Live data from Hacker News

The NSA called me after midnight and requested my source code (2018)

medium.com

11–20 of 219 posts

Re: The NSA called me after midnight and requested my source code (2018)

#12

Earlier quoted context omitted.

Are you being naive on purpose, friend?

Looks like I missed something ... ? What's the context in which you think so?

If we are to trust anything on the web, then social engineering is a basic part of NSA education.

Re: The NSA called me after midnight and requested my source code (2018)

#13
Interesting story, but wouldn’t be surprised if the real play here was to get his source code so they could get some bad guys to use a modified version that the NSA could crack. Put a back door in and then intercept traffic trying to download the encryption app to download the back-doored version.

The fact that the NSA has to call him in the middle of the night to learn that the free version didn’t use strong encryption (a fact that seems to have been a selling point for the non-free version) just sounds a bit dubious, but that’s just my sense. Nice mug regardless.

Re: The NSA called me after midnight and requested my source code (2018)

#14
post #10

Earlier quoted context omitted.

I meant perhaps NSA agents are trained in social engineering too. Or it may not have been the NSA, but FBI or CIA or even Military Intelligence too, pretending to be NSA.

You think the NSA impersonated themselves?

I meant it may have been a real NSA agent, acting on actual orders, but that he may have lied to get access to source code. If so he wouldn't need to do any MitM attack.

Re: The NSA called me after midnight and requested my source code (2018)

#15
post #4

Interesting read. I wonder whether this was an attempt at social engineering†? While we tend to think of the NSA (or other foreign agencies in this field) working on intercepting information only through electronic means, sometimes a direct approach is often easier (obligatory - xkcd: https://xkcd.com/538/ ). Perhaps all they wanted was the source code of his application to repackage (after introducing a backdoor) an…

Only works if the 411 call was MiTMd. edit I was confused and my reply is confusing. I was trying to say that a third party could have stolen the source code by MiTMing the 411 call.

Or if someone who worked for 411 or a hacker changed the number for the naval base to be one they controlled. Dave could be the CEO of 411 for all I know.

Re: The NSA called me after midnight and requested my source code (2018)

#19

Earlier quoted context omitted.

Looks like I missed something ... ? What's the context in which you think so?

If we are to trust anything on the web, then social engineering is a basic part of NSA education.

Well, you are saying so on the web - so it must be true! ;)

Re: The NSA called me after midnight and requested my source code (2018)

#20
Well they do have mugs in the gift store, and the one in the third picture [1] from the end looks like a nice one, although not exactly the same. Of course the picture there is 16 years later.

Sounds like a fun social engineering trick though, if you can subvert the local phone switch. Probably would make more of an impression if the FBI/etc knocked on your door and handed you the phone...

[1] https://www.businessinsider.com/nsa-gift-shop-2016-5?op=1

Post reply on HN