3 ms·
Good ole' "NOBUS." More fun NSA fumbles: https://en.wikipedia.org/wiki/Clipper_chip https://en.wikipedia.org/wiki/Clipper_chip https://en.wikipedia.org/wiki/D
by lelandfe 3y ago
Good ole' "NOBUS." More fun NSA fumbles:
https://en.wikipedia.org/wiki/Clipper_chip https://en.wikipedia.org/wiki/Clipper_chip
https://en.wikipedia.org/wiki/Dual_EC_DRBG https://en.wikipedia.org/wiki/Dual_EC_DRBG
- kmeisthax 3y agoThis and the Clipper Chip aren't NOBUS. The NSA doesn't want you to know that the cryptosystem has law-enforcement access capability. The FBI doesn't care if you know as the kinds of criminals they are attacking don't do OPSEC.
- sneak 3y agoNOBUS isn't just intentional vulnerabilities, it's any vulnerability assumed to only be exploitable by US IC, whether engineered or otherwise. I think these qualify.
- rvnx 3y agoWell, the article mentions backdoor in Dual_EC_DRBG mostly targeting TLS/SSL communications, now we have Cloudflare, a much more scalable solution
- tptacek 3y agoDual EC is sort of the archetypical NOBUS backdoor.