Hex Artifact Content
Not logged in

Artifact 6c0c031bf4de2529b0a8c6e04a2cc321551587fb:

Wiki page [nsa-backdoor] by bernd 2015-02-24 13:04:06.
0000: 44 20 32 30 31 35 2d 30 32 2d 32 34 54 31 33 3a  D 2015-02-24T13:
0010: 30 34 3a 30 36 2e 33 35 34 0a 4c 20 6e 73 61 2d  04:06.354.L nsa-
0020: 62 61 63 6b 64 6f 6f 72 0a 50 20 62 66 30 63 64  backdoor.P bf0cd
0030: 38 31 34 66 33 39 30 61 38 62 39 30 34 30 65 64  814f390a8b9040ed
0040: 31 32 31 33 65 30 31 39 36 62 30 34 66 31 30 31  1213e0196b04f101
0050: 62 63 37 0a 55 20 62 65 72 6e 64 0a 57 20 33 35  bc7.U bernd.W 35
0060: 36 31 0a 3c 68 31 3e 4e 53 41 20 42 61 63 6b 64  61.<h1>NSA Backd
0070: 6f 6f 72 20 46 6e 6f 72 64 3c 2f 68 31 3e 0a 0a  oor Fnord</h1>..
0080: 3c 70 3e 41 73 20 79 6f 75 20 61 6c 6c 20 6b 6e  <p>As you all kn
0090: 6f 77 2c 20 69 74 20 69 73 20 6e 6f 74 20 61 6c  ow, it is not al
00a0: 6c 6f 77 65 64 20 74 6f 20 73 70 65 61 6b 20 61  lowed to speak a
00b0: 62 6f 75 74 20 4e 53 41 2d 64 65 6d 61 6e 64 65  bout NSA-demande
00c0: 64 20 62 61 63 6b 64 6f 6f 72 73 2c 0a 61 6e 64  d backdoors,.and
00d0: 20 65 73 70 65 63 69 61 6c 6c 79 20 69 74 20 69   especially it i
00e0: 73 20 73 74 72 69 63 74 6c 79 20 70 72 6f 68 69  s strictly prohi
00f0: 62 69 74 65 64 20 74 6f 20 67 69 76 65 20 61 6e  bited to give an
0100: 79 20 64 65 74 61 69 6c 73 2e 20 26 6e 62 73 70  y details. &nbsp
0110: 3b 48 6f 77 65 76 65 72 2c 20 69 74 0a 69 73 20  ;However, it.is 
0120: 61 6c 6c 6f 77 65 64 20 74 6f 20 62 6f 6c 64 6c  allowed to boldl
0130: 79 20 6c 69 65 20 61 62 6f 75 74 20 4e 53 41 2d  y lie about NSA-
0140: 64 65 6d 61 6e 64 65 64 20 62 61 63 6b 64 6f 6f  demanded backdoo
0150: 72 73 20 69 66 20 79 6f 75 20 64 69 64 6e 27 74  rs if you didn't
0160: 20 72 65 63 65 69 76 65 0a 73 75 63 68 20 61 20   receive.such a 
0170: 72 65 71 75 65 73 74 2c 20 62 65 63 61 75 73 65  request, because
0180: 20 79 6f 75 20 61 72 65 20 6e 6f 74 20 75 6e 64   you are not und
0190: 65 72 20 61 20 67 61 67 20 6f 72 64 65 72 2c 20  er a gag order, 
01a0: 61 6e 64 20 69 6e 20 67 65 6e 65 72 61 6c 2c 20  and in general, 
01b0: 6c 79 69 6e 67 0a 61 62 6f 75 74 20 74 68 65 20  lying.about the 
01c0: 71 75 61 6c 69 74 79 20 6f 66 20 79 6f 75 72 20  quality of your 
01d0: 70 72 6f 64 75 63 74 20 69 73 20 6e 6f 74 20 6f  product is not o
01e0: 6e 6c 79 20 6c 65 67 61 6c 2c 20 62 75 74 20 22  nly legal, but "
01f0: 62 65 73 74 20 70 72 61 63 74 69 63 65 22 2e 0a  best practice"..
0200: 26 6e 62 73 70 3b 54 68 65 20 70 75 72 70 6f 73  &nbsp;The purpos
0210: 65 20 6f 66 20 74 68 69 73 20 4e 53 41 20 62 61  e of this NSA ba
0220: 63 6b 64 6f 6f 72 20 66 6e 6f 72 64 20 69 73 20  ckdoor fnord is 
0230: 74 6f 20 6d 61 6b 65 20 79 6f 75 20 77 6f 72 72  to make you worr
0240: 79 20 61 62 6f 75 74 20 74 68 65 0a 71 75 61 6c  y about the.qual
0250: 69 74 79 20 6f 66 20 6e 65 74 32 6f 2c 20 61 6e  ity of net2o, an
0260: 64 20 74 68 65 72 65 66 6f 72 65 20 79 6f 75 20  d therefore you 
0270: 73 74 61 72 74 20 6c 6f 6f 6b 69 6e 67 20 61 74  start looking at
0280: 20 74 68 65 20 73 6f 75 72 63 65 20 63 6f 64 65   the source code
0290: 3b 20 74 68 65 0a 74 6f 70 69 63 73 20 6d 65 6e  ; the.topics men
02a0: 74 69 6f 6e 65 64 20 68 65 72 65 20 61 72 65 20  tioned here are 
02b0: 61 6c 6c 20 73 65 63 75 72 69 74 79 20 74 68 69  all security thi
02c0: 6e 67 73 20 74 6f 20 63 6f 6e 73 69 64 65 72 2e  ngs to consider.
02d0: 3c 2f 70 3e 0a 0a 3c 70 3e 54 68 65 72 65 66 6f  </p>..<p>Therefo
02e0: 72 65 2c 20 68 65 72 65 20 69 73 20 74 68 65 20  re, here is the 
02f0: 6f 66 66 69 63 69 61 6c 20 73 74 61 74 65 6d 65  official stateme
0300: 6e 74 20 61 62 6f 75 74 20 4e 53 41 2d 64 65 6d  nt about NSA-dem
0310: 61 6e 64 65 64 20 62 61 63 6b 64 6f 6f 72 73 3a  anded backdoors:
0320: 20 49 0a 68 61 76 65 20 61 6e 20 6f 66 66 69 63   I.have an offic
0330: 69 61 6c 20 66 72 6f 6e 74 20 64 6f 6f 72 20 69  ial front door i
0340: 6e 20 6e 65 74 32 6f 20 66 6f 72 20 74 68 65 20  n net2o for the 
0350: 4e 53 41 2e 20 26 6e 62 73 70 3b 3c 62 3e 55 70  NSA. &nbsp;<b>Up
0360: 64 61 74 65 3a 3c 2f 62 3e 26 6e 62 73 70 3b 54  date:</b>&nbsp;T
0370: 68 65 0a 4e 53 41 20 77 61 73 20 68 65 72 65 20  he.NSA was here 
0380: 61 67 61 69 6e 2c 20 61 6e 64 20 6d 61 64 65 20  again, and made 
0390: 61 0a 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a  a.<a href="http:
03a0: 2f 2f 77 77 77 2e 74 68 65 67 75 61 72 64 69 61  //www.theguardia
03b0: 6e 2e 63 6f 6d 2f 75 73 2d 6e 65 77 73 2f 32 30  n.com/us-news/20
03c0: 31 35 2f 66 65 62 2f 32 33 2f 6e 73 61 2d 64 69  15/feb/23/nsa-di
03d0: 72 65 63 74 6f 72 2d 64 65 66 65 6e 64 73 2d 62  rector-defends-b
03e0: 61 63 6b 64 6f 6f 72 73 2d 69 6e 74 6f 2d 74 65  ackdoors-into-te
03f0: 63 68 6e 6f 6c 6f 67 79 2d 63 6f 6d 70 61 6e 69  chnology-compani
0400: 65 73 22 3e 6d 6f 72 65 0a 64 65 74 61 69 6c 65  es">more.detaile
0410: 64 20 73 74 61 74 65 6d 65 6e 74 3c 2f 61 3e 26  d statement</a>&
0420: 6e 62 73 70 3b 77 68 79 20 61 6e 64 20 74 68 61  nbsp;why and tha
0430: 74 20 61 20 22 66 72 6f 6e 74 64 6f 6f 72 22 20  t a "frontdoor" 
0440: 73 68 6f 75 6c 64 20 62 65 20 69 6d 70 6c 65 6d  should be implem
0450: 65 6e 74 65 64 2e 0a 26 6e 62 73 70 3b 4e 6f 74  ented..&nbsp;Not
0460: 20 61 20 68 69 64 64 65 6e 20 62 61 63 6b 64 6f   a hidden backdo
0470: 6f 72 20 77 68 69 63 68 20 69 73 20 73 65 63 72  or which is secr
0480: 65 74 6c 79 20 69 6e 73 74 61 6c 6c 65 64 2c 20  etly installed, 
0490: 61 6e 64 20 77 68 65 72 65 20 49 27 6d 20 6e 6f  and where I'm no
04a0: 74 0a 73 75 70 70 6f 73 65 64 20 74 6f 20 74 61  t.supposed to ta
04b0: 6c 6b 20 61 62 6f 75 74 20 69 74 2c 20 62 75 74  lk about it, but
04c0: 20 61 20 6c 65 67 69 73 6c 61 74 65 64 20 77 65   a legislated we
04d0: 61 6b 65 6e 69 6e 67 20 6f 66 20 63 72 79 70 74  akening of crypt
04e0: 6f 2c 20 6b 65 79 20 65 73 63 72 6f 77 20 6f 72  o, key escrow or
04f0: 0a 73 69 6d 69 6c 61 72 20 6d 65 61 6e 73 20 74  .similar means t
0500: 6f 20 67 69 76 65 20 74 68 65 20 73 65 63 72 65  o give the secre
0510: 74 20 73 65 72 76 69 63 65 73 20 61 63 63 65 73  t services acces
0520: 73 20 74 6f 20 61 6c 6c 20 65 6e 63 72 79 70 74  s to all encrypt
0530: 65 64 20 74 72 61 66 66 69 63 2e 3c 2f 70 3e 0a  ed traffic.</p>.
0540: 0a 3c 70 3e 41 73 20 6e 65 74 32 6f 20 69 73 20  .<p>As net2o is 
0550: 6f 70 65 6e 20 73 6f 75 72 63 65 2c 20 79 6f 75  open source, you
0560: 20 63 61 6e 20 76 65 72 69 66 79 20 74 68 65 20   can verify the 
0570: 74 72 75 74 68 20 76 61 6c 75 65 20 6f 66 20 74  truth value of t
0580: 68 65 20 73 74 61 74 65 6d 65 6e 74 0a 61 62 6f  he statement.abo
0590: 76 65 2e 20 26 6e 62 73 70 3b 41 6e 64 20 6b 65  ve. &nbsp;And ke
05a0: 65 70 20 61 6e 20 65 79 65 20 6f 6e 20 74 68 69  ep an eye on thi
05b0: 73 20 70 61 67 65 2e 3c 2f 70 3e 0a 0a 3c 68 32  s page.</p>..<h2
05c0: 3e 57 68 61 74 20 69 73 20 74 68 69 73 20 70 61  >What is this pa
05d0: 67 65 20 66 6f 72 3f 3c 2f 68 32 3e 0a 0a 3c 70  ge for?</h2>..<p
05e0: 3e 53 6f 66 74 77 61 72 65 20 69 73 20 69 6e 68  >Software is inh
05f0: 65 72 65 6e 74 6c 79 20 62 75 67 67 79 20 2d 20  erently buggy - 
0600: 77 65 20 61 6c 6c 20 6d 61 6b 65 20 6d 69 73 74  we all make mist
0610: 61 6b 65 73 2e 20 53 65 63 75 72 65 20 6e 65 74  akes. Secure net
0620: 77 6f 72 6b 69 6e 67 0a 73 6f 66 74 77 61 72 65  working.software
0630: 20 69 73 20 65 76 65 6e 20 77 6f 72 73 65 2c 20   is even worse, 
0640: 62 65 63 61 75 73 65 20 73 6d 61 6c 6c 20 62 75  because small bu
0650: 67 73 20 68 61 76 65 20 62 69 67 20 63 6f 6e 73  gs have big cons
0660: 65 71 75 65 6e 63 65 73 2e 20 41 6e 64 20 77 69  equences. And wi
0670: 74 68 20 74 68 65 0a 4e 53 41 20 42 75 6c 6c 72  th the.NSA Bullr
0680: 75 6e 20 70 72 6f 67 72 61 6d 2c 20 77 65 20 6e  un program, we n
0690: 6f 74 20 6f 6e 6c 79 20 68 61 76 65 20 74 6f 20  ot only have to 
06a0: 64 65 61 6c 20 77 69 74 68 20 74 68 65 20 6e 6f  deal with the no
06b0: 72 6d 61 6c 2c 20 22 6c 61 7a 79 22 20 62 75 67  rmal, "lazy" bug
06c0: 73 2c 0a 77 68 69 63 68 20 64 6f 6e 27 74 20 63  s,.which don't c
06d0: 61 75 73 65 20 61 6e 79 20 68 61 72 6d 20 75 6e  ause any harm un
06e0: 74 69 6c 20 66 6f 75 6e 64 20 28 65 69 74 68 65  til found (eithe
06f0: 72 20 62 79 20 68 6f 6e 65 73 74 20 73 65 63 75  r by honest secu
0700: 72 69 74 79 20 72 65 73 65 61 72 63 68 65 72 20  rity researcher 
0710: 6f 72 0a 65 76 69 6c 20 63 72 69 6d 69 6e 61 6c  or.evil criminal
0720: 73 29 2c 20 62 75 74 20 77 69 74 68 20 62 75 67  s), but with bug
0730: 73 20 69 6e 74 65 6e 74 69 6f 6e 61 6c 6c 79 20  s intentionally 
0740: 70 6c 61 63 65 64 2c 20 61 6e 64 20 75 73 65 64  placed, and used
0750: 20 62 79 20 74 68 65 20 73 65 63 72 65 74 0a 73   by the secret.s
0760: 65 72 76 69 63 65 73 20 66 72 6f 6d 20 64 61 79  ervices from day
0770: 20 30 2e 3c 2f 70 3e 0a 0a 3c 70 3e 44 65 76 65   0.</p>..<p>Deve
0780: 6c 6f 70 69 6e 67 20 69 6e 20 46 6f 72 74 68 20  loping in Forth 
0790: 69 73 20 61 20 22 63 72 61 73 68 20 65 61 72 6c  is a "crash earl
07a0: 79 2c 20 63 72 61 73 68 20 6f 66 74 65 6e 22 20  y, crash often" 
07b0: 65 78 65 72 63 69 73 65 2c 20 62 75 74 20 73 65  exercise, but se
07c0: 63 75 72 69 74 79 0a 72 65 6c 61 74 65 64 20 62  curity.related b
07d0: 75 67 73 20 64 6f 6e 27 74 20 63 72 61 73 68 20  ugs don't crash 
07e0: 74 68 65 20 70 72 6f 67 72 61 6d 2e 3c 2f 70 3e  the program.</p>
07f0: 0a 0a 3c 70 3e 6e 65 74 32 6f 20 69 73 20 6e 6f  ..<p>net2o is no
0800: 74 20 72 65 61 64 79 20 66 6f 72 20 75 73 65 2c  t ready for use,
0810: 20 73 6f 20 62 75 67 73 20 64 6f 20 68 61 70 70   so bugs do happ
0820: 65 6e 2c 20 61 6e 64 20 67 65 74 20 66 69 78 65  en, and get fixe
0830: 64 2c 20 62 75 74 20 74 68 65 20 62 75 67 73 0a  d, but the bugs.
0840: 64 65 73 63 72 69 62 65 64 20 68 65 72 65 20 75  described here u
0850: 73 75 61 6c 6c 79 20 61 72 65 20 72 65 61 6c 20  sually are real 
0860: 62 75 67 73 20 49 20 66 6f 75 6e 64 20 61 6e 64  bugs I found and
0870: 20 66 69 78 65 64 20 64 75 72 69 6e 67 20 64 65   fixed during de
0880: 76 65 6c 6f 70 6d 65 6e 74 2e 20 41 6c 6c 0a 6f  velopment. All.o
0890: 66 20 74 68 65 6d 20 6c 6f 6f 6b 20 6c 69 6b 65  f them look like
08a0: 20 70 72 6f 66 65 73 73 69 6f 6e 61 6c 6c 79 20   professionally 
08b0: 69 6d 70 6c 61 6e 74 65 64 20 62 75 67 73 20 62  implanted bugs b
08c0: 79 20 74 68 65 20 4e 53 41 2c 20 62 65 63 61 75  y the NSA, becau
08d0: 73 65 20 74 68 61 74 27 73 20 74 68 65 0a 73 74  se that's the.st
08e0: 61 74 65 20 6f 66 20 74 68 65 20 61 72 74 20 68  ate of the art h
08f0: 6f 77 20 74 6f 20 69 6d 70 6c 61 6e 74 20 62 61  ow to implant ba
0900: 63 6b 64 6f 6f 72 73 3a 20 49 74 20 6d 75 73 74  ckdoors: It must
0910: 20 70 72 6f 76 69 64 65 20 69 74 73 20 61 75 74   provide its aut
0920: 68 6f 72 20 77 69 74 68 0a 22 72 65 61 73 6f 6e  hor with."reason
0930: 61 62 6c 65 20 64 65 6e 69 61 6c 22 2c 20 63 6c  able denial", cl
0940: 61 69 6d 69 6e 67 20 69 6e 63 6f 6d 70 65 74 65  aiming incompete
0950: 6e 63 65 2e 3c 2f 70 3e 0a 0a 3c 70 3e 48 6f 77  nce.</p>..<p>How
0960: 65 76 65 72 2c 20 69 6e 20 6f 72 64 65 72 20 74  ever, in order t
0970: 6f 20 67 65 74 20 74 68 69 6e 67 73 20 72 69 67  o get things rig
0980: 68 74 2c 20 77 65 20 6e 65 65 64 20 61 20 63 75  ht, we need a cu
0990: 6c 74 75 72 65 20 6f 66 20 61 63 63 65 70 74 69  lture of accepti
09a0: 6e 67 20 6f 75 72 0a 6d 69 73 74 61 6b 65 73 2c  ng our.mistakes,
09b0: 20 61 6e 64 20 66 69 78 69 6e 67 20 74 68 65 6d   and fixing them
09c0: 2e 20 26 6e 62 73 70 3b 4d 61 6e 79 20 70 72 6f  . &nbsp;Many pro
09d0: 67 72 61 6d 6d 65 72 73 20 64 65 6e 79 20 62 75  grammers deny bu
09e0: 67 73 2c 20 61 6e 64 20 72 65 71 75 65 73 74 20  gs, and request 
09f0: 61 74 0a 6c 65 61 73 74 20 61 20 70 72 6f 6f 66  at.least a proof
0a00: 20 6f 66 20 63 6f 6e 63 65 70 74 20 61 74 74 61   of concept atta
0a10: 63 6b 2c 20 62 65 66 6f 72 65 20 74 68 65 79 20  ck, before they 
0a20: 61 63 74 75 61 6c 6c 79 20 73 74 61 72 74 20 64  actually start d
0a30: 6f 69 6e 67 20 73 6f 6d 65 74 68 69 6e 67 2e 0a  oing something..
0a40: 26 6e 62 73 70 3b 54 68 69 73 20 73 6f 72 74 20  &nbsp;This sort 
0a50: 6f 66 20 63 75 6c 74 75 72 65 20 69 73 20 73 6f  of culture is so
0a60: 20 77 72 6f 6e 67 3a 20 41 73 20 61 75 74 68 6f   wrong: As autho
0a70: 72 20 6f 66 20 73 65 63 75 72 69 74 79 20 63 72  r of security cr
0a80: 69 74 69 63 61 6c 20 73 79 73 74 65 6d 73 2c 0a  itical systems,.
0a90: 79 6f 75 20 6d 75 73 74 20 62 65 20 63 6f 6e 73  you must be cons
0aa0: 74 61 6e 74 6c 79 20 73 63 61 72 65 64 20 62 79  tantly scared by
0ab0: 20 70 65 6f 70 6c 65 20 75 73 69 6e 67 20 65 76   people using ev
0ac0: 65 72 79 20 77 61 79 20 74 6f 20 62 72 65 61 6b  ery way to break
0ad0: 20 69 6e 74 6f 20 79 6f 75 72 0a 73 6f 66 74 77   into your.softw
0ae0: 61 72 65 2c 20 61 6e 64 20 79 6f 75 20 6d 75 73  are, and you mus
0af0: 74 20 62 65 20 72 65 61 64 79 20 74 6f 20 66 69  t be ready to fi
0b00: 78 20 65 76 65 72 79 20 62 75 67 2c 20 65 76 65  x every bug, eve
0b10: 6e 20 6a 75 73 74 20 70 6f 74 65 6e 74 69 61 6c  n just potential
0b20: 20 72 69 73 6b 73 2c 0a 62 65 66 6f 72 65 20 73   risks,.before s
0b30: 6f 6d 65 6f 6e 65 20 73 68 6f 77 73 20 79 6f 75  omeone shows you
0b40: 20 61 6e 20 61 63 74 75 61 6c 20 65 78 70 6c 6f   an actual explo
0b50: 69 74 2e 3c 2f 70 3e 0a 0a 3c 68 32 3e 57 61 72  it.</p>..<h2>War
0b60: 72 61 6e 74 20 43 61 6e 61 72 79 3c 2f 68 32 3e  rant Canary</h2>
0b70: 0a 0a 3c 70 3e 54 68 69 73 20 73 6f 72 74 20 6f  ..<p>This sort o
0b80: 66 20 74 68 69 6e 67 20 49 27 6d 20 64 6f 69 6e  f thing I'm doin
0b90: 67 20 68 65 72 65 20 69 73 20 63 61 6c 6c 65 64  g here is called
0ba0: 20 22 77 61 72 72 61 6e 74 20 63 61 6e 61 72 79   "warrant canary
0bb0: 22 2c 20 6e 61 6d 65 64 20 61 66 74 65 72 0a 74  ", named after.t
0bc0: 68 65 20 63 61 6e 61 72 69 65 73 20 75 73 65 64  he canaries used
0bd0: 20 62 79 20 6d 69 6e 65 72 73 20 77 68 69 63 68   by miners which
0be0: 20 61 72 65 20 6d 6f 72 65 20 73 65 6e 73 69 74   are more sensit
0bf0: 69 76 65 20 74 6f 20 70 6f 69 73 6f 6e 6f 75 73  ive to poisonous
0c00: 20 67 61 73 20 6c 65 61 6b 73 0a 74 68 61 6e 20   gas leaks.than 
0c10: 68 75 6d 61 6e 73 2e 20 26 6e 62 73 70 3b 54 68  humans. &nbsp;Th
0c20: 65 20 74 68 69 6e 67 20 77 6f 75 6c 64 20 62 65  e thing would be
0c30: 20 69 6d 70 6f 73 73 69 62 6c 65 20 69 66 20 74   impossible if t
0c40: 68 65 20 6f 74 68 65 72 20 73 69 64 65 20 77 6f  he other side wo
0c50: 75 6c 64 20 73 61 79 0a 22 63 6f 6e 74 69 6e 75  uld say."continu
0c60: 65 20 77 69 74 68 20 62 75 73 69 6e 65 73 73 20  e with business 
0c70: 61 73 20 75 73 75 61 6c 2c 20 73 6f 20 74 68 61  as usual, so tha
0c80: 74 20 6e 6f 62 6f 64 79 20 6b 6e 6f 77 73 20 77  t nobody knows w
0c90: 65 20 77 65 72 65 20 68 65 72 65 22 2e 0a 26 6e  e were here"..&n
0ca0: 62 73 70 3b 54 61 6b 65 64 6f 77 6e 73 20 6c 69  bsp;Takedowns li
0cb0: 6b 65 20 74 68 65 20 6f 6e 65 20 6f 66 20 4c 61  ke the one of La
0cc0: 76 61 62 69 74 20 28 77 68 69 63 68 20 77 61 73  vabit (which was
0cd0: 20 74 72 69 67 67 65 72 65 64 20 62 79 20 61 6e   triggered by an
0ce0: 20 4e 53 4c 29 20 6f 72 20 6d 6f 72 65 0a 72 65   NSL) or more.re
0cf0: 63 65 6e 74 6c 79 20 62 79 20 54 72 75 65 43 72  cently by TrueCr
0d00: 79 70 74 20 28 77 68 69 63 68 20 77 65 20 64 6f  ypt (which we do
0d10: 6e 27 74 20 6b 6e 6f 77 20 77 68 79 20 74 68 65  n't know why the
0d20: 79 20 64 69 64 20 69 74 29 20 61 72 65 6e 27 74  y did it) aren't
0d30: 20 73 75 63 68 0a 63 6f 6e 74 69 6e 75 61 74 69   such.continuati
0d40: 6f 6e 73 2c 20 70 65 6f 70 6c 65 20 63 61 6e 20  ons, people can 
0d50: 67 75 65 73 73 20 74 68 61 74 20 74 68 65 20 4e  guess that the N
0d60: 53 41 20 77 61 73 20 74 68 65 72 65 2e 3c 2f 70  SA was there.</p
0d70: 3e 0a 0a 3c 70 3e 54 68 65 20 62 65 73 74 20 63  >..<p>The best c
0d80: 6f 75 6e 74 65 72 6d 65 61 73 75 72 65 20 61 67  ountermeasure ag
0d90: 61 69 6e 73 74 20 61 20 68 6f 73 74 69 6c 65 20  ainst a hostile 
0da0: 74 61 6b 65 6f 76 65 72 20 62 79 20 73 75 63 68  takeover by such
0db0: 20 61 6e 20 61 67 65 6e 63 79 20 69 73 20 74 6f   an agency is to
0dc0: 0a 77 6f 72 6b 20 6f 75 74 20 69 6e 20 74 68 65  .work out in the
0dd0: 20 6f 70 65 6e 2c 20 61 6e 64 20 68 61 76 65 20   open, and have 
0de0: 61 20 6d 75 6c 74 69 2d 6e 61 74 69 6f 6e 61 6c  a multi-national
0df0: 20 74 65 61 6d 20 74 68 61 74 20 63 61 6e 27 74   team that can't
0e00: 20 62 65 20 73 75 62 6a 65 63 74 20 74 6f 0a 74   be subject to.t
0e10: 68 65 20 73 61 6d 65 20 62 75 6c 6c 79 69 6e 67  he same bullying
0e20: 3b 20 74 68 65 20 6c 61 74 74 65 72 20 69 73 20  ; the latter is 
0e30: 73 6f 6d 65 74 68 69 6e 67 20 49 20 64 6f 6e 27  something I don'
0e40: 74 20 68 61 76 65 2e 3c 2f 70 3e 0a 0a 5a 20 34  t have.</p>..Z 4
0e50: 63 31 38 63 31 30 61 65 33 64 62 39 37 39 61 32  c18c10ae3db979a2
0e60: 64 38 33 64 64 61 63 39 31 33 37 65 64 39 33 0a  d83ddac9137ed93.