Artifact
3df92a41e278a91a8033152dc98cad106bd02b0d:
Wiki page
[nsa-backdoor] by
bernd
2014-04-11 19:54:04.
0000: 44 20 32 30 31 34 2d 30 34 2d 31 31 54 31 39 3a D 2014-04-11T19:
0010: 35 34 3a 30 34 2e 39 33 36 0a 4c 20 6e 73 61 2d 54:04.936.L nsa-
0020: 62 61 63 6b 64 6f 6f 72 0a 50 20 36 36 31 34 61 backdoor.P 6614a
0030: 33 36 61 38 34 39 36 63 35 31 30 33 32 38 66 66 36a8496c510328ff
0040: 34 63 61 66 36 30 62 37 35 34 66 35 35 34 33 61 4caf60b754f5543a
0050: 39 66 66 0a 55 20 62 65 72 6e 64 0a 57 20 31 33 9ff.U bernd.W 13
0060: 33 36 0a 3c 68 31 3e 4e 53 41 20 42 61 63 6b 64 36.<h1>NSA Backd
0070: 6f 6f 72 20 46 6e 6f 72 64 3c 2f 68 31 3e 0a 0a oor Fnord</h1>..
0080: 3c 70 3e 41 73 20 79 6f 75 20 61 6c 6c 20 6b 6e <p>As you all kn
0090: 6f 77 2c 20 69 74 20 69 73 20 6e 6f 74 20 61 6c ow, it is not al
00a0: 6c 6f 77 65 64 20 74 6f 20 73 70 65 61 6b 20 61 lowed to speak a
00b0: 62 6f 75 74 20 4e 53 41 2d 64 65 6d 61 6e 64 65 bout NSA-demande
00c0: 64 20 62 61 63 6b 64 6f 6f 72 73 2c 0a 61 6e 64 d backdoors,.and
00d0: 20 65 73 70 65 63 69 61 6c 6c 79 20 69 74 20 69 especially it i
00e0: 73 20 73 74 72 69 63 74 6c 79 20 70 72 6f 68 69 s strictly prohi
00f0: 62 69 74 65 64 20 74 6f 20 67 69 76 65 20 61 6e bited to give an
0100: 79 20 64 65 74 61 69 6c 73 2e 20 26 6e 62 73 70 y details.  
0110: 3b 48 6f 77 65 76 65 72 2c 20 69 74 0a 69 73 20 ;However, it.is
0120: 61 6c 6c 6f 77 65 64 20 74 6f 20 62 6f 6c 64 6c allowed to boldl
0130: 79 20 6c 69 65 20 61 62 6f 75 74 20 4e 53 41 2d y lie about NSA-
0140: 64 65 6d 61 6e 64 65 64 20 62 61 63 6b 64 6f 6f demanded backdoo
0150: 72 73 20 69 66 20 79 6f 75 20 64 69 64 6e 27 74 rs if you didn't
0160: 20 72 65 63 65 69 76 65 0a 73 75 63 68 20 61 20 receive.such a
0170: 72 65 71 75 65 73 74 2c 20 62 65 63 61 75 73 65 request, because
0180: 20 79 6f 75 20 61 72 65 20 6e 6f 74 20 75 6e 64 you are not und
0190: 65 72 20 61 20 67 61 67 20 6f 72 64 65 72 2c 20 er a gag order,
01a0: 61 6e 64 20 69 6e 20 67 65 6e 65 72 61 6c 2c 20 and in general,
01b0: 6c 79 69 6e 67 0a 61 62 6f 75 74 20 74 68 65 20 lying.about the
01c0: 71 75 61 6c 69 74 79 20 6f 66 20 79 6f 75 72 20 quality of your
01d0: 70 72 6f 64 75 63 74 20 69 73 20 6e 6f 74 20 6f product is not o
01e0: 6e 6c 79 20 6c 65 67 61 6c 2c 20 62 75 74 20 22 nly legal, but "
01f0: 62 65 73 74 20 70 72 61 63 74 69 63 65 22 2e 0a best practice"..
0200: 26 6e 62 73 70 3b 54 68 65 20 70 75 72 70 6f 73 The purpos
0210: 65 20 6f 66 20 74 68 69 73 20 4e 53 41 20 62 61 e of this NSA ba
0220: 63 6b 64 6f 6f 72 20 66 6e 6f 72 64 20 69 73 20 ckdoor fnord is
0230: 74 6f 20 6d 61 6b 65 20 79 6f 75 20 77 6f 72 72 to make you worr
0240: 79 20 61 62 6f 75 74 20 74 68 65 0a 71 75 61 6c y about the.qual
0250: 69 74 79 20 6f 66 20 6e 65 74 32 6f 2c 20 61 6e ity of net2o, an
0260: 64 20 74 68 65 72 65 66 6f 72 65 20 79 6f 75 20 d therefore you
0270: 73 74 61 72 74 20 6c 6f 6f 6b 69 6e 67 20 61 74 start looking at
0280: 20 74 68 65 20 73 6f 75 72 63 65 20 63 6f 64 65 the source code
0290: 3b 20 74 68 65 0a 74 6f 70 69 63 73 20 6d 65 6e ; the.topics men
02a0: 74 69 6f 6e 65 64 20 68 65 72 65 20 61 72 65 20 tioned here are
02b0: 61 6c 6c 20 73 65 63 75 72 69 74 79 20 74 68 69 all security thi
02c0: 6e 67 73 20 74 6f 20 63 6f 6e 73 69 64 65 72 2e ngs to consider.
02d0: 3c 2f 70 3e 0a 0a 3c 70 3e 54 68 65 72 65 66 6f </p>..<p>Therefo
02e0: 72 65 2c 20 68 65 72 65 20 69 73 20 74 68 65 20 re, here is the
02f0: 6f 66 66 69 63 69 61 6c 20 73 74 61 74 65 6d 65 official stateme
0300: 6e 74 20 61 62 6f 75 74 20 4e 53 41 2d 64 65 6d nt about NSA-dem
0310: 61 6e 64 65 64 20 62 61 63 6b 64 6f 6f 72 73 3a anded backdoors:
0320: 0a 54 68 65 72 65 20 69 73 20 61 20 4e 53 41 2d .There is a NSA-
0330: 72 65 71 75 65 73 74 65 64 20 62 61 63 6b 64 6f requested backdo
0340: 6f 72 20 69 6e 20 6e 65 74 32 6f 2e 20 26 6e 62 or in net2o. &nb
0350: 73 70 3b 55 70 64 61 74 65 3a 20 54 68 65 20 4e sp;Update: The N
0360: 53 41 20 77 61 73 20 68 65 72 65 0a 61 67 61 69 SA was here.agai
0370: 6e 2c 20 61 6e 64 20 73 61 69 64 20 74 68 65 79 n, and said they
0380: 20 6c 69 6b 65 20 74 6f 20 68 61 76 65 20 61 20 like to have a
0390: 77 61 79 20 74 6f 20 72 65 6d 6f 74 65 6c 79 20 way to remotely
03a0: 61 63 63 65 73 73 20 61 6e 79 20 6d 65 6d 6f 72 access any memor
03b0: 79 20 77 69 74 68 6f 75 74 0a 61 63 74 75 61 6c y without.actual
03c0: 6c 79 20 6d 61 6b 69 6e 67 20 61 20 63 6f 6e 6e ly making a conn
03d0: 65 63 74 69 6f 6e 20 74 68 61 74 20 77 6f 75 6c ection that woul
03e0: 64 20 73 68 6f 77 20 75 70 20 69 6e 20 61 20 6c d show up in a l
03f0: 6f 67 20 66 69 6c 65 2e 20 26 6e 62 73 70 3b 45 og file. E
0400: 73 70 65 63 69 61 6c 6c 79 0a 61 63 63 65 73 73 specially.access
0410: 20 74 6f 20 74 68 65 20 73 65 63 72 65 74 20 6b to the secret k
0420: 65 79 20 69 73 20 72 65 71 75 69 72 65 64 2c 20 ey is required,
0430: 61 73 20 6e 65 74 32 6f 20 64 6f 65 73 6e 27 74 as net2o doesn't
0440: 20 75 73 65 20 70 61 73 73 77 6f 72 64 73 20 66 use passwords f
0450: 6f 72 20 6c 6f 67 69 6e 2e 0a 26 6e 62 73 70 3b or login..
0460: 54 68 65 20 62 61 63 6b 64 6f 6f 72 20 69 6d 70 The backdoor imp
0470: 6c 65 6d 65 6e 74 73 20 74 68 69 73 20 62 79 20 lements this by
0480: 70 72 6f 76 69 64 69 6e 67 20 74 68 65 20 61 64 providing the ad
0490: 64 72 65 73 73 20 61 6e 64 20 6c 65 6e 67 74 68 dress and length
04a0: 20 6f 66 20 74 68 65 0a 72 65 67 69 6f 6e 20 74 of the.region t
04b0: 6f 20 62 65 20 73 65 6e 74 20 61 73 20 69 6e 74 o be sent as int
04c0: 65 67 65 72 73 20 61 6e 64 20 75 73 65 73 20 74 egers and uses t
04d0: 68 65 20 24 2d 70 75 73 68 20 63 6f 6d 6d 61 6e he $-push comman
04e0: 64 2c 20 77 68 69 63 68 20 70 75 73 68 65 73 20 d, which pushes
04f0: 74 68 65 0a 63 6f 6e 74 65 6e 74 20 61 73 20 73 the.content as s
0500: 74 72 69 6e 67 20 69 6e 20 74 68 65 20 72 65 70 tring in the rep
0510: 6c 79 20 70 61 63 6b 65 74 2e 3c 2f 70 3e 0a 0a ly packet.</p>..
0520: 3c 70 3e 41 73 20 6e 65 74 32 6f 20 69 73 20 6f <p>As net2o is o
0530: 70 65 6e 20 73 6f 75 72 63 65 2c 20 79 6f 75 20 pen source, you
0540: 63 61 6e 20 76 65 72 69 66 79 20 74 68 65 20 74 can verify the t
0550: 72 75 74 68 20 76 61 6c 75 65 20 6f 66 20 74 68 ruth value of th
0560: 65 20 73 74 61 74 65 6d 65 6e 74 0a 61 62 6f 76 e statement.abov
0570: 65 2e 20 26 6e 62 73 70 3b 41 6e 64 20 6b 65 65 e. And kee
0580: 70 20 61 6e 20 65 79 65 20 6f 6e 20 74 68 69 73 p an eye on this
0590: 20 70 61 67 65 2e 3c 2f 70 3e 0a 0a 5a 20 31 63 page.</p>..Z 1c
05a0: 66 31 32 61 36 36 30 64 31 31 62 34 38 35 66 61 f12a660d11b485fa
05b0: 61 32 62 37 33 62 65 34 61 39 62 36 65 32 0a a2b73be4a9b6e2.