Live data from Hacker News

NSA infiltrates links to Yahoo, Google data centers worldwide

washingtonpost.com

101–110 of 614 posts

Re: NSA infiltrates links to Yahoo, Google data centers worldwide

#101
post #5

Is that an official document with an actual smiley face? What ever happened to the admins / programmers standing up for what is right, or do they just gobble down a paycheck and turn the other way?

This question implies they know what they're doing is wrong.

If they think they're protecting their country---including their families and friends---then it's easy to imagine how they wouldn't have a problem with this.

Re: NSA infiltrates links to Yahoo, Google data centers worldwide

#103
post #28

Can anyone explain what exactly is meant by "SSL added and removed here! :-)"?

[Edit: apparently, the decryption does not happen real time. Instead, the encyrpted traffic is stored and decrypted later. Either NSA/GCHQ think the latency introduced by doing a full mitm with the private key would blow their cover, or they're using some algorithm that isn't fast enough for full mitm. The below is a bad interpretation.]

My interpretation is that they've acquired - either via bag job or by unpublished algorithm - Google private keys, and are decrypting and copying traffic immediately before the Google Front End, then impersonating the client to the Google Front End. Presumably, the Google Front End is on Google premises, and Google would be aware of the warrant that let NSA install such a device behind the Google Front End, whereas the peering point in front of the Google Front End (or on the fiber to the Google Front End) would be on Telco premises, and we've seen the Telco's be all to eager to cooperate. Oh, except Qwest, where the CEO found himself in jail.

Re: NSA infiltrates links to Yahoo, Google data centers worldwide

#104
post #92
post #77

Earlier quoted context omitted.

Google was letting information flow between its data centers completely unencrypted until last month . http://www.washingtonpost.com/business/technology/google-enc... Last month! Think about that for a second. Most people on HN wouldn't send a single file to their own backup provider in the clear. Google was sending gushing torrents of data, presumably including email, IMs, etc, over long distances that way. That's v…

> Google was letting information flow between its data center completely unencrypted until last month. http://www.washingtonpost.com/business/technology/google-enc... . Last month! Over their own private WAN. The analogy would be sending things in the clear over your LAN. [Citation: http://www.eecs.berkeley.edu/~rcs/research/google-onrc-slide... ]

The likelihood miles and miles of cabling, much of it presumably leased, will be compromised is nowhere near comparable to the likelihood a normal, single-location office/home ethernet LAN will be compromised. (And if you think both are easily compromised, that only adds to my original point.)

Re: NSA infiltrates links to Yahoo, Google data centers worldwide

#105

Why didn't they release these documents a long time ago when everyone was racing to judgement that Google, Yahoo, et al were secretly in cahoots with the NSA helping to build drag-net surveillance extranet stuff for them? These are very important revelations! I mean, when Greenwald/Snowden/Guardian released the original PRISM accusations, these slides would have provided a much much more important set of evidence, in…

Probably because there was just too much information to make sense of all at once. So they just let out little at a time of what they understood to be verifiably and properly true.

Of course the cynical view that they held on to it to make some ad-money is not altogether wrong either, just unlikely to be accurate.

Re: NSA infiltrates links to Yahoo, Google data centers worldwide

#106
post #12

Gen. Keith Alexander, asked about it at a Bloomberg event, denied the accusations. "I don't know what the report is," Alexander cautioned, adding the NSA does not "have access to Google servers, Yahoo servers." He said the NSA is "not authorized" to do this, and instead, must "go through a court process." http://www.politico.com/story/2013/10/keith-alexander-nsa-re...

Since he seems to be a pathological liar, how about some waterboarding to help his memory? I'm sure we could clear up any misconceptions about the NSA's activities quickly with this officially-sanctioned (at least by former officials) method of "interrogation", which the US has applied many times in the past (allegedly with great success and little regret).

Re: NSA infiltrates links to Yahoo, Google data centers worldwide

#107
post #2

It's hard not to come to the conclusion that these activities were essentially criminal. I don't see how the administration can fail to disavow them, investigate them fully, and hold their instigators accountable. It feels like Special Prosecutor time. That aside, let me re-make a point I keep making: Google had no knowledge of NSA's physical compromise of their data centers. But still, they pushed harder than anyone…

Which, going by their (this administration's) record at disavowing, initiating investigations into, and demanding accountability from our various security agencies for their widely known, and far more egregious abuses they've been indulging in since late 2001 -- torture, extrajudicial killings, and the cavalier attitude of our armed forces toward civilian populations, generally -- we can be virtual certain that not only will they "fail" to do, they won't even make a credibly sincere effort at it.

I don't see how the administration can fail to disavow them, investigate them fully, and hold their instigators accountable.

Re: NSA infiltrates links to Yahoo, Google data centers worldwide

#108
post #2

It's hard not to come to the conclusion that these activities were essentially criminal. I don't see how the administration can fail to disavow them, investigate them fully, and hold their instigators accountable. It feels like Special Prosecutor time. That aside, let me re-make a point I keep making: Google had no knowledge of NSA's physical compromise of their data centers. But still, they pushed harder than anyone…

Which, going by their (this administration's) record at disavowing, initiating investigations into, and demanding accountability from our various security agencies for their widely known, and far more egregious abuses they've been indulging in since late 2001 -- torture, extrajudicial killings, and the cavalier attitude of our armed forces toward civilian populations, generally -- we can be virtual certain that not only will they "fail" at, they won't even make a credibly serious effort at it.

I don't see how the administration can fail to disavow them, investigate them fully, and hold their instigators accountable.

Re: NSA infiltrates links to Yahoo, Google data centers worldwide

#109

Why didn't they release these documents a long time ago when everyone was racing to judgement that Google, Yahoo, et al were secretly in cahoots with the NSA helping to build drag-net surveillance extranet stuff for them? These are very important revelations! I mean, when Greenwald/Snowden/Guardian released the original PRISM accusations, these slides would have provided a much much more important set of evidence, in…

> is it to preserve traffic by keeping the click-gravy-train going?

If that were their intent, I would expect them to release slightly faster, at least one significant document per week.

Post reply on HN