4 ms·

Python Flask NSA Backdoor

166 points by andyhmltn 13y ago

gsibble 13y ago
Looks like a fairly useful admin console actually. Time to fork it!
uvdiv 13y ago
This isn't about a backdoor in NSA's Flask (SELinux). This title will be misunderstood. Add [python] or [parody] or something.
- andyhmltn 13y ago
  Added as requested!
- cskau 13y ago
  Got a link for that? I've honestly only ever heard of the Python Flask, never the other.
  - cas 13y ago
    An OS security architecture for the Linux kernel: https://en.wikipedia.org/wiki/FLASK https://en.wikipedia.org/wiki/FLASK
  - asperous 13y ago
    > "Security-enhanced Linux (SELinux) is a reference implementation of the Flask security architecture for flexible mandatory access control." http://www.nsa.gov/research/selinux/faqs.shtml http://www.nsa.gov/research/selinux/faqs.shtml
    - andyhmltn 13y ago
      That's quite a weird naming coincidence in this case!
ryanisnan 13y ago
Little bobby tables is at it again...
austengary 13y ago
Alternatively, a more popular version for Rails: https://github.com/goshakkk/nsa_panel https://github.com/goshakkk/nsa_panel
- plausibility 13y ago
  That's actually what this was based off of, funnily enough!
dplomas 13y ago
NSA Backdoor as a Service a.k.a NSA BS
- phryk 13y ago
  This term will be assimilated into my vocabulary.
- einhverfr 13y ago
  Funny, I would have turned it into an acronym of NSA Baa'S. Then we could give them a sheep as a mascot and everything would work.
don_draper 13y ago
Why not code it in Clojure or Lisp?
- deleted 13y ago
  [deleted]
seanp2k2 13y ago
I still feel that this title is misleading, since I understood it to mean "there is a backdoor in Flask, and here is the evidence" before I clicked through.
leoc 13y ago
I think this is actually not as funny as the real thing. As far as I can gather, FISA 702 orders http://www.govtrack.us/congress/bills/110/hr6304/text http://www.govtrack.us/congress/bills/110/hr6304/text , used to target non-resident aliens, don't require the NSA to state that "I think they are a terrorist" or give any reason or justification at all for wanting all your data to the FISC court, let alone to the website operators.
sigzero 13y ago
Shouldn't the NSA image say "Verizon" and not "AT&T"?
- dev1n 13y ago
  In 2009 AT&T was found to have systems installed by the NSA in their wiring rooms that made a replica of all data coming into those rooms. source: http://www.pbs.org/wgbh/nova/military/spy-factory.html http://www.pbs.org/wgbh/nova/military/spy-factory.html
ck2 13y ago
According to Snowden the NSA is very good at MITM attacks. No parody needed to something that alarming. And joking about it only dilutes an extremely serious concern.

166 points by andyhmltn 13y ago

Looks like a fairly useful admin console actually. Time to fork it!

uvdiv 13y ago

This isn't about a backdoor in NSA's Flask (SELinux). This title will be misunderstood. Add [python] or [parody] or something.

andyhmltn 13y ago
Added as requested!
cskau 13y ago
Got a link for that? I've honestly only ever heard of the Python Flask, never the other.
- cas 13y ago
  An OS security architecture for the Linux kernel: https://en.wikipedia.org/wiki/FLASK https://en.wikipedia.org/wiki/FLASK
- asperous 13y ago
  > "Security-enhanced Linux (SELinux) is a reference implementation of the Flask security architecture for flexible mandatory access control." http://www.nsa.gov/research/selinux/faqs.shtml http://www.nsa.gov/research/selinux/faqs.shtml
  - andyhmltn 13y ago
    That's quite a weird naming coincidence in this case!

ryanisnan 13y ago

Little bobby tables is at it again...

austengary 13y ago

Alternatively, a more popular version for Rails: https://github.com/goshakkk/nsa_panel https://github.com/goshakkk/nsa_panel

plausibility 13y ago
That's actually what this was based off of, funnily enough!

dplomas 13y ago

NSA Backdoor as a Service a.k.a NSA BS

phryk 13y ago
This term will be assimilated into my vocabulary.
einhverfr 13y ago
Funny, I would have turned it into an acronym of NSA Baa'S. Then we could give them a sheep as a mascot and everything would work.

don_draper 13y ago

Why not code it in Clojure or Lisp?

deleted 13y ago
[deleted]

seanp2k2 13y ago

I still feel that this title is misleading, since I understood it to mean "there is a backdoor in Flask, and here is the evidence" before I clicked through.

leoc 13y ago

I think this is actually not as funny as the real thing. As far as I can gather, FISA 702 orders http://www.govtrack.us/congress/bills/110/hr6304/text http://www.govtrack.us/congress/bills/110/hr6304/text , used to target non-resident aliens, don't require the NSA to state that "I think they are a terrorist" or give any reason or justification at all for wanting all your data to the FISC court, let alone to the website operators.

sigzero 13y ago

Shouldn't the NSA image say "Verizon" and not "AT&T"?

dev1n 13y ago
In 2009 AT&T was found to have systems installed by the NSA in their wiring rooms that made a replica of all data coming into those rooms. source: http://www.pbs.org/wgbh/nova/military/spy-factory.html http://www.pbs.org/wgbh/nova/military/spy-factory.html

ck2 13y ago

According to Snowden the NSA is very good at MITM attacks. No parody needed to something that alarming. And joking about it only dilutes an extremely serious concern.