While Reddit mods and admin try to keep up with the site's "no violence" terms of use, Facebook and LinkedIn is reacting with tens of thousands of laughing emojis.
Make them spend more resources doing deanonymizations. First they have to get the IP from instance admins, then trace the tor routing, then the VPN that I use, then ask for my ISP. Make them do all that work.
(Or maybe they already have access by simply activating their backdoors within Intel ME, AMD PSP, and whatever baseband backdoor on the phones they have, and have just gotten everyone's real identities in an instant, we can't know for sure.)
I work in cryptography, and I guarantee if that's true "some person you know who worked in government security" would not tell you if they did know, or they are pulling shit out of their ass. There have been so many people that have looked at or worked on SSL/TLS implementations (including some of my coworkers), any vulnerabilities would have to be pretty subtle or clever, and that would be kept highly classified. Quit making shit up or repeating bullshit you heard.
That just would allow a malicious attacker to fake being the server, it doesn't actually compromise the TLS session. So you are talking about a much more sophisticated multi stage attack that needs to be actively executed. This wouldn't at all allow them to record traffic and decrypt later.
The certs authenticate that you are talking to the real server, the symmetric session keys that are usually derived from a diffie helman key exchange have nothing to do with certs. That's two separate (but connected) parts of the transaction to build a TLS session.
It wouldn't be impossible. There are like so many different certificate issuers, any one of them collaborating with a government would allow them to create a certificate that would be accepted by your browser.
It is almost never a question of whether it's possible or not. You WILL make a mistake. It's just a question of how much effort you're worth as an individual.
They already have lists. The only hope we have is to stand together in solidarity as the working class against the billionaire capitalists entering power.
LinkedIn is one of the least sane social media sites I've ever had the displeasure of using. Under all the marketing BS and obviously fake feel good stories lie takes that would make your insane Facebook uncle blush.
I used to work for a big data company that tracked shares to various social networks and the frequency with which people share porn to LinkedIn was remarkably high.
People are too hung up about anonimity on the internet. When one of my country's worst journalistic shitrags mandated a real name policy due to the rampant racism and other -isms in the comment section of their articles... nothing changed. People are happily spewing the same vile rethoric as before and proud to, instead of being shamed into silence.