4 ms·
We don't really need to ask individual engineers. A lot of this stuff is public knowledge and documented, as required by law, it just seems like nobody has bot
by AsymetricCom 13y ago
We don't really need to ask individual engineers. A lot of this stuff is public knowledge and documented, as required by law, it just seems like nobody has bothered looking.
http://www.cisco.com/web/about/security/intelligence/05_11_nsa-scty-compliance.html http://www.cisco.com/web/about/security/intelligence/05_11_n...
http://www.nsa.gov/ia/_files/routers/C4-040R-02.pdf http://www.nsa.gov/ia/_files/routers/C4-040R-02.pdf
There are protocols designed and published as part of the security infrastructure. Whether these protocols are used for good or evil, is really up to who has setup and configured the hardware. The bottom line is that you can't Luddite your way back into the golden age of the Internet.
In fact, in a lot of ways, the NSA is just cooping technology that businesses and black hats were already using. Do you think that only the NSA knows how to do deep packet scanning or protocol pattern matching?
- tptacek 13y agoDid you actually read this document, or did you stop at the term "NSA" in the title? It's a straightforward set of network operations security requirements. Can you pinpoint something in it that weakens security? It looks to me like it's about disabling the insecure defaults.
- AsymetricCom 13y agoOf course I read it, but there was no new information, it's simply a generic "call to arms" > It's a straightforward set of network operations security requirements. Oh, Is it? > It looks to me like it's about disabling the insecure defaults. Oh really? Mr. Snider has used is podium in The Guardian to tell us to set up a WiFi password? What article did you read exactly?
- deleted 13y ago[deleted]