Print

Please login or register.
1 Hour 1 Day 1 Week 1 Month Forever
Login with username, password and session length

[NEXUS2345]

@NS

The most contentious part of the forthcoming law is a requirement that communication providers keep a log of their customers net browsing behaviour for a year.

This will involve ISPs keeping a record of what websites - but not specific web pages - and chat apps their customers made use of and when.

Dozens of different bodies, ranging from the police to the Food Standards Agency, will be able to request access to this information without requiring a warrant.

There has been concern that the system is open to abuse, as the requests will not be vetted by an independent body. Moreover, the database presents a tempting target for hackers.

Source: http://www.bbc.co.uk/news/technology-38134560

[Chrysalis]

Sad situation that ignition has even been told to shut up about it.

Its probably wise to assume they can do everything that is technically possible, which is knowing results of all dns lookups, destination end points, content of unencrypted packets, encrypted packets forwarded to GCHQ for attempted decryption.

How to know source devices on ipv4 NAT?, they can scan headers of packets for identifiable patterns. IPv6 makes this easier with devices getting individual routable addresses.  I think its no coincidence that uk isp's are now finally rolling out IPv6 at a time the gov wants to spy on everything.

Using a VPN on your entire WAN (router as endpoint) will likely circumvent the majority of any data collection, however with a performance hit.  Dnscrypt combined with using encryption on as much stuff as possible will be much more acceptable performance.

Configuring software to make it more secure as well of course also helps, browser fingerprints and what not can be removed/spoofed, dns prefetching is something to consider if want to disable it.  Prefetching has pros and cons, the cons is that it can indicate what you were doing prior to loading a page as each link on pages you viewing a dns lookup will be carried out, on the other hand prefetching can flood their logs with a ton of ip's that you never visited and could be considered if you like poisoning their logs.

The idea google and others including me are pushing is a encrypted only internet, encryption is now very cheap, cheap in financial cost and computing cost.  We have aes accelerated processors, and the excellent chacha ciphers for non aes devices. http/2 can make https faster than plain http, and letsencrypt provide free certs. 

Be aware IPv6 is quite effective from the off, in data volume more than 50% of EE's traffic is IPv6 and sky is about 35-40% over 6 million customers.

Also to anyone using a VPN or dnscrypt, I suggest do not use UK hosted services, which the gov will have power over.

My dnscrypt is currently hosted on a UK vps I lease, but I have managed to source hosting in france with just a few extra ms than london, so plan to move my dnscrypt endpoint to there. IN addition in the french location I lease the entire server which is somewhat more secure than just leasing a vps.

I already dont host any of my own email or www services in the uk.  So e.g. I dont have to comply with uk email log retention laws.  For SEO worries the french location funny enough can supply ip's registered to the UK.

[NewtronStar]

Look there has been a lot of hysteria into this subject and the media sucks it up and blows it out of context if they did this it would come under as an abuse of human rights, but as this bill or power needs a warrant before evidence is released it's within the UK law.

What worry's me is what have you got to hide we all use facebook /social media and other stuff so we are building up are own profile for non authority's, you are most likely to be hacked and information being sent to hackers than to the UK governments MI5

[NEXUS2345]

NewtronStar, please refer to my previous post. Any government department can request access to the data WITHOUT having to obtain a warrant. Only in-depth surveillance on a particular individual or group requires a warrant.

[NewtronStar]

NewtronStar, please refer to my previous post. Any government department can request access to the data WITHOUT having to obtain a warrant. Only in-depth surveillance on a particular individual or group requires a warrant.

That is not true, this bill is for evidence when the criminal faces the court, in many cases the criminals PC history was denied access by ISP's this bill allows access to Internet history via a warrant to gain more evidence to send the crim to prison

[Bowdon]

Doesn't Win10 lock to your motherboard these days?

So if they can identify the motherboard serial number then it might be possible to trace you through all the encryption? Though I guess they would have to find you first lol.

I still say the purpose of this is to harass people with opinions Big Brother doesnt like.

I know in the US if you complained about fluoride in water on social media a note was made against you by certain groups.

In this world if you start speaking a rebellious opinion you will expletive someone off.

Here is the actual bill: http://services.parliament.uk/bills/2015-16/investigatorypowers.html

Apparently it got royal approval today 29th of November.. so does that mean its now law?

[NewtronStar]

Doesn't Win10 lock to your motherboard these days?

Now your going into the weird place called conspiracy theories don't go there "forever will it dominate your destiny 

Just use your PC and Internet as you do, you won't be going to prison by looking at a KKK site,

[phi2008]

For those people who don't feel comfortable with US VPNs(and their "Wild West" law enforcement and intelligence agencies) here's a list of non-US providers. I have accounts with AirVPN(who I like better than the many other providers I've used so far) and BlackVPN(though I purchased both under Black Friday discount deals) -

https://www.privacytools.io/#vpn

 

[shadow4dog]

The biggest issue I have with this law is that it allows mass interception of communications of everyone in the UK, without the proper oversight of the judiciary. If judges decided what could be accessed by whom I would feel slightly easier.

This could be easily abused by politicians who could use it to silence their political enemies. It's been done in the past and will no doubt continue. These techniques have been used by oppressive regimes around the world to control their citizens for years.

And for this reason I will start using a VPN when in the UK.

[Dray]

Are you aware that encryption backdoors have been made law? http://www.theregister.co.uk/2016/11/30/investigatory_powers_act_backdoors/

[renluop]

Sorry, but at the risk of making myself more unpopular, whenever I see a "they could do this or that" in a discussion, I wince metaphorically. There are thousands of things that benignest authorities could do, but don't.

We live under in my own opinion a benign authority, and you'd know if we didn't. So much so, that  your thoughts here might lead to problems. TBAH I consider, we put ourselves in danger of having what you all definitely would not want one bit, by conspiracy theoretic opposition.

[Weaver]

It's ironic that Chrysalis is using servers hosted in France. Good for you, btw. Wasn't France very anti-encryption twenty-something years ago?

[Weaver]

I read that RevK of Andrews and Arnold is looking into placing VPN servers or similar in Iceland among other countries. I thought the Netherlands used to be a good bet?

I had thought about parking my spare Firebrick router at AA’s current hosting facility, then I could do all sorts of good things with it, but the monthly costs of £15 pm for hosting would, I suspect, be only the start of it, as it seems possible that I would get charged for traffic (again). (Inbound? Outbound to the device over the hosting facility's LAN ports?)

[phi2008]

If you just want to stop logging and aren't bothered about your IP address being linked to you there are always 101 dirt cheap Virtual Private Server  deals on the go - simple to set up a VPN server, I've done it many times - many guides on the web.

https://lowendbox.com/

[Weaver]

I was / am interested in setting up a remote Firewall.