From: Colm Mac Cárthaigh (colmmacc at domain redbrick.dcu.ie)
Date: Sat 15 Sep 2001 - 01:46:29 IST
On Sat, Sep 15, 2001 at 01:32:37AM +0100, cybersean3000 at domain yahoo.com wrote:
> Don't forget that source is available for OpenSSH and SSL. If you
> can compile it, so can anyone. There is no technology to protect you
> from the NSA. Proprietary or Open Source, they know about it and can
> get around it.
the opensource nature of openssh or openssl does make it
in the least bit less secure to the likes of the NSA,
if you use the right key strenths it's _very_ unlikely
anything the NSA have can defeat the encryption.
> On a weekly basis, even before this week, the CIA
> would round up kids across America and slap their hands with "Don't
> do that!" They can trace an attempted break-in all the way back to a
> phone jack in a house!
I could do that, as a private individual, it's no great feat
> The University of Alabama does computer
> research for the CIA, and you may be familiar with their on-line
> extension: American Institute for Computer Sciences (www.aics.edu).
> If the CIA has these resources and power, you can guarantee the NSA
> has it one hundred-fold.
yeah, I'd be more worried about covert operations to install kestroke
loggers and actual hardware intervention, network sniffing isnt
too much of a worry.
It's currently pretty easy to encrypt securely, even from the NSA.
-- ------------------------------------------------------------ colmmacc at domain redbrick.dcu.ie (master of the web, apache warrior)
This archive was generated by hypermail 2.1.6 : Thu 06 Feb 2003 - 13:12:09 GMT