U.S. officials urge Americans to use encrypted apps amid unprecedented cyberattack
FBI and CISA officials said it was impossible to predict when the telecommunications companies would be fully safe from interlopers.
You're viewing a single thread.
Question for more tech savvy people: should I be worried about wiping old data, and if so for which apps? Just messaging apps, or also email and social media? Or can I just use the encrypted apps moving forward?
the safest perspective to have is this -
every single thing you send online is going to be there forever. "the cloud" is someone's server and constitutes online. even end to end encryption isn't necessarily going to save you.
for example iCloud backup is encrypted. but Apple in the past has kept a copy of your encryption key on your iCloud. why? because consumers who choose to encrypt and lose their passwords are gonna freak out when all their data is effectively gone forever.
so when FBI comes a'knocking to Apple with a subpoena.. once they get access to that encryption key it doesn't matter if you have the strongest encryption in the world
my advice
never ever ever write something online that you do not want everybody in the world seeing.
to put on my tin foil hat, i believe government probably has access to methods that break modern encryptions. in theory with quantum computers it shouldn't be difficult
I'd imagine operating a quantum computer for blanket surveillance is cost-prohibitive, but yea, if you've given them reason to look at you just assume they have the means to break your encryption.
I agree with you and I don't put anything that I would consider questionable online, at least not these days. I'm just having a hard time figuring out what adjustments to make in addition to worrying about personal things I've already shared, like my gender and race. You know what I mean? I'm a married woman, and I have info in various places about our family planning choices, to give an example. That's really starting to worry me, but how can I even begin to delete my data? It's everywhere. Every doctor has their own patient portal, I have multiple email accounts, and I don't even want to think about the dumb shit I might have posted when YouTube comment sections were new.
It's all really overwhelming.
yeah i just try not to think about it. I'm glad I was in the myspace generation during my teenage years. so I was actually able to just delete my myspace later on as an adult
i feel worse for the kids growing up today. they don't fully understand the implications of what they are posting online. anything and everything is being recorded forever. my generation got a chance to be a stupid kid and have it be forgotten. today's kids don't get that opportunity
the best you can do, though, is just stop posting potentially damaging things online. you can't change what you already posted. and 999 times out of a thousand, it's not gonna hurt you.
i understand the overwhelmed feeling though
Thanks, I appreciate the commiserating, it does make me feel a little better.
just wanted to add that deleting an app will not result in deletion of your data stored in the cloud (e.g. your emails)
That I do know. I'm not worried about emails, or really anything specific. My online activity is pretty tame, but that's within the context of a country with a functioning democracy that treats women like free humans. Not a surveillance state that plans to criminalize reproductive healthcare and turn women into sex slaves. I guess the problem I'm having is I don't know how much I need to change my online habits because I have no idea how bad things are going to get.
that's great to hear. in your case not wiping emails and social media is not that much of a danger, I would assume, but I would do it anyway, even if I was not a women, just for the sake of it not being used (theoretically) for ads and such anymore. but be sure you have backed up every email and post you will delete, and storing it securely
That depends on the privacy protections where you live and the policies of each service:
For the first two, I wouldn't bother. I personally poisoned my data with Reddit before leaving, because I've heard of then reversing deletions. For the third, deleting may make sense.
But in general, I'd keep your other accounts open until you fully transition to the new one.
Below is information when considering a replacement service.
Anything where data is stored on a server you don't directly control can be leaked or subpoenad from the org that owns that server. Any unencrypted communication can be intercepted, and any regular encryption (HTTPS) can be logged by that server (e.g. under court order without notifying the customer).
Even "secure" services can be ordered to keep logs. Here's an example from Proton mai, and here's one involving Tutanota.
So it depends on your threat model, or in other words, who you're trying to keep away from your data. Just think about how screwed you might be if:
The answers to the above should help you decide which to type of service you'd feel comfortable with, and what tradeoffs you're willing to make.
Check out your old reddit account. I poisoned my data, too, then deleted it, but they restored it completely like the bastards they are. I deleted my 2F too, so it's there forever now.
Yup, I figured that would be the case. I "deleted" my account, so I can't go verify, but I let it sit for a couple weeks and my poisoned posts were still there (even got a couple replies asking WTF is up w/ my comments).
So yeah, not sure if my data is still there or not, but at least I tried.
Wiping old stuff won't hurt, but they might not actually delete it.
That's definitely something I worry about, especially after the recent reddit clusterfuck.
