Hacker Newsnew | past | comments | ask | show | jobs | submitlogin

Then you failed unless you're talking about defending against people that aren't hackers or have no resources. Going against nation-states, your foundation and security at each layer are probed for weaknesses. Any complex, mainstream platform or application they usually have 0-days for already. So, you have to avoid all that by default. Here's a list of methods of knocking out risk and where to apply them:

http://pastebin.com/y3PufJ0V

You gotta go back to the drawing board. Also, best to leverage components you know they can't beat or have trouble with. GPG and Tor are only two I remember them mentioning by name in leaks as stopping them from reading and tracing respectively. Build a user-friendly tool around that or use its key code in your app to get leverage. Avoid anything they hack easily.



Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: