Live data from Hacker News

The NSA called me after midnight and requested my source code (2018)

medium.com

191–200 of 219 posts

Re: The NSA called me after midnight and requested my source code (2018)

#191
post #103
post #87

Earlier quoted context omitted.

I can't even imagine there is a valid legal argument. If somebody calls me, I can say whatever I want. If I want to answer the phone by saying "Department of Defense, how can I help you?" the First Amendment guarantees me the right to do that. Now, I certainly could not call other people and claim to be the Department of Defense. That's fraud. The same applies if I had done something like put up flyers claiming my ph…

I am in Norway, so the First Amendment carries little weight around here; our equivalent is 'Article 100' (of the Constitution) stating pretty much the same thing as the First Amendment. (This is hardly relevant; I just grasped the opportunity to stress that the HN crowd resides in the most peculiar places...)

You got me interested so I looked for the English translation. Taken from Constitution.org

> Article 100

> There shall be liberty of the Press. No person may be punished for any writing, whatever its contents, which he has caused to be printed or published, unless he wilfully and manifestly has either himself shown or incited others to disobedience to the laws, contempt of religion, morality or the constitutional powers, or resistance to their orders, or has made false and defamatory accusations against anyone. Everyone shall be free to speak his mind frankly on the administration of the State and on any other subject whatsoever.

I always get interested in how other free speech laws are worded because I enjoy the way Madison worded the First Amendment so damn much. When somebody points to an Article # or something like that, it makes my pursuit of this hobby a bit easier.

> Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances.

Compare and contrast. One is a grant, essentially a permission, to the people of Norway, and the other is basically telling the US Congress to fuck off because it has no right nor permission and not even a wink and a nod to make any law on the matters which follow. The liberty is inherent, Congress’ powers are not.

Mind this is a translation, I unfortunately do not know any Norwegian to verify the original Article 100.

https://leginfo.legislature.ca.gov/faces/codes_displayText.x...

Now compare and contrast with the California State Constitution. I’m providing a link because it is much wordier, and starts at Sec 2 and runs for a few more sections. While California is under the same structures of as the First Amendment in modern times, that wasn’t always the case. If you read the wording here, it is downright inferior to both the US First Amendment and the Norwegians Article 100, spares too many words, and phrases it’s equivalents mostly in a manner of a permission under the CA Constitution rather than telling the State legislature to fuck off. An unfortunate choice, but most of the State’s Constitution is a long tragedy of errors and poor choices, one of the most unfortunate being the choice to grant voters the right to amend the bloody rag by referendum.

Re: The NSA called me after midnight and requested my source code (2018)

#192

Earlier quoted context omitted.

> Your security should never depend upon security of your source code. For sure. I don't think it's about that, though. Even if the application in question were open source, if the project lead is willing to cooperate in any way their government asks, they could probable ensure the existence of a back door. For this reason, where possible, I would prefer to use encryption software written by people who are principled…

I'm pretty sure if the NSA asked him to add a backdoor, he wouldn't do it. (They already asked if he had an existing one, and he clearly realized how bad that would be if there was.)

My understanding is that he may not have a choice. With a combination of an NSL and the all-writs-act, the US government can likely compel any non-FAANG domestic entity to do nearly anything short of murder.

Re: The NSA called me after midnight and requested my source code (2018)

#193

Interesting story, but wouldn’t be surprised if the real play here was to get his source code so they could get some bad guys to use a modified version that the NSA could crack. Put a back door in and then intercept traffic trying to download the encryption app to download the back-doored version. The fact that the NSA has to call him in the middle of the night to learn that the free version didn’t use strong encrypt…

I doubt it. For one, how could they expect to distribute it in a way that a bad guy was more likely to download than by going to the official site? But also, if they did want to do that, they could probably backdoor it pretty easily just by patching the binary a bit. Reverse engineering and changing binaries is way easier than cracking encryption, and they probably have some of the world's top reverse engineers. The…

You put the "cracked" version on torrent sites today. Back then there were just as well known distribution sites.

You have to think that intelligence agencies have people inside hacking groups, giving backdoored hacked products a sheen of legitimacy.

Re: The NSA called me after midnight and requested my source code (2018)

#194

Earlier quoted context omitted.

Ah, I just assumed you were in the US because we actually have a Department of Defense.

Every country has a Department of Defense.

But it's not necessarily called the Department of Defense. That's literally the name of it in the US.

Re: The NSA called me after midnight and requested my source code (2018)

#195
post #191
post #103

Earlier quoted context omitted.

I am in Norway, so the First Amendment carries little weight around here; our equivalent is 'Article 100' (of the Constitution) stating pretty much the same thing as the First Amendment. (This is hardly relevant; I just grasped the opportunity to stress that the HN crowd resides in the most peculiar places...)

You got me interested so I looked for the English translation. Taken from Constitution.org > Article 100 > There shall be liberty of the Press. No person may be punished for any writing, whatever its contents, which he has caused to be printed or published, unless he wilfully and manifestly has either himself shown or incited others to disobedience to the laws, contempt of religion, morality or the constitutional pow…

Yeah, Norway's Article 100 isn't anywhere near as powerful as the First Amendment. So many broad and vague exceptions are carved out, and as you pointed out it's granting the people of Norway a right instead of enshrining an inherent right.

Re: The NSA called me after midnight and requested my source code (2018)

#196
post #183

Earlier quoted context omitted.

Microwave ovens are not that horrible against bipolar transistors. They are completely lethal for MOS-FETs, but one can make electronics that survive it.

Do you have more information on how to do that? Making things resilient against a kilowatt of non-ionizing microwave radiation seems challenging, in my experience it will burn the traces right off the PCB. A different game from the more common radiation-hardening where the concern is low power ionizing radiation.

Embedding your conductive trails into a large non-conductive material helps, as does putting unrelated trails apart, and making them at the right size. Completely surrounding them with a ground plane helps too, but I have no idea how to include an antenna.

Re: The NSA called me after midnight and requested my source code (2018)

#197

Earlier quoted context omitted.

Better not use any software by Microsoft then. Also definitely none of that scary open source stuff by people who’ll just hand over the code to anyone who asks.

Kind of missing the point, it's not about the source code. It's about the authors willingness to cooperate just because an NSA agent implied "it's important".

Consider the amount of cooperation which in this case was ‘send them the source code’.

Re: The NSA called me after midnight and requested my source code (2018)

#198
post #118
post #36

This sounds like spy training from Burn Notice. Like, you have to get the source code of this program, from a guy who isn't at home right now and the whole budget of the operation is a just enough to buy a mug from our gift shop. Good luck Dave!

I bought an NSA mug at the National Cryptologic Museum in 2000 or so. I was amused when it developed cracks and started leaking around the time Snowden was just getting into the news.

Life imitating art... or art imitating life... or something like that!

Also, fun fact: The Liberty Bell cracked some time ago in history (between 1752 and 1846), when exactly is debated by historians, but "The last big crack happened on Washington’s Birthday. The Liberty Bell cracked up, literally, in February 1846, when it was rung on President’s Day, celebrated on Washington’s birthday, and then stopped ringing because of damage from a major crack."

https://constitutioncenter.org/blog/10-fascinating-facts-abo...

So what that means exactly, I don't claim to know...

Re: The NSA called me after midnight and requested my source code (2018)

#199
What I find interesting about this article is that the poster was apparently permitted by the NSA to share his experience publicly...

Compare and contrast this with National Security Letters, which apparently (based on the ones that I have seen, that have been publicly posted on the Internet by other people) request or require absolute secrecy...

Re: The NSA called me after midnight and requested my source code (2018)

#200
post #49

I drew the ire of our security services in a much dumber way sometime in the early nineties; after having seen Wargames, I set up my MicroVAX, rescued from a dumpster at the local bank, to ID as a DoD box whenever any of my friends dialled into it. A few weeks into this, I get a summons to get down to the local police station ASAP. The commissioner then gives me a good verbal beating for being such a stupid kid; appa…

I miss the days when you could do stuff like this without ending up in prison.

I wouldn't worry. You can still set up a computer pretending to offer a DoD login, in fact as many as you want/can afford on AWS, and you still won't go to prison. IANAL, but go ahead and knock yourself out! It'll be fun/character building/a learning experience no matter what happens.
Post reply on HN