In RetroTech: NetLingo Blog

The NSA has cracked common forms of encryption used not just by terrorists, but also by regular consumers and businesses.

Is anything online safe? asked Larry -Seltzer in ZDNet.com. Last week, a joint report from The Guardian, The New York Times, and ProPublica.org revealed that the National Security Agency had managed to crack many common forms of encryption used on the Internet not just by terrorists, but also by regular consumers and businesses.

The NSA’s efforts appear mostly geared “to get around the cryptography rather than to break it directly,” often using “black hat methods.” The truly upsetting revelation is that the NSA is allegedly working hand in hand with tech companies to gain backdoor access, allowing analysts “to sniff traffic to these sites unimpeded by encryption.”

Let’s not freak out, said Sean Lawson in Forbes.com. “The fact is that the NSA is not likely to want into your, or my, computer.” The real problem is that other people might. It now appears that some common tools—like the encryption many companies use to protect their private networks and the 4G/LTE encryption used by wireless carriers—might be vulnerable to NSA intrusion.
But such encryption can still “provide protection against the more likely threat, which is a malicious actor in the coffee shop sniffing traffic and stealing personal information from other users.” The key to personal Internet security is to stay vigilant. It makes no sense to abandon tools that enhance your privacy out of concern over “a ubiquitous adversary that is likely not targeting you, and that you likely could not stop anyway.”

And there are plenty of such tools at your disposal, said Bruce Schneier in The Guardian. As long as you’re using the latest software, the best encryption available, and a strong password, odds are your data will be safe, at least from the garden-variety hackers that do the most damage. But if you’re concerned, start using software like Tor, which anonymizes your network activity. Hackers and the NSA might target Tor users and others who encrypt their communications, “but it’s work for them.”

And by taking those precautions, “you’re much better protected than if you communicate in the clear.” For the absolute highest security, break the chain of transmission with an “air gap.” That is, buy a new computer that has never been connected to the Internet and transfer files only on physical media, such as USB sticks. And don’t trust commercial or proprietary security software, especially from larger vendors. “My guess is that most encryption products from large U.S. companies have NSA-friendly back doors.” Open-source products are much more difficult for hackers to secretly infiltrate or modify.

Subscribe to the NetLingo Blog via Email or RSS here!

Source: GreatBusinessSchools.org

According to some experts, Internet freedom is in danger. L. Gordon Crovitz in The Wall Street Journal reported that the Obama administration announced plans to relinquish oversight of the Internet Corporation for Assigned Names and Numbers, or ICANN, an international consortium of business groups and government agencies that assigns and maintains Web addresses and domain names. But the move will invite “Russia, China, and other authoritarian governments” to “fill the power vacuum caused by America’s unilateral retreat.” Russia and China have already pushed to get rid of ICANN altogether, looking to replace it with a group that would outlaw anonymity on the Web and tax sites like Google and Facebook to “discourage global Internet companies from giving everyone equal access.”

“Hold on a minute,” said Katherine Maher in Politico.com. “No one actually ‘€˜controls’ the Internet.” ICANN’s job is to coordinate the names and numbering system used to “match human-readable domains” with their number-based Internet Protocol addresses. And while ICANN is technically based in California, the organization has offices all over the world and commercial and noncommercial members from 111 countries and international organizations. That’s why ceding U.S. control of ICANN is the right move, said Edward J. Black in HuffingtonPost.com. With each new revelation of online surveillance and censorship, it’s becoming clearer than ever that Internet freedom “faces unprecedented challenges.” By “strengthening a multi-stakeholder group like ICANN,” the Obama administration is trying to pre-empt a political standoff with other world powers over Internet access for the general public. After all, “we do not‘€”and should not‘€”try to retain or expand the role of any governments seeking to control” the Internet, including our own.

But try telling that to lawmakers, said Brian Fung in WashingtonPost.com. Politicians worry that a multi-stakeholder system “could enable foreign governments to impose regulations on the Internet.” They just don’t get that the United States’ oversight of ICANN has been mainly symbolic. In fact, it is precisely our government’s nominal position atop the addressing system that “gives Russia and China the grounds to call for a different” one. Ceding control doesn’t open the floodgates for Russia, or China, or even North Korea to “run roughshod over the Web.” Instead, it evens the playing field. And since ICANN is specifically set up to prevent “any one actor from dominating what happens,” any fears about a foreign takeover of the Web are pretty far-fetched. What’s more, ICANN so far has proved rather effective at “keeping Russia, China, and other authoritarian regimes in check.”

- As seen in The Week
Subscribe to the NetLingo Blog via Email or RSS here!