5 ms·
Why the NSA Called Me After Midnight and Requested My Source Code
- ihuman 8y agoPrevious discussion: https://news.ycombinator.com/item?id=18293940 https://news.ycombinator.com/item?id=18293940
- anonlastname 8y agoStrange that they would need the source code. I would think that it should be easy to figure out what encryption algorithm it uses by looking at the binary if it wasn't blatantly advertised anyway.
- Arnt 8y agoI expect what he wanted was the data structures. You know — length field at the start, then foo, then bar, then payload data. (I've never broken "real" encryption, but I spent quite some time during my teens on, ah, improving the user-friendliness of computer games.)
- dnautics 8y agoone guess might be they wanted to know exactly how the software seeded the PRNG, to cut down their search space dramatically.
- shittyadmin 8y agoThe binary would tell them that - in fact, it'd tell them that better than the source if there were any overlaps into garbage memory for example. Wanting the source is purely for speedy analysis.
- dnautics 8y agoI've never done windows (95?) disassembly, but from what little VSC++ I did back in the day, for the sake of speed, I would probably have wanted to see the source code instead of disassembling! Don't know how good at this stuff the NSA was back then.
- tgsovlerkhgsel 8y agoThey may not need it, but source code will allow them to read it faster and with a higher chance of getting it right. It will also make it easier to re-run the decryption routine to get the original file/verify a cracking attempt instead of having to reimplement it correctly (possibly without having known-good test vectors to check if they got it right).
- powerbroker 8y agoWhy is it midnight when the NSA calls, in Connecticut (EST), and 1AM when he calls to his partner, IN CALIFORNIA, for the source code?
- cpr 8y agoMust have been 4 hours later?
- stevespang 8y agoYou were duped. Whoever you were talking to likely has used your information against all privacy loving citizens. Even if it was the NSA, now we know from wikileaks what these guys are up to - - no good.