Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

> Yes, transmission is triggered on-chip, but who verifies every chip fabrication is performed using the same imprints? You think governments don't have factory floor managers in their pockets?

If you're willing to accept changed chip silicon as a possible attack vector, then you need to start worrying about a rather large set of devices. Your laptop is internet connected and has a microphone. So is your phone. Your TV is probably internet connected, and if you're fiddling with the production line, why not add a tiny microphone? I could go on.

An attacker with a good budget, influence and capability like the NSA is always going to be able to snoop on an individual if the requirement is strong enough. Some hardware limitations probably set the bar high enough that you don't need to worry unless you're an international terrorist.



Fine, but just because someone could bulldoze my house doesn't mean I don't lock the door. Just because I could have a heart attack doesn't mean I don't use condoms. And so on.

> you don't need to worry unless you're an international terrorist.

Or a person with a conscience who could be threat to people in power without one. For some reason I doubt that, say, people involved in extra-judicial killings, are really worried about being caught. At least one of them is known by name and proud holder of a peace nobel prize. So I'd say if you are a heavyweight criminal already on the payroll, you have nothing to fear period. Small fish and decent people, on the other hand, well. Do you think people like Poitras or Appelbaum don't get snooped on? Would you call them international terrorists? All sorts of activist groups get monitored, and no, it's not because they're all terrorists in spe. You may believe that, I don't buy it for one second.

> Your laptop is internet connected and has a microphone. So is your phone. Your TV is probably internet connected, and if you're fiddling with the production line, why not add a tiny microphone? I could go on.

Don't have a laptop, if I did, killing the crappy microphone in it would be trivial and not a big loss since when I use a mic, it's one I connect manually. Don't have a smartphone, though I doubt that matters; but my phone doesn't have 7 microphones in it, and I doubt you could record anything useful with it while I have it in my pocket. Last time I had a TV was in the 90s. So maybe actually do go on?

And even if none of that was true, I don't see how it constitutes an argument; as I said, it's a bit like saying I shouldn't worry about the poison I just ate because I also have cancer. How about I worry about, and try to undo, both? I don't care about chance of success either, I can still get washed downstream when I am a dead fish, there will always be infinite time for that.


Exactly. Or, just good old fashion spy mics and cameras, perhaps placed by police, NSA, or anyone who has been shopping at the Spy Shop.


The troubling thing is it's incredibly cheap to spy on someone now. The resources necessary are not acting as a natural balancing point to prevent overreaching government.

In the past, you used to have to have physical access to the location to install the device. You also needed a listening post close by and a power source to hook the device into, if you wanted long term monitoring.

After you install the listening device, you needed to pay someone to listen to the conversations for hours and take note of anything that needed closer analysis.

All of that is incredibly expensive and difficult to scale.

Now, the device is already installed in the home or carried around on the person (via smartphone). The target takes care of charging the device for you and the information is transmitted across the country via internet connection. Massive computer networks process the data and flag the important parts of conversations.

The cheaper and more automated spying gets, the easier and more indiscriminately it can be done. Criteria for snooping drops because it's so dramatically cheap, the resources are no longer a bottleneck.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: