3 ms·

"...implies that the attack wasn't against the broadband providers directly, but against one of the intermediary companies that sit between the government CALEA

"...implies that the attack wasn't against the broadband providers directly, but against one of the intermediary companies that sit between the government CALEA requests and the broadband providers" Yup. The attack hit the CALEA backdoor via a wiretapping outsourcing company. Which one? * NEX-TECH: https://www.nex-tech.com/carrier/calea/ https://www.nex-tech.com/carrier/calea/ * Substentio: https://www.subsentio.com/solutions/platforms-technologies/ https://www.subsentio.com/solutions/platforms-technologies/ * Sy-Tech: https://www.sytechcorp.com/calea-lawful-intercept https://www.sytechcorp.com/calea-lawful-intercept Who else is in that business? There aren't that many wiretapping outsourcing companies. Verisign used to be in this business but apparently no longer is.

supriyo-biswas 2y ago
Thank you for posting this. The search term "calea solutions"[1] also brings up some relevant material, such as networking companies advising how to set up interception, and an old note from the DoJ[2] grumbling about low adoption in 2004 and interesting tidbits about how the government sponsored the costs for its implementation. [1] https://www.google.com/search?client=firefox-b-d&q=calea+solutions https://www.google.com/search?client=firefox-b-d&q=calea+sol... [2] https://oig.justice.gov/reports/FBI/a0419/findings.htm https://oig.justice.gov/reports/FBI/a0419/findings.htm
tguvot 2y ago
where from ""...implies that the attack wasn't against the broadband providers directly, but against one of the intermediary companies that sit between the government CALEA requests and the broadband providers" comes from ? from schneier ? because if you go to the actual reporting in wsj for example, it doesn't imply that attack was against TTP providers. also TTP providers are optional
- Maxious 2y ago
  WSJ: U.S. Wiretap Systems Targeted in China-Linked Hack https://www.wsj.com/tech/cybersecurity/u-s-wiretap-systems-targeted-in-china-linked-hack-327fc63b https://www.wsj.com/tech/cybersecurity/u-s-wiretap-systems-t... That seems pretty clear.
  - tguvot 2y ago
    nope :) wiretap systems are on the telecom provider side and it a bunch of different and in many cases ordinary networking equipment that can be easily misconfigured. TTP (aka companies listed above) are optional and usually used by companies that don't have their own legal department to process warrants/want to deal with fine details of intercepts
arresin 2y ago
> wiretapping outsourcing company Is it a great idea to give all that info to India as well?
- baybal2 2y ago
  [dead]

supriyo-biswas 2y ago

Thank you for posting this. The search term "calea solutions"[1] also brings up some relevant material, such as networking companies advising how to set up interception, and an old note from the DoJ[2] grumbling about low adoption in 2004 and interesting tidbits about how the government sponsored the costs for its implementation. [1] https://www.google.com/search?client=firefox-b-d&q=calea+solutions https://www.google.com/search?client=firefox-b-d&q=calea+sol... [2] https://oig.justice.gov/reports/FBI/a0419/findings.htm https://oig.justice.gov/reports/FBI/a0419/findings.htm

tguvot 2y ago

where from ""...implies that the attack wasn't against the broadband providers directly, but against one of the intermediary companies that sit between the government CALEA requests and the broadband providers" comes from ? from schneier ? because if you go to the actual reporting in wsj for example, it doesn't imply that attack was against TTP providers. also TTP providers are optional

Maxious 2y ago
WSJ: U.S. Wiretap Systems Targeted in China-Linked Hack https://www.wsj.com/tech/cybersecurity/u-s-wiretap-systems-targeted-in-china-linked-hack-327fc63b https://www.wsj.com/tech/cybersecurity/u-s-wiretap-systems-t... That seems pretty clear.
- tguvot 2y ago
  nope :) wiretap systems are on the telecom provider side and it a bunch of different and in many cases ordinary networking equipment that can be easily misconfigured. TTP (aka companies listed above) are optional and usually used by companies that don't have their own legal department to process warrants/want to deal with fine details of intercepts

arresin 2y ago

> wiretapping outsourcing company Is it a great idea to give all that info to India as well?

baybal2 2y ago
[dead]