Use of Tor and e-mail crypto could increase chances that NSA keeps your data

Re:Use of Tor and e-mail crypto could increase chances that ... by bigiain on Thursday June 20, 2013 @10:24PM (#5916158)

Since I (and the majority of global internet users) are not "US persons", they're claiming they're entitled to intercept and store all my communications anyway - so my personal reaction to this is going to be to increase the use of tor and crypto for random everyday stuff. I'll start GPG encrypting email to anybody I know will be able ro deal with it. I might even start randomly mailing GPG encrypted mail for no reason except to thwart traffic analysis (perhaps I'll automate mailing randomly chosen chunks of 1984 and Brave New World to randomly chosen public keys/emails from public keyservers - perhaps some faceless NSA analyst might one day have burned countless cpu-years decrypting my 2048bit GPG mail, only to be Rickrolled with a 70 year old cautionary tale about themself…)

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by dfc on Thursday June 20, 2013 @11:06PM (#5916300)

"I will start GPG encrypting email to anybody I know who will be able to deal with it"

As sad as it is to say, lets be honest and admit that this is a fairly small number. How long do you think it will be till your less committed friends get tired of decrypting your emails and just ignore what you send? Make sure you only pick people that use actual email clients because gpg and Gmail is no fun.

As far as the "Thomas Crowne Affair attack" goes generating effective cover traffic is not easy and random traffic is definitely a bad idea. Basic traffic analysis would be able to separate your legit emails from your cover traffic.

Addendum: I noticed you just generated your new gpg key yesterday. Why not go big and use a 4096 bit key?

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by icebraining on Friday June 21, 2013 @02:29AM (#5916852)

It seems someone has written a PGP extension for Chrome/GMail: https://chrome.google.com/webstore/detail/mymail-crypt-for-g...

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by joeyo on Friday June 21, 2013 @03:49AM (#5917027)

I've just started using mailvelope, which works with several webmail providers and also has a firefox extension:

https://chrome.google.com/webstore/detail/mailvelope/kajibbe...

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by swombat on Friday June 21, 2013 @04:07AM (#5917065)

It looks like Mailvelope only supports RSA encryption (up to 4096bit), not any of the other types of algorithms for PGP. It lists RSA/RSA and RSA/ElGamal but doesn't allow me to select them. Can someone who knows their shit about encryption chime in as to whether that's sufficient?

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by bigiain on Friday June 21, 2013 @12:03AM (#5916452)

Now I'm thinking of a patched SMTP server, that queues all outgoing mail - and sends mail every hour on the hour to each of my GPG enabled recipients, with a queued "real mail" if there is one or a random encrypted NSA RickRoll if there's no real mail to send.

(I suspect that'd last about 121 minutes before most of my friends spam filtered me forever)

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by dfc on Friday June 21, 2013 @01:48AM (#5916760)

Don't forget you have to use your main machine to send the random messages to your smtp server. If you do not it will be pretty easy to recognize what mail was routed through the machine and which messages were randomly generated by the server as a cover traffic.

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by rdl on Wednesday June 26, 2013 @06:13AM (#5945124)

Every protocol should allow "no-ops" of arbitrary size, and then make it easy to do traffic analysis defeat by doing communications scheduling like that.

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by oelmekki on Friday June 21, 2013 @02:15AM (#5916822)

> perhaps some faceless NSA analyst might one day have burned countless cpu-years decrypting my 2048bit GPG mail, only to be Rickrolled with a 70 year old cautionary tale about themself…)

That, sir, is genuis. Now that talibans have office in qatar, I hope they'll publish some kind of contact email, so we can rickroll both NSA and them through tormail. Sorry authoritarians, this is the internet.

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by cottonseed on Friday June 21, 2013 @11:20AM (#5918436)

To thwart email traffic analysis, what we really need is tor-over-email relays: you n-fold encrypt your email, one for each relay node, and the innermost message is encrypted for the intended recipient.

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by gundy on Thursday June 20, 2013 @10:53PM (#5916252)

If the US wants "freedom" on the internet and no internet nationalism (which just means that non-citizens get rights too), it should grant online citizenship to all people of the world. They can all be members of the empire and actually get representation rather than just the tyranny of US foreign policy.

[ Parent | on HN ]

Re:Use of Tor and e-mail crypto could increase chances that ... by derleth on Friday June 21, 2013 @01:01AM (#5916619)

> perhaps I'll automate mailing randomly chosen chunks of 1984 and Brave New World to randomly chosen public keys/emails from public keyservers

Repurpose Sircam to do this, perhaps.

http://en.wikipedia.org/wiki/Sircam

[ Parent | on HN ]