105 Comments
- hackertamer, on 11/10/2007, -1/+49I commented this on the actual blog as well, but whose idea was it to block out text using vector blocks?
http://i219.photobucket.com/albums/cc255/hacker_ta ...
http://i219.photobucket.com/albums/cc255/hacker_ta ... - tehowe, on 11/09/2007, -0/+35This is what PGP is for.
- eecue, on 11/10/2007, -3/+38Wow that's not good. I've never used hushmail, but I know a bunch of security minded folks who do, or did.
- lunigma, on 11/09/2007, -4/+36What the *****!
- Afronautica, on 11/09/2007, -6/+36I've always held the belief that signing up to a paid "100% Anonymous" internet/email service is on par with calling up the police to report your weed is stolen.
- breckinshire, on 11/09/2007, -3/+17Morld of Marcraft?
- serrebi, on 11/09/2007, -0/+13I've seen in many a nfo scene release groups using hush , I thought it was stupid when I saw it.... So, hopefully this will change things...
- isntreal, on 11/09/2007, -0/+11sucks for the comcast mole!
- williamdyer, on 11/14/2007, -1/+11Which is why any DECENT service would make it so they could only hand over very limited customer records and no cleartext at all. Hushmail is now *****-on-a-*****-boar-useless-mail. The government can go ***** itself, too.
- ashlvsya, on 11/09/2007, -1/+10Thunderbird with Enigmail, one of the only truly secure methods to encrypt email. If you don't like Thunderbird, but run Firefox, then get the FireGPG plugin.
http://enigmail.mozdev.org/
http://firegpg.tuxfamily.org/
If it's not open source don't trust it!!! - Mjeacoma, on 11/09/2007, -0/+9I am just curious why they couldn't invest in a dvd-r dual layer burner and just burn the data on 2 discs.....
- SomeImagination, on 11/09/2007, -1/+10Not good news for warez sceners, this could as easily happen to them. I know a lot of groups use hush as their mail provider
- totorototoro, on 11/09/2007, -1/+9So because running Java was too ***** tedious, people just went thru an easier route, which wasn't secure? Damn.
- saintdesy, on 11/09/2007, -0/+8You can do that?!
*searches frantically* - ultrafez, on 11/09/2007, -0/+8Lol somebody got fired
- freshgrease, on 11/09/2007, -0/+7Man, Sometimes I just want to hang Big Brother.
- Otto, on 11/09/2007, -0/+7HAHAHAH! You'd think they'd learn how to do redaction properly after all this time. Just drawing blocks on the data in Adobe doesn't block them out.
- we.are.devo, on 11/09/2007, -0/+6Depressing.
- Jomwilli, on 11/09/2007, -0/+6OK GUYS, How many of you and your friends use Email Encryption? How about Email Digital Certificates?
Yeah, that's what I though. - mindcrime, on 11/09/2007, -1/+7[quote]Erm, check your laws. If they give a VALID search warrant signed by a judge, you MUST comply. If you do not the number of violations they can throw at you are insane. Not the least of which is aiding and abetting (yes, I doubt I spelled it right). That doesn't mean you should just give in when the CIA/FBI/NSA comes calling, but if they have a warrant, you have no choice.[/quote]
Sure you do, you *always* have a choice. Some choices have potential repurcusions that make them unattractive, but please don't portray it as a case where there is no choice. You are *not* obligated to do any and every thing that The State orders you to do. And until more people wake up to that fact and start asserting their rights, The State is going to continue to encroach further and further on our inalienable liberties. - Mjeacoma, on 11/08/2007, -0/+6I made my dumb comment but it didn't show so I posted again
damn digg comment system - should have del - mattsw84, on 11/09/2007, -0/+5(tinfoil hat on) A CIA front company setup and ran Hotmail and USA mail in the nineties and also numerous re-mailers that were popular with hackers which were used to send "secure email" Yeah they read all your business!. (tinfoil hat off).
- Neiby, on 11/09/2007, -3/+8Yes, but using PGP is a hassle. Email encryption, in general, is a hassle. We need to re-think how we're doing things. We really need a simpler way to do it, but I have no idea what that would look like. Imagine how many people would use SSL, as an example, if it's use was as much of a pain in the ass as email encryption is?
I really have no suggestions because this isn't my field. All I can offer is a user's perspective. I would use email encryption all the time if it were feasible, simply because I think our communications should be secure no matter what is being communicated. - FelixdaaHack, on 11/09/2007, -0/+5time to close the hushmail account...they need to move their servers to a country that doesn't cooperate with US subpoenas/court orders
- gaiserrc, on 11/09/2007, -0/+4Getting lazy and using the less secure method at Hushmail and getting caught... priceless
- khyberkitsune, on 11/09/2007, -0/+4Well well, looks like the submitter knows nothing about encryption laws.
Most nations require you to release the encryption keys to the government before they okay the use of your protocol. So any government agent can likely read hushmail.
And this is why I run my own email server - I block all gov't IPs and all known proxies thanks to blackholes.us - rot13ubercrypto, on 11/09/2007, -0/+4I don't believe that the US has the equivalent of the UK's RIP act (I think it's still in force, feel free to correct me.) As I've always understood it, this act requires you to provide means for decryption of encrypted information in your possession to law enforcement, so providers and such would have to have the means to decrypt info if told to do so by police.
If hushmail really did not have the possibility of decrypting information, no law in the US that I know of (again, correct me if I'm wrong) should oblige them to give police access to that information if it is simply not technically possible for them to do so, warrant or not. Aiding and abetting is not applicable here, as they are providing a service for everyone, and can make the case that they are doing so in good faith. - op12, on 11/09/2007, -0/+4Yeah, but as the article mentions, even the Java users could have their information collected. It might involve some more work, but they'd still comply with a court order. So it's not like they were that much more secure from a court order.
- hackmyballs, on 11/09/2007, -1/+5oh *****, all those emails I sent to congress about impeaching bush are now in FBI's hands?
I guess i'm *****!
*buys ticket to new zealand* - totorototoro, on 11/09/2007, -0/+4I just hope Hushmail popped up a huge warning requestor when people bypassed it: "DANGER WILL ROBINSON! DANGER!"
- Nougat, on 11/09/2007, -0/+4Which raises this concern -- this was a Canadian company, and I'll give them the benefit of the doubt that they were adhering to a legal and specific Canadian court order. In the US, as we well know, surveillance is a world-girdling dragnet, collecting up everything from everyone, without specificity, without oversight.
So, are there any US companies that provide similar services, which have capitulated to such a search without a specific and legal court order? - LogicBomB, on 11/09/2007, -0/+4I've never needed to use encrypted email but that would really, really bug me if I did. Hell it bugs me now and I don't even need it.
- Flummoxer, on 11/09/2007, -0/+4He said "one of."
- jscnet, on 11/09/2007, -2/+6http://www.pgp.com or http://www.gnupg.org --> problem solved.
- c0nv1ct, on 11/09/2007, -0/+4With Thunderbird and OpenPGP, its not a hassle, encrypt and decrypt with a simple click. I don't see why anyone would pay for a hushmail account when gmail offers imap/pop3 with ssl for free. You wouldn't have to trust some 3rd party to handle your encryption, when you can do it yourself.
- AlphaBronco, on 01/25/2009, -0/+4Observe how Hush, inc. rolls over for the HEINOUS CRIME of purchasing anabolic steroids. Sickenening.
- encognito, on 11/09/2007, -0/+3I have used Hushmail back in the day as well as PGP. Trying to convince other people to use encryption in email is a PITA. Also I am surprised you would post another message in this thread after your earlier meltdown.
- roguetrick, on 11/09/2007, -0/+3In Soviet Russia, Big Brother hangs YOU!
- Jomwilli, on 11/09/2007, -1/+4no, the people on the other end (Receiving) also has to have pgp or gpg installed.
Guess what, there's a good chance your mom doesn't. Nor Grandma, your girlfriend, or your buddy that sends you random nude pictures at work. - AlphaBronco, on 01/25/2009, -0/+3Whether or not something is "legal" or not doesn't mean dick. Governments simply pass "laws", which are nothing more than a pack of self-serving opinions backed by guns, so that they can commit whatever crimes they want with impunity.
The biggest threat and criminal gang around that we need protection from is the goddamn institution of government itself.
So ***** them and their "legal court orders". - redcard, on 11/10/2007, -0/+3They do. I work at a software company, and we recently had to file disclosures about the types of encryption we use as well as our contact points for disclosing the keys to the encryption..as well as a generic example of what is going to be encrypted.
- Jomwilli, on 11/09/2007, -1/+4It's really easy for all of you guys to say, "Just use GPG or PGP" and problem solved.
Nobody uses it though. I'm a Cyber Security Professional and nobody uses it except other Security guys.
This is where it fails.
Reply below me if you have even a free digital email certificate. - shodanx, on 11/08/2007, -0/+3hahahah the funniest is there is a linked interview to NPR on the home page of hushmail and it reads
Technology
E-Mail Encryption Rare in Everyday Use
by David Kestenbaum
Listen Now [4 min 20 sec] add to playlist
Morning Edition, February 22, 2006 · Many Americans have expressed concern over the Bush administration's eavesdropping program. But there's a simple solution for anyone concerned with prying eyes, at least when it comes to e-mail: encryption.
BWWAHAHAHHAHAHAHA - Elrod, on 11/11/2007, -0/+3Week #1: "The ***** crows at dawn."
Week #2: "There is a lamp in Idaho."
Week #3: "The nurses run naked in Portsmouth General."
Week #4: "Betty has a new stove."
Week #5: "Getting back to the nurses, Sheila gives great bedside manner."
Week #6: "No, really. I went in with a broken leg, and Sheila fixed me right up. Almost didn't notice the leg until I left the hospital. It was great."
Week #7: "They're adding a new wing, so it should be even more convenient."
Week #8:... - Rijnzael, on 11/09/2007, -0/+3Indeed. Putting trust in a 3rd party to not be affected by laws, court orders, and subpoenas is a bad idea. The only way to verify privacy is to do these things on your end.
- mexifelio, on 11/09/2007, -0/+3Someone should forward those pics to Tyler's Lawyer
- sancho, on 11/09/2007, -1/+3You'd think that if you have no concept of how secuirty and encryption work. There is no good solution for encrypting e-mail because key management is a pain in the ass.
Say you turn on this "simple" feature. Then you send a message. How is the person on the other end going to decrypt it? - AlphaBronco, on 01/25/2009, -0/+2I've used an @hush.ai email address for years now, and as far as I can tell all access to my account is via the servers in Vancouver, BC.
- SomeImagination, on 11/09/2007, -0/+2The C.O.R.E stands for "The Challenge of Reverse Engineering" ;)
- williamdyer, on 11/09/2007, -0/+2I'm aware of the key management issue. That can be solved. It should be no harder to find a mail recipient's key than it is to find a time server.
-
Show 51 - 100 of 104 discussions



What is Digg?
Browsing Digg on your phone just got easier with our enhancements to the