Christopher Soghoian

Most-linked posts?

1. How Dropbox sacrifices user privacy for cost savings
   10 people · 11 mentions · first linked 2011-04-12
2. US law protects the right of companies to build strong encryption
   5 people · 8 mentions · first linked 2010-11-17
3. Two honest Google employees: our products don't protect your privacy
   3 people · 3 mentions · first linked 2011-11-02
4. /2011/01/history-of-do-not-track-header.html
   3 people · 3 mentions · first linked 2021-07-06
5. Tech journalists: Stop hyping unproven security tools
   2 people · 3 mentions · first linked 2012-07-30
6. Responding to Wired's ad hominem hatchet job
   2 people · 2 mentions · first linked 2012-08-08
7. FBI seeks warrant to force Google to unlock Android phone
   2 people · 2 mentions · first linked 2012-03-14
8. Do the FBI want you to to keep your content unencrypted?
   2 people · 2 mentions · first linked 2011-02-22
9. 8 Million Reasons for Real Surveillance Oversight
   2 people · 2 mentions · first linked 2009-12-02
10. The DOJ's realtime credit card monitoring system
    2 people · 2 mentions · first linked 2010-12-02

What Hacker News says?

1. btilly · 2013-06-06

   The government's theory is that a national security letter is sufficient to get access to your data. No warrant required. And Dropbox is not allowed to tell you that it happened. And yes, they can give your data to the government. Communications to/from Dropbox are encrypted. But it is unencrypted on the back end. See http://paranoia.dubfire.net/2011/04/how-dropbox-sacrifices-u... for how we can know that.

   Comment linking /2011/04/how-dropbox-sacrifices-user-privacy-for.html

   on “US intelligence mining data from 9 US Internet companies in broad secret program”
2. wglb · 2012-08-08

   Submitted Responding to Wired's ad hominem hatchet job as a story · 344 points

   HN discussion
3. floatingatoll · 2021-07-06

   The overreach is in expanding the original mission of DNT, which was to request that sites not harvest a user’s data for targeted advertising: http://paranoia.dubfire.net/2011/01/history-of-do-not-track-... Expanding that to mean “do not reveal the user’s IP address” is a significant expansion of the original meaning, having little to do with the protection against being individually tracked that the DNT header was…

   Comment linking /2011/01/history-of-do-not-track-header.html

   on “Console Do Not Track – Proposal for a standard environment variable”
4. schwanksta · 2011-04-12

   Submitted How Dropbox sacrifices user privacy for cost savings as a story · 100 points

   HN discussion
5. technomancy · 2011-03-21

   T-Mobile was the only telco that has avoided logging the goods that the feds want: http://paranoia.dubfire.net/2011/03/negative-impact-of-at-pu...

   Comment linking /2011/03/negative-impact-of-at-purchase-of-t.html

   on “AT&T has a fiberoptic splitter copying our data to NSA”
6. sorbus · 2011-08-04

   Submitted Warrantless "emergency" surveillance by DOJ up 400% as a story · 64 points

   HN discussion
7. DanBC · 2013-07-04

   > earnestly trying to build and improve on Cryptocat and shore up any weaknesses The release an insecure product. People tell them it's insecure, and that they don't know what they're doing, and that they should stop. They make a tweak, and release a new insecure version. People tell them that it's insecure, and that they don't know what they're doing, and that they should stop. They make another tweak, and release…

   Comment linking /2012/07/tech-journalists-stop-hyping-unproven.html

   on “DecryptoCat”
8. ddol · 2011-02-22

   Submitted Do the FBI want you to to keep your content unencrypted? as a story · 36 points

   HN discussion
9. tptacek · 2013-07-11

   CALEA does NOT require Microsoft to provide decryptable communications services; in fact it ensures Microsoft can do exactly the opposite. http://paranoia.dubfire.net/2010/09/calea-and-encryption.htm...

   Comment linking /2010/09/calea-and-encryption.html

   on “How Microsoft handed the NSA access to encrypted messages”
10. timf · 2013-06-09

    Submitted Analyzing Yahoo's PRISM non-denial as a story · 35 points

    HN discussion
11. guiambros · 2022-04-24

    To be fair, the DNT launch was botched from the beginning, starting more as hack than an industry-wide consensus [1]. While it eventually got implemented by browsers, it lacked adoption, and had risks with fingerprinting [2]. The nail in the coffin was when Internet Explorer 10 decided to enable it by default [3], completely disregarding user intent. [1] http://paranoia.dubfire.net/2011/01/history-of-do-not-track-..…

    Comment linking /2011/01/history-of-do-not-track-header.html

    on “Google gives Europe a ‘reject all’ button for tracking cookies”
12. llambda · 2011-11-02

    Submitted Two honest Google employees: our products don't protect your privacy as a story · 23 points

    HN discussion
13. DanBC · 2016-05-19

    The authors have been incompetent. Cryptocat has had several severe bugs that demonstrate cluelessness around fairly simple cryptographic stuff. Here's one walkthrough of their broken PRNG: https://nakedsecurity.sophos.com/2013/07/09/anatomy-of-a-pse... Decryptocat lists some of the other bugs: https://tobtu.com/decryptocat.php The response - "bugs happen, we'll fix them" is okay for most other software, but probabl…

    Comment linking /2012/07/tech-journalists-stop-hyping-unproven.html

    on “Open Whisper Systems Partners with Google on End-To-end Encryption for Allo”
14. colinprince · 2013-06-09

    Submitted Slight paranoia: Analyzing Yahoo's PRISM non-denial as a story · 13 points

    HN discussion
15. mtgx · 2013-07-12

    On what legal grounds was Microsoft "forced" to provide access to unencrypted data before encryption (effectively nullifying the security that they promised to their customers)? So how were they forced? Legally? Illegally/blackmail? CALEA seems to say that companies don't have to decrypt data for authorities. I guess it's very convenient that they give it to them before they encrypt it then: http://paranoia.dubfire.…

    Comment linking /2010/09/calea-and-encryption.html

    on “Microsoft helped the NSA bypass encryption, new Snowden leak reveals”
16. dfc · 2012-03-14

    Submitted FBI seeks warrant to force Google to unlock Android phone as a story · 6 points

    HN discussion
17. cpeterso · 2011-04-19

    Due to Dropbox's implementation of de-duplication of identical files, any user can (in theory) determine whether (but not who) some other user is storing the same file. If you upload a file that any other user has aleady uploaded, your file transfer will be nearly instantaneous. See: "How Dropbox sacrifices user privacy for cost savings" http://paranoia.dubfire.net/2011/04/how-dropbox-sacrifices-u...

    Comment linking /2011/04/how-dropbox-sacrifices-user-privacy-for.html

    on “Dropbox Lack of Security”
18. dfc · 2012-03-26

    Submitted Google free to tell user about mysterious gov requests (likely re:Wikileaks) as a story · 5 points

    HN discussion
19. zdw · 2011-04-19

    Couple this with the unencrypted metadata on mobile problem: https://grepular.com/Dropbox_Mobile_Less_Secure_Than_Dropbox... And how their "encryption" on the server side is basically a lie, as they do dedupe on data: http://paranoia.dubfire.net/2011/04/how-dropbox-sacrifices-u... I'm stunned that anyone would use them for anything for ephemeral data you wouldn't mind posting in public.

    Comment linking /2011/04/how-dropbox-sacrifices-user-privacy-for.html

    on “Dropbox Lack of Security”
20. aritraghosh007 · 2012-03-21

    Submitted Firefox switching to HTTPS Google search by default as a story · 5 points

    HN discussion
21. kevinalexbrown · 2012-01-13

    The first time someone pointed this out, the FBI raided his house[1] and sparked a Senate investigation. This was four years ago. I did this to one of my Southwest tickets recently, though didn't use the forged copy. Honestly, it's like they think HTML is unreadable, or, more likely, that it's security theatre designed to make everyone feel safe. I would be okay with that if it wasn't taken so seriously. [1] http://…

    Comment linking /2006/10/fbi-visit-2.html

    on “Circumventing the No-Fly list in thirty seconds”
22. tshtf · 2012-02-23

    Submitted Do Not Track: First they ignore you, then they fight you, then you win as a story · 5 points

    HN discussion
23. scintill76 · 2013-10-08

    > i don't think this is the correct interpretation. in a court of laws, acquiring evidence is something procedural and governed by rules and regulations. having a third party (lavabit) acquire the evidence and then turn it over to the government is probably something that wouldn't pass muster in court due to chain of custody and other rules. Search for "$" on this page: http://paranoia.dubfire.net/2009/12/8-million-…

    Comment linking /2009/12/8-million-reasons-for-real-surveillance.html

    on “How Lavabit Melted Down”
24. FSecurePal · 2011-01-09

    Submitted Useful analysis of the US DOJ Twitter user information request as a story · 5 points

    HN discussion
25. mtgx · 2013-07-14

    > "DuckDuckGo can easily be compelled either under the Communications Assistance for Law Enforcement Act (CALEA), standard court orders, or by secret orders from the Foreign Intelligence Surveillance Court (FISA) to provide tap-on-demand" Can they actually do that? I mean it's one thing to just "hand over the data" you already have about the user, and maybe even compel the company to decrypt it (although I still thi…

    Comment linking /2010/09/calea-and-encryption.html

    on “DuckDuckGo: illusion of privacy?”
26. wglb · 2012-07-30

    Submitted Tech journalists: Stop hyping unproven security tools as a story · 4 points

    HN discussion
27. Nrsolis · 2013-04-04

    http://www.law.cornell.edu/uscode/text/47/1002 "(3) Encryption A telecommunications carrier shall not be responsible for decrypting, or ensuring the government’s ability to decrypt, any communication encrypted by a subscriber or customer, unless the encryption was provided by the carrier and the carrier possesses the information necessary to decrypt the communication." More info: http://paranoia.dubfire.net/2011/02/…

    Comment linking /2011/02/deconstructing-calea-hearing.html

    on “Apple's iMessage encryption trips up feds' surveillance”
28. riffraff · 2011-04-13

    Submitted How Dropbox sacrifices user privacy for cost savings as a story · 4 points

    HN discussion
29. rakkhi · 2011-04-18

    I am massive fan of Dropbox and like to see it doing well. I have talked about its virtues on many Quora posts. I have ussually recommended using a Truecrypt volume within the Dropbox folder to guarantee encryption. Now reading findings like this and the authentication issues exposed in the last few weeks I'm getting quite worried about the security of the whole solution. Going to have to change a lot of my posts to…

    Comment linking /2011/04/how-dropbox-sacrifices-user-privacy-for.html

    on “Dropbox Hits 25 Millions Users, 200 Million Files Per Day”
30. ColinWright · 2013-07-11

    Submitted US law protects the right of companies to build strong encryption as a story · 3 points

    HN discussion

Search all of HN for paranoia.dubfire.net

Linked by the same people?

• JJeremiah Grossmanjeremiahgrossman.blogspot.com
• RRed Blob Games: latest blog postssimblob.blogspot.com
• IIvan Ristićblog.ivanristic.com
• TThe Invisible Things Blogblog.invisiblethings.org
• OOldskooler Ramblingstrixter.oldskool.org
• EEric Hammondalestic.com
• KKevin Underhillloweringthebar.net
• MMitchell Bakerblog.lizardwrangler.com