XF 2.0 I know I'm late to this party but... XKeyscore...

[Arnox]

I guess my question is, how exactly is the government getting into private site databases and how can I defend against this? Or is this more a MySQL/server control panel security hole? Or are they just keylogging my passwords at the ISP level?

 

[Kerstin28]

Assuming that your question is sincere:
XKeyscore is a passive tool that listens for unencrypted network traffic. Use HTTPS and you're good.

Also, apply the latest security patches. Not because of the government, but because otherwise you'll be hacked by random dudes.