a thoughtful web.
Good ideas and conversation. No ads, no tracking.   Login or Take a Tour!
comment
squirvel  ·  3376 days ago  ·  link  ·    ·  parent  ·  post: To Encrypt or Not?

As big as an advocate for encryption I am, full system encryption is only useful if the computer isn't connected to the net, or you want to prevent the average Joe from accessing your files. (Note that this is for personal computers, servers are a VERY different story.) If it is connected to the net, malicious code is far more likely to compromise your system than someone cracking your password.

Tor and VPNs are more privacy related than anything else, and for the most part any major VPN provider will log the connections for government agencies. Tor is a bit harder to crack, but assuming one can control a good portion of entrance and exit nodes, one could potentially de-anonoymize a certain percentage of connections.

PGP is a great example of secure messaging and is one of the many things that I should, but don't have a firm grasp on, or use at all. For me that's pretty surprising, especially with the alarming amount of surveillance in these days. One thing to note though is that PGP usually uses RSA encryption which is based on modulo functions with very large prime numbers as a result. One thing to note is that smaller sized RSA keys such as 256bits are (<--- Note the publishing year) completely insecure due to advances in factoring technologies. If you looked at the last link it also talks about the equation for the "number n, there exist prime numbers p and q such that n = p × q." Reversing the equation we get the P versus NP problem, which I'd recommend reading the consequences if p = np or not. As a side note google in 2012 began using 2048bit RSA keys, although I'm pretty sure they now use 4096bit, but I can't find any articles on that.

Outside of factoring, there are also other mathematical methods of encryption, such as elliptical curve. (Which I have far less knowledge of) However, encryption isn't everything. For example, you can crack any password for 5 dollars. Along with that, encryption can be made insecure due to malformation of keys, non-truely-random code, OS caching (ex: paging file, assuming you're not running full disk encryption), and potential spies.

In the end however, I believe that encryption is important to privacy, security, and our freedom. Keeping your data safe from outsiders can only be done by securing not only your hardware, but the far more vulnerable software. Encryption is needed in communication, transactions, and privacy as without, so many things would be in the eye of the public.

As an ending note, I think it is far more important to tie both encryption and anonymization together, as if either is broken, then the other becomes far easier to break and hence your privacy, freedom, and security become compromised.