5 ms·
Presumably the NSA wouldn't let something like Starlink get off the ground unless they had a way of listening. How are they addressing this?
by bdefore 6y ago
Presumably the NSA wouldn't let something like Starlink get off the ground unless they had a way of listening. How are they addressing this?
- rsynnott 6y agoSame as any other ISP, probably.
- totetsu 6y agoBlack box router in the ISP data centre that is to say.
- caiobegotti 6y agoAFAIK "end-to-end encryption encoded at firmware level" is the current official answer: https://www.reddit.com/r/Starlink/comments/8049u6/starlink_to_be_endtoend_encryption_encoded_at/ https://www.reddit.com/r/Starlink/comments/8049u6/starlink_t...
- kitotik 6y agoSort of irrelevant if you don’t own either end.
- pfundstein 6y agoI find the second part of that statement more interesting: > If it is (and we learn about it), a crypto fix will go out immediately via network-wide firmware update. This implies that the SpaceX holds private keys for signing firmware updates, and a mechanism for pushing them. I hope those keys are kept very far from anything Internet-connected.
- mlindner 6y agoI mean even if you own your own private modem, Comcast (and others) can and do push new firmware directly into your modem. I don't see how this would be any different.
- pfundstein 6y agoI'm not sure how you think those ISPs supposedly push firmware to private 'modems' of all shapes and sizes, but I would like to know because I had a hell of a time reflashing my router with OpenWRT.
- jpollock 6y agoIt's because cable modems are standardized with a set of upstream management protocols. They have a looong history of fleet management [1]. If you have cable internet, try going to 192.168.100.1. [2] [1] https://en.wikipedia.org/wiki/DOCSIS https://en.wikipedia.org/wiki/DOCSIS [2] https://www.computerworld.com/article/2880475/talk-to-your-modem.html#:~:text=Most%20modems%20in%20their%20list,10.1%20or%20192.168 https://www.computerworld.com/article/2880475/talk-to-your-m....
- pfundstein 6y agoYou're referring to the CPE which is owned and managed by the ISP just as they own and manage other routers in their network. The other person said that they can push firmware to private modems though, which is not possible without that modem being configured to accept such pushes. Perhaps you're thinking of CWMP (TR-069) which is a protocol that ISPs often use to push configs to modems configured to receive them, but again, it cannot be used to arbitrarily flash the firmware of private modems.
- jpollock 6y agoMotorola's documentation says that firmware updates to _my_ modem are pushed by the ISP, with the rollout managed by the ISP. It may be CPE, but I purchased it retail and it is not linked to any particular ISP. https://motorolamentor.zendesk.com/hc/en-us/articles/216091737-How-do-I-update-the-modem-firmware-#:~:text=All%20firmware%20updates%20are%20handled,update%20cable%20modem%20firmware%20manually https://motorolamentor.zendesk.com/hc/en-us/articles/2160917....
- pfundstein 6y agoJust curious: What do you presume that NSA would do to prevent a multibillion dollar private company from pursuing a communications satellite constellation along all the correct legal and licensing channels?
- wmf 6y agoLet's ask Joe Nacchio from Qwest. https://en.wikipedia.org/wiki/Qwest#Refusal_of_NSA_surveillance_requests https://en.wikipedia.org/wiki/Qwest#Refusal_of_NSA_surveilla...
- Karunamon 6y agoI don't follow. If you're referring to his imprisonment, that was him and 6 other execs on insider trading/fraud charges. https://en.wikipedia.org/wiki/Joseph_Nacchio#Insider_trading,_fraud https://en.wikipedia.org/wiki/Joseph_Nacchio#Insider_trading...
- wmf 6y agoThere's a theory that he was selectively prosecuted because he refused to help the NSA. Imagine how much dirt on Elon Musk could mysteriously appear and cause trouble for SpaceX and Tesla.
- closeparen 6y agoDeny the licenses, presumably.
- pfundstein 6y agoWhich relevant licenses are the NSA in a position to deny?
- antif 6y agoI'm guessing Starlink is going to follow the law here. [Communications Assistance for Law Enforcement Act] https://en.wikipedia.org/wiki/Communications_Assistance_for_Law_Enforcement_Act https://en.wikipedia.org/wiki/Communications_Assistance_for_...
- jpollock 6y agoIt all depends on where the downlinks are. I would expect the US government will require all US customer traffic to be handed off to the public Internet in the USA. Then it's subject to standard legal intercept. There was an equivalent project (satellite internet) in New Zealand which was killed off because the government required that the downlink happened in NZ for legal intercept (and censorship) reasons. The costs only worked if the downlink happened in Australia (the project could share costs with Australian telcos) The downlink for NZ customers _had_ to happen in NZ, having it hit Australia and be routed back to NZ wasn't enough.
- mindfulhack 6y agoWhat happened to the 'Free Internet'? It only becomes free once you start encrypting it. Sad, but necessary.
- Smar 6y agoNo-one ever got major part of people to care about Internet, or even understand it... :/
- hedora 6y agoThey’ve already have all the big core internet links, call and sms histories, facial recognition logs, license plate camera logs, real time cell locations, and gps logs at (at least) google. I’m not sure if they bother with the long tail of traffic within smaller ISPs, but the parade of Cisco backdoors suggests they do.