Live data from Hacker News

The NSA called me after midnight and requested my source code (2018)

medium.com

101–110 of 219 posts

Re: The NSA called me after midnight and requested my source code (2018)

#101
post #98
post #52

I can't help but feel like the author sounds excessively credulous. I had to stop reading after he wrote "I could tell something big was up and there simply wasn’t time to debate the merits of handing over my source code to the NSA", because at that point my eyes rolled so hard they fell right out the back of my head. After I put them back in, I skipped down to the comments. I have a hard time not agreeing vehemently…

Even all these years later, he doesn't even consider the possibility that he was manipulated. He betrayed all of his users at the drop of a hat, and all it cost the NSA was a single phone call. Crazy stuff.

Encryption as he implemented it does not rely on the secrecy of the algorithm. It relies on the secrecy of the key.

This is why he was asking about their ability to break 256 or 40 bit encryption.

So there was no trust broken in sharing the source code.

Re: The NSA called me after midnight and requested my source code (2018)

#102
post #98
post #52

I can't help but feel like the author sounds excessively credulous. I had to stop reading after he wrote "I could tell something big was up and there simply wasn’t time to debate the merits of handing over my source code to the NSA", because at that point my eyes rolled so hard they fell right out the back of my head. After I put them back in, I skipped down to the comments. I have a hard time not agreeing vehemently…

Even all these years later, he doesn't even consider the possibility that he was manipulated. He betrayed all of his users at the drop of a hat, and all it cost the NSA was a single phone call. Crazy stuff.

[deleted]

Re: The NSA called me after midnight and requested my source code (2018)

#103
post #87

Earlier quoted context omitted.

I can see why that would have been intimidating. With the decades of experience you've had since, do you think he could have gotten your landline terminated? What would be the legal argument?

I can't even imagine there is a valid legal argument. If somebody calls me, I can say whatever I want. If I want to answer the phone by saying "Department of Defense, how can I help you?" the First Amendment guarantees me the right to do that. Now, I certainly could not call other people and claim to be the Department of Defense. That's fraud. The same applies if I had done something like put up flyers claiming my ph…

I am in Norway, so the First Amendment carries little weight around here; our equivalent is 'Article 100' (of the Constitution) stating pretty much the same thing as the First Amendment.

(This is hardly relevant; I just grasped the opportunity to stress that the HN crowd resides in the most peculiar places...)

Re: The NSA called me after midnight and requested my source code (2018)

#104
post #98
post #52

I can't help but feel like the author sounds excessively credulous. I had to stop reading after he wrote "I could tell something big was up and there simply wasn’t time to debate the merits of handing over my source code to the NSA", because at that point my eyes rolled so hard they fell right out the back of my head. After I put them back in, I skipped down to the comments. I have a hard time not agreeing vehemently…

Even all these years later, he doesn't even consider the possibility that he was manipulated. He betrayed all of his users at the drop of a hat, and all it cost the NSA was a single phone call. Crazy stuff.

Kerckhoff's principle applies. Nowadays, all the good encryption software is open source anyway.

https://en.wikipedia.org/wiki/Kerckhoffs%27s_principle

Re: The NSA called me after midnight and requested my source code (2018)

#105

Interesting story, but wouldn’t be surprised if the real play here was to get his source code so they could get some bad guys to use a modified version that the NSA could crack. Put a back door in and then intercept traffic trying to download the encryption app to download the back-doored version. The fact that the NSA has to call him in the middle of the night to learn that the free version didn’t use strong encrypt…

Whatever they used source code for, it just a shortcut - they could do the same thing by just disassembling and binary patching (like all hackers and agencies do all the time). Basically they would never do it and risk exposure if they didn’t want to get result extremely fast.

Re: The NSA called me after midnight and requested my source code (2018)

#106
post #98

Earlier quoted context omitted.

Even all these years later, he doesn't even consider the possibility that he was manipulated. He betrayed all of his users at the drop of a hat, and all it cost the NSA was a single phone call. Crazy stuff.

Encryption as he implemented it does not rely on the secrecy of the algorithm. It relies on the secrecy of the key. This is why he was asking about their ability to break 256 or 40 bit encryption. So there was no trust broken in sharing the source code.

Assuming he implemented the cryptography correctly, but if he didn't then his users weren't secure anyway, and the source code would have just saved the NSA a little time.

Re: The NSA called me after midnight and requested my source code (2018)

#107
post #94
post #63

Earlier quoted context omitted.

Whataboutism

When did the NSA last assassinate someone in public?

This is not a response in this "argument", but, please watch "Citizenfour" and/or Hollywood version "Snowden".

Re: The NSA called me after midnight and requested my source code (2018)

#108
post #104
post #98

Earlier quoted context omitted.

Even all these years later, he doesn't even consider the possibility that he was manipulated. He betrayed all of his users at the drop of a hat, and all it cost the NSA was a single phone call. Crazy stuff.

Kerckhoff's principle applies. Nowadays, all the good encryption software is open source anyway. https://en.wikipedia.org/wiki/Kerckhoffs%27s_principle

> Kerckhoff's principle applies

That's true and yet unhelpful because all software has errors, some obvious, some not.

Re: The NSA called me after midnight and requested my source code (2018)

#109
post #88

Earlier quoted context omitted.

HN is so paranoid. All government is bad, anyone from a spy agency is some double/triple/quadruple agent who's actually a terrorist child soldier working for Facebook on the side.

There is no foil on my head, but ... it is very reasonable to be paranoid, right? They are not talking about the Office of Information and Regulatory Affairs or the Office of the Comptroller of the currency... It is a comment on the NSA. From what we know, everything they do is a bit creepy. Far from "All government is bad" ... The comment is about an agency that Snowden warned us about. Also, historically speaking t…

> There is no foil on my head, but

Good thing, because this would amplify radio frequencies. This trope needs to die.

Re: The NSA called me after midnight and requested my source code (2018)

#110

Earlier quoted context omitted.

I'm sorry but if you think the NSA is the shadiest government agency on the planet, then you live in an information bubble. Do you think the NSA is shadier than the KGB? What about the Iranian Revolutionary Guard? Or even the CIA? I know people are upset about the Snowden revelations but there are much graver sins that have been committed by other agencies.

KGB doesn't exist anymore - you might mean the FSB or GRU? Anyways, plenty of countries have security agencies whose main job is to violently protect the local kleptocrats these days. China might be a better example to point to for even worse behavior, with their balkanized net and mass surveillance being used to carry out the mass internment and repression of ethnic minorities in regions like Xinjiang.

> KGB doesn't exist anymore

it actually does [0] - at least in belarus and some of the russian-occupied pseudo-republics

[0] https://en.wikipedia.org/wiki/State_Security_Committee_of_th...

Post reply on HN