Artifact
9f104175d7c7d8ec96bc91f7c3e799dfd31e7184:
Wiki page
[nsa-backdoor] by
bernd
2014-06-17 15:16:44.
0000: 44 20 32 30 31 34 2d 30 36 2d 31 37 54 31 35 3a D 2014-06-17T15:
0010: 31 36 3a 34 34 2e 30 30 30 0a 4c 20 6e 73 61 2d 16:44.000.L nsa-
0020: 62 61 63 6b 64 6f 6f 72 0a 50 20 36 37 63 61 35 backdoor.P 67ca5
0030: 33 32 66 37 62 64 37 33 31 36 33 63 30 36 38 66 32f7bd73163c068f
0040: 66 63 65 39 62 37 30 66 66 38 38 38 65 39 61 37 fce9b70ff888e9a7
0050: 61 64 33 0a 55 20 62 65 72 6e 64 0a 57 20 33 32 ad3.U bernd.W 32
0060: 33 30 0a 3c 68 31 3e 4e 53 41 20 42 61 63 6b 64 30.<h1>NSA Backd
0070: 6f 6f 72 20 46 6e 6f 72 64 3c 2f 68 31 3e 0a 0a oor Fnord</h1>..
0080: 3c 70 3e 41 73 20 79 6f 75 20 61 6c 6c 20 6b 6e <p>As you all kn
0090: 6f 77 2c 20 69 74 20 69 73 20 6e 6f 74 20 61 6c ow, it is not al
00a0: 6c 6f 77 65 64 20 74 6f 20 73 70 65 61 6b 20 61 lowed to speak a
00b0: 62 6f 75 74 20 4e 53 41 2d 64 65 6d 61 6e 64 65 bout NSA-demande
00c0: 64 20 62 61 63 6b 64 6f 6f 72 73 2c 0a 61 6e 64 d backdoors,.and
00d0: 20 65 73 70 65 63 69 61 6c 6c 79 20 69 74 20 69 especially it i
00e0: 73 20 73 74 72 69 63 74 6c 79 20 70 72 6f 68 69 s strictly prohi
00f0: 62 69 74 65 64 20 74 6f 20 67 69 76 65 20 61 6e bited to give an
0100: 79 20 64 65 74 61 69 6c 73 2e 20 26 6e 62 73 70 y details.  
0110: 3b 48 6f 77 65 76 65 72 2c 20 69 74 0a 69 73 20 ;However, it.is
0120: 61 6c 6c 6f 77 65 64 20 74 6f 20 62 6f 6c 64 6c allowed to boldl
0130: 79 20 6c 69 65 20 61 62 6f 75 74 20 4e 53 41 2d y lie about NSA-
0140: 64 65 6d 61 6e 64 65 64 20 62 61 63 6b 64 6f 6f demanded backdoo
0150: 72 73 20 69 66 20 79 6f 75 20 64 69 64 6e 27 74 rs if you didn't
0160: 20 72 65 63 65 69 76 65 0a 73 75 63 68 20 61 20 receive.such a
0170: 72 65 71 75 65 73 74 2c 20 62 65 63 61 75 73 65 request, because
0180: 20 79 6f 75 20 61 72 65 20 6e 6f 74 20 75 6e 64 you are not und
0190: 65 72 20 61 20 67 61 67 20 6f 72 64 65 72 2c 20 er a gag order,
01a0: 61 6e 64 20 69 6e 20 67 65 6e 65 72 61 6c 2c 20 and in general,
01b0: 6c 79 69 6e 67 0a 61 62 6f 75 74 20 74 68 65 20 lying.about the
01c0: 71 75 61 6c 69 74 79 20 6f 66 20 79 6f 75 72 20 quality of your
01d0: 70 72 6f 64 75 63 74 20 69 73 20 6e 6f 74 20 6f product is not o
01e0: 6e 6c 79 20 6c 65 67 61 6c 2c 20 62 75 74 20 22 nly legal, but "
01f0: 62 65 73 74 20 70 72 61 63 74 69 63 65 22 2e 0a best practice"..
0200: 26 6e 62 73 70 3b 54 68 65 20 70 75 72 70 6f 73 The purpos
0210: 65 20 6f 66 20 74 68 69 73 20 4e 53 41 20 62 61 e of this NSA ba
0220: 63 6b 64 6f 6f 72 20 66 6e 6f 72 64 20 69 73 20 ckdoor fnord is
0230: 74 6f 20 6d 61 6b 65 20 79 6f 75 20 77 6f 72 72 to make you worr
0240: 79 20 61 62 6f 75 74 20 74 68 65 0a 71 75 61 6c y about the.qual
0250: 69 74 79 20 6f 66 20 6e 65 74 32 6f 2c 20 61 6e ity of net2o, an
0260: 64 20 74 68 65 72 65 66 6f 72 65 20 79 6f 75 20 d therefore you
0270: 73 74 61 72 74 20 6c 6f 6f 6b 69 6e 67 20 61 74 start looking at
0280: 20 74 68 65 20 73 6f 75 72 63 65 20 63 6f 64 65 the source code
0290: 3b 20 74 68 65 0a 74 6f 70 69 63 73 20 6d 65 6e ; the.topics men
02a0: 74 69 6f 6e 65 64 20 68 65 72 65 20 61 72 65 20 tioned here are
02b0: 61 6c 6c 20 73 65 63 75 72 69 74 79 20 74 68 69 all security thi
02c0: 6e 67 73 20 74 6f 20 63 6f 6e 73 69 64 65 72 2e ngs to consider.
02d0: 3c 2f 70 3e 0a 0a 3c 70 3e 54 68 65 72 65 66 6f </p>..<p>Therefo
02e0: 72 65 2c 20 68 65 72 65 20 69 73 20 74 68 65 20 re, here is the
02f0: 6f 66 66 69 63 69 61 6c 20 73 74 61 74 65 6d 65 official stateme
0300: 6e 74 20 61 62 6f 75 74 20 4e 53 41 2d 64 65 6d nt about NSA-dem
0310: 61 6e 64 65 64 20 62 61 63 6b 64 6f 6f 72 73 3a anded backdoors:
0320: 0a 54 68 65 72 65 20 69 73 20 61 20 4e 53 41 2d .There is a NSA-
0330: 72 65 71 75 65 73 74 65 64 20 62 61 63 6b 64 6f requested backdo
0340: 6f 72 20 69 6e 20 6e 65 74 32 6f 2e 20 26 6e 62 or in net2o. &nb
0350: 73 70 3b 3c 62 3e 55 70 64 61 74 65 3a 3c 2f 62 sp;<b>Update:</b
0360: 3e 20 54 68 65 20 4e 53 41 20 77 61 73 0a 68 65 > The NSA was.he
0370: 72 65 20 61 67 61 69 6e 2c 20 61 6e 64 20 77 61 re again, and wa
0380: 6e 74 65 64 20 74 6f 20 68 61 76 65 20 61 20 68 nted to have a h
0390: 6f 6d 65 2d 62 72 65 77 20 6d 65 6d 6f 72 79 20 ome-brew memory
03a0: 61 6c 6c 6f 63 61 74 65 72 20 66 6f 72 20 73 65 allocater for se
03b0: 63 72 65 74 73 2c 20 73 6f 0a 74 68 61 74 20 74 crets, so.that t
03c0: 68 6f 73 65 20 61 72 65 20 65 61 73 79 20 74 6f hose are easy to
03d0: 20 6f 62 74 61 69 6e 20 74 68 72 6f 75 67 68 20 obtain through
03e0: 72 65 6d 6f 74 65 20 65 78 70 6c 6f 69 74 73 2e remote exploits.
03f0: 3c 2f 70 3e 0a 0a 3c 70 3e 41 73 20 6e 65 74 32 </p>..<p>As net2
0400: 6f 20 69 73 20 6f 70 65 6e 20 73 6f 75 72 63 65 o is open source
0410: 2c 20 79 6f 75 20 63 61 6e 20 76 65 72 69 66 79 , you can verify
0420: 20 74 68 65 20 74 72 75 74 68 20 76 61 6c 75 65 the truth value
0430: 20 6f 66 20 74 68 65 20 73 74 61 74 65 6d 65 6e of the statemen
0440: 74 0a 61 62 6f 76 65 2e 20 26 6e 62 73 70 3b 41 t.above. A
0450: 6e 64 20 6b 65 65 70 20 61 6e 20 65 79 65 20 6f nd keep an eye o
0460: 6e 20 74 68 69 73 20 70 61 67 65 2e 3c 2f 70 3e n this page.</p>
0470: 0a 0a 3c 68 32 3e 57 68 61 74 20 69 73 20 74 68 ..<h2>What is th
0480: 69 73 20 70 61 67 65 20 66 6f 72 3f 3c 2f 68 32 is page for?</h2
0490: 3e 0a 0a 3c 70 3e 53 6f 66 74 77 61 72 65 20 69 >..<p>Software i
04a0: 73 20 69 6e 68 65 72 65 6e 74 6c 79 20 62 75 67 s inherently bug
04b0: 67 79 20 2d 20 77 65 20 61 6c 6c 20 6d 61 6b 65 gy - we all make
04c0: 20 6d 69 73 74 61 6b 65 73 2e 20 53 65 63 75 72 mistakes. Secur
04d0: 65 20 6e 65 74 77 6f 72 6b 69 6e 67 0a 73 6f 66 e networking.sof
04e0: 74 77 61 72 65 20 69 73 20 65 76 65 6e 20 77 6f tware is even wo
04f0: 72 73 65 2c 20 62 65 63 61 75 73 65 20 73 6d 61 rse, because sma
0500: 6c 6c 20 62 75 67 73 20 68 61 76 65 20 62 69 67 ll bugs have big
0510: 20 63 6f 6e 73 65 71 75 65 6e 63 65 73 2e 20 41 consequences. A
0520: 6e 64 20 77 69 74 68 20 74 68 65 0a 4e 53 41 20 nd with the.NSA
0530: 42 75 6c 6c 72 75 6e 20 70 72 6f 67 72 61 6d 2c Bullrun program,
0540: 20 77 65 20 6e 6f 74 20 6f 6e 6c 79 20 68 61 76 we not only hav
0550: 65 20 74 6f 20 64 65 61 6c 20 77 69 74 68 20 74 e to deal with t
0560: 68 65 20 6e 6f 72 6d 61 6c 2c 20 22 6c 61 7a 79 he normal, "lazy
0570: 22 20 62 75 67 73 2c 0a 77 68 69 63 68 20 64 6f " bugs,.which do
0580: 6e 27 74 20 63 61 75 73 65 20 61 6e 79 20 68 61 n't cause any ha
0590: 72 6d 20 75 6e 74 69 6c 20 66 6f 75 6e 64 20 28 rm until found (
05a0: 65 69 74 68 65 72 20 62 79 20 68 6f 6e 65 73 74 either by honest
05b0: 20 73 65 63 75 72 69 74 79 20 72 65 73 65 61 72 security resear
05c0: 63 68 65 72 20 6f 72 0a 65 76 69 6c 20 63 72 69 cher or.evil cri
05d0: 6d 69 6e 61 6c 73 29 2c 20 62 75 74 20 77 69 74 minals), but wit
05e0: 68 20 62 75 67 73 20 69 6e 74 65 6e 74 69 6f 6e h bugs intention
05f0: 61 6c 6c 79 20 70 6c 61 63 65 64 2c 20 61 6e 64 ally placed, and
0600: 20 75 73 65 64 20 62 79 20 74 68 65 20 73 65 63 used by the sec
0610: 72 65 74 0a 73 65 72 76 69 63 65 73 20 66 72 6f ret.services fro
0620: 6d 20 64 61 79 20 30 2e 3c 2f 70 3e 0a 0a 3c 70 m day 0.</p>..<p
0630: 3e 44 65 76 65 6c 6f 70 69 6e 67 20 69 6e 20 46 >Developing in F
0640: 6f 72 74 68 20 69 73 20 61 20 22 63 72 61 73 68 orth is a "crash
0650: 20 65 61 72 6c 79 2c 20 63 72 61 73 68 20 6f 66 early, crash of
0660: 74 65 6e 22 20 65 78 65 72 63 69 73 65 2c 20 62 ten" exercise, b
0670: 75 74 20 73 65 63 75 72 69 74 79 0a 72 65 6c 61 ut security.rela
0680: 74 65 64 20 62 75 67 73 20 64 6f 6e 27 74 20 63 ted bugs don't c
0690: 72 61 73 68 20 74 68 65 20 70 72 6f 67 72 61 6d rash the program
06a0: 2e 3c 2f 70 3e 0a 0a 3c 70 3e 6e 65 74 32 6f 20 .</p>..<p>net2o
06b0: 69 73 20 6e 6f 74 20 72 65 61 64 79 20 66 6f 72 is not ready for
06c0: 20 75 73 65 2c 20 73 6f 20 62 75 67 73 20 64 6f use, so bugs do
06d0: 20 68 61 70 70 65 6e 2c 20 61 6e 64 20 67 65 74 happen, and get
06e0: 20 66 69 78 65 64 2c 20 62 75 74 20 74 68 65 20 fixed, but the
06f0: 62 75 67 73 0a 64 65 73 63 72 69 62 65 64 20 68 bugs.described h
0700: 65 72 65 20 75 73 75 61 6c 6c 79 20 61 72 65 20 ere usually are
0710: 72 65 61 6c 20 62 75 67 73 20 49 20 66 6f 75 6e real bugs I foun
0720: 64 20 61 6e 64 20 66 69 78 65 64 20 64 75 72 69 d and fixed duri
0730: 6e 67 20 64 65 76 65 6c 6f 70 6d 65 6e 74 2e 20 ng development.
0740: 41 6c 6c 0a 6f 66 20 74 68 65 6d 20 6c 6f 6f 6b All.of them look
0750: 20 6c 69 6b 65 20 70 72 6f 66 65 73 73 69 6f 6e like profession
0760: 61 6c 6c 79 20 69 6d 70 6c 61 6e 74 65 64 20 62 ally implanted b
0770: 75 67 73 20 62 79 20 74 68 65 20 4e 53 41 2c 20 ugs by the NSA,
0780: 62 65 63 61 75 73 65 20 74 68 61 74 27 73 20 74 because that's t
0790: 68 65 0a 73 74 61 74 65 20 6f 66 20 74 68 65 20 he.state of the
07a0: 61 72 74 20 68 6f 77 20 74 6f 20 69 6d 70 6c 61 art how to impla
07b0: 6e 74 20 62 61 63 6b 64 6f 6f 72 73 3a 20 49 74 nt backdoors: It
07c0: 20 6d 75 73 74 20 70 72 6f 76 69 64 65 20 69 74 must provide it
07d0: 73 20 61 75 74 68 6f 72 20 77 69 74 68 0a 22 72 s author with."r
07e0: 65 61 73 6f 6e 61 62 6c 65 20 64 65 6e 69 61 6c easonable denial
07f0: 22 2c 20 63 6c 61 69 6d 69 6e 67 20 69 6e 63 6f ", claiming inco
0800: 6d 70 65 74 65 6e 63 65 2e 3c 2f 70 3e 0a 0a 3c mpetence.</p>..<
0810: 70 3e 48 6f 77 65 76 65 72 2c 20 69 6e 20 6f 72 p>However, in or
0820: 64 65 72 20 74 6f 20 67 65 74 20 74 68 69 6e 67 der to get thing
0830: 73 20 72 69 67 68 74 2c 20 77 65 20 6e 65 65 64 s right, we need
0840: 20 61 20 63 75 6c 74 75 72 65 20 6f 66 20 61 63 a culture of ac
0850: 63 65 70 74 69 6e 67 20 6f 75 72 0a 6d 69 73 74 cepting our.mist
0860: 61 6b 65 73 2c 20 61 6e 64 20 66 69 78 69 6e 67 akes, and fixing
0870: 20 74 68 65 6d 2e 20 26 6e 62 73 70 3b 4d 61 6e them. Man
0880: 79 20 70 72 6f 67 72 61 6d 6d 65 72 73 20 64 65 y programmers de
0890: 6e 79 20 62 75 67 73 2c 20 61 6e 64 20 72 65 71 ny bugs, and req
08a0: 75 65 73 74 20 61 74 0a 6c 65 61 73 74 20 61 20 uest at.least a
08b0: 70 72 6f 6f 66 20 6f 66 20 63 6f 6e 63 65 70 74 proof of concept
08c0: 20 61 74 74 61 63 6b 2c 20 62 65 66 6f 72 65 20 attack, before
08d0: 74 68 65 79 20 61 63 74 75 61 6c 6c 79 20 73 74 they actually st
08e0: 61 72 74 20 64 6f 69 6e 67 20 73 6f 6d 65 74 68 art doing someth
08f0: 69 6e 67 2e 0a 26 6e 62 73 70 3b 54 68 69 73 20 ing.. This
0900: 73 6f 72 74 20 6f 66 20 63 75 6c 74 75 72 65 20 sort of culture
0910: 69 73 20 73 6f 20 77 72 6f 6e 67 3a 20 41 73 20 is so wrong: As
0920: 61 75 74 68 6f 72 20 6f 66 20 73 65 63 75 72 69 author of securi
0930: 74 79 20 63 72 69 74 69 63 61 6c 20 73 79 73 74 ty critical syst
0940: 65 6d 73 2c 0a 79 6f 75 20 6d 75 73 74 20 62 65 ems,.you must be
0950: 20 63 6f 6e 73 74 61 6e 74 6c 79 20 73 63 61 72 constantly scar
0960: 65 64 20 62 79 20 70 65 6f 70 6c 65 20 75 73 69 ed by people usi
0970: 6e 67 20 65 76 65 72 79 20 77 61 79 20 74 6f 20 ng every way to
0980: 62 72 65 61 6b 20 69 6e 74 6f 20 79 6f 75 72 0a break into your.
0990: 73 6f 66 74 77 61 72 65 2c 20 61 6e 64 20 79 6f software, and yo
09a0: 75 20 6d 75 73 74 20 62 65 20 72 65 61 64 79 20 u must be ready
09b0: 74 6f 20 66 69 78 20 65 76 65 72 79 20 62 75 67 to fix every bug
09c0: 2c 20 65 76 65 6e 20 6a 75 73 74 20 70 6f 74 65 , even just pote
09d0: 6e 74 69 61 6c 20 72 69 73 6b 73 2c 0a 62 65 66 ntial risks,.bef
09e0: 6f 72 65 20 73 6f 6d 65 6f 6e 65 20 73 68 6f 77 ore someone show
09f0: 73 20 79 6f 75 20 61 6e 20 61 63 74 75 61 6c 20 s you an actual
0a00: 65 78 70 6c 6f 69 74 2e 3c 2f 70 3e 0a 0a 3c 68 exploit.</p>..<h
0a10: 32 3e 57 61 72 72 61 6e 74 20 43 61 6e 61 72 79 2>Warrant Canary
0a20: 3c 2f 68 32 3e 0a 0a 3c 70 3e 54 68 69 73 20 73 </h2>..<p>This s
0a30: 6f 72 74 20 6f 66 20 74 68 69 6e 67 20 49 27 6d ort of thing I'm
0a40: 20 64 6f 69 6e 67 20 68 65 72 65 20 69 73 20 63 doing here is c
0a50: 61 6c 6c 65 64 20 22 77 61 72 72 61 6e 74 20 63 alled "warrant c
0a60: 61 6e 61 72 79 22 2c 20 6e 61 6d 65 64 20 61 66 anary", named af
0a70: 74 65 72 0a 74 68 65 20 63 61 6e 61 72 69 65 73 ter.the canaries
0a80: 20 75 73 65 64 20 62 79 20 6d 69 6e 65 72 73 20 used by miners
0a90: 77 68 69 63 68 20 61 72 65 20 6d 6f 72 65 20 73 which are more s
0aa0: 65 6e 73 69 74 69 76 65 20 74 6f 20 70 6f 69 73 ensitive to pois
0ab0: 6f 6e 6f 75 73 20 67 61 73 20 6c 65 61 6b 73 0a onous gas leaks.
0ac0: 74 68 61 6e 20 68 75 6d 61 6e 73 2e 20 26 6e 62 than humans. &nb
0ad0: 73 70 3b 54 68 65 20 74 68 69 6e 67 20 77 6f 75 sp;The thing wou
0ae0: 6c 64 20 62 65 20 69 6d 70 6f 73 73 69 62 6c 65 ld be impossible
0af0: 20 69 66 20 74 68 65 20 6f 74 68 65 72 20 73 69 if the other si
0b00: 64 65 20 77 6f 75 6c 64 20 73 61 79 0a 22 63 6f de would say."co
0b10: 6e 74 69 6e 75 65 20 77 69 74 68 20 62 75 73 69 ntinue with busi
0b20: 6e 65 73 73 20 61 73 20 75 73 75 61 6c 2c 20 73 ness as usual, s
0b30: 6f 20 74 68 61 74 20 6e 6f 62 6f 64 79 20 6b 6e o that nobody kn
0b40: 6f 77 73 20 77 65 20 77 65 72 65 20 68 65 72 65 ows we were here
0b50: 22 2e 0a 26 6e 62 73 70 3b 54 61 6b 65 64 6f 77 ".. Takedow
0b60: 6e 73 20 6c 69 6b 65 20 74 68 65 20 6f 6e 65 20 ns like the one
0b70: 6f 66 20 4c 61 76 61 62 69 74 20 28 77 68 69 63 of Lavabit (whic
0b80: 68 20 77 61 73 20 74 72 69 67 67 65 72 65 64 20 h was triggered
0b90: 62 79 20 61 6e 20 4e 53 4c 29 20 6f 72 20 6d 6f by an NSL) or mo
0ba0: 72 65 0a 72 65 63 65 6e 74 6c 79 20 62 79 20 54 re.recently by T
0bb0: 72 75 65 43 72 79 70 74 20 28 77 68 69 63 68 20 rueCrypt (which
0bc0: 77 65 20 64 6f 6e 27 74 20 6b 6e 6f 77 20 77 68 we don't know wh
0bd0: 79 20 74 68 65 79 20 64 69 64 20 69 74 29 20 61 y they did it) a
0be0: 72 65 6e 27 74 20 73 75 63 68 0a 63 6f 6e 74 69 ren't such.conti
0bf0: 6e 75 61 74 69 6f 6e 73 2c 20 70 65 6f 70 6c 65 nuations, people
0c00: 20 63 61 6e 20 67 75 65 73 73 20 74 68 61 74 20 can guess that
0c10: 74 68 65 20 4e 53 41 20 77 61 73 20 74 68 65 72 the NSA was ther
0c20: 65 2e 3c 2f 70 3e 0a 0a 3c 70 3e 54 68 65 20 62 e.</p>..<p>The b
0c30: 65 73 74 20 63 6f 75 6e 74 65 72 6d 65 61 73 75 est countermeasu
0c40: 72 65 20 61 67 61 69 6e 73 74 20 61 20 68 6f 73 re against a hos
0c50: 74 69 6c 65 20 74 61 6b 65 6f 76 65 72 20 62 79 tile takeover by
0c60: 20 73 75 63 68 20 61 6e 20 61 67 65 6e 63 79 20 such an agency
0c70: 69 73 20 74 6f 0a 77 6f 72 6b 20 6f 75 74 20 69 is to.work out i
0c80: 6e 20 74 68 65 20 6f 70 65 6e 2c 20 61 6e 64 20 n the open, and
0c90: 68 61 76 65 20 61 20 6d 75 6c 74 69 2d 6e 61 74 have a multi-nat
0ca0: 69 6f 6e 61 6c 20 74 65 61 6d 20 74 68 61 74 20 ional team that
0cb0: 63 61 6e 27 74 20 62 65 20 73 75 62 6a 65 63 74 can't be subject
0cc0: 20 74 6f 0a 74 68 65 20 73 61 6d 65 20 62 75 6c to.the same bul
0cd0: 6c 79 69 6e 67 3b 20 74 68 65 20 6c 61 74 74 65 lying; the latte
0ce0: 72 20 69 73 20 73 6f 6d 65 74 68 69 6e 67 20 49 r is something I
0cf0: 20 64 6f 6e 27 74 20 68 61 76 65 2e 3c 2f 70 3e don't have.</p>
0d00: 0a 0a 5a 20 30 65 63 64 32 33 31 62 64 65 37 66 ..Z 0ecd231bde7f
0d10: 38 36 31 39 64 33 37 37 66 37 30 62 37 38 36 34 8619d377f70b7864
0d20: 36 63 38 63 0a 6c8c.