This website will self-destruct...

The place for what's new and going on in the tech, innovation, and science world.
Post Reply
User avatar
Panama Red
I come Unseen
Posts: 5469
Joined: Sun Feb 12, 2006 12:14 am

This website will self-destruct...

Post: # 130700Post Panama Red
Thu Aug 13, 2009 5:13 pm

Hmmm, now where did I put that file again?....do'h it "vanished".....ooops... :shock: :)


Will be interesting to see this in action...

Read it quickly: this article will self-destruct in eight hours.

Not really, of course - but soon, permanently vanishing web correspondence could be the next step in maintaining your privacy online.

Emails, Facebook messages, and Google Docs can all be set to disappear into thin air by using new software developed by the University of Washington and called, appropriately enough, Vanish.

"We wanted to create a system that would allow our data to self-destruct and become permanently unreadable," assistant professor Yoshi Kohno, who designed the software, told the BBC's Digital Planet programme.

"[This would be for] both to ourselves and everyone else after a certain period of time."

Security solutions

With so much data now being created, shared, and stored online - rather on individual computers - documents could remain online for years, even after the user deleted the original file.

Using Vanish, however, means that even archived or backed-up copies of the data are unreadable after the time limit set by the original user.

Unlike other security solutions (many of which rely on passwords or data encryption) Vanish will make the document permanently unreadable to hackers and even law enforcement officers.

It works by creating a secret key which is split into small pieces and shared across many users on a peer-to-peer network. Over time, as users join and leave the network, the pieces of the key will disappear, rendering the data unreadable.
Vanish software

Peter Sommer, a digital forensics specialist at the London School of Economics, has concerns over possible misuses of the system.

He believes that the principles of security, privacy and online correspondence work alongside the same principles as police being able to enter a person's home and make arrests.

"I think it would be a bad thing because you have to recognise there are certain circumstances in which you do want the state to be able to carry out interceptions," he said.

Nefarious plans

Professor Kohno acknowledges that the software could be used for ill intent, but maintains that it would be a genuine technological advancement.

"When the automobile was first introduced there were jurisdictions that tried to outlaw the car because it allowed bank robbers to get away from the scene of the crime faster than the mounted police could catch them," he points out.---Good point :breakfast:

"In this particular scenario, I do believe that there are people who use Vanish to make data self-destruct that shouldn't be doing it. But the benefits far outweigh the risks."

Even with this new technology, professor Kohno maintains the key to better online safety and privacy ultimately lies with ourselves.

"My biggest recommendation is: just be sceptical. Having that perspective on new technologies will make you a much more informed consumer, and help you better control your privacy."
http://news.bbc.co.uk/2/hi/technology/8197449.stm


Image

User avatar
Timaxe
Hmmm, should I post some more ?
Posts: 455
Joined: Sun May 14, 2006 8:46 pm
Location: Virginia
Contact:

Re: This website will self-destruct...

Post: # 130701Post Timaxe
Thu Aug 13, 2009 6:30 pm

Quite interesting...I'd like to know how we come across the information to retrieve a key from the P2P network, and what it does to prevent someone from requesting and caching all of the keys? By breaking the key up it makes it a bit more difficult for someone to build a rogue client that caches all of the keys that are stored in the P2P network, but when someone requests a key and receives it there doesn't seem to be anything that stops them from holding onto the key longer than they're supposed to, or the decrypted data longer than 8 hours.

Think of it...even if someone takes down something from the internet, how many people have already done a right-click > save-as?

I'm interested though...I wouldn't have imagined storing publicly-accessible semi-private information in this sort of way.

User avatar
Harry
Site Admin
Posts: 6784
Joined: Sat Feb 11, 2006 10:44 pm
Location: UK :-)
Contact:

Re: This website will self-destruct...

Post: # 130703Post Harry
Thu Aug 13, 2009 11:29 pm

I don't think its possible to permenantly destroy anything that has been accessible from the Internet, especially things like facebook masseages, thats a load of bollocks IMHO.
Drugs have taught an entire generation of kids the metric system..

TAZ's better half: http://www.theadminzone.com/

User avatar
Harry
Site Admin
Posts: 6784
Joined: Sat Feb 11, 2006 10:44 pm
Location: UK :-)
Contact:

Re: This website will self-destruct...

Post: # 130704Post Harry
Thu Aug 13, 2009 11:31 pm

My biggest recommendation is: just be sceptical. Having that perspective on new technologies will make you a much more informed consumer, and help you better control your privacy."
Thats the most sensible thing i've ever heard anyone from that generation/education say...
Drugs have taught an entire generation of kids the metric system..

TAZ's better half: http://www.theadminzone.com/

User avatar
Aspman
Frustrated Mad Scientist
Posts: 8868
Joined: Mon Jan 09, 2006 10:07 am
Location: Scotland

Re: This website will self-destruct...

Post: # 130706Post Aspman
Fri Aug 14, 2009 9:05 am

<Print Screen>
Security defeated.

[ctrl]+P
Security defeated

[ctrl]+S, Pen and paper, camera
Security defeated

If you don't want information to become public don't put it on the f^cking internet. Don't publish it on facebo, mespace or any other aggregation site for the terminally smelly. Don't email it to anyone and don't use an IP phone.

If you want a bit of information to remain private get off your ass and go and speak to the person. It's also socially advantageous although you may need to reacquaint yourself with soap.

There is not a massive problem with privacy on the internet there is a massive problem with people being idiots. Seriously I'm sick of people doing stupid things and then running around looking for someone to blame for not stopping them. I'd f^cking hammer a spent rifle cartridge into the back of your f^cking head for that, undeserving of a bullet!

<I appear to be in a slightly grumpy mood this morning, which is surprising since I've had a bacon roll and a nice cup of coffee>
"Man will never be free until the last king is strangled with the entrails of the last priest."
- Denis Diderot (1713-1784)

User avatar
Vorlin
Taz's very own Fireman [RIP]
Posts: 2378
Joined: Fri Jun 16, 2006 3:48 pm
Are you a Spammer: No
Location: N. Augusta, SC
Contact:

Re: This website will self-destruct...

Post: # 130713Post Vorlin
Fri Aug 14, 2009 11:29 am

Asp, your post made me laugh out loud....and I agree with you wholeheartedly. Don't waste the bullets though! The soap comment was great...and yeah, if you want something privately kept, DO NOT PUT IT ON THE INTERNET...geez. Talk about losing and then trying to blame everyone else for self-inflicted stupidity....talk about lame. These are people that need to have this message:

Error encountered, would you like to
[A]bort [R]etry [F]ail?
In the world of protection, one thing is for sure: security = 1 / convenience.

User avatar
Panama Red
I come Unseen
Posts: 5469
Joined: Sun Feb 12, 2006 12:14 am

Re: This website will self-destruct...

Post: # 130741Post Panama Red
Sat Aug 15, 2009 5:19 pm

An overview from their website...
Overview

Computing and communicating through the Web makes it virtually impossible to leave the past behind. College Facebook posts or pictures can resurface during a job interview; a lost or stolen laptop can expose personal photos or messages; or a legal investigation can subpoena the entire contents of a home or work computer, uncovering incriminating or just embarrassing details from the past.

Vanish is a research system designed to give users control over the lifetime of personal data stored on the web or in the cloud. Specifically, all copies of Vanish encrypted data — even archived or cached copies — will become permanently unreadable at a specific time, without any action on the part of the user or any third party or centralized service.

For example, using the Firefox Vanish plugin, a user can create an email, a Google Doc document, a Facebook message, or a blog comment — specifying that the document or message should "vanish" in 8 hours. Before that 8-hour timeout expires, anyone who has access to the data can read it; however after that timer expires, nobody can read that web content — not the user, not Google, not Facebook, not a hacker who breaks into the cloud service, and not even someone who obtains a warrant for that data. That data — regardless of where stored or archived prior to the timeout — simply self-destructs and becomes permanently unreadable.
http://vanish.cs.washington.edu/



Motivation and Brief Description

An enormous amount of private data is now stored on the web or in the cloud, outside the end-user's control. If you send a sensitive email to a close friend, for example, you have no idea where that email will be stored or when it will be deleted. Web-based email systems may back up the message, potentially forever, even if you delete it. Similarly, when you send a message via Facebook or create a Google Doc, you have no idea where and for how long copies of your data will be stored.

Given this situation, users cannot control the lifetimes of their data stored in the cloud. This amplifies privacy risks since private data (even thought to be deleted) could be disclosed weeks, months, or years after that data was first stored. There are known examples of data remaining in the cloud long after users explicitly request that data's deletion. Private data could be exposed by accidental misconfigurations on a web service, be compromised by hackers, or be used in legal proceedings. A 2004 news article says: "Don't ever say anything on e-mail or text messaging that you don't want to come back and bite you."

We created "self-destructing data" to try to address this problem. Our prototype system, called Vanish, shares some properties with existing encryption systems like PGP, but there are also some major differences. First, someone using Vanish to "encrypt/encapsulate" information, like an email, never learns the encryption key. Second, there is a pre-specified timeout associated with each encrypted/encapsulated messages. Prior to the timeout, anyone can read the encrypted/encapsulated message. After the timeout, no one can read that message, because the encryption key is lost due to a set of both natural and programmed processes. It is therefore impossible for anyone to decrypt/decapsulate that email after the timer expires.
Image

User avatar
Panama Red
I come Unseen
Posts: 5469
Joined: Sun Feb 12, 2006 12:14 am

Re: This website will self-destruct...

Post: # 130742Post Panama Red
Sat Aug 15, 2009 5:24 pm

Demo


-----BEGIN VANISH MESSAGE-----
This message will self-destruct by Sat, 15 Aug 2009 18:38 GMT.
Use http://vanish.cs.washington.edu to read this message.

AKztAAVzcgBGZWR1Lndhc2hpbmd0b24uY3MudmFuaXNoLmludGVybmFsLm1ldGFkYXRhLmltcGwuRXBvY2hBd2FyZU1ldGFkYXRhSW1wbE1yiFVDGn2bAgACSgAMZXBvY2hfbGVuZ3RoTAAIbWV0YWRhdGF0ADVMZWR1L3dhc2hpbmd0b24vY3MvdmFuaXNoL2ludGVybmFsL21ldGFkYXRhL01ldGFkYXRhO3hwAAAAAAG3dABzcgBHZWR1Lndhc2hpbmd0b24uY3MudmFuaXNoLmludGVybmFsLm1ldGFkYXRhLmltcGwuSW5kaXJlY3RLZXlNZXRhZGF0YUltcGw6bcmI6fsf7QIAAlsAEmVuY3J5cHRlZF9kYXRhX2tleXQAAltCTAAIbWV0YWRhdGFxAH4AAXhwcHNyAEFlZHUud2FzaGluZ3Rvbi5jcy52YW5pc2guaW50ZXJuYWwubWV0YWRhdGEuaW1wbC5CYXNpY01ldGFkYXRhSW1wbNgVQUjt/E3XAgACSgANbG9jYXRpb25fc2VlZEwABnBhcmFtc3QANkxlZHUvd2FzaGluZ3Rvbi9jcy92YW5pc2gvaW50ZXJuYWwvbWV0YWRhdGEvVkRPUGFyYW1zO3hwWOROtkRy8GJzcgA0ZWR1Lndhc2hpbmd0b24uY3MudmFuaXNoLmludGVybmFsLm1ldGFkYXRhLlZET1BhcmFtc7292Mmleh6MAgAISgALY3JlYXRpb25fdHNJABVlbmNyeXB0aW9uX2tleV9sZW5ndGhJAApudW1fc2hhcmVzSQAJdGhyZXNob2xkSQAJdGltZW91dF9oSgAGdmRvX2lkTAAUZW5jcnlwdGlvbl9hbGdvcml0aG10ABJMamF2YS9sYW5nL1N0cmluZztMAA9lbmNyeXB0aW9uX21vZGVxAH4ACnhwAAABIx1edK8AAACAAAAACgAAAAcAAAAIGisRURQI2jx0AANBRVN0AANDQkPZR97F6YtKNwVN0HCTXworBc/vJcUUTzV34vWSWHHxR36u0/zY7wplDq377/nEmckFsChBhn1TZGlSPj82zCuzYSjRENZzO22ZQfyCGr3n80Ty82Yu5aDItcMOnroHCZgqL86LBFhHOtQV099wvKg4JeTMsyodTPwUXKxbwAvdpNRXmBL22W8yF24lg5XKoQgZz/vd1TCoJQahqyHX1pXQg+M0FHvLhNeRma+3fMPgg+f+nyFgFplPouUj2tmDdmPMhhpF16NvOfDJvUagQPDSmmDHJUb3nFPBhbATz8UFg4po1Cmy3WyBz1cydJW7/63ee7m0ACdXB2iqDZrRC+BTjBrricfKmd20txAOYyTLL5sv3r6M8EBMVHgV58sD4bXYrBfB4KCt4Qyir5+4976qNcgwwTHNLrr5X3Xt5AcDP9LwzGN7JwpaNs5KB9TUaKuhzmXobEilOph07LjqPsYSPR++be0jx57dDZnEUbIOG1dLuyyCJn5y99NqJyFQmyVNI5xfLuFjkk0Y78/pyjK1W3GNUK616swZchOj2ew/RA==
-----END VANISH MESSAGE-----

To decode this go here: Vanish Demo
Image

User avatar
Timaxe
Hmmm, should I post some more ?
Posts: 455
Joined: Sun May 14, 2006 8:46 pm
Location: Virginia
Contact:

Re: This website will self-destruct...

Post: # 130745Post Timaxe
Sun Aug 16, 2009 6:47 pm

Panama Red wrote:Demo

-----BEGIN VANISH MESSAGE-----
This message will self-destruct by Sat, 15 Aug 2009 18:38 GMT.
Use http://vanish.cs.washington.edu to read this message.

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
-----END VANISH MESSAGE-----

To decode this go here: Vanish Demo
I got:
Unable to reconstruct your Vanish message (got 0/7 shares).
The message must have self-destructed.
Anyone catch it before it went away? :breakfast:

User avatar
Timaxe
Hmmm, should I post some more ?
Posts: 455
Joined: Sun May 14, 2006 8:46 pm
Location: Virginia
Contact:

Re: This website will self-destruct...

Post: # 131515Post Timaxe
Wed Sep 23, 2009 12:32 am

So somebody decided to not give up the keys after 8 hours, and also figured out out to get more pieces. Unvanish...

http://www.nytimes.com/2009/09/22/scien ... l?_r=1&hpw
http://z.cs.utexas.edu/users/osa/unvanish/

Unfortunately I don't know if they have Panama's keys stored...probably not. But if anyone has them, offer them up, lol.

Post Reply