Urban75 Home About Offline BrixtonBuzz Contact

David Cameron suggest banning message encryption

It is kinda funny though, we give private companies like google and apple a lot of information willingly through our phones, but are worried when our government has the data.
when was the last time google left a laptop on the train? (probably yesterday)
 
TOR isn't really the best answer, how do you know who is running the exit node.
The exit node is where the information is decrypted, so anyone who is running that exit node can read the traffic passing through it. Anyone can set up an exit node.
 
TOR isn't really the best answer, how do you know who is running the exit node.
The exit node is where the information is decrypted, so anyone who is running that exit node can read the traffic passing through it. Anyone can set up an exit node.
But they don't know where it's coming from, at least.
 
What say, if you run a VPN and give people logins to it. But don't keep logs because they are your friends and you trust them? And also you can't be asked. Does that mean you are an Internet service provider and are legally bound to keep logs? Rhetorical question.
 
What say, if you run a VPN and give people logins to it. But don't keep logs because they are your friends and you trust them? And also you can't be asked. Does that mean you are an Internet service provider and are legally bound to keep logs? Rhetorical question.
You probably are more of a proxy than an ISP.
I cba to look to see if those are mentioned, though.
 
You probably are more of a proxy than an ISP.

I cba to look to see if those are mentioned, though.

Yeah probably right. Might effect something I'm involved in. Nothing dodgey but anyways. I'll not get a lawyer on a retainer just yet... :D
 
It is kinda funny though, we give private companies like google and apple a lot of information willingly through our phones, but are worried when our government has the data.
I really don't like how much data Google have on me (Android phone, Google search + gmail, stopped using chrome so they don't get that data) but Google can't lock me up, they don't have a monopoly on the means of violence and whilst there's stuff I can do to avoid/reduce it, it's not possible to have eg a smart phone and not give that data to Google/Apple/Microsoft/BlackBerry, whereas the govt don't need the data in order for me to use this stuff, so I'll accept Google knowing all it does so I can do the things I want to do online.
 
Spend a few minutes reading this, it may help you understand about VPNs


That article is quite misleading in the context of this thread.

Regardless of whether VPNs offer "privacy" or "anonymity", they do make it 100% impossible for your ISP to see the content of your internet traffic, and therefore they render this new law completely ineffective.

The government will not be able to identify which websites a person visits if that person is using an encrypted foreign-based VPN, because ISPs cannot access that information (unless they have magical mass de-encrypting skills)
 
Regardless of whether VPNs offer "privacy" or "anonymity", they do make it 100% impossible for your ISP to see the content of your internet traffic, and therefore they render this new law completely ineffective.

The government will not be able to identify which websites a person visits if that person is using an encrypted foreign-based VPN, because ISPs cannot access that information (unless they have magical mass de-encrypting skills)
Really? Good luck :)
 

Your isp cannot see the content of your internet traffic if it is encrypted and channeled via a foreign server, all they can see is a stream of random data coming from one server, that is the whole point of using a VPN for privacy purposes.

The VPN can see everything, but it is hidden from the ISP by the encryption

The article you linked to does not contradict that, there is no reason to
 
Last edited:
Your isp cannot see the content of your internet traffic if it is encrypted and channeled via a foreign server (how could they?), that is the whole point of using a VPN.

The article you linked to does not contradict that.
Your isp isn't the be all and end all where privacy is concerned
 
How many people on here encrypt their normal emails?
The vast majority of people I send "normal", everyday emails to are going to think I'm some sort of tinfoil-hatter if I tell them I'm going to be encrypting everything from now on
 
Well good luck and I wish everyone who is privatizing themselves does so with great success ;)
 
Your isp isn't the be all and end all where privacy is concerned

I'm interested to know what you are suggesting here. If the VPN is from my PC to some foreign server, the only thing the feds can see is that connection from my public IP to theirs. If you are suggesting that GCHQ or someone else are going to be decrypting my tunnel, then fair enough but they would need a big team of people to do that for even a small number of users.
 
All I'm "suggesting here" is don't just believe the hype about what is private and what isn't, do your own research to ensure you fully understand the vulnerabilities in the system of your choice. One only needs to read the news to know that very many people who thought they were private, turned out not to be as private as they thought.
 
All I'm "suggesting here" is don't just believe the hype about what is private and what isn't

In other words, you arent really "suggesting" anything. You are just obfuscating the simple point that several posters are patiently trying to explain to you.

If you use an encrypted VPN your internet traffic is rendered 100% invisible to your ISP, which makes it impossible for them to store a list of all the websites you visit.

You can call that "hype" if you want, but that doesn't make it any less true.

The governments recent announcement that they would make ISPs store a list of all the websites you visit is naive and unenforceable, because if you want your internet use to remain hidden from your ISP, it is very easy to hide it using a VPN. All that your ISP is then able to see is just a string of random data going to one server. It is impossible for them to compile a list of the websites you visit.
 
Last edited:
In other words, you arent really "suggesting" anything. You are just obfuscating the simple point that several posters are patiently trying to explain to you.

If you use an encrypted VPN your internet traffic is rendered 100% invisible to your ISP, which makes it impossible for them to store a list of all the websites you visit.

You can call that "hype" if you want, but that doesn't make it any less true.

The governments recent announcement that they would make ISPs store a list of all the websites you visit is naive and unenforceable, because if you want your internet use to remain hidden from your ISP, it is very easy to hide it using a VPN. All that your ISP is then able to see is just a string of random data going to one server. It is impossible for them to compile a list of the websites you visit.
They want your ISP to store it because it makes it easier for the police and other agencies. such as Local Authorities to request the data.

How can you be sure the VPN provider is not tracking and collecting your data, many already do. Have your read about the EU's Data Retention Directive it has been in place since 2006, VPN's are well covered in this document. While in 2014 this was ruled unlawful by the European court of justice, no country has stopped doing it as yet. The UK is one of the countries that accesses this the most and over 200 agencies in the UK including the police, the NHS, Local Authorities and many many more have access (I think everyone know how insecure many of the agencies who have access are, so don't be fooled into thinking your data is private from hackers as well).

Do some research, it makes no difference if you use a domestic or foreign VPN. Data is collected at what are called "endpoints" and via transit cables. Your data is only encrypted from you to your ISP and them the VPN (unless your target endpoint uses SSL/TLS, which is also thought to be vulnerable), after that every request is not encrypted unless you personally encrypt it end to end so it can't be read. All data that crosses boarders is collect.

How do you think authorities across the world have been able to find members of Lulzsec, anonymous and AntiSec, as well as many child pornography's and track the communications of terrorist groups? All these groups have experts in internet communications and yet are unable to remain hidden

This should not be news to anyone who reads the computer press, it was reported long ago and after Snowden it appeared in the main stream press also
 
Have your read about the EU's Data Retention Directive it has been in place since 2006, VPN's are well covered in this document
That depends on how each country interpreted the directive. There are a number of EU countries that do not require VPNs to keep logs and even some that didn't implement the DRD at all.
 
That depends on how each country interpreted the directive. There are a number of EU countries that do not require VPNs to keep logs and even some that didn't implement the DRD at all.
Can you list them? My understand is that only Sweden pulled the plug after the ECJ ruling (but only so they had time to look at how they can store data legally). Because a VPN may not be required to store data doesn't mean they don't or some other body doesn't (maybe some of the newer eastern block members didn't sign up, but would you trust them).

The fact of the matter is this, computer experts are unable to surround themselves with a cloak of privacy, so what chance do ordinary computer uses have. It would be a great shame if people thought their internet activate was private only to find-out the hard way that it isn't.

My only point in posting on this thread was to explain to people who maybe don't fully understand, that it isn't really possible to be invisible, private or anonymous on the internet for 99.9% of the population, I believe it is possible with a great deal of discipline to make yourself extremely hard to find or track, but not for the casual user, it just isn't worth the time, effort and cost.
 
Back
Top Bottom