Government snooping, backdoors and #necessaryhashtags - Page 27

ewmayer · 2013-09-18, 20:33

Decent piece on the erroneous conflation of "guaranteed backdoored" Windows and "NSA approved" SELinux here. The author is a bit cavalier about the (nonexistent) mathematical "proofs" underlying the (alleged) hardness of common digital crypto methods, but overall still worthwhile.

Nick · 2013-09-19, 16:22

If the NSA taps and stores everything it can, then that must include quite a lot of copyright material such as films (movies). What is the MPAA's position on these developments?

CRGreathouse · 2013-09-19, 21:13

Quote:

Originally Posted by Nick

If the NSA taps and stores everything it can, then that must include quite a lot of copyright material such as films (movies). What is the MPAA's position on these developments?

Surely they're too smart to get in the way of the steamroller.

kladner · 2013-09-19, 21:54

Quote:

Originally Posted by Nick

If the NSA taps and stores everything it can, then that must include quite a lot of copyright material such as films (movies). What is the MPAA's position on these developments?

Gee! I wonder how many billions (trillions?) MPAA would have to sue for to cover the size of the infringements. They go after teen-aged file sharers for hundreds of thousands, don't they?

xilman · 2013-09-20, 16:13

RSA Data Security in has released a warning not to use one of its products.

R.D. Silverman · 2013-09-20, 16:43

Quote:

Originally Posted by xilman

RSA Data Security in has released a warning not to use one of its products.

One should never use the raw output of an RNG or a PRNG as input to
any kind of key generation software. Instead, the raw output bits should
first be passed through a non-linear filter (such as Keccak).

xilman · 2013-09-20, 17:54

Quote:

Originally Posted by R.D. Silverman

One should never use the raw output of an RNG or a PRNG as input to
any kind of key generation software. Instead, the raw output bits should
first be passed through a non-linear filter (such as Keccak).

Yup, but we are paranoid.

Others are not and/or are careless (the politically correct term for "incompetent").

Personally, I'd add an extra source of entropy, such as some "random" key strokes or mouse movements, before hashing.

retina · 2013-09-21, 01:53

First part in German, second part in English:
http://frank.geekheim.de/?p=2379

Quote:

When you enter your POP / IMAP e-mail credentials into a Blackberry 10 phone they will be sent to Blackberry without your consent or knowledge. A server with the IP 68.171.232.33 which is in the Research In Motion (RIM) netblock in Canada will instantly connect to your mailserver and log in with your credentials. If you do not have forced SSL/TLS configured on your mail server, your credentials will be sent in the clear by Blackberrys server for the connection. Blackberry thus has not only your e-mail credentials stored in its database, it makes them available to anyone sniffing inbetween – namely the NSA and GCHQ as documented by the recent Edward Snowden leaks. Canada is a member of the “Five Eyes”, the tigh-knitted cooperation between the interception agencies of USA, UK, Canada, Australia and New Zealand, so you need to assume that they have access to RIMs databases.

Nick · 2013-09-23, 17:23

The Amsterdam Internet Exchange is one of the biggest in the world:
http://en.wikipedia.org/wiki/List_of...points_by_size

It has expanded from Amsterdam to add infrastructure in Africa, Hong Kong and the Caribbean and, from a business point of view, the next logical step would be to expand into the United States.

Several connected parties are seriously worried that this would mean the NSA would be able to insist on having the ability to tap AMS-IX's infrastructure anywhere in the world.
This coming Friday, there is an extraordinary General Meeting of AMS-IX in Amsterdam to address the issue.

https://www.ams-ix.net/newsitems/103

garo · 2013-09-24, 21:37

Dilma Rousseff the Brazilian President launches a blistering attack on the NSA snooping in her UNGA speech.

In other news, NSA collected 12.7 billion pieces of metadata in India in one month. And the Indian minister responsible says: "We have been assured by John Kerry that they are not reading the content of these messages." IOW, nothing to see here. Move along. Bozo!

kladner · 2013-09-24, 21:47

If John Kerry says it, it must be true. AND.....I read it on the Interwebs! QED!

2013-09-20, 16:13	#291
xilman Bamboozled! "𒉺𒌌𒇷𒆷𒀭" May 2003 Down not across 2·5,393 Posts	Negative advertising RSA Data Security in has released a warning not to use one of its products.

Similar Threads
Thread	Thread Starter	Forum	Replies	Last Post
I'm rich AND on a government check.	jasong	jasong	18	2013-08-12 18:21
How does proper government manifest in regulation?	cheesehead	Soap Box	10	2011-04-17 02:29

2013-09-18, 20:33	#287
ewmayer ∂²ω=0 Sep 2002 República de California 19·613 Posts	Decent piece on the erroneous conflation of "guaranteed backdoored" Windows and "NSA approved" SELinux here. The author is a bit cavalier about the (nonexistent) mathematical "proofs" underlying the (alleged) hardness of common digital crypto methods, but overall still worthwhile.

2013-09-19, 16:22	#288
Nick Dec 2012 The Netherlands 1711₁₀ Posts	If the NSA taps and stores everything it can, then that must include quite a lot of copyright material such as films (movies). What is the MPAA's position on these developments?

2013-09-23, 17:23	#295
Nick Dec 2012 The Netherlands 29·59 Posts	The Amsterdam Internet Exchange is one of the biggest in the world: http://en.wikipedia.org/wiki/List_of...points_by_size It has expanded from Amsterdam to add infrastructure in Africa, Hong Kong and the Caribbean and, from a business point of view, the next logical step would be to expand into the United States. Several connected parties are seriously worried that this would mean the NSA would be able to insist on having the ability to tap AMS-IX's infrastructure anywhere in the world. This coming Friday, there is an extraordinary General Meeting of AMS-IX in Amsterdam to address the issue. https://www.ams-ix.net/newsitems/103

2013-09-24, 21:37	#296
garo Aug 2002 Termonfeckin, IE 2²×691 Posts	Dilma Rousseff the Brazilian President launches a blistering attack on the NSA snooping in her UNGA speech. In other news, NSA collected 12.7 billion pieces of metadata in India in one month. And the Indian minister responsible says: "We have been assured by John Kerry that they are not reading the content of these messages." IOW, nothing to see here. Move along. Bozo!

2013-09-24, 21:47	#297
kladner "Kieren" Jul 2011 In My Own Galaxy! 2×3×1,693 Posts	If John Kerry says it, it must be true. AND.....I read it on the Interwebs! QED!