Live data from Hacker News

Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

electrospaces.net

31–40 of 243 posts

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#31

I love how the politicians presume NSA is safe partner and their danish citizens are not in the data. It does not really help if every other neighbouring country does the same. NSA will get danish info elsewhere. Everyone gets played. It works as long as USA is an trusthworthy ally. They wouldn't dare to abuse the information for private gains... right?

Are you sure? I find it very convincing that NSA would not betray the trust, as it also says in the article. > "I can not at all imagine in my imagination that the NSA would betray that trust. I consider it completely and utterly unlikely. If the NSA had a desire to obtain information about Danish citizens or companies, the United States would simply turn to [the domestic security service] PET, which would then provi…

> (...) NSA would not betray the trust (...)

While I find the above quote hilarious, you're probably right since the article also hints that they have a similar setup in Germany and most likely also in Sweden, Norway and many other surrounding countries. And since most of their comms probably also go through those, they'll just eavesdrop on the next hop and bypass all that trust and save themselves any potential political repercussions.

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#32

I love how the politicians presume NSA is safe partner and their danish citizens are not in the data. It does not really help if every other neighbouring country does the same. NSA will get danish info elsewhere. Everyone gets played. It works as long as USA is an trusthworthy ally. They wouldn't dare to abuse the information for private gains... right?

This doesn't even need to be a specifically anti-US thing. I think countries should generally not trust other countries that don't have a strong and nearly binding interest in their stability, security, prosperity, etc. In a close multinational union like the EU, one could argue that this is currently the case, or perhaps with closely-tied countries like Australia and New Zealand. It becomes harder to justify as you…

That is exactly what I do.

Today in fact, I got my Postman to sign an affidavit that he has "a strong and nearly binding interest in my stability, security, prosperity, etc".

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#33
post #21

According to google, about 90% of the web traffic on chrome is now encrypted [1]. Does it matter that they are tapping a cable? The metadata can’t be that useful. [1] https://transparencyreport.google.com/https/overview?hl=en_G...

Why can't the NSA just force a web PKI cert provider to create a fake certificate for them?

We know from the Lavabit case that once you start keeping private keys away from the feds they start making problems for you. Prove to me that every single root your browser trusts is not compromised.

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#36
post #21

According to google, about 90% of the web traffic on chrome is now encrypted [1]. Does it matter that they are tapping a cable? The metadata can’t be that useful. [1] https://transparencyreport.google.com/https/overview?hl=en_G...

"We kill people based on metadata" ~~ General Michael Hayden, former director of the NSA

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#37
post #21

According to google, about 90% of the web traffic on chrome is now encrypted [1]. Does it matter that they are tapping a cable? The metadata can’t be that useful. [1] https://transparencyreport.google.com/https/overview?hl=en_G...

Why can't the NSA just force a web PKI cert provider to create a fake certificate for them? We know from the Lavabit case that once you start keeping private keys away from the feds they start making problems for you. Prove to me that every single root your browser trusts is not compromised.

To catch that we have Certificate Transparency. It's not 100%, but makes it a risky proposition and not viable for large scale.

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#38

>The novelty of XKEYSCORE is that it enables analysts to find exactly those anonymous communications. For that purpose it reassembles IP packets into their original format ("sessionizing"), like Word documents, spreadsheets, chat messages, etc. This sounds interesting. Does it mean they write a sort of serialization/deserialization routine for whatever format they can grab at hand? For example maybe it's possible to…

Not quite.

Many of our extractors are stateful - ie. They need to see previous packets in the session to extract keys, state, etc.

This is done by having front ends which direct raw packets to backends based on which session they are a part of - the obvious one being the tcp 4-tuple.

The backends then don't each have many sessions to look after - perhaps tens of thousands each. That means they can keep many kilobytes of state. Each time they get a packet, they process it by updating the state. Certain state transitions (eg. The completion of a credit card transaction in a finance feed session) will trigger another event to be emitted, which goes through the same system again, and might go into another extractor or be persisted for analysts to view.

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#39
post #27
post #21

According to google, about 90% of the web traffic on chrome is now encrypted [1]. Does it matter that they are tapping a cable? The metadata can’t be that useful. [1] https://transparencyreport.google.com/https/overview?hl=en_G...

That metadata is surely still useful when you know frequency and target IP addresses. In addition not everyone uses google services and browsers, and so its really narrow to say 'chrome is encrypted, so who cares?'... This metadata by the way is exactly how you can calculate correspondence and association of graphs of people and information. How is that not exactly a breach of exactly what people fear most? It doesnt…

No the 90% I was refering to is chrome web traffic, not google service (toward the bottom, “Percentage of pages loaded over HTTPS in Chrome by platform”)

Re: Danish military intelligence uses XKEYSCORE to tap cables in co-op with the NSA

#40
post #23
post #21

According to google, about 90% of the web traffic on chrome is now encrypted [1]. Does it matter that they are tapping a cable? The metadata can’t be that useful. [1] https://transparencyreport.google.com/https/overview?hl=en_G...

If it didn't matter they sure would not tap it.

The infrastructure may have been built when that number was low (Snowden was ages ago)
Post reply on HN