4 ms·
Perhaps, but the problem is that the FedGov's equipment may vacuum up far more than it's supposed to, or disrupt the network, or do a MITM attack not authorized
by declan 13y ago
Perhaps, but the problem is that the FedGov's equipment may vacuum up far more than it's supposed to, or disrupt the network, or do a MITM attack not authorized by the court order, etc.
From my article: "A federal magistrate judge sided with the government, despite the fact that 'Carnivore would enable remote access to the ISP's network and would be under the exclusive control of government agents.'"
If you're running a company and care about your users' privacy, would you want an NSA black box with "remote access" -- remember, you can't log into it and don't know what it does -- inside your firewalls? It might be better to say: Okay, here's a process through which we'll give you a .tar.gz file of the account via Secure FTP. Just keep those NSA black boxes the hell away from us. Hello, PRISM.
- Zigurd 13y agoThat's a rationale for sure, but the risks you cite are likely to be present nonetheless if the firewall, networking, and SAN gear you are running has backdoors.
- declan 13y agoIf you have evidence that the "firewall, networking, and SAN gear" used by Facebook, Apple, Microsoft, Google, Yahoo, etc. have supersecret government backdoors, we'd be delighted if you could share it with us.
- Zigurd 13y agoAll I know about firsthand is the LI interfaces in some kinds of infrastructure routers. The way the LI interface is controlled would enable its use without knowledge of the owner of the node. I don't have any reason to think the ones I know of are the only infrastructure nodes with LI interfaces.
- Amadou 13y agoIn case anyone else is wonder WTF an "LI interface" is -- it is a "Lawful Interception Interface." A way for a 3rd party, nominally a law enforcement agency, to make direct copies of certain specific data that passes through a router. In the US it is the kind of thing that the CALEA bill mandated. https://en.wikipedia.org/wiki/Lawful_interception https://en.wikipedia.org/wiki/Lawful_interception https://en.wikipedia.org/wiki/Communications_Assistance_for_Law_Enforcement_Act https://en.wikipedia.org/wiki/Communications_Assistance_for_...
- epistasis 13y agoI'm not sure if this what was originally referenced, and honestly I'd be very surprised if HP storage saw much use in these companies, but the tech support backdoors that have recently been revealed in two HP storage products have caused me personal concern. My first Google hit, seems somewhat accurate: http://www.infoworld.com/t/data-security/hp-admits-undocumented-backdoors-in-two-separate-storage-lines-222614 http://www.infoworld.com/t/data-security/hp-admits-undocumen...
- superuser2 13y agoThe only remote attack is DoS. You'd need physical access to steal data with that.