{"id":17455,"date":"2013-09-06T13:37:56","date_gmt":"2013-09-06T20:37:56","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=17455"},"modified":"2020-05-04T23:55:07","modified_gmt":"2020-05-05T06:55:07","slug":"how-to-combat-nsa-surveillance","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/how-to-combat-nsa-surveillance\/","title":{"rendered":"How to Combat NSA Surveillance (And Keep Fighting for Privacy!)"},"content":{"rendered":"

\"NSA-Privacy\"<\/a><\/p>\n

I was reminded this morning that a recent year was dubbed the “year of privacy,” meaning that it was the year that people began to understand how much surveillance was happening, and how much it could affect their daily lives. Could that year have been 2013?<\/p>\n

Turns out,\u00a0that year was 2012<\/a>. Holy cow.\u00a0So, perhaps that makes\u00a02013<\/a> the year of DUDE, WHERE’S MY PRIVACY!?!?<\/p>\n

A recent Pew Internet study<\/a> indicated that more than half of their respondents were concerned about their private information getting exposed online, up from 30 percent in 2009. Happily, 55 percent of the respondents have taken steps to elude surveillance, though 59 percent didn’t think it’s possible to be completely anonymous online. And 68 percent felt that current laws weren’t sufficient to protect their online privacy.<\/p>\n

Upon reading this, my reaction was hopeful: “They get it.” According to the Pew Internet study, it’s possible that a majority of people finally get that privacy has been dealt a huge blow; they’re realistic about whether they can truly be anonymous online, and that laws are not sufficiently dealing with the problem.<\/p>\n

The latest revelation in the ongoing NSA scandal is that their surveillance efforts include subverting encryption<\/a>. That is to say, rather than necessarily breaking the encryption, they’re doing things to get around encryption, like encouraging the use of weaker standards or putting backdoors in place so that they see the traffic before it gets encrypted. Once again, we turn to xkcd<\/a> for an illustration of this principle.<\/p>\n

\"Principle<\/p>\n

Why spend billions of dollars and CPU cycles breaking encryption, when you can just talk someone out of the keys?<\/p>\n

Cryptographer and security specialist Bruce Schneier suggested<\/a> that rather than worry about the NSA’s surveillance capabilities, we simply make the cost of accumulating information on us more expensive.<\/p>\n

The NSA has turned the fabric of the Internet into a vast surveillance platform, but they are not magical. They’re limited by the same economic realities as the rest of us, and our best defense is to make surveillance of us as expensive as possible.<\/p><\/blockquote>\n

This is much the same tactic that we’ve been suggesting in terms of security. If you make it too costly to get into your machine, attackers will look elsewhere. To help you combat NSA surveillance in this way, Schneier offers several tips.<\/p>\n

In short:<\/p>\n