3 ms·
Other government agencies likely use NSA recommendations. If the NSA is recommending software that they have a backdoor to, then that would cause some.majoe pro
by kbenson 7y ago
Other government agencies likely use NSA recommendations. If the NSA is recommending software that they have a backdoor to, then that would cause some.majoe problems if it came out.
I imagine senators would not like finding that they've been subject to that.
- AmericanChopper 7y agoYou don’t even need to get this speculative. All of the standards that both private and public sector systems must comply with are publicly available. I’ve worked with Fedramp service providers that handle varying levels of sensitive government information, they comply with the same NIST standards that you and I can download from their website. The NSA is mandated the inform large portions of those standards under their Information Assurance mission. If the NSA is tricking you and I into using compromised crypto, then they are also forcing huge amounts of federal systems to do the same.
- nickpsecurity 7y agoOperation BULLRUN said they were both backdooring systems and weakening standards to ensure they could get in. There's also been attacks facilitated by their activities. Thanks to Snowden, we don't have to speculate: NSA, FBI, and CIA are enemies of the state if our cybersecurity is concerned. They must always be assumed hostile. One exception I make is defense contractors that take money from them to build OSS tech. In that case, one can just scrutinize the tech itself. Most of the positive contributions in this area come from Galois Inc. Cryptol language is an example. On proprietary side, Rockwell Collins SHADE toolkit and AAMP7G CPU were likely NSA-funded to large degree.