4 ms·
"The assumption isn't bad - it's a private network line, not a public internet connection. Nobody else had access to that line, at least they weren't supposed t
by rsync 13y ago
"The assumption isn't bad - it's a private network line, not a public internet connection. Nobody else had access to that line, at least they weren't supposed to."
You don't use telnet when you access your home server(s) from your laptop ... that's basically what they were doing.
They skipped over a zero-cost, obvious best practice, and I think we should be suspicious. Either they've run that part of their network in a stunningly negligent fashion ... or this was the ingress they gave to the NSA which could be plausibly denied later.
- ajross 13y agoNo, it's not. Telnet sends packets in the clear over many networks controlled directly by third parties and accessible to them as an inherent part of operating their business. This was a point-to-point cable. The only access possible was physical, by digging it up and splicing it. Obviously that attack was possible, but arguing that this is somehow "the same kind of attack" as running tcpdump on a router to sniff packets is just insane, sorry.
- lsh123 13y agoOther attack vectors: rogue google employee, breakins into the data center, ...