hushmail and cyber-rights, no longer safe???

[wheelzdgh]

Ive been using tin cans and string, is that still safe??

[bigkarch]

Originally Posted by wheelzdgh

Ive been using tin cans and string, is that still safe??

thats still safe.just make sure you have a lot of string

[Strateg0s]

Originally Posted by MaxRep

Sorry Strat but that's not true according to the computer geeks I've talked with. Breaking a password can't be done like in the movies where they can break one letter at a time.

Vell, it seems zat I huv been misinformed zen. Use my suggested passvord generator and substitute some ALT characteres, and you should be good zen, ja?

[stump]

i still agree that if the want the info they wil get it at no cost

remember this is their job and they spend 8-10 hours a day trying to figure out what we are all talking about. unlike us who go off to work and bulid house or drive trucks or cut lawns or what ever else everyone does.

the last thing is we all operate with a simple computer some of us a little more advanced but just think of what the goverment or the task force trying to bring roids down is using.

best thing to do is keep it simple or a low profile so you are over looked
thats what i do

[T 47 LB]

Is it time to blow up my harddrive?? Ex SSB member. T

[AnAboliKPiKe]

Please remember that there is a very large amount of individuals that use email, encrypted or otherwise, for private, legitimate purposes. It would be a shit storm if a service provider were to "sell to the highest bidder". I just don't see it happening. I also don't see them even beginning to be able to "intercept" your email if they don't know your addy in the first place. Please correct me if I'm wrong.

[cpt316]

it can't hurt to exercise all necessary precautions. and the best thing is, we have every right to keep our activities whatever they may be private. using programs like ghostsurf (mask your ip) and evidence eliminator (electronically shredding your hard drive of all incriminating files) are perfectly legitimate. backup hard drives and encrypted e-mails are a good idea as well. i think bigkarch said this, they don't have shit on you if you don't have the goods, no matter what is on your computer. so keep your house clean fellas.

[sativalover]

Most hushmails are a 128 bit encrypted so therefore it is almost impossible to break and the man hours that it would take to crack them is almost impossible and yes courts have considered that emails are a part of the 4th amendment under certain circumstance but if they present a clear and present danger this is different. The thing that everyone is forgetting is the power of the dollar. The FBI has repeatedly over the years if they couldnt press their issue through legislation they do it through the dollar. So in this case hushmail and cyberrights will be pressed with later prosecution for withholding evidence or the FBI may say hey we will give you 25 million dollars to give up all email accounts and passwords. So therefore i would not use these any more until things blow over and or more definate securities are in place.

[sativalover]

the best way to do this is with TOR which sends your IP out in 2 digit numbers and shares it with all the users on the network and constantly shares a few digits of your ip with others and you receive others IP's and constanly shuffles your IP masking yours

[InsiderTrader]

Originally Posted by sativalover

the best way to do this is with TOR which sends your IP out in 2 digit numbers and shares it with all the users on the network and constantly shares a few digits of your ip with others and you receive others IP's and constanly shuffles your IP masking yours

think this is pretty good advice.

this is an interesting article on feds using keylogger software to obtain username and passwords for encrypted mail. installing keyloggers onto victim machine and capturing everything they type. the piece only hints at remote installation but you must assume that it is happening. you should assume that they only need your ip and for you to be online to install these programs even with a firewall and other precautions. they will get your ip by analysing data being sent to a forum . i.e login, post etc. your ip gets sent every time, and they have access to all this by tapping into all the isp's

using proxies such as tor should circumvent the posssibility of this happening presuming you have no keyloggers installed already. le keyloggers most probably would never show up with antivirus scans.

http://www.news.com/8301-10784_3-9741357-7.html

[Dinitro]

For what it's worth, Hushmail pointed out that although they would comply with a warrant, they are not able to decrypt an account either, and the only thing they could supply would be the encrypted message. They further point out that it would take something like 40 computers 40 years to decrypt at their level of strength.

There was a rumor last year that Hushmail was bought by LE, but there was nothing to it; just a rumor that still gets mentioned to this day. On SSB, one "gear-friendly" self-admitted cop started a thread to explain to us all the tricks and methods of LE computer forensics, and he estimated that Hushmail was the best option for total privacy and unbreakable encryption.

Some people are suggesting safe-mail, but the problem is that their PGP key isn't shared across other domains, so email between them and, say, Hushmail or cyber-rights remains unencrypted.

[MaxRep]

Originally Posted by Dinitro

Some people are suggesting safe-mail, but the problem is that their PGP key isn't shared across other domains, so email between them and, say, Hushmail or cyber-rights remains unencrypted.

I would suggest anyone doing business in the future use the same encrypted email provider as whomever they're doing business with. This would guarantee there's minimal (or none according to keptprivate) internet traffic and therefore minimal (or zero) chance of interception... all messages would be on the same server and not subject to interception... and there would be no concern about what Din says which is encrypted email going out unencrypted due to incompatible pgp keys.

The problem with TOR, and why it's not actually such a good idea is you have no idea who's server is being used as a proxy. And guess what... read the news reports... because it has just been confirmed that it's very easy to capture email traffic through a TOR proxy server and read all the messages. See the following report:

MaxRep
__________________________________________________ ______________

Tor network exposes sensitive information
Anonymous traffic easy to intercept through exit nodes

By Egan Orion: Monday, 10 September 2007, 3:56 PM

A MYSTERY was solved today that emphasises a feature of the Tor network that many users either never understood or had forgotten.

On August 30, Swedish computer security researcher Dan Egerstad posted the user names and passwords for 100 email accounts that he had obtained without the owners' knowledge. He also posted their email servers' IP addresses.

The information posted was just a sample of at least 1,000 instances he had collected along with thousands of emails belonging to embassy employees, legislators, civil rights workers and others throughout the world.

At the time, he wouldn't say how he had gained access to all that data, except that it didn't involve hacking any desktop computers or servers but instead was accomplished through a network sniffing attack against a free encryption program installed by all of the vulnerable users.

Friday, Egerstad revealed that he gathered that information as a research project by hosting five Tor network exit nodes at various Internet locations.

Tor is a mesh network of servers that provides anonymous, untraceable web access and communications. It's supported by the Electronic Frontier Foundation, which hosts its software, and other civil liberties organizations. The Tor network is used by international human rights workers, charitable groups, whistleblowers, journalists, diplomatic employees, legislators, military arms, intelligence agencies and law enforcement personnel.

However, there's a common misperception about Tor, which Egerstad's exploit has not so much revealed but emphasised: that Tor is an end-to-end encryption service. It's not, but as Egerstad has shown, most if not all users aren't taking the necessary additional steps needed to protect their identities and communications from interception.

Egerstad believes others might also be taking advantage of this misperception among Tor users. Wired quotes him as saying:

"I am absolutely positive that I am not the only one to figure this out. I'm pretty sure there are governments doing the exact same thing. There's probably a reason why people are volunteering to set up a node."

The Tor network vulnerability is a feature, not a bug. TOR stands for The Onion Router, which describes the essence of its operation. The Electronic Frontier Foundation's overview and description of how the Tor network works is here.

When a user wants to access a remote system using Tor, he or she identifies the target site to a Tor access node and Tor dynamically routes a random path through its network to the destination.

The Tor access node receives the user's encrypted message and applies additional layers of encryption, one layer for each server in the path. As the message is routed through the Tor network, each server strips off a layer of encryption and passes the message on to the next server in the chain.

The vulnerability of the Tor network resides at the very last server in the chain, the exit node, which transmit the fully decrypted message to the destination system.

The Tor network description does not merely acknowledge this vulnerabilty but highlights it. However, many users apparently either didn't read or fully understand that, or they forget about it.

It remains to be seen whether this publicity about the Tor network's vulnerability to exit node traffic interception will in effect kill off the service or motivate changes to make it really, truly end-to-end secure. µ

L'INQ
Wired

[REDRUM]

Here is my question though, and unless I read some of the indictments wrong they basically knew who was chating with whom via email, who was ordering, where it was going, so on and so forth during the process of the investigation. So how was this all figured out? Were they able to obtain the emails and correspondence, or what is the story with this?

[bigbench2]

I have started using carrier pigeons.They work very well,and ask for little in return.Like a cage,and some water.LOL

[Snachito]

Originally Posted by bigbench2

I have started using carrier pigeons.They work very well,and ask for little in return.Like a cage,and some water.LOL

LMMFAO!!! Unless the government sends pigeon Hawks to intercept your messages, this is will be the way to go!!