On 1/28/2023 4:58 PM, Sylvia Else wrote:
>>> Since my data is encrypted before it's sent, good luck to Amazon reading it.
>>
>> Never underestimate the power of US decryption facilities.
>
> It would take a breakthrough in number theory related to factorisation for RSA
> to be broken. There is no reason to think that the US has achieved that.
Or, for <someone> to install a keylogger on your computer and
wait until you access the data -- cheerfully capturing your
300 character passphrase in the process.
You don't attack the encryption; you attack the user of the
encryption.
A colleague used to poo-poo my avoidance of ecommerce relying on
arguments like "you'd have to have a supercomputer to break that
(48 bit, at the time) encryption (for the secure link)." It
never occurred to him that malware on his computer would have access
to the plaintext of all of his transactions! ("Hmmm... how is
encryption going to protect you, there?")
We have a dedicated laptop for all our ecommerce (banking, etc.)
uses. It doesn't handle mail, isn't used to browse the web, etc.
And, reloads the disk image each boot (so no persistent store).
If you rely on any external services, then you have to expose your
machine(s) to that outside world and discipline yourself to keep
them all secure (against even zero-day exploits). Most people
rely on convenience so end up exposing machines that are used
to handle sensitive material, needlessly.
> My cell phone tends to sit on my desk. It would be a rare occasion that I even
> remember to take it with me when I go out.
As does ours. But, no idea what the car reveals and to whom.
Plus, every time we use a credit card or membership card at
a store, etc. A more determined tracker (e.g., police)
could likely pick up visual imagery from the innumerable
stationary video cameras scattered around.
ObChuckle: My sister suspected her husband of some "dallying".
Looking at his phone bill (that she would routinely pay as part
of their division of labor), she could see calls DURING WORK HOURS
that were handled by cell towers located in cities other than where
his DESK was located! (ooops!) And, as he was addicted to his
phone, you could see him traveling from town to town making different
calls in rapid succession -- and deduce his eventual endpoint.
Along with the number of days of work he was missing!
[Towns, back east, are relatively close together so a 10 mile
drive could have you passing through 5 different towns and each
cell tower identifying itself as being in said towns]