What are ways we can ensure that Hubski doesn't fall prey to such things?
BLOB_CASTLE will be our pen pal while we are in prison.
SSL would be a start. As it is now, it's http, and wouldn't be hard to tap. I'm assuming Hubski is based off of servers leased/rented from someone or in a colo? Or are Hubski's servers somewhere on Mk's property? Either way, all the non-SSL traffic for Hubski is already flowing through a datacenter or major telecom at some point... Not that hard to monitor as it stands. Most of these datamining and collection projects just look for keywords. Like if you say some words that I'll refrain from saying, then that conversation gets saved and put infront of a rep to look into. So if a "black box" sees a certain string of keywords from in-flight data, it copys that and it gets flagged. Having SSL makes that a little more difficult for them to do that.