• 0 Posts
  • 263 Comments
Joined 3 years ago
cake
Cake day: June 18th, 2023

help-circle
  • Yeah, that’s exactly my point. I am not a parent, but in my opinion, it would be better to allow the use of whatever platform is the default, maybe provide an alternative, and give the child an age appropriate understanding of what using Instagram/Whatever means to them. “You can use it, but don’t say anything private like our address, because your private messages can be read by the company. If you need to say something private, use signal/matrix/whatever else, because that’s safe.”. Maybe if your lucky they can pass that knowledge to their friends as well.

    Kids are walking privacy violations at the best of times anyway, education needs to start early.






  • That doesnt change anything about my original point. They are conflicting missions, whether you add certain or not.

    And no matter what you call it, backdooring ghidra defeats the point of both, it means no one will use it, which allows malware to run rampant. (Ghidra was released during the height of the cryptolocker craze, it allowed reversing those crypto lockers to be done by anyone, effectively neutering many of them).

    And when it gets caught its immediately attributable to the malware division, which they dont want either.

    There is zero point backdooring ghidra. Now XZ? *sshole? Thats the level of sophisticated backdoor I would expect from the NSA.


  • Only true if they can abuse the backdoor, if its tied to NSA infrastructure (which a competent backdoor would be), they couldn’t use it. There is also precedence, the Germans didnt hesitate to publicise that Angela Merkel’s phone was hacked, they could have used the malware to feed false information instead. Stuxnet was exposed to embarrass the US/Israel.

    Cyber security companies would also have no qualms about publicising it. Finding a NSA backdoor would put them on the map, and they have no use for a backdoor.



  • Go to any cyber security conference. Check out the CTF teams, Ghidra is used everywhere.

    Can you prove that there is a backdoor? Remember that it is freely available, and if China, Russia, NK or any other nation state could find a backdoor, they would be shouting it from the rooftops to shame the US.

    I dont doubt that the NSA could have seeded a backdoor in an open source project, but I very much doubt they would sign their name to it…


  • I dont know what you mean by that. Do you mean that the NSA would leave a bug in accidentally? Or intentionally?

    Accidentally is definitely plausible, they are only human after all.

    Intentionally would be incredibly stupid. The offensive side of the NSA spends billions developing malware that can’t be easily found and attributed to them. Inserting one of those malwares into a piece of software they have publically claimed ownership off completely defeats the point. If they wanted to backdoor an open source software, why wouldn’t they do it anonymously…









  • Even under fascism it doesnt make sense to risk zero days on non-high value targets. The fascist way to do that is to simply enforce all devices to have a public and obvious backdoor. Anyone without the backdoor is a criminal.

    Zero days are for being sneaky, and are very expensive. Under fascism you don’t need to be sneaky, and you need cheap.


  • It is a catch 22 situation, if you block ads (which is a no-brainer), you can’t see the ads repeatedly selling the same item you just bought.

    Im personally happy if they simply cannot monetise tracking me. They can track all they want, but if I never see any ads, it’s m much harder for them to manipulate me.