View Single Post
Old 10-29-2009, 07:59 AM  
Libertine
sex dwarf
 
Libertine's Avatar
 
Join Date: May 2002
Posts: 17,860
Quote:
Originally Posted by SmokeyTheBear View Post
any site and facebook is 2 totally different questions.

the easy answer is no they cant login to ANY site


if i code a site with an ultra secure login that shuts off the account for a year after any failed attempts then nobody is getting in without the password period not even me.

Could the fbi call up any site owner and say "get me in to this account or you will be arrested , if you tell anyone you will be arrested" etc etc i'm sure they could get into pretty much any site

But its not such an easy task as you might think , there's logs to alter, tracks to erase etc if they want to do it undetected
The problem is that there are potential vulnerabilities on many levels. Assuming an organization has physical access to your computer (while you're at work, etc) they can track pretty much anything you do.

For full security, you need to work in a sound-proofed faraday cage without windows that only you have access to, use a custom, highly secure OS, use strong custom encryption on all connections, and preferably only connect to trusted others within a private darknet.

I suppose you could go a long way simply with modest means and a bit of time, though:
- locked room that doubles as faraday cage
- OpenBSD with a minimum of services
- freenet over TOR
- only use PGP-encoded messages
- hidden OS on an epoxy-encased portable flash drive
...and some other things

You could probably keep the NSA busy for a few weeks if you tried hard. Of course, they'd just attack the weak point: other people.
__________________
/(bb|[^b]{2})/
Libertine is offline   Share thread on Digg Share thread on Twitter Share thread on Reddit Share thread on Facebook Reply With Quote