More Shenanigans from the No Such Agency folks



"A very important question remains: What exactly could WindsorBlue, and then WindsorGreen, crack? Are modern privacy mainstays like PGP, used to encrypt email, or the ciphers behind encrypted chat apps like Signal under threat? The experts who spoke to The Intercept don’t think there’s any reason to assume the worst.

 “As long as you use long keys and recent-generation hashes, you should be OK,” said Huang. “Even if [WindsorGreen] gave a 100x advantage in cracking strength, it’s a pittance compared to the additional strength conferred by going from say, 1024-bit RSA to 4096-bit RSA or going from SHA-1 to SHA-256.”

 Translation: Older encryption methods based on shorter strings of numbers, which are easier to factor, would be more vulnerable, but anyone using the strongest contemporary encryption software (which uses much longer numbers) should still be safe and confident in their privacy."

 ***

Read the full article here Intercept Article and make sure you grok the implications.


- You are using strong passwords/passphrases, right?

- You are using minimum RSA-4096 (and getting comfortable with ECC non-NIST curves), yes?

- And of course you are dating/replacing your passwords and PGP keys on a regular basis?



Privacy/Encryption is a dynamic sport.....don't ever forget that fact.


Comments

Post a Comment

Popular posts from this blog

The Insecurity of "Push Notifications" and What to Do About It

Image
 By now it has been widely circulated that the US government (and their 5 Eyes friends) has been secretly snooping on phone user's messaging in the form of Push Notifications. Not only are they snooping, but they applied a legal gag order to Apple and Google to prevent them from alerting you the customer of this fact. What's that you say? You are using an end-to-end encrypted messenger such as Signal and therefore are safe from said intrusion? Not so fast... While there are indeed some well designed and audited secure chat apps out there, that is only part of the story. Most, if not all, messaging applications employ Push notifications as a way to let you know that someone just reached out to you, even if you didn't happen to have the corresponding application open at the moment. This is, of course, very convenient for the end user, but the problem lies in how this is facilitated on the back end. Apple and Google both employ proprietary servers that intercept a message head
Read more

Winter 2024 Courses (Updated FEB 29)

Image
  - Hard Target Traveler                Bozeman, MT                       JAN 13              $280 - Hard Target Traveler                CDA, Idaho                          FEB 17              $280 - GroundRod Level 1                   Kalispel, MT                        MAR 2-3           $475 - CQB/ Home Defense                 Midland,  TX                        TBD                  $800 - Gunfight Concepts                    N. Carolina                           MAR 22-24      $800 - Tactical Night Operations       N. Carolina                           MAR 25-27      $800 - GroundRod Level 1                  N. Carolina                            MAR 28-29      $475 - GroundRod Level 2                 N. Carolina                             MAR 30-31      $475 - GroundRod Level 4                  CDA, Idaho                           APR 12-14       $800 - Gunfight Concepts                   Three Forks, MT                   APR                 $800 - GroundRod Level 3               
Read more

GroundRod Level 1 in Missouri

Image
  We will be holding a GroundRod Level One tradecraft course in Hartville, MO June 15-16 2024. Course is $480 and seats will be limited. To register, you can visit the Store page and make a class deposit ($100) and then email us at comstugrp@protonmail.com to confirm, also feel free to email with any questions.
Read more