4 ms·

> reasonable grounds to believe that an operation by NSA and GCHQ probably happened. No kidding, they've been bought, under more-than-suspicious circumstances,

by fab13n 12y ago

> reasonable grounds to believe that an operation by NSA and GCHQ probably happened. No kidding, they've been bought, under more-than-suspicious circumstances, by [inQtel](https://www.iqt.org/ https://www.iqt.org/) and [Texas Partner Group](https://tpg.com/ https://tpg.com/), which officially are CIA proxies. I don't think they had to resort to tailored access to perform their heist, I'd rather bet that they still have enough former colleagues inside Gemalto to get whatever they want by simply entering the correct password on the correct keyboard.

bjornsing 12y ago
Are you serious?!? Is Gemalto wholly owned by the CIA (through well known proxies), and nobody is reporting on that...? No...
- fab13n 12y ago
  Ostensibly, they've sold it back years ago. But that just means they don't need to officially own it anymore: Alex Mandl, Gemalto's current chairman, is among others a former board member of intQtel, which presents its mission on its web page as: We identify, adapt, and deliver innovative technology solutions to support the missions of the Central Intelligence Agency and broader U.S. Intelligence Community. So the news that nobody wants spread is: nobody cares about how much the NSA stole from Gemalto: whatever Gemalto has and NSA wants, the NSA is most likely to get by simply asking NSA affiliates installed at every interesting node in Gemalto's hierarchy. Incidentally, it's rather easy to find sources about this in French (Gemplus used to be a French company, before the fusion with Axalto which was forced by intQtel and TPG), but surprisingly hard to find in English.
  - toyg 12y ago
    > nobody cares about how much the NSA stole from Gemalto: whatever Gemalto has and NSA wants, the NSA is most likely to get by simply asking NSA affiliates This seems at odds with the leaked documents though. Why going to the trouble of compromising a company you've already social-engineered to the max?
    - chinathrow 12y ago
      Maybe because the chaps at GCHQ wanted to brag about it to their friends within 5eys?
    - AlyssaRowan 12y ago
      Not at all. GCHQ are not usually ones to try just one approach. They often try every approach at once: partly because they can; but mostly for compartmentation; to overwhelm layered defences; and to decrease sensitive source exposure by combining the results of everything they care to try. The doctrine has been called "penetrating targets' defences" or PTD: that's also the name of their budget/office/department/contracting scheme which is broadly equivalent to NSA's Special Source Operations/Targeted Access Operations, only more aggressive and multi-pronged. It incorporates HUMINT as well as both R&D and operational deployment of advanced technical attacks. You may see references in the Snowden documents of this (check the bottom), or in their tenders to BAE Detica for their modular botnet software, or elsewhere. Although much of the really juicy or operational stuff is STRAP3 and thus kept off the TS//STRAP2 wiki.gchq (which the NSA have shared access to via their ic.gov portal, and which Snowden dumped - and which, yes, runs a tweaked MediaWiki on PHP).
  - deleted 12y ago
    [deleted]
  - DyslexicAtheist 12y ago
    this is the key here: any company that has stakes within the US is subject to coercion secondly soon news will be out (give it a couple more days ;-)) which is currently not on any news sites radar - on IMSI catchers (aka fake BTS) which will put the whole story into a new context.
thatcherclay 12y ago
Can you post a reference for TPG (which I assume you actually mean Texas Pacific Group) being an "official" CIA proxy, as you say? That is a pretty bold assertion...
eli 12y ago
"Official CIA proxies" is not an accurate way to describe either in-q-tel or TPG.

by fab13n 12y ago

bjornsing 12y ago

Are you serious?!? Is Gemalto wholly owned by the CIA (through well known proxies), and nobody is reporting on that...? No...

fab13n 12y ago
Ostensibly, they've sold it back years ago. But that just means they don't need to officially own it anymore: Alex Mandl, Gemalto's current chairman, is among others a former board member of intQtel, which presents its mission on its web page as: We identify, adapt, and deliver innovative technology solutions to support the missions of the Central Intelligence Agency and broader U.S. Intelligence Community. So the news that nobody wants spread is: nobody cares about how much the NSA stole from Gemalto: whatever Gemalto has and NSA wants, the NSA is most likely to get by simply asking NSA affiliates installed at every interesting node in Gemalto's hierarchy. Incidentally, it's rather easy to find sources about this in French (Gemplus used to be a French company, before the fusion with Axalto which was forced by intQtel and TPG), but surprisingly hard to find in English.
- toyg 12y ago
  > nobody cares about how much the NSA stole from Gemalto: whatever Gemalto has and NSA wants, the NSA is most likely to get by simply asking NSA affiliates This seems at odds with the leaked documents though. Why going to the trouble of compromising a company you've already social-engineered to the max?
  - chinathrow 12y ago
    Maybe because the chaps at GCHQ wanted to brag about it to their friends within 5eys?
  - AlyssaRowan 12y ago
    Not at all. GCHQ are not usually ones to try just one approach. They often try every approach at once: partly because they can; but mostly for compartmentation; to overwhelm layered defences; and to decrease sensitive source exposure by combining the results of everything they care to try. The doctrine has been called "penetrating targets' defences" or PTD: that's also the name of their budget/office/department/contracting scheme which is broadly equivalent to NSA's Special Source Operations/Targeted Access Operations, only more aggressive and multi-pronged. It incorporates HUMINT as well as both R&D and operational deployment of advanced technical attacks. You may see references in the Snowden documents of this (check the bottom), or in their tenders to BAE Detica for their modular botnet software, or elsewhere. Although much of the really juicy or operational stuff is STRAP3 and thus kept off the TS//STRAP2 wiki.gchq (which the NSA have shared access to via their ic.gov portal, and which Snowden dumped - and which, yes, runs a tweaked MediaWiki on PHP).
- deleted 12y ago
  [deleted]
- DyslexicAtheist 12y ago
  this is the key here: any company that has stakes within the US is subject to coercion secondly soon news will be out (give it a couple more days ;-)) which is currently not on any news sites radar - on IMSI catchers (aka fake BTS) which will put the whole story into a new context.

thatcherclay 12y ago

Can you post a reference for TPG (which I assume you actually mean Texas Pacific Group) being an "official" CIA proxy, as you say? That is a pretty bold assertion...

eli 12y ago

"Official CIA proxies" is not an accurate way to describe either in-q-tel or TPG.