https://archive.md/QMvAI

With just $800 in basic equipment, researchers found a stunning variety of data—including thousands of T-Mobile users’ calls and texts and even US military communications—sent by satellites unencrypted.

    • treadful@lemmy.zip
      link
      fedilink
      English
      arrow-up
      8
      arrow-down
      1
      ·
      1 day ago

      I should’ve been more clear, I didn’t mean the data, but at the protocol level it’s all open.

      Same with the Internet traffic through these satellites.

      • Cocodapuf@lemmy.world
        link
        fedilink
        English
        arrow-up
        1
        ·
        14 hours ago

        I mean, some parts of the protocols we use for the Internet need to be in the clear to work, DNS comes to mind. If you want that kept private as well you need to use something like tor.

        But regardless, what people generally actually care about keeping secret is the content, not the protocol.

        • treadful@lemmy.zip
          link
          fedilink
          English
          arrow-up
          3
          ·
          13 hours ago

          I mean, some parts of the protocols we use for the Internet need to be in the clear to work, DNS comes to mind. If you want that kept private as well you need to use something like tor.

          Not really. We also have DNS over HTTPs, DNS over TLS, and DNSCrypt which are all becoming more popular. But that’s still application level data that I’m not really talking about.

          But regardless, what people generally actually care about keeping secret is the content, not the protocol.

          A lot of information can be gleaned from protocol metadata though. Source, destination, which applications are being used, maybe more depending on protocols. Not exactly information I want to be easily available to the public, but also not exactly critical either.

      • Natanael@infosec.pub
        link
        fedilink
        English
        arrow-up
        5
        ·
        1 day ago

        You should be clear with the difference between link encryption and application encryption here