Welcome to DU! The truly grassroots left-of-center political community where regular people, not algorithms, drive the discussions and set the standards. Join the community: Create a free account Support DU (and get rid of ads!): Become a Star Member Latest Breaking News General Discussion The DU Lounge All Forums Issue Forums Culture Forums Alliance Forums Region Forums Support Forums Help & Search
 

trumad

(41,692 posts)
Sat Dec 21, 2013, 08:44 AM Dec 2013

Wow! I work in the Network Security business and this piece blows me away.

I know RSA very well and have worked with the product discussed in this piece. When you compromise a company that is supposed to protect you from being compromised, well then--- everyone is compromised.

Oh and thank you Ed Snowden.


Exclusive: Secret contract tied NSA and security industry pioneer

(Reuters) - As a key part of a campaign to embed encryption software that it could crack into widely used computer products, the U.S. National Security Agency arranged a secret $10 million contract with RSA, one of the most influential firms in the computer security industry, Reuters has learned.

Documents leaked by former NSA contractor Edward Snowden show that the NSA created and promulgated a flawed formula for generating random numbers to create a "back door" in encryption products, the New York Times reported in September. Reuters later reported that RSA became the most important distributor of that formula by rolling it into a software tool called Bsafe that is used to enhance security in personal computers and many other products.

<snip>
The earlier disclosures of RSA's entanglement with the NSA already had shocked some in the close-knit world of computer security experts. The company had a long history of championing privacy and security, and it played a leading role in blocking a 1990s effort by the NSA to require a special chip to enable spying on a wide range of computer and communications products.
http://www.reuters.com/article/2013/12/20/us-usa-security-rsa-idUSBRE9BJ1C220131220
122 replies = new reply since forum marked as read
Highlight: NoneDon't highlight anything 5 newestHighlight 5 most recent replies
Wow! I work in the Network Security business and this piece blows me away. (Original Post) trumad Dec 2013 OP
Corrupt beyond measure. woo me with science Dec 2013 #1
+1 cantbeserious Dec 2013 #9
For some reason, I am unable to rec this post. woo me with science Dec 2013 #2
NSA? trumad Dec 2013 #3
Heh heh. woo me with science Dec 2013 #6
It isn't outside the realm of possibilities. Enthusiast Dec 2013 #20
With this level of corruption and criminality, woo me with science Dec 2013 #32
well, clearly the NSA is unhappy about it... ProdigalJunkMail Dec 2013 #4
Clearing cache and cookies did the trick. woo me with science Dec 2013 #7
i cleared cookies this morning, too ProdigalJunkMail Dec 2013 #10
I like your cookies better than my cookies. woo me with science Dec 2013 #17
Same here. 840high Dec 2013 #91
That really is messed up. surrealAmerican Dec 2013 #5
With This Revelation In Mind - Consider That The Whole Edifice Of Government Is Corrupted cantbeserious Dec 2013 #8
We have a lot of work ahead of us to clean up this mess - it may take a lifetime. reformist2 Dec 2013 #18
The bush crime family set a whole new standard of corruption in America. We may loudsue Dec 2013 #37
It is Obama's surveillance state now. nt woo me with science Dec 2013 #40
I agree with everything you say except it seems you want to blame Republicans. rhett o rick Dec 2013 #50
Funny But I somehow don't remember George W truedelphi Dec 2013 #71
We sure dodged a bullet when we didn't get single payer! (nt) Recursion Dec 2013 #108
Right You Are Since What We Have Is Insurance Reform - So Much For Hope And Change cantbeserious Dec 2013 #113
One of the reasons I keep no sensitive data on a computer that connects to the outside world. hobbit709 Dec 2013 #11
Or a phone or on any computer in the world that may have information about us jtuck004 Dec 2013 #14
Anything I truly don't want anyone to know about is kept in the safest location of all hobbit709 Dec 2013 #15
Ha. That's kinda what I was thinking. One hopes. n/t jtuck004 Dec 2013 #19
That makes no difference. All your sensitive data is on computers, and they are all spied on. Romulox Dec 2013 #22
That's not the stuff I worry about. hobbit709 Dec 2013 #23
You likely have an idiosyncratic definition of "sensitive data" then. Romulox Dec 2013 #25
Those are matters of public knowledge. hobbit709 Dec 2013 #28
You are spouting absolute gibberish, of course. SS#, Bank accounts "public knowledge"? Romulox Dec 2013 #29
those items are available if you know where and how to look. hobbit709 Dec 2013 #30
Right. That place is the bank's encrypted database. With an NSA backdoor key. Romulox Dec 2013 #31
But you're not bothered if it stays? woo me with science Dec 2013 #34
If I would be perfectly happy if it's gone, the opposite holds if it stays. hobbit709 Dec 2013 #35
Why? woo me with science Dec 2013 #41
I am more worried about a extreme power shift politically to the right .. and what they're YOHABLO Dec 2013 #89
I buy stuff and earned money in public places. I don't just drive in my back yard. JDPriestly Dec 2013 #79
Phone calls cross the public spectrum. So why care if the gov't listens? Where's the distinction? Romulox Dec 2013 #116
They don't physically follow you to your lawyer's office. It would be too obvious. JDPriestly Dec 2013 #120
If someone physically followed me to my lawyer's office, I would go to court and get a restraining JDPriestly Dec 2013 #122
Now they will be intrigued to know Rosa Luxemburg Dec 2013 #38
As best as I can make out, RSA said no to Clinton, yes to Bush in 2006, ucrdem Dec 2013 #12
You should. Maedhros Dec 2013 #68
and in other news, Inspector Renault is shocked to find gambling going at Rick's place. nt ucrdem Dec 2013 #69
Again - why is is so important to you to discourage people from paying attention Maedhros Dec 2013 #70
It's not old news to the poster. It's just rationalization in his/her part. Hissyspit Dec 2013 #74
Its a fun game they have going quakerboy Dec 2013 #99
Who's should-ing whom? ucrdem Dec 2013 #80
You dismiss the importance of the OP Maedhros Dec 2013 #81
I read the link and clarified the timeline. You're welcome. nt ucrdem Dec 2013 #82
As I said, the timeline is not important. Maedhros Dec 2013 #83
Well, that was honest. nt ucrdem Dec 2013 #84
Doesn't surprise me at all. bemildred Dec 2013 #13
K&R - This is chilling. n/t myrna minx Dec 2013 #16
More criminal activity from a government agency that nothing will be done about. sabrina 1 Dec 2013 #21
this is disgusting! shireen Dec 2013 #24
k&r for exposure. n/t Laelth Dec 2013 #26
And to think there is far more yet to be revealed, it's beyond corrupt. nt mother earth Dec 2013 #27
Thank you Reuters!! johnnyreb Dec 2013 #33
+1 The few remaining investigative journalists deserve high praise woo me with science Dec 2013 #36
Large tail wagging dog Rosa Luxemburg Dec 2013 #39
Free software is the answer. DireStrike Dec 2013 #42
And safe for child pornographers and human traffickers. Think it through. randome Dec 2013 #46
Ok, let's ban anything that a criminal can use. Think it through. DireStrike Dec 2013 #48
You appear to choose security over liberty. nm rhett o rick Dec 2013 #51
Only when there is no alternative. randome Dec 2013 #54
There is always a choice. If The Powers To Be gave you the choice of eliminating child pornography rhett o rick Dec 2013 #56
Yes they have trumad Dec 2013 #62
it's for your own good.... mike_c Dec 2013 #64
So is food. eggplant Dec 2013 #52
I don't understand your point. randome Dec 2013 #55
I don't know where to begin. eggplant Dec 2013 #66
Not really. joshcryer Dec 2013 #97
"Not really." cprise Dec 2013 #107
The poster was saying you couldn't get caught. joshcryer Dec 2013 #112
My bad. I thought you replied to #42. n/t cprise Dec 2013 #115
No worries. joshcryer Dec 2013 #117
Anonymity tools are still necessary cprise Dec 2013 #118
Absolutely! joshcryer Dec 2013 #119
Check out Qubes OS cprise Dec 2013 #110
"The NSA declined to comment." progressoid Dec 2013 #43
Right, Lara Logan is probably on it. :-D closeupready Dec 2013 #75
My rec worked - TBF Dec 2013 #44
As I pointed out in one of the other threads on this... randome Dec 2013 #45
Great post!! Major Hogwash Dec 2013 #67
Like the Composite Superman? randome Dec 2013 #93
You were asked above (and declined to answer, interestingly) if closeupready Dec 2013 #77
I don't see that it's a pertinent question. randome Dec 2013 #92
Skype joined NSA PRISM just weeks after MS bought them. n/t cprise Dec 2013 #106
Son of a bitch! hootinholler Dec 2013 #47
What a bunch of scumbags! NealK Dec 2013 #49
This is, indeed, a BIG fucking deal. nt Poll_Blind Dec 2013 #53
You say you work in "the Network Security business", but this "blows you away"? Egalitarian Thug Dec 2013 #57
It blows me away because... trumad Dec 2013 #61
No, it's just a "soap opera!" Hissyspit Dec 2013 #76
NIST recently disowned Dual EC DRBG. joshcryer Dec 2013 #98
I happen to have some knowledge in this area also AAO Dec 2013 #104
Rec'd, no surprise Corruption Inc Dec 2013 #58
K & R !!! WillyT Dec 2013 #59
This is a must read. jsr Dec 2013 #60
K&R DeSwiss Dec 2013 #63
Nothing new here. sulphurdunn Dec 2013 #65
So, let me get this straight..... Th1onein Dec 2013 #72
Don't be so hard on the NSA, Yavapai Dec 2013 #73
K&R Solly Mack Dec 2013 #78
Steven Levy strongly hinted that the NSA had already done in public key crypto back in 2001. Warren Stupidity Dec 2013 #85
Where are those who will say they don't care because it's a Dem administration? OnyxCollie Dec 2013 #86
Oh a couple of the usual have shown up. riderinthestorm Dec 2013 #88
Loyalty to the party is more important than loyalty neverforget Dec 2013 #95
Pretty clear this is assbackwards, NSA needs to be under high surveillance. The threats RKP5637 Dec 2013 #87
If you are a real programmer you would never trust a package "random" number generator jimlup Dec 2013 #90
I still have a hardware RNG PCMCIA card Recursion Dec 2013 #111
K&R me b zola Dec 2013 #94
Fortunately the open crypto community didn't adopt it. joshcryer Dec 2013 #96
I don't believe that there is any encryption publically available that the gov't can't crack. Renew Deal Dec 2013 #100
There is an audit going on for True Crypt, an open source encryption program. Kablooie Dec 2013 #102
I trust both serpent and twofish Recursion Dec 2013 #109
Exactly, the more that comes to light, the more we have to thank Snowden for Warpy Dec 2013 #101
+ 1,000,000,000... What You Said !!! - K & R !!! WillyT Dec 2013 #105
Danny Casolaro reported on this in 1990 Midnight Writer Dec 2013 #103
I think people are just confused about who/what constitute "the government" Doctor_J Dec 2013 #114
kick woo me with science Dec 2013 #121

woo me with science

(32,139 posts)
2. For some reason, I am unable to rec this post.
Sat Dec 21, 2013, 08:50 AM
Dec 2013

The page just reloads without a rec.

Will try again in a bit.

woo me with science

(32,139 posts)
6. Heh heh.
Sat Dec 21, 2013, 09:07 AM
Dec 2013

I slipped a rec through. Distracted them with my morning emails.

Clearing cache and cookies may have helped, too.

ProdigalJunkMail

(12,017 posts)
4. well, clearly the NSA is unhappy about it...
Sat Dec 21, 2013, 08:53 AM
Dec 2013

however, I was able to get the DU REC to work... perhaps a glitch in the page refresh. it does show two rec's now...

sP

ProdigalJunkMail

(12,017 posts)
10. i cleared cookies this morning, too
Sat Dec 21, 2013, 09:15 AM
Dec 2013

christmas cookies... off a plate

my wife and kids and their friends went cookie-insane last night (let's put it this way, Santa has his work cut out for him so i am just doing my part to help out) and now i am all hopped-up on sugar and gingerbread...

ok, TMI... have an NSA-free day!

sP

cantbeserious

(13,039 posts)
8. With This Revelation In Mind - Consider That The Whole Edifice Of Government Is Corrupted
Sat Dec 21, 2013, 09:10 AM
Dec 2013

Trust - Government - Never Again

reformist2

(9,841 posts)
18. We have a lot of work ahead of us to clean up this mess - it may take a lifetime.
Sat Dec 21, 2013, 09:46 AM
Dec 2013

A generation or two of complacency, combined with the tendency for power to corrupt, has brought us to the current state of affairs.

loudsue

(14,087 posts)
37. The bush crime family set a whole new standard of corruption in America. We may
Sat Dec 21, 2013, 11:18 AM
Dec 2013

never recover from the republican mess we have found ourselves in. They have infiltrated the democratic party, and own the supreme court. Republicans are a cancer on the world.

 

rhett o rick

(55,981 posts)
50. I agree with everything you say except it seems you want to blame Republicans.
Sat Dec 21, 2013, 01:22 PM
Dec 2013

The scourge is bigger than the Republicans. Whoever is in power transcends parties. While we are watching the REpublicans, corrupt Democrats are picking our pockets. IMO it's possible that Pres Obama is truly working to help the lower classes, but he may be severely restricted in what he can do. That appears especially true in the area of the intelligence agencies.

truedelphi

(32,324 posts)
71. Funny But I somehow don't remember George W
Sat Dec 21, 2013, 05:31 PM
Dec 2013

Denouncing Ed Snowden.

Or spending Tuesday afternoons deciding which brown-skinned people our drones should fall on.

 

jtuck004

(15,882 posts)
14. Or a phone or on any computer in the world that may have information about us
Sat Dec 21, 2013, 09:31 AM
Dec 2013

and is not under our control...

You know, when I heard there was a guy who kept a list about who was naughty and nice, I thought, "We are in deep shit"

Now I find that these people, along with a lot of others, have a list too...and it bothers me much, much more.

hobbit709

(41,694 posts)
15. Anything I truly don't want anyone to know about is kept in the safest location of all
Sat Dec 21, 2013, 09:33 AM
Dec 2013

Inside my skull.

Romulox

(25,960 posts)
22. That makes no difference. All your sensitive data is on computers, and they are all spied on.
Sat Dec 21, 2013, 10:29 AM
Dec 2013

Ever do your taxes? Do you have a driver's license? A bank account?

You haven't kept your sensitive data from anyone, and you have a false sense of security.

hobbit709

(41,694 posts)
23. That's not the stuff I worry about.
Sat Dec 21, 2013, 10:33 AM
Dec 2013

I've always assumed that is data they know about. Anything they know about is no longer secret.

Romulox

(25,960 posts)
25. You likely have an idiosyncratic definition of "sensitive data" then.
Sat Dec 21, 2013, 10:37 AM
Dec 2013

I couldn't begin to imagine what "secrets" you store in your offline computer (or why you'd announce the same here on a public forum,) but rest assured all the "sensitive data" that they care to know--SS#, bank accounts, medical history, educational history, etc-- they already have.

hobbit709

(41,694 posts)
28. Those are matters of public knowledge.
Sat Dec 21, 2013, 10:46 AM
Dec 2013

Once you get a SS# you are in the government database. Same with bank accounts, etc.
I expect no privacy from any of that. As long as that data isn't obtained by non need to know people to use for their own ends. Even if someone got my financial data, they wouldn't get far with what little there is in my accounts.
We don't have an actual thought police yet so my mind is still secure.

Romulox

(25,960 posts)
29. You are spouting absolute gibberish, of course. SS#, Bank accounts "public knowledge"?
Sat Dec 21, 2013, 10:50 AM
Dec 2013

You are obviously deflecting away from the NSA spying scandal, as if that could possibly work.

I'll leave you to your inviolable "secrets"...

hobbit709

(41,694 posts)
30. those items are available if you know where and how to look.
Sat Dec 21, 2013, 10:58 AM
Dec 2013

I'm not deflecting from the NSA. I would be perfectly happy if it was abolished, along with about half the Pentagon.

you obviously half a false sense of security about your data-I have no such illusions.

Romulox

(25,960 posts)
31. Right. That place is the bank's encrypted database. With an NSA backdoor key.
Sat Dec 21, 2013, 11:01 AM
Dec 2013

I have no interest in further "debating" these nonsense points with you.

woo me with science

(32,139 posts)
34. But you're not bothered if it stays?
Sat Dec 21, 2013, 11:08 AM
Dec 2013

"I would be perfectly happy if..."

That was a very odd way of phrasing an opinion about an abusive, criminal governmental surveillance machine.

woo me with science

(32,139 posts)
41. Why?
Sat Dec 21, 2013, 11:33 AM
Dec 2013

So far your comments here suggest that you see no big problem... that people just need to keep their data offline.

What do you think about the criminality and corruption here?

 

YOHABLO

(7,358 posts)
89. I am more worried about a extreme power shift politically to the right .. and what they're
Sat Dec 21, 2013, 10:29 PM
Dec 2013

capable of doing with this information on U.S. citizens ... the Nazis used IBM to track down ''dissidents'' and Jews and what have you. Say it ain't so Joe. We never thought the U.S. would turn into a police state .. but proof is in the pudding.

JDPriestly

(57,936 posts)
79. I buy stuff and earned money in public places. I don't just drive in my back yard.
Sat Dec 21, 2013, 07:48 PM
Dec 2013

I drive around town. So I don't care if the government knows my tax data, my driver's license information or the status of my bank account.

I don't want them taking notes on how many times I call my mom, my husband, my kids, my friends, my doctor, my lawyer, etc.

The biggest problem is with the NSA observing who calls which lawyers. That's where our most basic rights, the rights that we rely on when we think we might have a serious problem, divorce, a dispute at work, a car accident, a dispute about a bill, perhaps a drunk driving charge, a drug charge if not against ourselves, against someone we know or care about, maybe a family member or even a worse legal problem, we want privacy. The NSA should not be looking at who is calling their lawyer and who is not. So you call your lawyer and then you call some friend. That should not be the NSA's business.

Same with your calls to your doctor, your pastor, any person to whom you turn when you have a problem. That's the information the NSA should not be getting.

Romulox

(25,960 posts)
116. Phone calls cross the public spectrum. So why care if the gov't listens? Where's the distinction?
Sun Dec 22, 2013, 04:04 PM
Dec 2013
The biggest problem is with the NSA observing who calls which lawyers. That's where our most basic rights, the rights that we rely on when we think we might have a serious problem, divorce, a dispute at work, a car accident, a dispute about a bill, perhaps a drunk driving charge, a drug charge if not against ourselves, against someone we know or care about, maybe a family member or even a worse legal problem, we want privacy. The NSA should not be looking at who is calling their lawyer and who is not. So you call your lawyer and then you call some friend. That should not be the NSA's business.


But if they physically followed you to your lawyer's office, it's fine? Again, I fail to see any logical distinction.

JDPriestly

(57,936 posts)
120. They don't physically follow you to your lawyer's office. It would be too obvious.
Sun Dec 22, 2013, 05:22 PM
Dec 2013

They are too sneaky and underhanded for that.

Phone calls are a private means of communication. I do care if the government listens.

We used to care about the fact that the East German government listened to its citizens' phone calls. Ditto for the Russian government.

Suddenly, because it's the US government doing it and it's only the metadata (which crunched in a computer reveals unbelievable amounts of our personal information and thinking), we think it's OK?

Not me. It simply is not OK. It never will be.

It's just repugnant.

It's wrong.

JDPriestly

(57,936 posts)
122. If someone physically followed me to my lawyer's office, I would go to court and get a restraining
Mon Dec 23, 2013, 07:15 PM
Dec 2013

order. They would then have to show specific cause as to why they were following me. I have a right to privacy even on the street.

A person who follows another person can expect to be called to court and have a restraining order issued against them. That is precisely what should happen to the NSA when it follows us online or collects our private communications information.

ucrdem

(15,512 posts)
12. As best as I can make out, RSA said no to Clinton, yes to Bush in 2006,
Sat Dec 21, 2013, 09:23 AM
Dec 2013

and now, in Obama time, a Carlyle "leaker" leaks the predictable news. Per the Reuters link.

Sorry but I'm not feelin' the outrage.

 

Maedhros

(10,007 posts)
68. You should.
Sat Dec 21, 2013, 04:40 PM
Dec 2013

The NSA and RSA are both guilty of consumer fraud.

The NSA encouraged, and paid, RSA to offer a product that was specifically designed NOT to perform as advertised.

You're OK with government agencies colluding with the private sector to defraud consumers?

I suppose I can't convince you to care. What is really strange is your perceived need to come into this thread and dissuade others from caring.

 

Maedhros

(10,007 posts)
70. Again - why is is so important to you to discourage people from paying attention
Sat Dec 21, 2013, 05:00 PM
Dec 2013

to abuses by the NSA?

Maybe it's old news to you, but "you" aren't "everyone." Others can learn from our discussion, and that can only be a good thing in a democracy.

Hissyspit

(45,788 posts)
74. It's not old news to the poster. It's just rationalization in his/her part.
Sat Dec 21, 2013, 06:43 PM
Dec 2013

There are all kinds of details coming out that are important that we haven't known about. And even if suspected, confirmation makes a difference.

quakerboy

(13,920 posts)
99. Its a fun game they have going
Sun Dec 22, 2013, 12:31 AM
Dec 2013

If anyone publicly states their suspicions about something wrong happening/about to happen, then they are just "concerned" and to be ignored because its all just fantasy's they are making up.

And once the proof comes out, its old news, stuff everyone already knew anyway.

ucrdem

(15,512 posts)
80. Who's should-ing whom?
Sat Dec 21, 2013, 07:50 PM
Dec 2013

I posted my analysis of the article. You popped in to correct my thinking. Fine, it's a discussion board, but where are you getting that I'm trying to discourage anyone from basking in their 15 minutes?

 

Maedhros

(10,007 posts)
81. You dismiss the importance of the OP
Sat Dec 21, 2013, 07:55 PM
Dec 2013

because of the timing of the release and because it came from a Carlyle leak. Both irrelevant to the issue: the NSA conspired with RSA to commit consumer fraud.

"Sorry, not feeling the outrage" reads as a passive-aggressive swipe at those who express concerns about this problem.

 

Maedhros

(10,007 posts)
83. As I said, the timeline is not important.
Sat Dec 21, 2013, 08:03 PM
Dec 2013

Why focus on that, instead of the wrongdoing on the part of the NSA?

bemildred

(90,061 posts)
13. Doesn't surprise me at all.
Sat Dec 21, 2013, 09:27 AM
Dec 2013

I didn't know the means, but I was pretty sure they had whatever they wanted. We are a corrupt, decadent imperial power in steep decline, we kissed lawfuilness off some time back, and we never gave it much respect.

I followed Zimmerman's crusade back in the 90s, and I have never believed the spooks would accept any limits on their powers to watch everybody all the time.

Hand-rolled high-grade open-source encryption is the only thing I have much faith in.

sabrina 1

(62,325 posts)
21. More criminal activity from a government agency that nothing will be done about.
Sat Dec 21, 2013, 10:16 AM
Dec 2013

Thanks again Edward Snowden.

At least people know they are being spied on now. No longer can they be called CTs about anything regarding their Government.

shireen

(8,333 posts)
24. this is disgusting!
Sat Dec 21, 2013, 10:35 AM
Dec 2013

I understand the need for some level of surveillance for the sake of national security, but the NSA has totally been abusing their position. Heads need to roll for this!

johnnyreb

(915 posts)
33. Thank you Reuters!!
Sat Dec 21, 2013, 11:07 AM
Dec 2013

Reuters also recently reported the Pentagon's unaccounted 8.5 TRillion. GOOD JOB, y'all!

Behind the Pentagon’s doctored ledgers, a running tally of epic waste
November 18, 2013
(....)
That means that the $8.5 trillion in taxpayer money doled out by Congress to the Pentagon since 1996, the first year it was supposed to be audited, has never been accounted for.
http://www.reuters.com/investigates/pentagon/#article/part2

woo me with science

(32,139 posts)
36. +1 The few remaining investigative journalists deserve high praise
Sat Dec 21, 2013, 11:12 AM
Dec 2013

as do the sources who dare to speak to them in this climate of government surveillance and intimidation.

DireStrike

(6,452 posts)
42. Free software is the answer.
Sat Dec 21, 2013, 11:46 AM
Dec 2013

It's the only way we have a shot at keeping the internet safe from malicious governments and private companies.

 

randome

(34,845 posts)
46. And safe for child pornographers and human traffickers. Think it through.
Sat Dec 21, 2013, 12:32 PM
Dec 2013

[hr][font color="blue"][center]Don't ever underestimate the long-term effects of a good night's sleep.[/center][/font][hr]

 

randome

(34,845 posts)
54. Only when there is no alternative.
Sat Dec 21, 2013, 01:38 PM
Dec 2013

Would you allow child pornographers to be able to encrypt the contents of their crimes? How would we ever get evidence to use against them?

Law enforcement decryption measures have been in force since at least the 90s.
[hr][font color="blue"][center]Don't ever underestimate the long-term effects of a good night's sleep.[/center][/font][hr]

 

rhett o rick

(55,981 posts)
56. There is always a choice. If The Powers To Be gave you the choice of eliminating child pornography
Sat Dec 21, 2013, 01:45 PM
Dec 2013

if you gave up all your Constitutional rights, would you go for it?

If security is what you want over all else, prison is the place for you.

 

trumad

(41,692 posts)
62. Yes they have
Sat Dec 21, 2013, 02:37 PM
Dec 2013

and they use that tool when a judge allows them to use that tool.

As we know---the NSA does what they want.

mike_c

(36,281 posts)
64. it's for your own good....
Sat Dec 21, 2013, 02:44 PM
Dec 2013

That's ALWAYS the justification for totalitarianism. Yes, I would rather preserve personal privacy that might be abused, than make everyone maximally safe by utterly eliminating privacy.

 

randome

(34,845 posts)
55. I don't understand your point.
Sat Dec 21, 2013, 01:41 PM
Dec 2013

I'm not calling for banning anything. I'm saying law enforcement has put decryption in place since at least the 90s, as I linked below.

I don't see how we would ever get evidence of crimes if child pornographers or human traffickers could keep the contents of their communications safe.
[hr][font color="blue"][center]Don't ever underestimate the long-term effects of a good night's sleep.[/center][/font][hr]

eggplant

(3,911 posts)
66. I don't know where to begin.
Sat Dec 21, 2013, 04:12 PM
Dec 2013

Are you suggesting that people shouldn't (or don't) have the right to use publicly verifiable unbreakable (for the moment) encryption? People who haven't been accused or convicted of any crime? That somehow the existence and availability of such tools is inherently bad?

Do you honestly think that it is the security of the encryption that causes people traffic in child porn or slaves? *That's* what's keeping us from catching them? Really? Do you really think that if unbreakable encryption is made illegal, that this would in any way affect the behavior of people who traffic in such things?

Why not require that all physical locks be pickable? That houses can't have curtains? That the titles of the books I choose to read be made available without a warrant?

The fifth amendment gives us the right to not self-incriminate. If I am forced to use encryption with known flaws, then I lose the right to private communication, which could be incriminating. I shouldn't have to demonstrate that I'm not using it for bad things by making it freely readable by others.

joshcryer

(62,270 posts)
97. Not really.
Sun Dec 22, 2013, 12:14 AM
Dec 2013

Security only goes so far. There's also behavior. 99% of people aren't going to be equipped to be completely immune from investigative actions if they are seen as a threat.

cprise

(8,445 posts)
107. "Not really."
Sun Dec 22, 2013, 03:24 AM
Dec 2013

People are not islands unto themselves, connected only by the panopticon. The ones who are equipped to investigate can inform others.

Security is also not a black-and-white, yes-or-no matter.

With open source, there is a much better chance the average user will find out about problems through the press, social media, etc, and there is a whole class of technicians who are empowered to rectify problems in the OS even if a vendor won't.

joshcryer

(62,270 posts)
112. The poster was saying you couldn't get caught.
Sun Dec 22, 2013, 03:41 AM
Dec 2013

I think that's demonstrably false as simply decrypting stuff and spying on people isn't all investigators have at their disposal.

joshcryer

(62,270 posts)
117. No worries.
Sun Dec 22, 2013, 04:29 PM
Dec 2013

I thought I'd replied to #42 when I re-read the subthread, DU's threading is weird.

Anyway I just wanted to say that anonymity isn't the end all, people make mistakes, word analysis is easily achieved, personal details worked out. It's why that one guy sending death threats over Tor got arrested. Tor, which btw the NSA has yet to hack because it's that good and it will only get better. That guy who used Tor just was questioned, as were all the other Tor users in the school, about 60 of them, and he was found out just by interviewing him and doing basic behavior analysis.

So, no, you don't need to get rid of anonymity to catch criminals.

You need to do your job.

cprise

(8,445 posts)
118. Anonymity tools are still necessary
Sun Dec 22, 2013, 04:53 PM
Dec 2013

And the more people that use them, the better. Of course, one also expects the state of the art will get better over time (no doubt, the NSA + DEA have an even harder time against I2P). When people start using this kind of networking by default, they gain at least some control over their online identity and privacy.

This is important today because our establishment has decided to pursue a goal of total access to private information, so I don't think its going overboard to suggest everyone start using I2P (Tor, I have reservations about).

You make a good point about real investigation, one that I think got lost when it comes to today's policy makers.

joshcryer

(62,270 posts)
119. Absolutely!
Sun Dec 22, 2013, 05:05 PM
Dec 2013

Sorry if I wasn't clear there. It's just that anonymous tools don't stop them from doing their job. The Silk Road, ran on Tor, was taken down because the idiot who set it up used his real name the very first time he advertised it. They literally caught him by using ... Google.

 

randome

(34,845 posts)
45. As I pointed out in one of the other threads on this...
Sat Dec 21, 2013, 12:30 PM
Dec 2013

They are, I believe, currently working with Microsoft for much the same thing. http://www.wired.com/threatlevel/2008/04/microsoft-gives/

You cannot have 100% secure communications because that opens the door very widely for criminal organizations -including pornographers, human trafficking operations, and, yes, terrorists- to operate with absolutely no fear of detection.

Law enforcement has always worked toward this. Even back in the 90s. http://en.wikipedia.org/wiki/Communications_Assistance_for_Law_Enforcement_Act

And for anyone who thinks we should have 100% secure communications, be so kind as to tell us how you would stop the organizations I listed above.
[hr][font color="blue"][center]You should never stop having childhood dreams.[/center][/font][hr]

Major Hogwash

(17,656 posts)
67. Great post!!
Sat Dec 21, 2013, 04:22 PM
Dec 2013

However, the maddening crowd doesn't care, they want to scream and holler.

What I want to know is, who is going to play Snowden in the upcoming movie.
I've heard that Matt Damon already turned down the part.

I know that Greenwald is going to be portrayed as a cross between Superman and Batman, complete with a super secret Batcave, but I don't know who they would get to play his part, either.

The "movie company" that will make the movie will probably be something like what Jerome Corsi has, an ad hoc film company that is thrown together just for this purpose.

 

randome

(34,845 posts)
93. Like the Composite Superman?
Sat Dec 21, 2013, 11:23 PM
Dec 2013


Snowden would be a kind of Composite Robin.
[hr][font color="blue"][center]Don't ever underestimate the long-term effects of a good night's sleep.[/center][/font][hr]
 

closeupready

(29,503 posts)
77. You were asked above (and declined to answer, interestingly) if
Sat Dec 21, 2013, 06:46 PM
Dec 2013

if you would be willing to surrender all your Constitutional rights in order to stop child pornography.

Please be so kind as to answer that question here.

 

randome

(34,845 posts)
92. I don't see that it's a pertinent question.
Sat Dec 21, 2013, 11:21 PM
Dec 2013

No one is asking anyone to surrender all our Constitutional rights. And I asked a question, too. How would law enforcement be able to produce evidence of child pornography or human trafficking if encryption was fool proof?

There is always a fine line to be tread between freedom and privacy. Always.
[hr][font color="blue"][center]Don't ever underestimate the long-term effects of a good night's sleep.[/center][/font][hr]

hootinholler

(26,449 posts)
47. Son of a bitch!
Sat Dec 21, 2013, 12:44 PM
Dec 2013

There are a lot of people around here owe me an apology!

They told me in June I was nuts to even think that RSA could be compromised! 256 bits! Impossible to crack! They didn't want to hear that a subtle flaw in the random number generation could allow keys to be deduced.

Vindication!

 

Egalitarian Thug

(12,448 posts)
57. You say you work in "the Network Security business", but this "blows you away"?
Sat Dec 21, 2013, 01:47 PM
Dec 2013

Thanks for bringing it up, I doubt many will even understand the implications, let alone break away from the perpetual soap opera long enough to object.

 

trumad

(41,692 posts)
61. It blows me away because...
Sat Dec 21, 2013, 02:32 PM
Dec 2013

we sell RSA to secure networks---but yet they're (RSA) doing secret deals with Big Gov to undue that security.

Basically RSA has given the NSA the keys to their castle--- and as we all know---the NSA can't keep their own shit secure.

joshcryer

(62,270 posts)
98. NIST recently disowned Dual EC DRBG.
Sun Dec 22, 2013, 12:25 AM
Dec 2013

NIST got's egg on its face.

And any good secure networking guy would've been informed not to use Dual EC DRBG. I feel for you if you used any secure networks without being aware of it.

Bruce Schneier called out as far back as 2007 when it was originally proposed: https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html

OpenSSL has never used it (in fact, because of the clever 'bug' in their implementation no version of OpenSSL has ever used it since no one discovered it was intentionally non-compliant until recently): http://marc.info/?l=openssl-announce&m=138747119822324&w=2

 

AAO

(3,300 posts)
104. I happen to have some knowledge in this area also
Sun Dec 22, 2013, 02:13 AM
Dec 2013

And what the NSA has done is unfortunately not surprising, but the RSA is used at my company to access our internal networks, and the same can be said for thousands more. I am very angry at RSA for betraying the trust of so many. There should be convictions, but it probably won't happen.

 

Corruption Inc

(1,568 posts)
58. Rec'd, no surprise
Sat Dec 21, 2013, 01:48 PM
Dec 2013

We live in a country with torture camps, huge propaganda networks, paid for elections, rigged markets and for-profit wars, of course they're spying on everyone and lying about it every step of the way.

 

sulphurdunn

(6,891 posts)
65. Nothing new here.
Sat Dec 21, 2013, 02:47 PM
Dec 2013

"Behind the ostensible government sits enthroned an invisible government owing no allegiance and acknowledging no responsibility to the people."
Theodore Roosevelt

The difference now is that the real government is becoming confident enough to step out of the shadows.

Th1onein

(8,514 posts)
72. So, let me get this straight.....
Sat Dec 21, 2013, 05:51 PM
Dec 2013

RSA sells security software and they sold to the NSA the right to build a backdoor in their security software.

If that's correct, they are going to be subject to a lot of lawsuits.

 

Yavapai

(825 posts)
73. Don't be so hard on the NSA,
Sat Dec 21, 2013, 05:57 PM
Dec 2013

Because the NSA is the only US government agency the actually listens to the people!

 

OnyxCollie

(9,958 posts)
86. Where are those who will say they don't care because it's a Dem administration?
Sat Dec 21, 2013, 08:25 PM
Dec 2013

I would like to know who is so intellectually shallow that they would excuse this. And I would like to laugh at them.

 

riderinthestorm

(23,272 posts)
88. Oh a couple of the usual have shown up.
Sat Dec 21, 2013, 09:29 PM
Dec 2013

Its pretty amazing how hard they're working to downplay this.

neverforget

(9,436 posts)
95. Loyalty to the party is more important than loyalty
Sun Dec 22, 2013, 12:03 AM
Dec 2013

to the Constitution. They can justify any wrongdoing with "it's old news" to "yeah but..."," he's Libertarian" and "the judge was a Bush appointee." It's rationalizing wrongdoing for the sake of the party.

RKP5637

(67,105 posts)
87. Pretty clear this is assbackwards, NSA needs to be under high surveillance. The threats
Sat Dec 21, 2013, 09:19 PM
Dec 2013

come from within by runaway agencies like the NSA that even presidents don't know the full extent of WTF is going on, and presidents come and go, these agencies stay, growing more and more powerful.

jimlup

(7,968 posts)
90. If you are a real programmer you would never trust a package "random" number generator
Sat Dec 21, 2013, 10:36 PM
Dec 2013

... just say'n

Recursion

(56,582 posts)
111. I still have a hardware RNG PCMCIA card
Sun Dec 22, 2013, 03:32 AM
Dec 2013

Unfortunately I can't find any laptops with PCMCIA slots anymore...

Renew Deal

(81,856 posts)
100. I don't believe that there is any encryption publically available that the gov't can't crack.
Sun Dec 22, 2013, 01:08 AM
Dec 2013

Just my opinion

Kablooie

(18,628 posts)
102. There is an audit going on for True Crypt, an open source encryption program.
Sun Dec 22, 2013, 01:18 AM
Dec 2013

It is supposed to be secure.
Reportedly there was a drive with supposedly illegal material on it that the FBI tried to open for months but couldn't do it.

The audit examines all the algorithms in the software to see if they are what they are supposed to be.
Since this is open source the audit can be double checked by anyone who has the training.

If the audit proves it to be what it is supposed to be it can make data extremely secure.
So secure that they don't expect it to be crackable anytime in the near future.

Warpy

(111,251 posts)
101. Exactly, the more that comes to light, the more we have to thank Snowden for
Sun Dec 22, 2013, 01:13 AM
Dec 2013

We always suspected nothing was particularly secure except some of our mail. Now we know it was even worse than we suspected.

The problem with the NSA is that it no longer had a mission when the USSR fell. It should have been defunded right then.

Instead, it was allowed to search for a mission, and that meant us.

Midnight Writer

(21,751 posts)
103. Danny Casolaro reported on this in 1990
Sun Dec 22, 2013, 01:37 AM
Dec 2013

He was working on a book called "The Octopus" about the U. S. government distributing software to foreign and domestic agencies ( The Inslaw case) that included a backdoor access that our intelligence agencies could use to monitor their data.

Danny was found dead in a motel bathtub and the files and notes for his book were missing.

Of course, this is all just conspiracy theory bullshit, so feel free to ignore it.
 

Doctor_J

(36,392 posts)
114. I think people are just confused about who/what constitute "the government"
Sun Dec 22, 2013, 01:15 PM
Dec 2013

It sure as hell ain't rank and file voters, and it ain't our "elected officials" either. It's the Cock Brothers, the BFEE, and a handful of others you've never heard of.

Latest Discussions»General Discussion»Wow! I work in the Netwo...