Geekzone: technology news, blogs, forums
Guest
Welcome Guest.
You haven't logged in yet. If you don't have an account you can register now.


View this topic in a long page with up to 500 replies per page Create new topic
1 | 2 | 3 | 4 
2332 posts

Uber Geek
+1 received by user: 80


  Reply # 836095 12-Jun-2013 23:05
Send private message

Now's a good time to start using PGP/OTR and any other encrypted communications as well as getting other people to use them.. (Skype doesn't count!)



1332 posts

Uber Geek
+1 received by user: 152
Inactive user


  Reply # 836330 13-Jun-2013 14:08
Send private message

Ha! Skype is not secure at all.

Any communication I need to care about is already adequately secured and any logs are stored on encrypted drives at both ends.

 
 
 
 


2332 posts

Uber Geek
+1 received by user: 80


  Reply # 836603 13-Jun-2013 23:11
Send private message

1080p: Ha! Skype is not secure at all.

Any communication I need to care about is already adequately secured and any logs are stored on encrypted drives at both ends.


For proof skype isn't secure, see http://lists.randombit.net/pipermail/cryptography/2013-May/004224.html

3825 posts

Uber Geek
+1 received by user: 1421

Trusted
Subscriber

  Reply # 836641 14-Jun-2013 07:03
Send private message

kyhwana2:
1080p: Ha! Skype is not secure at all.

Any communication I need to care about is already adequately secured and any logs are stored on encrypted drives at both ends.


For proof skype isn't secure, see http://lists.randombit.net/pipermail/cryptography/2013-May/004224.html


Even if it were there are a lot of things you can do with analysis of the encrypted stream. VoIP systems conserve bandwidth by only transmitting packet data when there is audio to be sent, and by using variable bit rates to encode the audio that must be transmitted. At a high level, this means you can tell who's talking on either end of the conversation by watching who is transmitting.

But even better than that, speech has an audio fingerprint. Each word, or phrase, has a unique pattern of amplitude that translates directly into a variable bitrate. That bitrate variation is preserved by encryption.

These guys, even in 2010, were able to identify the speech in an encrypted VoIP stream with at least 50% and in some cases 90% accuracy. If they were publicly announcing that result in 2010, imagine what the NSA with could do in 2013 with a couple of football fields worth of supercomputer.

So... if you are using VoIP, you may be able to be spied upon by a sufficiently tooled up eavesdropper even with perfect ciphering. 

Having said that you can counteract this technique by using a fixed-rate codec like G.711 which transmits constant 64kbps audio even during silence. Or perhaps you can go ahead and create a new codec which adds random padding to variable bitrate speech compression to smear it out whilst still saving some bandwidth compared to fixed rate.




iPad Air + iPhone SE + 2degrees 4tw!

These comments are my own and do not represent the opinions of 2degrees.


3825 posts

Uber Geek
+1 received by user: 1421

Trusted
Subscriber

  Reply # 844064 25-Jun-2013 15:21
Send private message

Anyone else written to their MP and/or other parliamentarian about their objections? I emailed my local MP (National Party) about the interception bill, pointing him to Tech Liberty's submission. He emailed back to say that the changes were 'technical ones as all the powers contained in the legislation are currently available'. I pointed out several that were not, but have not had a reply.

I also emailed Winston Peters this morning after reading he's not quite convinced to vote for it yet, urging him not to, until there are better safeguards.




iPad Air + iPhone SE + 2degrees 4tw!

These comments are my own and do not represent the opinions of 2degrees.


2332 posts

Uber Geek
+1 received by user: 80


  Reply # 845211 25-Jun-2013 19:43
Send private message

My MP is a National MP that ended up voting against a few more liberal things, so I havn't wasted my time writing him.

1 | 2 | 3 | 4 
View this topic in a long page with up to 500 replies per page Create new topic



Twitter »

Follow us to receive Twitter updates when new discussions are posted in our forums:



Follow us to receive Twitter updates when news items and blogs are posted in our frontpage:



Follow us to receive Twitter updates when tech item prices are listed in our price comparison site:





News »

VMware NSX Meets Stringent Government Security Standards with Common Criteria Certification
Posted 22-Jun-2017 19:05


Brother launches next-generation colour laser printers and all-in- ones for business
Posted 22-Jun-2017 18:56


Intel and IOC announce partnership
Posted 22-Jun-2017 18:50


Samsung Galaxy Tab S3: Best Android tablet
Posted 21-Jun-2017 12:05


Wellington-based company helping secure Microsoft browsers
Posted 20-Jun-2017 20:51


Endace delivers high performance with new 1/10/40 Gbps packet capture card
Posted 20-Jun-2017 20:50


You can now integrate SMX security into Microsoft Office 365, Google and other cloud email platforms
Posted 20-Jun-2017 20:47


Ravensdown launches new decision-making tool HawkEye
Posted 19-Jun-2017 15:38


Spark planning to take on direct management of all consumer stores
Posted 19-Jun-2017 10:03


Qrious acquires Ubiquity
Posted 14-Jun-2017 12:21


Spark New Zealand prepares for 5G with Nokia
Posted 14-Jun-2017 12:16


The future-proof 10.5-inch iPad Pro
Posted 13-Jun-2017 18:16


Mandatory data breach reporting in Australia
Posted 13-Jun-2017 11:30


Review: Sony MDR-1000X noise-cancelling headphones
Posted 12-Jun-2017 08:08


Kinetics Crowned Microsoft NZ Partner of the Year
Posted 9-Jun-2017 09:32



Geekzone Live »

Try automatic live updates from Geekzone directly in your browser, without refreshing the page, with Geekzone Live now.



Are you subscribed to our RSS feed? You can download the latest headlines and summaries from our stories directly to your computer or smartphone by using a feed reader.

Alternatively, you can receive a daily email with Geekzone updates.