5 ms·

https://commons.wikimedia.org/wiki/File:Prism_slide_5.jpg https://commons.wikimedia.org/wiki/File:Prism_slide_5.jpg https://commons.wikimedia.org/wiki/File:PRI

https://commons.wikimedia.org/wiki/File:Prism_slide_5.jpg https://commons.wikimedia.org/wiki/File:Prism_slide_5.jpg https://commons.wikimedia.org/wiki/File:PRISM_Collection_Details.jpg https://commons.wikimedia.org/wiki/File:PRISM_Collection_Det...

tomschlick 11y ago
Does anyone else have the suspicion that Prism was named prism because instead of getting companies to co-operate with the program they were siphoning off data like they did to google by tapping their fiber lines? That would fit more in line with what we have heard about the tapping stations/rooms at AT&T/Verizon over the years. I mean if they were really involved with back dooring the individual servers of google/apple/facebook that would involve hundreds of employees at each company to make that happen. Someone would have spoken out by now with some evidence to prove it. To my knowledge that hasn't happened. Just this shitty looking powerpoint outlining when the data was starting to come in...
- bduerst 11y ago
  Wouldn't HTTPs prevent that?
  - tomschlick 11y ago
    Yes, but according to google they were tapping the "dark fiber" (private lines only carrying google traffic) that were not encrypted between their data centers. Those lines were for things like data replication so it was a goldmine for the NSA to tap. Those transmissions have since been encrypted.
  - yRetsyM 11y ago
    Not entirely, though Google and subsequently Microsoft, Apple et all have upgraded inter-datacentre connectivity to be encrypted - reducing this attack vector.
- mikeash 11y ago
  I recall that being a common interpretation of the name when the news of PRISM first broke, so you're certainly not alone in that.
- dippyskoodlez 11y ago
  One does not simply tap fiber. Especially at the composite level of transport links. The systems don't work that way.
ksk 11y ago
You can vote with your wallet, and also at the ballot :)
fiatpandas 11y ago
What describes the obvious discrepancy between what Tim Cook wrote and signed his name to, and the content on those slides?
- glitchdout 11y ago
  > I want to be absolutely clear that we have never worked with any government agency from any country to create a backdoor in any of our products or services. We have also never allowed access to our servers. And we never will. The slides imply Apple gives access to data on customers. Tim Cook says Apple does not give access to their servers. Is that really the point you're trying to make? That's just semantics and weasel words, nothing more.
mkehrt 11y ago
As snowwresteler says ( https://news.ycombinator.com/item?id=10297136 https://news.ycombinator.com/item?id=10297136 ) downthread: > Prism in general was mischaracterized by the early reports. It was first reported as a persistent backdoor into servers, but it was actually just a way for NSA to automate requests for information through the FBI. This was detailed in later reports. > Edit: for those skeptical about my comment above, here is more detail from a discussion about a year ago: > https://news.ycombinator.com/item?id=8333844 https://news.ycombinator.com/item?id=8333844
- deleted 11y ago
  [deleted]

tomschlick 11y ago

Does anyone else have the suspicion that Prism was named prism because instead of getting companies to co-operate with the program they were siphoning off data like they did to google by tapping their fiber lines? That would fit more in line with what we have heard about the tapping stations/rooms at AT&T/Verizon over the years. I mean if they were really involved with back dooring the individual servers of google/apple/facebook that would involve hundreds of employees at each company to make that happen. Someone would have spoken out by now with some evidence to prove it. To my knowledge that hasn't happened. Just this shitty looking powerpoint outlining when the data was starting to come in...

bduerst 11y ago
Wouldn't HTTPs prevent that?
- tomschlick 11y ago
  Yes, but according to google they were tapping the "dark fiber" (private lines only carrying google traffic) that were not encrypted between their data centers. Those lines were for things like data replication so it was a goldmine for the NSA to tap. Those transmissions have since been encrypted.
- yRetsyM 11y ago
  Not entirely, though Google and subsequently Microsoft, Apple et all have upgraded inter-datacentre connectivity to be encrypted - reducing this attack vector.
mikeash 11y ago
I recall that being a common interpretation of the name when the news of PRISM first broke, so you're certainly not alone in that.
dippyskoodlez 11y ago
One does not simply tap fiber. Especially at the composite level of transport links. The systems don't work that way.

ksk 11y ago

You can vote with your wallet, and also at the ballot :)

fiatpandas 11y ago

What describes the obvious discrepancy between what Tim Cook wrote and signed his name to, and the content on those slides?

glitchdout 11y ago
> I want to be absolutely clear that we have never worked with any government agency from any country to create a backdoor in any of our products or services. We have also never allowed access to our servers. And we never will. The slides imply Apple gives access to data on customers. Tim Cook says Apple does not give access to their servers. Is that really the point you're trying to make? That's just semantics and weasel words, nothing more.

mkehrt 11y ago

As snowwresteler says ( https://news.ycombinator.com/item?id=10297136 https://news.ycombinator.com/item?id=10297136 ) downthread: > Prism in general was mischaracterized by the early reports. It was first reported as a persistent backdoor into servers, but it was actually just a way for NSA to automate requests for information through the FBI. This was detailed in later reports. > Edit: for those skeptical about my comment above, here is more detail from a discussion about a year ago: > https://news.ycombinator.com/item?id=8333844 https://news.ycombinator.com/item?id=8333844

deleted 11y ago
[deleted]