3 ms·

>Plus if you really really want to know what's happening there, call the NSA Not sure if they give me any information as a Swiss citizen :-) >They'll send a f

by nix23 6y ago

>Plus if you really really want to know what's happening there, call the NSA Not sure if they give me any information as a Swiss citizen :-) >They'll send a few chaps to join the matrix dev community That's probably more on the James Bond side of reality >Or they'll use other tools to access the machines in question Yes that's what they probably will do, but that is targeting and not a Backdoor/break encryption by law.

LatteLazy 6y ago
We know from Snowden that the NSA actively and covertly submitted code to open source projects including Android\Linux: https://www.androidauthority.com/nsa-android-code-239118/ https://www.androidauthority.com/nsa-android-code-239118/ They're also involved in the Coreboot alternative BIOS project: https://www.tomshardware.com/news/nsa-contributes-low-level-stm-coreboot,39704.html https://www.tomshardware.com/news/nsa-contributes-low-level-... One of the key revelations from Snowden was that all that stuff that seemed far fetched or paranoid to us, wasn't just happening, it was routine and much more advanced stuff was also going on. It's also much easier to target Matrix etc when you don't have to target all of Facebook because you have a backdoor there. Reducing the NSAs workload by 99% makes the other 1% much easier because they have 100 times the resources to spend on it. You should also consider as a swiss citizen that US law is increasingly world law. If you sit in Switzerland and contribute to a project banned by US law, they may well have you extradited to spend the rest of your life in a US prison. They're doing that to Assange right now. They've done it to others as well. Locking up foreigners is quite in-style in the US at the moment... I haven't read the bill, so I don't know what the criminal sanctions are for failing to provide backdoors... Best of luck
- nix23 6y ago
  So to hide a backdoor in a opensource software it's the best solution to tell the world that you (the NSA) is actively working on a Project? Like SELinux? Man do you think they are stupid? They work on those projects to make their own infrastructure more secure, don't you think every one looks on their fingers/commits? >You should also consider as a swiss citizen that US law is increasingly world law That's Bullshit, was probably half true in the Cold War era but for sure not today. > They're doing that to Assange right now. That's England, you know those little dogs of yours.
  - LatteLazy 6y ago
    Per the links above, they didn't tell anyone, Snowden outed them. In the cold War it was true of the western world and the USs use was limited because the US wanted to look gentle and reasonable. Today it's true for most of the planet and the US wants to look tough. If you don't like the Assange case (I agree the brits are lap dogs, but that case actually got kicked off in Sweden and was handled under EU law much more aggressively than the in UK), try the FIFA case. The US ordered Switzerland to arrest and extradite foreign nationals, many had never set foot in the US for trial, Switzerland obeyed... https://www.washingtonpost.com/news/the-fix/wp/2015/05/27/how-the-us-can-arrest-fifa-officials-in-switzerland-explained/ https://www.washingtonpost.com/news/the-fix/wp/2015/05/27/ho... I don't like any of this. But it's time to abandon our innocence. If you're working on any meaningful project in encryption, the NSA are at least aware of you. The US are happy to use covert methods to undermine you if they think its worth it (and the bar is low). If you're important enough (or a DA wants to expense some flights) they'll use overt methods. Proceed at your own risk and don't assume that America banning encryption doesn't make it illegal for you just because you're a Swiss citizen in Switzerland.
    - nix23 6y ago
      >The US ordered Switzerland to arrest and extradite foreign nationals, No problem with that, from the article: >With wire fraud, one needs a wire that originates in the US Sometimes we even ask for it...that's normal international business: https://www.admin.ch/gov/en/start/documentation/media-releases.msg-id-23119.html https://www.admin.ch/gov/en/start/documentation/media-releas... >Proceed at your own risk and don't assume that America banning encryption doesn't make it illegal for you just because you're a Swiss citizen in Switzerland Yeah i stop here... BTW from your first article about android: >So, if it’s not looking to plant backdoors, what’s the NSA’s business with Android? Ironically, the agency has been working to make Android more secure. AND >It is just as preposterous to think that the best way to gain access to any operating system is to publicly announce that you are contributing to the OS, and make the tainted code accessible to anyone with an interest in it. So it was NOT Snowden, but NSA itself. Second Article about Coreboot: >Myers published a paper about STM last year on how NSA’s STM implementation could work. All Coreboot code, including all the STM contributions from the NSA, are open source, so anyone could verify that there is no backdoor in there -- in theory.

by nix23 6y ago

LatteLazy 6y ago

We know from Snowden that the NSA actively and covertly submitted code to open source projects including Android\Linux: https://www.androidauthority.com/nsa-android-code-239118/ https://www.androidauthority.com/nsa-android-code-239118/ They're also involved in the Coreboot alternative BIOS project: https://www.tomshardware.com/news/nsa-contributes-low-level-stm-coreboot,39704.html https://www.tomshardware.com/news/nsa-contributes-low-level-... One of the key revelations from Snowden was that all that stuff that seemed far fetched or paranoid to us, wasn't just happening, it was routine and much more advanced stuff was also going on. It's also much easier to target Matrix etc when you don't have to target all of Facebook because you have a backdoor there. Reducing the NSAs workload by 99% makes the other 1% much easier because they have 100 times the resources to spend on it. You should also consider as a swiss citizen that US law is increasingly world law. If you sit in Switzerland and contribute to a project banned by US law, they may well have you extradited to spend the rest of your life in a US prison. They're doing that to Assange right now. They've done it to others as well. Locking up foreigners is quite in-style in the US at the moment... I haven't read the bill, so I don't know what the criminal sanctions are for failing to provide backdoors... Best of luck

nix23 6y ago
So to hide a backdoor in a opensource software it's the best solution to tell the world that you (the NSA) is actively working on a Project? Like SELinux? Man do you think they are stupid? They work on those projects to make their own infrastructure more secure, don't you think every one looks on their fingers/commits? >You should also consider as a swiss citizen that US law is increasingly world law That's Bullshit, was probably half true in the Cold War era but for sure not today. > They're doing that to Assange right now. That's England, you know those little dogs of yours.
- LatteLazy 6y ago
  Per the links above, they didn't tell anyone, Snowden outed them. In the cold War it was true of the western world and the USs use was limited because the US wanted to look gentle and reasonable. Today it's true for most of the planet and the US wants to look tough. If you don't like the Assange case (I agree the brits are lap dogs, but that case actually got kicked off in Sweden and was handled under EU law much more aggressively than the in UK), try the FIFA case. The US ordered Switzerland to arrest and extradite foreign nationals, many had never set foot in the US for trial, Switzerland obeyed... https://www.washingtonpost.com/news/the-fix/wp/2015/05/27/how-the-us-can-arrest-fifa-officials-in-switzerland-explained/ https://www.washingtonpost.com/news/the-fix/wp/2015/05/27/ho... I don't like any of this. But it's time to abandon our innocence. If you're working on any meaningful project in encryption, the NSA are at least aware of you. The US are happy to use covert methods to undermine you if they think its worth it (and the bar is low). If you're important enough (or a DA wants to expense some flights) they'll use overt methods. Proceed at your own risk and don't assume that America banning encryption doesn't make it illegal for you just because you're a Swiss citizen in Switzerland.
  - nix23 6y ago
    >The US ordered Switzerland to arrest and extradite foreign nationals, No problem with that, from the article: >With wire fraud, one needs a wire that originates in the US Sometimes we even ask for it...that's normal international business: https://www.admin.ch/gov/en/start/documentation/media-releases.msg-id-23119.html https://www.admin.ch/gov/en/start/documentation/media-releas... >Proceed at your own risk and don't assume that America banning encryption doesn't make it illegal for you just because you're a Swiss citizen in Switzerland Yeah i stop here... BTW from your first article about android: >So, if it’s not looking to plant backdoors, what’s the NSA’s business with Android? Ironically, the agency has been working to make Android more secure. AND >It is just as preposterous to think that the best way to gain access to any operating system is to publicly announce that you are contributing to the OS, and make the tainted code accessible to anyone with an interest in it. So it was NOT Snowden, but NSA itself. Second Article about Coreboot: >Myers published a paper about STM last year on how NSA’s STM implementation could work. All Coreboot code, including all the STM contributions from the NSA, are open source, so anyone could verify that there is no backdoor in there -- in theory.