3 ms·

> capturing and analyzing all network traffic > 30 days of ... "full packet capture" Also known as "XKEYSCORE".

• dmix 11y ago
  Not quite true, XKEYSCORE [1] is the GUI layer application for navigating the data using selectors. The UC systems sounds more like the job of TURMOIL [2] and other middleman taps that feed data into selector filtering systems, decrypt information, and allow injection of content into network traffic. Also notably, a system like this in such a privileged place on the network has potential to go beyond simply surveillance and can be used for offensive purposes by injecting malicious content. Especially if control of the system falls into the wrong hands. These types of risks which come about by introducing a tap like this are rarely considered, people tend to focus on the passive data surveillance side as the primary issue. But as a student or faculty, I'd be more concerned about the distribution of malware. Many foreign actors (basically, China) could exploit it to steal research information from students and faculty. PGP emails wouldn't protect against a rootkit. [1] https://en.wikipedia.org/wiki/XKeyscore https://en.wikipedia.org/wiki/XKeyscore [2] https://en.wikipedia.org/wiki/Turbulence_%28NSA%29 https://en.wikipedia.org/wiki/Turbulence_%28NSA%29