News for hackers. Stuff that matters.
Re:Zoom closes account of U.S.-based Chinese activist after ... by chrisseaton on Wednesday June 10, 2020 @05:06PM (#23482114)
> Is there any reason not to assume that the Chinese government is surveilling Zoom calls en masse?

Always assume your calls on the public internet are being surveilled by all parties, no matter which service you're using.

But beside that... if they were surveilling them... why would they close them? Why would you shut down your intelligence source?

Re:Zoom closes account of U.S.-based Chinese activist after ... by toyg on Wednesday June 10, 2020 @05:35PM (#23482429)
Some comms you want to monitor, some you want to disrupt... And Chinese authorities like big gestures, sending messages, "we know who you are and what you do, we can get you anytime, you are not safe anywhere".
Re:Zoom closes account of U.S.-based Chinese activist after ... by feanaro on Thursday June 11, 2020 @09:48AM (#23488814)
Why would I necessarily assume my end-to-end encrypted calls with a trusted party are being surveilled?
Re:Zoom closes account of U.S.-based Chinese activist after ... by chrisseaton on Thursday June 11, 2020 @10:05AM (#23489006)
Because your software may be compromised.

Because your hardware may be compromised.

Because their software may be compromised.

Because their hardware may be compromised.

Because the cryptographic algorithm you're using may be compromised.

Because your 'trusted party' may be compromised.

Because there may be a camera in your room.

Because there may be a camera in their room.

Lots of threat vectors, lots of reasons to assume surveillance.

Re:Zoom closes account of U.S.-based Chinese activist after ... by feanaro on Friday June 12, 2020 @05:57AM (#23497661)
Yes, and we may all be disembodied brains living in vats inside a teapot. This is why I don't find such arguments very compelling for showing we should necessarily assume we are being surveilled. The same argument can be applied to situations that have nothing to do with the internet too.

Those are certainly possible ways in which the surveillance could still be happening, because nothing is certain. But the argument is necessarily probabilistic (in the Bayesian sense) and not binary. So yes, I have to take this into account to determine my final risk, but there is no point in necessarily assuming I am being surveilled because then I might never do anything at all.