Colm Mac Carthaigh wrote:
>> the opensource nature of openssh or openssl does make it
> in the least bit less secure to the likes of the NSA,
> if you use the right key strenths it's _very_ unlikely
> anything the NSA have can defeat the encryption.
Not quite correct for a number of reasons, one of which is that you do
not know if NSA has developed a faster factoring algorithm. Another
relates to possible leakage in the algorithms used. If you really want
to be secure, don't use internet/phone based comms systems.
> yeah, I'd be more worried about covert operations to install kestroke
> loggers and actual hardware intervention, network sniffing isnt
> too much of a worry.
Why not use standoff devices that just sniff the tempest radiation? :-)
> It's currently pretty easy to encrypt securely, even from the NSA.
Possibly. Though Enigma, JN25, Purple, DES and a lot of other encryption
systems were supposed to be unbreakable. There would have to be some
selection process for deciding what problems and identifying nets of
'connected' people is how it would logically be done.
Regards...jmcc
;-) jmcc at nsa.ie
Maintained by the ILUG website team. The aim of Linux.ie is to
support and help commercial and private users of Linux in Ireland. You can
display ILUG news in your own webpages, read backend
information to find out how. Networking services kindly provided by HEAnet, server kindly donated by
Dell. Linux is a trademark of Linus Torvalds,
used with permission. No penguins were harmed in the production or maintenance
of this highly praised website. Looking for the
Indian Linux Users' Group? Try here. If you've read all this and aren't a lawyer: you should be!
