3 ms·
Help me out here: if my network hardware is compromised, but all of my communication is encrypted, that leaves… traffic analysis? hoovering up the data and sto
by jdblair 3y ago
Help me out here:
if my network hardware is compromised, but all of my communication is encrypted, that leaves… traffic analysis? hoovering up the data and storing it to decrypt in the future when it becomes feasible? using the router as a foothold to attack the rest of my network?
The first two are already happening for data that leaves my LAN. Unencrypted data on my LAN is vulnerable, and there is plenty of unencrypted traffic on my LAN in practice. Is that the risk?
- jdblair 3y agostill thinking… if the three-letter-agency has compromised the random number generator, then that means all traffic encrypted by the router may be easier to crack. What data is encrypted on the router? VPNs, for one. So a VPN, and all the plaintext traffic sent over it, could be made vulnerable.
- 0xDEAFBEAD 3y ago>What data is encrypted on the router? VPNs, for one. What sort of VPN are we talking about?
- thenickdude 3y agoYou can run OpenVPN or Wireguard directly on Ubiquiti network equipment for example, and some Ubiquiti EdgeRouter equipment has Cavium CPUs
- someonehere 3y agoI think I had read the three letter agency is storing this kind of data somewhere in a database for later technologies to decipher. So I’d assume they could snoop packets and store that data elsewhere. Whenever they harness quantum computing I could assume they put that stored data of yours through it and decrypt it all.
- jdblair 3y agobut they’re already storing data off the IXs, why do they need to target my router?