FRESH

Hacker News

XKeyscore

108 points by belter

by monerozcash

2 subcomments

by apt-get

3 subcomments

How relevant is this (and the NSA's general spying capability) in 2025?
We hear a lot about local agencies perusing the services of private companies to collect citizens' data in the US, whether that's traffic information, IoT recordings, buying information from FAANG, etc. What's the NSA's position in the current administration? (e.g. we've heard a lot of noise in the past about the FBI and CIA getting the cold shoulder internally. I wonder how this applies to the NSA.)

by codedokode

2 subcomments

This is a reminder why all the traffic should be encrypted and obfuscated (i.e. no SNI in clear text). Ideally, the traffic should be encrypted to resemble a random noise. If you are making an app, you can embed public keys and use those to completely encrypt traffic, without relying on CAs.
For example, Telegram does this, using a homemade encryption protocol that has no clear-text SNI like HTTPS. As I remember, WeChat also uses some home-grown form of obfuscation.
As a bonus, this makes it more difficult for telecoms to discriminate against certain sites or apps and helps enforce net neutrality no matter if they like it or not.

by runjake

3 subcomments

0 subcomment

by tehjoker

1 subcomments

Back in they day, it is claimed they could only store 20 TB a day, but technology has improved considerably... but so have data volumes. I wonder if they can store more content for longer now or if the volumes have increased too much.

by sdigf

1 subcomments