3 ms·

I think what the "worst nightmare" comment really meant was observation/monitoring that they (the NSA) could not disable. Hackers can turn off logging or even e

I think what the "worst nightmare" comment really meant was observation/monitoring that they (the NSA) could not disable. Hackers can turn off logging or even exploit monitoring agents as an attack vector (the Target breach a couple years used BMC agents as an attack vector). However, if a copy of all the network traffic is being passively analyzed by a monitoring appliance, then there's no way that they can hide from that or turn it off.

nickpsecurity 11y ago
Yes, that's the whole point. The advertisement below describes how they do this in high assurance environments with nice graphics and details. Not endorsing the product so much as dropping first, good example from Google. https://www.ixiacom.com/sites/default/files/resources/whitepaper/915-6894-01-secure-unidirectional-data_flow-network-taps.pdf https://www.ixiacom.com/sites/default/files/resources/whitep...