NSA Said to Exploit Heartbleed Bug for Intelligence for Years

dombili wrote: post #4

My first thought: if this is the case, then why did they try so hard (and get "trolled" in the progress) to get the SSL keys from Lavabit?

[deleted]

Re: NSA Said to Exploit Heartbleed Bug for Intelligence for Years

#8

Post by [deleted] » Fri, Apr 11, 2014, 7:12 PM UTC

dombili wrote: post #4

My first thought: if this is the case, then why did they try so hard (and get "trolled" in the progress) to get the SSL keys from Lavabit?

[deleted]

Re: NSA Said to Exploit Heartbleed Bug for Intelligence for Years

#9

Post by tptacek » Fri, Apr 11, 2014, 7:12 PM UTC

[deleted] wrote: post #7

dombili wrote: post #4

My first thought: if this is the case, then why did they try so hard (and get "trolled" in the progress) to get the SSL keys from Lavabit?

[deleted]

It didn't? That seems unlikely.

Re: NSA Said to Exploit Heartbleed Bug for Intelligence for Years

#10

Post by tptacek » Fri, Apr 11, 2014, 7:12 PM UTC

dombili wrote: post #4

My first thought: if this is the case, then why did they try so hard (and get "trolled" in the progress) to get the SSL keys from Lavabit?

Because NSA didn't try to get Lavabit's keys at all; DOJ did. Two very different organizations. Not as incestuously linked as people think they are.

Also, worth mentioning: it's not particularly easy to get private keys out of servers with the bug.