Let's talk about encryption and security some more.

[Phillip McCleod]

2. encryption is useless against PRISM agreed.. which i mentioned.

but combinations are even better. my initial contribution was about phone call log avoidance, since that's the crux of PRISM. i pointed out that Google Voice and Skype are out and offered one alternative.. there are many, mostly payfor options. Linphone is nice because it uses SIP so you can change your VoIP 'carrier' in a sense, without changing the app that uses it.

*if* one were paranoid, an inventor, or a corporate tool - which i am not.. rather i'm a whitehat infosec geek who geeks out on infosec - i would want a combined approach. ideally, i would want..

- proxy IP, ie Tor-compliant VoIP dialer, which doesn't exist, so here's dreaming of Ubuntu/phone (masks IP)
+ open-source SIP VoIP dialer like Linphone, so that the security protocols can be reviewed/revised to suit (avoids call logs)
- encrypt audio call content over the VoIP call.. so far not possible AFAIK. once again forced to use a dedicated app like this one on gizmodo. again, can't wait for Ubuntu.com/phone for that

IM'ing is another story, though the same disconnect between encrypted content and masked IP still exists.

major point is that call logs can be avoided-ish.. though if one is a blackhat kind of person, i'm sure the MIC would find a way.