Recommended Posts

This past week private search engine DuckDuckGo recorded their best week ever for traffic. The website, which does not record user?s clicks, provides a service for those who wish to browse the Internet away from the prying eyes of the government or Google...

http://thebackbencher.co.uk/duckduckgo-receives-record-traffic-following-prism-scandal/

People switching need to watch / listen to the latest episode of Security Now. (http://twit.tv/show/security-now/408)

The data collection isn't being made at Google's facilities. Using another search engine is pointless.

But google is directly involved as a 'supporting PRISM' along with Microsoft, where duckduckgo isn't. don't mean that what you are searching won't be logged, but its less likely and showing that people won't stand for such direct secret involvement.

This guy in the video is a quack too.. he's rambling about things he barely grasps. Near the end when he says hes' 'uncomfortable' with 128bit encryption I nearly lost it. Check out around 1h31 to contradict yourself. Its definitely being made at googles facilities, however its not being made 'in' google itself and they aren't affiliated and they can't talk about it either.

This guy in the video is a quack too.. he's rambling about things he barely grasps.

You don't know much about Steve Gibson, do you?

I thought too years ago he was a quack...until I started listening to him on a regular basis. You don't need to listen to all 400+ podcasts to realize he knows his stuff.

But google is directly involved as a 'supporting PRISM' along with Microsoft, where duckduckgo isn't. don't mean that what you are searching won't be logged, but its less likely and showing that people won't stand for such direct secret involvement.

 

Google and MS are not involved with PRISM.  They have issued statements to that effect as well as many other companies.  They do have to respond to legal requests tho...as would any company.

Near the end when he says hes' 'uncomfortable' with 128bit encryption I nearly lost it.

Why? 128-bit encryption isn't what it used to be. MS themselves has stopped issuing certificates with less than 1024 bits almost a year ago. How strong encryption is doesn't remain fixed across time.

Google and MS are not involved with PRISM.  They have issued statements to that effect as well as many other companies.  They do have to respond to legal requests tho...as would any company.

They have 'fell victim to' I guess is a better way to word it, with digital taps on their upload servers. 

Why? 128-bit encryption isn't what it used to be. MS themselves has stopped issuing certificates with less than 1024 bits almost a year ago. How strong encryption is doesn't remain fixed across time.

Its blown open publicly last I knew. I'd be more than uncomfortable with it.. I'm referring to SSL/RC4 encryption, not AES or DES or any other non-common web security layer. Hell I read a few articles on how 256-bit can be severely weakened by predicting possible outcomes and prioritizing the method in brute-forcing it, example would be reducing 2356 years computer processing to around 25 on the same hardware. Theres NO encryption that is secure and there never will be. Its only a time-thing, you hope what you encrypted stays that way until its no longer relevant.

You don't know much about Steve Gibson, do you?

I thought too years ago he was a quack...until I started listening to him on a regular basis. You don't need to listen to all 400+ podcasts to realize he knows his stuff.

 

Likes

They have no direct access to their servers.  Whatever data is requested, they legally have to give.  But they provide the data.

 

Theres taps on all the upstreams of the major US data centers. Thats their order, and Snowden made this very obvious with his leaks including their timeline of involvement. Other than those huge data centers of microsoft, google, yahoo, apple, etc, its Tier1 providers, so basically where all the ISPs in the USA get their internet to sell... From a standpoint in the USA you might as well shut off your internet if you are choosing which evil to make your request at, you aren't going to anonymously make it without going through something like TOR. From outside the USA where Tier1 providers are not tapped - duckduckgo may be a wiser choice depending on how you hit their servers. Huge however tho, .com and .net addresses are part of VeriSign which is a US company, and so, they are USA redirected, so your request traffic, IP, times etc bounces off the NSA somewhere when you visit one regardless of where in the world you are.

DuckDuckGo has never given me good results, and if it gets popular you can bet they'll be getting their own fair share of NSL "requests", and like Google/Microsoft/Apple/Yahoo/etc. they'll probably lose if they try fighting them.

DuckDuckGo has never given me good results, and if it gets popular you can bet they'll be getting their own fair share of NSL "requests", and like Google/Microsoft/Apple/Yahoo/etc. they'll probably lose if they try fighting them.

 

They don't record user data so there would be nothing to give the authorities.

You don't know much about Steve Gibson, do you?

I thought too years ago he was a quack...until I started listening to him on a regular basis. You don't need to listen to all 400+ podcasts to realize he knows his stuff.

 

I know he wrote spinrite, software that saved my ass as well as continuing to save the ass of many of my friends, all for less than $100.

He knows what hes doing obviously, but hes one of those guys who can't summarize his knowledge into a digestible form. I found it hard to listen past 15 minutes of his 91 minute podcast, I can only imagine how he rambles in the other 400+ of them.

 Huge however tho, .com and .net addresses are part of VeriSign which is a US company, and so, they are USA redirected, so your request traffic, IP, times etc bounces off the NSA somewhere when you visit one regardless of where in the world you are.

 

What are you on about? That's not how things work at all!

He knows what hes doing obviously, but hes one of those guys who can't summarize his knowledge into a digestible form. I found it hard to listen past 15 minutes of his 91 minute podcast, I can only imagine how he rambles in the other 400+ of them.

 

Well, ok, I'll grant you most people have a short attention span, and neither him or Leo pretend this is a podcast for the masses.

 

Which is really a shame, as typically the people who keep propagating the most outrageous claims on forums such as this one are those who would benefit the most from listening to what he has to say, as he's thorough in his research and won't say anything he can't back up.

Well, ok, I'll grant you most people have a short attention span, and neither him or Leo pretend this is a podcast for the masses.

 

Which is really a shame, as typically the people who keep propagating the most outrageous claims on forums such as this one are those who would benefit the most from listening to what he has to say, as he's thorough in his research and won't say anything he can't back up.

Why don't you make a summary for the rest of us who suffer from ADD, or point out at what time he actually talks about PRISM.

This topic is now closed to further replies.
  • Posts

    • I am not a US citizen nor a Trump fan. Respect to both left and right. But I will, for the sake of fun, predict something for my own. There will come a day when the US and China will collide like titans ( over Taiwan or anything else ). Then, on that day, some people in this comment section will realize how good an idea it was to become independent in areas like that. ( Or atleast try )
    • Microsoft Edge gets tons of security features, including AI model that can see your screen by Usama Jawad Microsoft Edge may not be the most popular browser out there, but it does receive quite frequent updates that sometimes bring surprising new features and axe others that are not as popular. Now, Microsoft has detailed some of the new security enhancements that it has introduced in Edge for Business, typically used by commercial customers. Microsoft has emphasized that security features are baked into Edge for Business and offer native integration with security and governance tools like Defender and Purview. Browser sessions are governed by default on managed devices but can also be governed through dedicated work profiles on unmanaged devices. An important aspect in this area is controlling the use of shadow AI. We have talked about this before, but it essentially restricts employees from using unsanctioned AI apps through data loss prevention (DLP) policies, with Edge redirecting them to trusted AI services like Microsoft 365 Copilot. This feature, available as a pay-as-you-go (PAYG) license, ensures that confidential data never exits AI boundaries set by your organization in Purview. Additionally, Microsoft also has strong DLP policies for contractors. Contractors leveraging a Entra ID-joined work profile provisioned by their contracting company on a device managed by their actual employer can be restricted from downloading files locally. In such scenarios, the file is saved on the contracting firm's OneDrive rather than being downloaded locally. Another useful Edge security feature disallows copying and pasting from unmanaged locations and apps. Similarly, DLP policies can be configured at a granular level to restrict screenshots or downloading of files from certain locations. In the same vein, IT admins can block the installation of extensions, hosted apps, themes and scripts, and control if users can install extensions from external locations. They can also enable the installation of specific extensions and allow users to request access to certain extensions, so that they can be managed on a case-by-case basis. Finally, Edge for Business now has an on-device AI model that uses computer vision to see what's on your screen and block potentially malicious content immediately. This does not rely on site reputation, as it simply monitors what is being displayed on your screen, which means that it is effective against malicious content that takes over your screen and employs scareware tactics. Since this is an on-device AI model, it does use your system's resources, so it's enabled by default only on devices with at least 2GB of RAM and four CPU cores. You can find more details in the Microsoft Mechanics video here.
    • Could you come up with a slightly less depressing background for Tux instead of that gray gradient? Doesn't have to be cheerful, just less of a downer...
    • Linux 7.2's first release candidate gets off to a good start by Paul Hill Credit: Larry Ewing It has been a few weeks since the release of Linux 7.1, and in that time, the Linux 7.2 merge window has been open, where developers can submit their features and patches ready for the upcoming release. That window is now shut, and the release candidate phase has begun so that new features can be tested and further fixes applied. According to the founder of Linux, Linus Torvalds, this week’s release candidate looks “reasonably normal”. Although we are super early in the release candidates, this is a good sign as it makes it more likely that an eighth release candidate will not be needed. Torvalds even mentioned that the update’s stats are only larger than they really are because there was another AMD header drop with a third of the patch just being AMD GPU register definitions, which aren’t big changes but make the code contributed look larger overall. In addition to this, he noted that just over half the patch is drivers, even when excluding the AMD register dump. The rest of the changes are spread out over architecture updates, tooling, documentation, and core kernel updates. In the next week, Torvalds says that he will be chilling out, taking the week “mostly off”. Despite this, he will be reading emails and keeping up with things, so if he is slow responding, now you know why. He said he is hoping for a calm week, but we will just have to see if the second release candidate is actually like that. We should expect seven or eight release candidates before Linux 7.2 is released, so expect it around the end of August. If you missed it a few weeks ago, be sure to check out our coverage of Linux 7.1's release.
    • Ridiculous claim that the labor cost difference of $6000 annually would increase cost per phone by $200. The employees produce 3 phones per month or what?
  • Recent Achievements

    • Dedicated
      Zeynel earned a badge
      Dedicated
    • One Month Later
      JKR earned a badge
      One Month Later
    • Dedicated
      Asgardi earned a badge
      Dedicated
    • Conversation Starter
      jessse3334 earned a badge
      Conversation Starter
    • Reacting Well
      JuvenileDelinquent earned a badge
      Reacting Well
  • Popular Contributors

    1. 1
      +primortal
      496
    2. 2
      +Edouard
      248
    3. 3
      PsYcHoKiLLa
      154
    4. 4
      Steven P.
      86
    5. 5
      macoman
      65
  • Tell a friend

    Love Neowin? Tell a friend!