4 ms·
Nobody caught this bug over two years (supposedly). Stranger things have happened. Also, while the NSA might have wanted to create this bug to exploit it, you
by rtpg 13y ago
Nobody caught this bug over two years (supposedly). Stranger things have happened.
Also, while the NSA might have wanted to create this bug to exploit it, you still haven't shown that they created this bug. They might have known about it and exploited it, but saying they put the bug in the first place is a very strong claim.
- AnkhMorporkian 13y agoI'm not totally convinced that they even knew about it. If they had known about it, why bother going to the courts to coerce Lavabit to give up their SSL keys?
- ssmoot 13y agoWasn't that the FBI? If there were other means (blank-cheque warrants) to achieve their goals, it seems unlikely that the NSA would loop those agents in. Plus, would evidence obtained that way, without a warrant, even be admissible in any court? I mean, I guess this all went down after Snowden had left the country? So I'm not sure a court date was the end goal anyway. I'm fuzzy on the details/chronology.
- jessaustin 13y agoAny intelligence agency will prioritize source protection. Recall the efforts of the Ultra program in WWII: they sent out dummy reconnaissance planes to prevent the Germans from suspecting that Enigma had been broken. It's possible that the government already had the communications that Lavabit was trying to protect, but were putting on a public show so as not to reveal the brokenness of OpenSSL. See also "parallel construction".