3 ms·
> The starkest example of the risks inherent in the NSA’s approach involved an encryption-system component known as Dual Elliptic Curve Only example perhaps.
by aaron695 6y ago
> The starkest example of the risks inherent in the NSA’s approach involved an encryption-system component known as Dual Elliptic Curve
Only example perhaps.
What other back doors have they done?
Literal secret rooms where they tap data, these are not conventionally called backdoors. Nor are unpatched zero days the supplier originally didn't know about.
I don't think any country can install literal backdoors on products without getting caught. Backdoors seem like a Hollywood thing straight out of WarGames.
Why attack the Chinese or visa versa when you'd be basically working for them by damaging your own companies when you get caught.
- secfirstmd 6y agoCrypto AG and paying RSA come to mind.
- aaron695 6y agoI didn't know much about Crypto AG. Thanks, that's interesting. Also through encryption weaknesses. It's an interesting way to backdoor. https://en.wikipedia.org/wiki/Crypto_AG https://en.wikipedia.org/wiki/Crypto_AG
- inquirerofsorts 6y agoSome of the numerous Cisco vulnerabilities have all the hallmarks of government persuasion. Not to mention the wholesale hacking of their products bound for export: https://www.infoworld.com/article/2608141/snowden--the-nsa-planted-backdoors-in-cisco-products.html https://www.infoworld.com/article/2608141/snowden--the-nsa-p...
- aaron695 6y ago> Some of the numerous Cisco vulnerabilities have all the hallmarks of government persuasion. Is there a write up of the code analysis? It's interesting because I think it would be very hard to do without being caught retroactively. Easy to insert, but hard to cover up the fact it was inserted when specifically looked at. It would have to hide from fuzzers for instance. Easy to do, but hard to hide the fact your were hiding a bug.