Live data from Hacker News

The NSA called me after midnight and requested my source code (2018)

medium.com

1–10 of 219 posts

Re: The NSA called me after midnight and requested my source code (2018)

#3
Interesting read. I wonder whether this was an attempt at social engineering†? While we tend to think of the NSA (or other foreign agencies in this field) working on intercepting information only through electronic means, sometimes a direct approach is often easier (obligatory - xkcd: https://xkcd.com/538/).

Perhaps all they wanted was the source code of his application to repackage (after introducing a backdoor) and distribute it on the internet or directly to targets of interest ... perhaps it was part of his training ...

Social Engineering (https://en.wikipedia.org/wiki/Social_engineering_(security)) in the context of information security, is the psychological manipulation of people into performing actions or divulging confidential information.

Re: The NSA called me after midnight and requested my source code (2018)

#4

Interesting read. I wonder whether this was an attempt at social engineering†? While we tend to think of the NSA (or other foreign agencies in this field) working on intercepting information only through electronic means, sometimes a direct approach is often easier (obligatory - xkcd: https://xkcd.com/538/ ). Perhaps all they wanted was the source code of his application to repackage (after introducing a backdoor) an…

Only works if the 411 call was MiTMd.

edit

I was confused and my reply is confusing. I was trying to say that a third party could have stolen the source code by MiTMing the 411 call.

Re: The NSA called me after midnight and requested my source code (2018)

#5
post #4

Interesting read. I wonder whether this was an attempt at social engineering†? While we tend to think of the NSA (or other foreign agencies in this field) working on intercepting information only through electronic means, sometimes a direct approach is often easier (obligatory - xkcd: https://xkcd.com/538/ ). Perhaps all they wanted was the source code of his application to repackage (after introducing a backdoor) an…

Only works if the 411 call was MiTMd. edit I was confused and my reply is confusing. I was trying to say that a third party could have stolen the source code by MiTMing the 411 call.

I meant perhaps NSA agents are trained in social engineering too. Or it may not have been the NSA, but FBI or CIA or even Military Intelligence too, pretending to be NSA.

Re: The NSA called me after midnight and requested my source code (2018)

#6
post #4

Earlier quoted context omitted.

Only works if the 411 call was MiTMd. edit I was confused and my reply is confusing. I was trying to say that a third party could have stolen the source code by MiTMing the 411 call.

I meant perhaps NSA agents are trained in social engineering too. Or it may not have been the NSA, but FBI or CIA or even Military Intelligence too, pretending to be NSA.

Are you being naive on purpose, friend?

Re: The NSA called me after midnight and requested my source code (2018)

#8

Earlier quoted context omitted.

I meant perhaps NSA agents are trained in social engineering too. Or it may not have been the NSA, but FBI or CIA or even Military Intelligence too, pretending to be NSA.

Are you being naive on purpose, friend?

Looks like I missed something ... ? What's the context in which you think so?

Re: The NSA called me after midnight and requested my source code (2018)

#9

Certainly doesn't make me want to use any software made by this guy.

I guess to be fair, this was in 2000. Before we knew the Snowden revelations, etc. I also wonder if he handed over just the source code to the shareware version or the full version? Also, nearly everything is open sourced now...so I guess it isn't the biggest boundary to cross?

Re: The NSA called me after midnight and requested my source code (2018)

#10
post #4

Earlier quoted context omitted.

Only works if the 411 call was MiTMd. edit I was confused and my reply is confusing. I was trying to say that a third party could have stolen the source code by MiTMing the 411 call.

I meant perhaps NSA agents are trained in social engineering too. Or it may not have been the NSA, but FBI or CIA or even Military Intelligence too, pretending to be NSA.

You think the NSA impersonated themselves?
Post reply on HN