Showing posts with label government surveillance. Show all posts
Showing posts with label government surveillance. Show all posts

Former NSA contractor develops font designed to combat government snooping

by Michael Smith (Veshengro)

ZXX-Font-1372075525-0-11Sang Mun is a former contractor for the NSA. Mun created the font as a response to increasing government incursions on privacy. “I have become dedicated to researching ways to ‘articulate our unfreedom’ and to continue the evolution of my own thinking about censorship, surveillance, and a free society,” he explained to Reason Magazine, after releasing the font online in June 2013.

The font is intended to work by throwing off Optical Character Recognition (OCR) software with the unique and noisy style.

This font is reckoned to be a great weapon in the war on America’s privacy. It is encouraging to see such proactive measures being taken. You can download the font for free, here.

Below is an open letter from Mun explaining his reasoning for disseminating the ZXX font.

I do not know what OCR system the “author” of the fonts has used but in tests of converting documents written in any of those fonts, turned into PDF and then using an OCR extractor in a program the material was read back perfectly. This leads me to believe that it may work as far as letters are concerned but not for emails or other electronic communications. Especially after having used the font to write an email also and upon receipt it was nicely in clear text.

If you really want to avoid government snooping it would appear that we need to develop codes, like the spies of old did, using numbers derived from books that the sender and the recipient use as base, that is to say the book cypher. And, the book cypher is almost impossible to crack by electronic means as the finding of a message still attached to a dead carrier pigeon of WWII showed. The code cannot be broken without knowing the relevant book or books used to generate the code and not even the most sophisticated computers that the NSA or GCHQ use cannot do it.

Whether this font will be able to throw off the scanning software intend for storage of intercepted material will remain to be seen. The one that scanned from PDF to text that I used, a free program, did it with ease and even with the version with the greatest amount of “noise” of this font.

The jury is still out on this, I am sure. Thus, if you want to securely communicate use a good book cypher and change the books used all the time.

You should have at least six different books from which to generate the cypher – though you don't use those books all at the same time – and your communications will be uncrackable. You then use a number code, either five or six digits, corresponding to page number, number of line, and word in that line. Simple but basically uncrackable.

Use the font by all means if you want. I will do too. By mixing the font versions, as indicated in the picture, however, throwing the system off may be possible. But real important stuff will be sent in code.

© 2014

Is it time to rethink our communications?

Is it time to rethink how we communicate and what means we use?

by Michael Smith (Veshengro)

In the light of the government surveillance of Internet traffic, etc., it may be time to rethink how we communicate with one another and which steps to take to regain our privacy.

When it comes to letters and especially emails the use of ciphers may have to be considered once again to stop the authorities spying on the content of such messages.

dead drop1However, any algorithm-based and especially computer-generated codes and cyphers can be broken by the same machines that generate them. It has been shown, though, that messages as were created by espionage agencies during the World Wars, the Cold War, and already before, are, basically, uncrackable by computers. The message found on the leg of a dead carrier pigeon from the time of WWII in 2012 in Britain and which GCHQ and other have admitted they will never able to crack as they cannot understand what the code is based on. It could appear that that particular cypher is based on a book that both the sender and recipient had and the code based on that.

The 5-figure code thus created never repeats the same number for the same letter or word and thus is, basically, uncrackable, at least not in a short space of time, not even by the most powerful computers.

Both emails and letters have been and are subject to intercept by the like of the NSA, GCHQ and other spy agencies and while emails will arrive at the recipient letters may not or are also subject to intercept and then delivery, slightly delayed.

While, in theory, law enfarcement (no, this is not a typo) do require a warrant to intercept mail (and this goes also for telephonic communications) the truth is a different one and intercept without warrant happens rather all too frequently.

We can always, nowadays, take it for granted that the authorities will take it upon themselves, claiming they have to act to prevent terrorist attack, to read the letters (and other postal communications) of people who they deem to fall into the terrorist category, and this could even simply be journalists and bloggers.

So other ways needs to be found and used to prevent such intercepts.

Here we may have to reconsider, and I use that word deliberately, the use of couriers and dead letter drops.

Such couriers, as in the days of the coffee houses of old and the penny post, could just be someone who travels to a certain location where he or she either drops a letter or package off at an address or, better still, some other collection point. In the days of the penny post such a drop off point was another coffee house, obviously, where the recipient would visit daily or every so often and then take receipt of his mail.

It is a sad state of affairs that in a so-called free society one has to even consider such steps despite the postal law that states that tampering – and that includes the agencies – with the mail in any shape or form is a felony. It would appear that the law only applies to ordinary mortals and the agencies deem themselves above the law and, apparently, are treated in such a way as well by the law.

Every citizen is, in our society, which is supposed to be free, regarded as a terrorist and criminal, so it would appear, considered guilty until he or she can prove him- or herself innocent and every contact one may have and correspond and communicate with, whether by email, mail, telephone or social media is considered a co-conspirator.

It has to be assumed that even if the authorities are not reading each and every mail and email the details of sender and recipient are being recorded and archived “just in case”.

Dead letter drops – and no, you don't have to kill the letter first – can be many kinds of locations and I am sure that we all have seen such in use in spy movies or read about them in the appropriate kind of books. But dead letter drops were not just used by spies but also by others who had to operate in one way or the other clandestinely and it would appear that in our society today we all will have to send much of our communications in one or the other clandestine way.

Other ways of such communications are letters (and emails) that appear totally normal stating, for instance, that “Uncle Jim's cow has a new calf”, but the true meaning being only known to the sender and the recipient. Such messages were used, by radio broadcast via the BBC in those days, for the resistance and SOE agents in occupied France.

Telephonic communications cannot, unless one has a serious end-to-end encryption VoIP system, be considered secure at all and cell phone communications not at all. All must be regarded as being monitored and thus we must either work out codes with the other side or, on the other hand, be careful what we say and how we say things.

The spy agencies of our various countries, external and internal, employ computer programs – Echelon and Carnivore being just two of them – that scan in real time for so-called key words and the list of those words is available on the Internet on more than one location. The mere use, in email or telephone call, of such a key word or several of them will immediately trigger the program to intercept and record the communication and may render the parties subject to investigation and further surveillance.

Government and its agencies are definitely out of control and no change in government will make the slightest difference. It would appear that, while we are all being considered terrorists and criminals we will have to make the change and change the system, not the government.

© 2013