Earlier quoted context omitted.
> Disconnect from the internet and nobody is getting in, including the NSA. Oh boy. That's some serious delusion in 2020. Wireless cards and higher end network interface cards are independent computers. Your processor has another processor (Intel ME and others) in it. Baseband Management Controllers are also independent computers on their own right. With closed firmware and wireless capabilities, you can never know w…
> - Your Intel system runs a special version of Minix on its Management Engine. A version of Minix customized for Intel by its original developer Not on all systems. It's neutralized and disabled on my Librem 15: https://puri.sm/learn/intel-me/ .
Spy agency ducks questions about 'back doors' in tech products
71–80 of 272 posts
Re: Spy agency ducks questions about 'back doors' in tech products
#72Earlier quoted context omitted.
It's certainly possible, but I suspect just traditional bugs and poor software is more likely the cause for such events. Software / hardware industry is PLENTY good at paving the way all on its own.
The article presents an example where we basically know that it happened with Juniper Networks. As you say, the hardware/software industries have enough difficulties with security acting on their own. They don't need the NSA purposely making more holes.
Re: Spy agency ducks questions about 'back doors' in tech products
#73Earlier quoted context omitted.
They totally still call you paranoid. Snowden unfortunately meant nothing to the general technology consumer mass. They're more than happy to defend tooth and nail their jails. See Discord or Zoom as prime current examples. It is ridiculous that he had to go through this just for people to shake their shoulders and keep on, except for the few that already were inclined to care.
Look, my estimation of "general technology consumer mass" is incredibly low, but I promise you nearly every American adult knows who Edward Snowden is and probably has at least a vague idea of what he was trying to communicate. I agree that many — maybe even most — people don't understand the issue very well, but I think it did have a pretty large impact at the time and since.
I highly doubt this. In 2015, only 60% of Americans had some idea of who Snowden was, and only half of those had a positive opinion of him. I doubt this has improved over the past five years either.
Re: Spy agency ducks questions about 'back doors' in tech products
#74Earlier quoted context omitted.
Look, my estimation of "general technology consumer mass" is incredibly low, but I promise you nearly every American adult knows who Edward Snowden is and probably has at least a vague idea of what he was trying to communicate. I agree that many — maybe even most — people don't understand the issue very well, but I think it did have a pretty large impact at the time and since.
>but I promise you nearly every American adult knows who Edward Snowden is and probably has at least a vague idea of what he was trying to communicate. I highly doubt this. In 2015, only 60% of Americans had some idea of who Snowden was, and only half of those had a positive opinion of him. I doubt this has improved over the past five years either. https://www.aclu.org/snowden-poll-results
Re: Spy agency ducks questions about 'back doors' in tech products
#75Earlier quoted context omitted.
> Disconnect from the internet and nobody is getting in, including the NSA. Oh boy. That's some serious delusion in 2020. Wireless cards and higher end network interface cards are independent computers. Your processor has another processor (Intel ME and others) in it. Baseband Management Controllers are also independent computers on their own right. With closed firmware and wireless capabilities, you can never know w…
Stuxnet is interesting. Apparently, the US and Israeli agents threw away a number of USB devices around target facilities. What do you do when you find a USB stick? Well, eventually someone working in an air gapped facility picked up one and used it inside. The NSA apparently perfectly aligned 4 zeros days in Siemens and Microsoft products to spread the malware from USB into the Iranian LAN (shared printers, industri…
"USB drives in the parking lot" could be the tech industry's Korean fan death.
Re: Spy agency ducks questions about 'back doors' in tech products
#76Earlier quoted context omitted.
Its more nuanced than that. Didn't read the book completely but read a long report. What I remember: - They got exact hardware details and topology of the centrifuges somehow. - They've stolen Realtek's driver signing keys. - The virus looks like a simple worm which can infect other USB devices and doesn't unpack beyond a certain point if it can't find the SCADA equipment and the correct device ID & topology (It's li…
> It's possibly the most sophisticated hacking campaign when social and technical aspects combined. It’s the most sophisticated one _we know of_
Re: Spy agency ducks questions about 'back doors' in tech products
#77The director of the NSA lied while under oath to congress, and nothing happened. As far as I'm concerned, what 3 letter agencies say publically is irrelevant.
It's an interesting case of cognitive dissonance. Most will admit when pressed a bit that the CIA/NSA/FBI do not have our best interests at heart and are out of control. They have repeatedly lied under oath, lied to congress, lied to the public, run human experiments on unwitting citizens, collect data on all of us, etc with complete impunity. However many people somehow simultaneously hold the belief that these agen…
My guess is that most Americans would expect that they sometimes do things that aren't legal, but that generally they are at least intending to do it with the best interest of our country in mind. That second part is the primary reason why they aren't being wholesale shut down, and why they're able to get away with things like lying to congress.
Re: Spy agency ducks questions about 'back doors' in tech products
#78Earlier quoted context omitted.
Stuxnet is interesting. Apparently, the US and Israeli agents threw away a number of USB devices around target facilities. What do you do when you find a USB stick? Well, eventually someone working in an air gapped facility picked up one and used it inside. The NSA apparently perfectly aligned 4 zeros days in Siemens and Microsoft products to spread the malware from USB into the Iranian LAN (shared printers, industri…
Its more nuanced than that. Didn't read the book completely but read a long report. What I remember: - They got exact hardware details and topology of the centrifuges somehow. - They've stolen Realtek's driver signing keys. - The virus looks like a simple worm which can infect other USB devices and doesn't unpack beyond a certain point if it can't find the SCADA equipment and the correct device ID & topology (It's li…
Re: Spy agency ducks questions about 'back doors' in tech products
#79Earlier quoted context omitted.
Couldn't they just have said "no we have no backdoors"? NSA would look good, Congress would look good for asking the tough questions. When eventually new evidence comes to light that they do have backdoors, they have the choice then between continuing to deny deny deny, or pointing to national security interests.
>Couldn't they just have said "no we have no backdoors"? No, because once their backdoors are (inevitably) going to be found/leaked, they'll come off as liars. Plus, if they would have said no, nobody would buy that or would think they're asleep at the wheel.
Re: Spy agency ducks questions about 'back doors' in tech products
#80Earlier quoted context omitted.
>but I promise you nearly every American adult knows who Edward Snowden is and probably has at least a vague idea of what he was trying to communicate. I highly doubt this. In 2015, only 60% of Americans had some idea of who Snowden was, and only half of those had a positive opinion of him. I doubt this has improved over the past five years either. https://www.aclu.org/snowden-poll-results
60% of Americans having some idea of the issues he raised is assumably a vast increase in awareness of the topic compared to the time before his leaks became public.
His comment says an idea of "who [Snowden] was", not of what he was trying to say.