijek možeš to osobno uživo odraditi, vjerovao ili ne.


Ja se nemam čega odreći, jer ne dijelim ništa osobno ni tajno
__________________
Lowrider
lowrider je offline   Reply With Quote
Staro 26.06.2024., 13:20   #195
Night
Premium
 
Datum registracije: Oct 2008
Lokacija: Dbk
Postovi: 1,236
Citiraj:
Autor Colop Pregled postova
Serveri (ako išta prolazi preko njih) ne smiju biti u nekoj civiliziranoj zemlji, nego idealno negdje ala Djevičanski otoci, ili neke zemlje gdje mozes novcem kupiti zaštitu od ovih drugih.
U tvom hipotetskom scenariju, fokus sigurno prelazi na tebe i prije ili poslje tražit će se otkrivanje podataka.

Ali upravo smisao end-2-end enkripcije je da te nije briga za infrastrukturu između dvije strane koje komuniciraju, može biti ne znam kako kompromitirani server, on nema načina da vidi promet budući da se ključevi za enkripciju i dekripciju nalaze kod tebe i strane s kojom komuniciraš. Server može vidjeti samo da nešto enkriptirano kroz njega prolazi, ali ne i što prolazi.
Isto kao VPN, ako ga pravilno složiš tvoja dva ureda mogu komunicirati kroz bilo kakav komunikacijski kanal od bilo kojeg operatera, nije uopće bitno, bitno je samo da se ključevi nalaze isključivo u ta dva ureda.
Night je offline   Reply With Quote
Staro 26.06.2024., 14:10   #196
Colop
Premium
 
Datum registracije: Sep 2011
Lokacija: Split
Postovi: 1,105
Citiraj:
Autor Night Pregled postova
Ali upravo smisao end-2-end enkripcije je da te nije briga za infrastrukturu između dvije strane koje komuniciraju, može biti ne znam kako kompromitirani server, on nema načina da vidi promet budući da se ključevi za enkripciju i dekripciju nalaze kod tebe i strane s kojom komuniciraš. Server može vidjeti samo da nešto enkriptirano kroz njega prolazi, ali ne i što prolazi.
Isto kao VPN, ako ga pravilno složiš tvoja dva ureda mogu komunicirati kroz bilo kakav komunikacijski kanal od bilo kojeg operatera, nije uopće bitno, bitno je samo da se ključevi nalaze isključivo u ta dva ureda.

Hvala na pojašenjenju.

Znači po tome ispada da recimo SKYeec nije koristio end to end enkripciju, jer bi u tom slučaju vlasti kada su zapljenile servere vidjele ništa, a ne milijardu i pol poruka
Colop je offline   Reply With Quote
Staro 26.06.2024., 14:23   #197
Night
Premium
 
Datum registracije: Oct 2008
Lokacija: Dbk
Postovi: 1,236
Citiraj:
Autor Colop Pregled postova
Hvala na pojašenjenju.

Znači po tome ispada da recimo SKYeec nije koristio end to end enkripciju, jer bi u tom slučaju vlasti kada su zapljenile servere vidjele ništa, a ne milijardu i pol poruka

Ma ti appovi napravljeni specifično "za krimose" su ionako uglavnom policijski honeypotovi.
Night je offline   Reply With Quote
Staro 26.06.2024., 14:27   #198
Colop
Premium
 
Datum registracije: Sep 2011
Lokacija: Split
Postovi: 1,105
Citiraj:
Autor Night Pregled postova
Ma ti appovi napravljeni specifično "za krimose" su ionako uglavnom policijski honeypotovi.

Jasno
A nije pomoglo ni što dotični jako vole piskarati, bez brisanja poruka.
Colop je offline   Reply With Quote
Staro 26.06.2024., 15:31   #199
Bubba
E Pluribus UNIX
Moj komp
 
Bubba's Avatar
 
Datum registracije: Oct 2002
Lokacija: M82
Postovi: 6,727
Citiraj:
Autor Night Pregled postova
Signal je open-source projekt gdje ljudi koji se malo bolje razumiju u implementacije sigurne e2e komunikacije mogu pogledati programski kod i vidjeti je li sve napravljeno po pravilima struke.
Sto je jako simpaticno, ali i dalje vjerojatno koristis taj isti Signal na njihovoj infrastrukturi, a nesto se sve bojim kako su dali uvid u svoju infrastrukturu za napraviti neovisni security audit.

I ponovno si na prvom koraku.

Citiraj:
Autor medo Pregled postova
Očito brine tvrtke koje se bave securityjem čak i u ‘rvackoj. Oni komuniciraju preko Signala. I poruke i voice.
U drugim vijestima, bilijuni muha jedu govna. Pa sad...

Citiraj:
A zašto je Slatkaplanina iskrcao 19 milijardi $USD za vacap prije 10 godina kada je generirao samo gubitke u stotinama milijuna $USD godišnje? App je još uvijek ad-free, a koristimo ga besplatno. Gdje je tu povrat te kolosalne investicije?
Postovanje takvih drustava nekada, na njihovu zalost, ne ovisi o jednostavnom odnosu prihoda i rashoda. Mislis li da Meta ne bi bila sretna da sutra napravi rm -rf na Facebooku, Instagramu i WhatsAppu?
__________________
https://2.71828182845904523536028747...966967627.com/

Programer
Rok od dva mjeseca u stvari znači četiri, ali nikako ispod šest.
Bubba je offline   Reply With Quote
Staro 26.06.2024., 16:00   #200
Night
Premium
 
Datum registracije: Oct 2008
Lokacija: Dbk
Postovi: 1,236
Citiraj:
Autor Bubba Pregled postova
Sto je jako simpaticno, ali i dalje vjerojatno koristis taj isti Signal na njihovoj infrastrukturi, a nesto se sve bojim kako su dali uvid u svoju infrastrukturu za napraviti neovisni security audit.

I ponovno si na prvom koraku.

Pa ne moraš ni napraviti audit svih ISPova da bi utvrdio da je OpenVPN ili Wireguard sigurnosno ispravan. Infrastruktura nema veze ako poruka na nju dolazi u već enkriptiranom obliku. Auditom programskog koda možeš vidjeti je li poruka pravilno enkriptirana kad napušta uređaj i dolazi u komunikacijski kanal. Da ponovim po neki put, cijeli smisao e2e enkripcije je da može koristiti nesigurnu infrastrukturu za prijenos sigurnih poruka.

Kao što rekoh veći je problem underlying Android koji može vidjeti enkripcijske ključeve.
Night je offline   Reply With Quote
Staro 26.06.2024., 18:02   #201
medo
#erase startup-config
Moj komp
 
medo's Avatar
 
Datum registracije: Nov 2001
Lokacija: Zagreb
Postovi: 3,622
EU želi imati pristup vašem Whatsappu

Do not feed the trolls.

BTW: ovisi gdje se ključevi nalaze i gdje se radi enkripcija i dekripcija. Ako se i jedno i drugo radi u nekoj sigurnosnoj enklavi/procesoru onda jako teško ako ne i nemoguće.

U pravilu ako ti netko owna mobitel ili računalo izvući će poruke odnosno ako u appu i/ili OSu postoji backdoor.

Citiraj:
Autor Night Pregled postova
Ma ti appovi napravljeni specifično "za krimose" su ionako uglavnom policijski honeypotovi.

Kao i Tor

Pri tome ne mislim na forumskog kolegu
__________________
"It's not a bug, it's a feature!"
1N6pJsvusP7afu23qs1uBscK16wfcG7C8m

Zadnje izmijenjeno od: medo. 26.06.2024. u 18:10.
medo je offline   Reply With Quote
Staro 26.06.2024., 19:02   #202
kopija
DIY DILETANT
 
kopija's Avatar
 
Datum registracije: Jan 2009
Lokacija: Čistilište
Postovi: 3,455
Pa neznam baš da bi se Tor moglo nazvati honeypot-om.
Šerif se u svim dosadašnjim slučajevima morao svojski pomučiti da pohapsi crne ovce iz mračnih zakutaka toga tora.
Većinu je do sada pohvatao ne zbog manjkavosti Tor-a nego zbog manjkavosti samih ovaca.
Ako i imaju backdoor za Tor, ne dijele ga s murjačkom/fbi/interpolskom stokom sitnog zuba, nego ga u nekom NSA sefu čuvaju za neku uber-ovcu.
IMHO
kopija je offline   Reply With Quote
Staro 26.06.2024., 19:52   #203
medo
#erase startup-config
Moj komp
 
medo's Avatar
 
Datum registracije: Nov 2001
Lokacija: Zagreb
Postovi: 3,622
Nije lako ali ako isti entitet ima exit node i jedan od relaya preko kojih komuniciraš onda te se može naći.

Relay i exit node može dići svatko. A tko ima dovoljno resursa da ih besplatno diže samo za nas?
__________________
"It's not a bug, it's a feature!"
1N6pJsvusP7afu23qs1uBscK16wfcG7C8m
medo je offline   Reply With Quote
Staro 26.06.2024., 19:54   #204
mkey
Premium
Moj komp
 
Datum registracije: Sep 2018
Lokacija: tu
Postovi: 3,284
Citiraj:
Autor lowrider Pregled postova
Ako imaš osjetljive informacije za podijeliti, još uvijek možeš to osobno uživo odraditi, vjerovao ili ne.
Vjerovao ili ne, kada zađe sunce na zapadu, dođe noć.


Što se tiče teme nesigurne infrastrukture, teoretski bi netko moga gomilati enkriptirani sadržaja i čekati povoljan trenutak za dektriptiranje sadžaja. Bilo putem exploita ili "kvantnog računala" koje bi teoretski bilo kraj enkripcije kakva je poznata. Pretpostavljam da to nije pretjerano vjerojatno, ali mogućnost veseli represivne birokrate
__________________
Citiraj:
Autor George Carlin
But there’s a reason. There’s a reason. There’s a reason for this, there’s a reason education sucks, and it’s the same reason that it will never, ever, ever be fixed. It’s never gonna get any better. Don’t look for it. Be happy with what you got. Because the owners of this country don't want that. I'm talking about the real owners now, the real owners, the big wealthy business interests that control things and make all the important decisions. Forget the politicians. The politicians are put there to give you the idea that you have freedom of choice. You don't. You have no choice. You have owners. They own you. They own everything. They own all the important land. They own and control the corporations. They’ve long since bought and paid for the senate, the congress, the state houses, the city halls, they got the judges in their back pockets and they own all the big media companies so they control just about all of the news and information you get to hear. They got you by the balls. They spend billions of dollars every year lobbying, lobbying, to get what they want. Well, we know what they want. They want more for themselves and less for everybody else, but I'll tell you what they don’t want: They don’t want a population of citizens capable of critical thinking. They don’t want well informed, well educated people capable of critical thinking. They’re not interested in that. That doesn’t help them. Thats against their interests. Thats right. They don’t want people who are smart enough to sit around a kitchen table to figure out how badly they’re getting f*cked by a system that threw them overboard 30 f*cking years ago. They don’t want that. You know what they want? They want obedient workers. Obedient workers. People who are just smart enough to run the machines and do the paperwork, and just dumb enough to passively accept all these increasingly shittier jobs with the lower pay, the longer hours, the reduced benefits, the end of overtime and the vanishing pension that disappears the minute you go to collect it, and now they’re coming for your Social Security money. They want your retirement money. They want it back so they can give it to their criminal friends on Wall Street, and you know something? They’ll get it. They’ll get it all from you, sooner or later, 'cause they own this f*cking place. It's a big club, and you ain’t in it. You and I are not in the big club. And by the way, it's the same big club they use to beat you over the head with all day long when they tell you what to believe. All day long beating you over the head in their media telling you what to believe, what to think and what to buy. The table is tilted folks. The game is rigged, and nobody seems to notice, nobody seems to care. Good honest hard-working people -- white collar, blue collar, it doesn’t matter what color shirt you have on -- good honest hard-working people continue -- these are people of modest means -- continue to elect these rich c*cksuckers who don’t give a f*ck about them. They don’t give a f*ck about you. They don’t give a f*ck about you. They don't care about you at all -- at all -- at all. And nobody seems to notice, nobody seems to care. That's what the owners count on; the fact that Americans will probably remain willfully ignorant of the big red, white and blue dick that's being jammed up their assholes everyday. Because the owners of this country know the truth: it's called the American Dream, because you have to be asleep to believe it.

Zadnje izmijenjeno od: mkey. 26.06.2024. u 20:04.
mkey je offline   Reply With Quote
Staro 27.06.2024., 01:28   #205
De5tr0yer
Avocado
Moj komp
 
De5tr0yer's Avatar
 
Datum registracije: Aug 2005
Lokacija: Zagreb
Postovi: 7,850
Citiraj:
Autor Colop Pregled postova
Serveri
Kakvi serveri?
__________________
Spoiler alert!
De5tr0yer je offline   Reply With Quote
Staro 27.06.2024., 11:42   #206
Night
Premium
 
Datum registracije: Oct 2008
Lokacija: Dbk
Postovi: 1,236
Citiraj:
Autor mkey Pregled postova
Što se tiče teme nesigurne infrastrukture, teoretski bi netko moga gomilati enkriptirani sadržaja i čekati povoljan trenutak za dektriptiranje sadžaja. Bilo putem exploita ili "kvantnog računala" koje bi teoretski bilo kraj enkripcije kakva je poznata. Pretpostavljam da to nije pretjerano vjerojatno, ali mogućnost veseli represivne birokrate

Može se i tome doskočiti
https://en.wikipedia.org/wiki/Forward_secrecy


Ali svejedno srećom većini tajnih podataka s vremenom opada vrijednost pa ako netko danas krekira informacije o tome tko je ubio JFKa vjerojatno ne bi nikoga bilo previše ni briga.
Night je offline   Reply With Quote
Staro 27.06.2024., 19:23   #207
mkey
Premium
Moj komp
 
Datum registracije: Sep 2018
Lokacija: tu
Postovi: 3,284
Oh, baš si ubo kao prstom u pekmez. Mislim da bi to ipak bilo ljudima dosta zanimljivo. Iako nema se tu šta krekirat, informacije su u vjetru.

Ali kriptografija je baš prokletno zanimljiva, šta je je.
__________________
Citiraj:
Autor George Carlin
But there’s a reason. There’s a reason. There’s a reason for this, there’s a reason education sucks, and it’s the same reason that it will never, ever, ever be fixed. It’s never gonna get any better. Don’t look for it. Be happy with what you got. Because the owners of this country don't want that. I'm talking about the real owners now, the real owners, the big wealthy business interests that control things and make all the important decisions. Forget the politicians. The politicians are put there to give you the idea that you have freedom of choice. You don't. You have no choice. You have owners. They own you. They own everything. They own all the important land. They own and control the corporations. They’ve long since bought and paid for the senate, the congress, the state houses, the city halls, they got the judges in their back pockets and they own all the big media companies so they control just about all of the news and information you get to hear. They got you by the balls. They spend billions of dollars every year lobbying, lobbying, to get what they want. Well, we know what they want. They want more for themselves and less for everybody else, but I'll tell you what they don’t want: They don’t want a population of citizens capable of critical thinking. They don’t want well informed, well educated people capable of critical thinking. They’re not interested in that. That doesn’t help them. Thats against their interests. Thats right. They don’t want people who are smart enough to sit around a kitchen table to figure out how badly they’re getting f*cked by a system that threw them overboard 30 f*cking years ago. They don’t want that. You know what they want? They want obedient workers. Obedient workers. People who are just smart enough to run the machines and do the paperwork, and just dumb enough to passively accept all these increasingly shittier jobs with the lower pay, the longer hours, the reduced benefits, the end of overtime and the vanishing pension that disappears the minute you go to collect it, and now they’re coming for your Social Security money. They want your retirement money. They want it back so they can give it to their criminal friends on Wall Street, and you know something? They’ll get it. They’ll get it all from you, sooner or later, 'cause they own this f*cking place. It's a big club, and you ain’t in it. You and I are not in the big club. And by the way, it's the same big club they use to beat you over the head with all day long when they tell you what to believe. All day long beating you over the head in their media telling you what to believe, what to think and what to buy. The table is tilted folks. The game is rigged, and nobody seems to notice, nobody seems to care. Good honest hard-working people -- white collar, blue collar, it doesn’t matter what color shirt you have on -- good honest hard-working people continue -- these are people of modest means -- continue to elect these rich c*cksuckers who don’t give a f*ck about them. They don’t give a f*ck about you. They don’t give a f*ck about you. They don't care about you at all -- at all -- at all. And nobody seems to notice, nobody seems to care. That's what the owners count on; the fact that Americans will probably remain willfully ignorant of the big red, white and blue dick that's being jammed up their assholes everyday. Because the owners of this country know the truth: it's called the American Dream, because you have to be asleep to believe it.
mkey je offline   Reply With Quote
Odgovori


Uređivanje

Pravila postanja
Vi ne možete otvarati nove teme
Vi ne možete pisati odgovore
Vi ne možete uploadati priloge
Vi ne možete uređivati svoje poruke

BB code je Uključeno
Smajlići su Uključeno
[IMG] kod je Uključeno
HTML je Uključeno

Idi na