Be smart, just use a CA cert you trust, not the ones some else do, like the list provided by the browser or the OS

And I was not talking about server SSL certs, but CA certs, certainly a dev that took the approach to verify a single specific certificate are not understanding very well PKI as well as you don't understand SSL architecture

In other words, just to let you understand, you don't need to have a top CA installed on your phone to be interceped through MITM, and apparently this also happens with your whole government department...

Thanks for the nice words... This (having a rogue top CA ruining the entire SSL system) is a known vulnerability in the SSL architecture and it has already been used to infiltrate MS Windows updates. For this reason if you want real security you dont' use the current SSL CA structure. People don't talk too much about it for various reasons, banks don't want to create panic, government wants easy wiretap, etc. If you are happy with current top CA lists that comes with the standard browsers you really are giving your security keys to people you don't know and that are not "certified" at all. Good luck!

But a smart SSL application would check the cloud server against a specific SSL certificate authority (MS CA?) to protect against MITM

That's a demonstration of how big data analysis may be worthless and misleading. Nowadays we don't talk about neural networks anymore but they mainly produced these kind of idiot results

So you can basically "mathematically" obfuscate a function that is a"pure" function not implementable in a imperative programming and that it has no IO = you can obfuscate something that has no use and probably nobody knows well what it is doing :-)

It will take a long time to see that second!

When you'll be 40+ you'll understand why it was better not doing that and using contacts :-)

Software must be audited to be sure there's no backdoor... Only open source is secure (including open source silicon) If I were NSA I had built a backdoor in hardware, much more effective and software independent

I guess it can be described differently. As computers are deterministic, true AI is when a computer behaves in a not deterministic manner. Actually no computer has intelligence because given the same input, they give the same results.

https://bitcoinfoundation.org/...

The system works this way:
- there is a blacklist of TAC (initial part of IMEI that identify manufacturer, model and sub model: http://en.wikipedia.org/wiki/T... [wikipedia.org])
- actually info for this blacklist is furnished by manufacturers, that will probably include all their models regardless of being or not sold in Brazil, but this can be later changed by Anatel, restricting the list
- there will be a whitelist of "blacklisted IMEIs" activated in the network before March 17th, 2014
- there will be a blacklist of permitted IMEI (e.g. an iPhone sold in Brazil) that were used (i.e. cloned) in "IMEI configurable" Chinese smartphones/tablet
- there will be a whitelist of IMEI+IMSI to identify the original cloned (I don't know who will identify the original one if many claims to be the original one)
- block will be set in the network on each individual IMEI
- permission will be set in the network for specific IMEI+IMSI
- the system is tailored to control individual IMEIs and not only generic TAC
Do you see the potential of chaos? Chinese smartphone seller will setup "change your IMEI daily" services and it will be cat and mouse play until a complete mess... and mobile operator will hardly divert resource to help in solving it or handle complaints...

The system works this way: - there is a blacklist of TAC (initial part of IMEI that identify manufacturer, model and sub model: http://en.wikipedia.org/wiki/T...) - actually info for this blacklist is furnished by manufacturers, that will probably include all their models regardless of being or not sold in Brazil, but this can be later changed by Anatel, restricting the list - there will be a whitelist of "blacklisted IMEIs" activated in the network before March 17th, 2014 - there will be a blacklist of permitted IMEI (e.g. an iPhone sold in Brazil) that were used (i.e. cloned) in "IMEI configurable" Chinese smartphones/tablet - there will be a whitelist of IMEI+IMSI to identify the original cloned (I don't know who will identify the original one if many claims to be the original one) - block will be set in the network on each individual IMEI - permission will be set in the network for specific IMEI+IMSI - the system is tailored to control individual IMEIs and not only generic TAC Do you see the potential of chaos? Chinese smartphone seller will setup "change your IMEI daily" services and it will be cat and mouse play until a complete mess... and mobile operator will hardly divert resource to help in solving it or handle complaints...