Reply to topic  [ 33 posts ]  Go to page Previous  1, 2, 3  Next
Snowden leaks: US and UK 'crack online encryption' 
Author Message
Legend
User avatar

Joined: Fri Apr 24, 2009 2:02 am
Posts: 29240
Location: Guantanamo Bay (thanks bobbdobbs)
Reply with quote
big_D wrote:
Amnesia10 wrote:
Quote:
"The NSA's efforts to secretly defeat encryption are recklessly shortsighted and will further erode not only the United States' reputation as a global champion of civil liberties and privacy but the economic competitiveness of its largest companies."

Already the Chinese have ordered all their companies to replace all US telecoms equipment with Chinese telecoms equipment as fast as possible. If none is available to use European sourced telecoms equipment. This could cost US tech companies hundreds of billions of lost sales.

The Patriot Act alone means that you cannot, theoretically, use any cloud service in Europe, if the hosting company has even a branch office in America, let alone headquarters there.

The problem is that they have to hand over your data under American law, but unless they receive written permission from the people affected (e.g. all the people in you contact list) they can't hand over the data under European law, without a valid EU court order. The problem is, if they hand over the data under a FISA request, then YOU are liable to prosecution in Europe, not the cloud service.

Yes I was looking for EU only cloud services and most are USA based. So the same problem remains. It could be an immense boost to an EU only cloud provider.


Sent from my iPad using Tapatalk HD

_________________
Do concentrate, 007...

"You are gifted. Mine is bordering on seven seconds."

https://www.dropbox.com/referrals/NTg5MzczNTk

http://astore.amazon.co.uk/wwwx404couk-21


Sat Sep 07, 2013 2:41 pm
Profile
Legend
User avatar

Joined: Fri Apr 24, 2009 2:02 am
Posts: 29240
Location: Guantanamo Bay (thanks bobbdobbs)
Reply with quote
NSA Can Spy on Smart Phone Data

Quote:
The United States' National Security Agency intelligence-gathering operation is capable of accessing user data from smart phones from all leading manufacturers. Top secret NSA documents that SPIEGEL has seen explicitly note that the NSA can tap into such information on Apple iPhones, BlackBerry devices and Google's Android mobile operating system.

_________________
Do concentrate, 007...

"You are gifted. Mine is bordering on seven seconds."

https://www.dropbox.com/referrals/NTg5MzczNTk

http://astore.amazon.co.uk/wwwx404couk-21


Sun Sep 08, 2013 4:26 pm
Profile
Legend

Joined: Sun Apr 26, 2009 12:30 pm
Posts: 45931
Location: Belfast
Reply with quote
Amnesia10 wrote:
NSA Can Spy on Smart Phone Data

Quote:
The United States' National Security Agency intelligence-gathering operation is capable of accessing user data from smart phones from all leading manufacturers. Top secret NSA documents that SPIEGEL has seen explicitly note that the NSA can tap into such information on Apple iPhones, BlackBerry devices and Google's Android mobile operating system.


Correct me if I'm wrong, but aren't BBs sold on their 'security' for business users? Hopefully somebody will take them to court. And I'm not familiar with competition law, but does the NSA breach that too now?

_________________
Plain English advice on everything money, purchase and service related:

http://www.moneysavingexpert.com/


Mon Sep 09, 2013 2:10 pm
Profile
What's a life?
User avatar

Joined: Fri Apr 24, 2009 10:21 am
Posts: 12700
Location: The Right Side of the Pennines (metaphorically & geographically)
Reply with quote
I thought the clients set the security for Blackbery, not the mobile network or phone manufacturer.
That's why BB were telling the Indian courts (I think it was India) that they couldn't give them keys for a back door as they didn't have them.

_________________
pcernie wrote:
'I'm going to snort this off your arse - for the benefit of government statistics, of course.'


Mon Sep 09, 2013 2:18 pm
Profile WWW
Legend

Joined: Sun Apr 26, 2009 12:30 pm
Posts: 45931
Location: Belfast
Reply with quote
l3v1ck wrote:
I thought the clients set the security for Blackbery, not the mobile network or phone manufacturer.
That's why BB were telling the Indian courts (I think it was India) that they couldn't give them keys for a back door as they didn't have them.


Yeah, I remember something similar in the States when the authorities wanted access to Skype's protocols or whatever. We now know of course that this was all for show, or at least an even easier way of getting at it.

_________________
Plain English advice on everything money, purchase and service related:

http://www.moneysavingexpert.com/


Mon Sep 09, 2013 2:40 pm
Profile
What's a life?
User avatar

Joined: Thu Apr 23, 2009 7:26 pm
Posts: 17040
Reply with quote
l3v1ck wrote:
I thought the clients set the security for Blackbery, not the mobile network or phone manufacturer.
That's why BB were telling the Indian courts (I think it was India) that they couldn't give them keys for a back door as they didn't have them.

Technically, it's down to either RIM/Blackberry or the phone provider depending on which model you're using. Essentially all Internet traffic is sent to a particular server where it is encrypted before it's sent to the phone and any traffic back is encrypted by the phone and sent back to that server, so no IP traffic can be eavesdropped on the first/last 'hop'. Whether the data was encrypted (e.g. via SSL) when the back end server received it, RIM neither knows nor cares. It just sends everything down the same pipe, encrypting it as it goes.

If your Blackberry has a 'BES' connection, that server is sat in one of RIM's datacenters. They have some each region (US, EMEA etc).
if your Blackberry has a 'BIS' connection, that server is sat in one of your phone provider's datacenters, which are probably in the same country as you.

In the case of India, essentially what was happening was the Indian government wanted access to the 'BES' servers. They threatened RIM with banning Blackberry sales in India altogether, so RIM moved one of their datacenters to India, routed all Indian BES traffic through it and allowed the Indian government access to the datas as it passed through - so if the data didn't start as encrypted before it got to RIM, the Indian government can read it no problem. In India, Blackberrys are no more secure than any other phone, at least a far as the government is concerned.


Last edited by jonbwfc on Mon Sep 09, 2013 2:49 pm, edited 1 time in total.



Mon Sep 09, 2013 2:48 pm
Profile
What's a life?
User avatar

Joined: Fri Apr 24, 2009 10:21 am
Posts: 12700
Location: The Right Side of the Pennines (metaphorically & geographically)
Reply with quote
Found the story.
Comsumers screwed, enterprise safe:
CLICKY
Quote:
BlackBerry has finally given in to demands from the Indian government to access its consumer messaging services, although enterprise communications will remain safe from prying eyes.

An internal Department of Telecommunications document seen by Economic Times apparently declared that the “lawful interception system for BlackBerry services” is now ready.

The report seems accurate, as BlackBerry has issued statement with the following soothing words:

The lawful access capability now available to BlackBerry's carrier partners meets the standard required by the Government of India for all consumer messaging services offered in the Indian marketplace. We also wish to underscore, once again, that this enablement of lawful access does not extend to BlackBerry Enterprise Server.

Enterprise customers will remain safe from India’s spooks after BlackBerry presumably persuaded the authorities that it doesn’t have – and indeed never did have – the BES encryption keys for individual corporates to hand over.

_________________
pcernie wrote:
'I'm going to snort this off your arse - for the benefit of government statistics, of course.'


Mon Sep 09, 2013 2:49 pm
Profile WWW
What's a life?
User avatar

Joined: Thu Apr 23, 2009 7:26 pm
Posts: 17040
Reply with quote
l3v1ck wrote:
Quote:
Enterprise customers will remain safe from India’s spooks after BlackBerry presumably persuaded the authorities that it doesn’t have – and indeed never did have – the BES encryption keys for individual corporates to hand over.

Saying that was a nice smokescreen, but see above - if you have access to the BES back end server, you don't need the encryption keys.


Mon Sep 09, 2013 2:50 pm
Profile
Legend
User avatar

Joined: Fri Apr 24, 2009 2:02 am
Posts: 29240
Location: Guantanamo Bay (thanks bobbdobbs)
Reply with quote
l3v1ck wrote:
Found the story.
Comsumers screwed, enterprise safe:

Isn't that always the way?

_________________
Do concentrate, 007...

"You are gifted. Mine is bordering on seven seconds."

https://www.dropbox.com/referrals/NTg5MzczNTk

http://astore.amazon.co.uk/wwwx404couk-21


Mon Sep 09, 2013 3:02 pm
Profile
What's a life?
User avatar

Joined: Thu Apr 23, 2009 8:25 pm
Posts: 10691
Location: Bramsche
Reply with quote
pcernie wrote:
l3v1ck wrote:
I thought the clients set the security for Blackbery, not the mobile network or phone manufacturer.
That's why BB were telling the Indian courts (I think it was India) that they couldn't give them keys for a back door as they didn't have them.


Yeah, I remember something similar in the States when the authorities wanted access to Skype's protocols or whatever. We now know of course that this was all for show, or at least an even easier way of getting at it.

The data being transmitted is encrypted, but if the phone itself isn't encrypted (it is usually an option), then if they can get physical access to the phone, you can quiet easily read out the data on it. That has been known for years. The US police have been extracting information from phones during random stops since about 2010.

_________________
"Do you know what this is? Hmm? No, I can see you do not. You have that vacant look in your eyes, which says hold my head to your ear, you will hear the sea!" - Londo Molari

Executive Producer No Agenda Show 246


Mon Sep 09, 2013 4:22 pm
Profile ICQ
Legend

Joined: Sun Apr 26, 2009 12:30 pm
Posts: 45931
Location: Belfast
Reply with quote
Yahoo files lawsuit against NSA over user data requests

http://www.theguardian.com/world/2013/s ... e-requests

In reality I suspect it's a PR exercise, but it still puts much-needed pressure on the NSA. What will probably really need to happen is companies losing money...

_________________
Plain English advice on everything money, purchase and service related:

http://www.moneysavingexpert.com/


Mon Sep 09, 2013 9:26 pm
Profile
What's a life?
User avatar

Joined: Thu Apr 23, 2009 8:25 pm
Posts: 10691
Location: Bramsche
Reply with quote
It is a fight to stay in business for these companies. Trust in American corporations offering internet services has been severely damaged and they are desperate to do some damage control, but they aren't allowed to as it currently stands. They can only sit back and watch how the NSA flushes their billion dollar businesses down the drain.

_________________
"Do you know what this is? Hmm? No, I can see you do not. You have that vacant look in your eyes, which says hold my head to your ear, you will hear the sea!" - Londo Molari

Executive Producer No Agenda Show 246


Tue Sep 10, 2013 7:00 am
Profile ICQ
Legend
User avatar

Joined: Fri Apr 24, 2009 2:02 am
Posts: 29240
Location: Guantanamo Bay (thanks bobbdobbs)
Reply with quote
big_D wrote:
It is a fight to stay in business for these companies. Trust in American corporations offering internet services has been severely damaged and they are desperate to do some damage control, but they aren't allowed to as it currently stands. They can only sit back and watch how the NSA flushes their billion dollar businesses down the drain.

The Chinese have advised all their businesses and citizens to dump US technology and telecoms equipment. That will seriously impact all of those who want to expand into Asia. I am looking for a non US cloud provider for syncing. 1Password 4 which is due out soon will enable wifi syncing so no need to use any cloud service at all.

_________________
Do concentrate, 007...

"You are gifted. Mine is bordering on seven seconds."

https://www.dropbox.com/referrals/NTg5MzczNTk

http://astore.amazon.co.uk/wwwx404couk-21


Tue Sep 10, 2013 7:24 am
Profile
Legend

Joined: Sun Apr 26, 2009 12:30 pm
Posts: 45931
Location: Belfast
Reply with quote
Mark Zuckerberg on gov's handling of NSA scandal: 'I think they blew it'

http://www.techradar.com/news/world-of- ... it-1180382

I wonder if he's part of that 'Yahoo' court challenge (there's actually people like MS involved). And yes, even though the whole apparatus shouldn't fcuking exist, they blew it.

_________________
Plain English advice on everything money, purchase and service related:

http://www.moneysavingexpert.com/


Thu Sep 12, 2013 3:13 pm
Profile
Legend
User avatar

Joined: Fri Apr 24, 2009 2:02 am
Posts: 29240
Location: Guantanamo Bay (thanks bobbdobbs)
Reply with quote
pcernie wrote:
Mark Zuckerberg on gov's handling of NSA scandal: 'I think they blew it'

http://www.techradar.com/news/world-of- ... it-1180382

I wonder if he's part of that 'Yahoo' court challenge (there's actually people like MS involved). And yes, even though the whole apparatus shouldn't fcuking exist, they blew it.

It went well beyond their remit. There is no way that you can handle that well. As Big D said it will cause problems for the tech industry no matter who they are.

_________________
Do concentrate, 007...

"You are gifted. Mine is bordering on seven seconds."

https://www.dropbox.com/referrals/NTg5MzczNTk

http://astore.amazon.co.uk/wwwx404couk-21


Thu Sep 12, 2013 3:18 pm
Profile
Display posts from previous:  Sort by  
Reply to topic   [ 33 posts ]  Go to page Previous  1, 2, 3  Next

Who is online

Users browsing this forum: No registered users and 14 guests


You cannot post new topics in this forum
You cannot reply to topics in this forum
You cannot edit your posts in this forum
You cannot delete your posts in this forum

Search for:
Jump to:  
cron
Powered by phpBB® Forum Software © phpBB Group
Designed by ST Software.