Basic Security Precautions for Non-Profits and Journalists

Re:Basic Security Precautions for Non-Profits and Journalists by codelitt on Monday February 13, 2017 @03:57PM (#13638696)

Easily was, perhaps, not the correct adverb, but the linked article above as well as this one below go into it more. It does not appear to be false.

http://www.theverge.com/2014/12/28/7458159/encryption-standa...

Bruce Schneier has said while large government actors may be able to exploit it, it's still recommended: https://www.theguardian.com/world/2013/sep/05/nsa-how-to-rem...

[ Parent | on HN ]

Re:Basic Security Precautions for Non-Profits and Journalists by willstrafach on Monday February 13, 2017 @05:22PM (#13639348)

Perhaps older versions of SSL, but there is no evidence that anyone has compromised TLS.

There is evidence that encrypted traffic was stored and research was done on the metadata of these connections but that is no surprise. That may be what they were referring to.

[ Parent | on HN ]

Re:Basic Security Precautions for Non-Profits and Journalists by secfirstmd on Monday February 13, 2017 @06:26PM (#13639839)

Also, threat models are important here...not everyone includes needs to include the five eyes as your threat model.

[ Parent | on HN ]

Re:Basic Security Precautions for Non-Profits and Journalists by codelitt on Tuesday February 14, 2017 @07:45AM (#13643118)

Of course. I am just using it as a yardstick for security strength.

[ Parent | on HN ]