From eugen@leitl.org Mon Sep 9 07:06:18 2013 From: Eugen Leitl To: cypherpunks@lists.cpunks.org Subject: Re: [cryptography] New NSA Slides and Details Released last night via Fantastico (BR) Date: Mon, 09 Sep 2013 13:06:14 +0200 Message-ID: <20130909110614.GK10405@leitl.org> MIME-Version: 1.0 Content-Type: multipart/mixed; boundary="===============5857290694173575130==" --===============5857290694173575130== Content-Type: text/plain; charset="utf-8" Content-Transfer-Encoding: quoted-printable ----- Forwarded message from David D ----- Date: Mon, 9 Sep 2013 12:56:17 +0200 From: David D To: 'Crypto discussion list' Subject: Re: [cryptography] New NSA Slides and Details Released last night vi= a Fantastico (BR) X-Mailer: Microsoft Office Outlook 12.0 http://g1.globo.com/fantastico/noticia/2013/09/nsa-documents-show-united-sta tes-spied-brazilian-oil-giant.html No millisecond counter: 1:49 US-983 Stormbrew - Fiber connections 1:49 US-983 Stormbrew - "KEY CORPORATE PARTNER WITH ACCESS TO INTERNATIONAL CABLES, ROUTERS, AND SWITCHES". (# traceroute google.com) 2:07 - "QUERY BY CERTIFICATE META DATA" 2:07 - "Private keys of Diginotar stolen by hacker" FLYING PIG ... Launch a MITM attack. 2:08 - mail.ru and server IP: 94.100.104.14 This site has broken out some of the screenshots from the video: http://leaksource.wordpress.com/2013/09/09/economic-espionage-nsa-spies-on-b razil-oil-giant-petrobras/ "How the attack was done:" image is most interesting. =20 http://leaksource.files.wordpress.com/2013/09/nsa-brazil-5.png Based on this slide, it appears that the bandwidth providers are dumping the traffic at core routers directly to the NSA. -----Original Message----- From: cryptography [mailto:cryptography-bounces(a)randombit.net] On Behalf Of David D Sent: Monday, September 09, 2013 12:07 PM To: 'Crypto discussion list' Subject: Re: [cryptography] New NSA Slides and Details Released last night via Fantastico (BR) Lots of gems in this video: http://g1.globo.com/fantastico/noticia/2013/09/nsa-documents-show-united-sta tes-spied-brazilian-oil-giant.html _______________________________________________ cryptography mailing list cryptography(a)randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- --=20 Eugen* Leitl leitl http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org AC894EC5: 38A5 5F46 A4FF 59B8 336B 47EE F46E 3489 AC89 4EC5 --===============5857290694173575130== Content-Type: application/pgp-signature Content-Transfer-Encoding: base64 Content-Disposition: attachment; filename="signature.asc" MIME-Version: 1.0 LS0tLS1CRUdJTiBQR1AgU0lHTkFUVVJFLS0tLS0KVmVyc2lvbjogR251UEcgdjEuNC4xMiAoR05V L0xpbnV4KQoKaVFJY0JBRUJBZ0FHQlFKU0xhdW1BQW9KRVBSdU5JbXNpVTdGNUNVUC9SbVFwaVpO Z1BvYkg1SWhveTY2Z3JvVQpiaW1yOWh5Umt6VnlSWFZWa2pLUEdTakZ5MStoWmNvZURYeVhSQUt6 Y1A3VmRiQlhMSVRTak1lZU1pQkIreExCClUrQmluOUszaXc4aUVRS1piOVFMWGg2MXRKZXZpMWVZ UkRHa2VSd3ZkbnBHUiszVHJlNmdCQmRhSzNFT3NNUUIKQXF4VGY5T3VaY1ZHMWtjMUlZbjVxdFUr UjFWV1laK2YzVnYyMWZRaHo2clRqRXZkc0htRlNmRW5rWlpibzREYwoyUlMwUHBUUE1HbDB1dUlR QjF2OWhiWUFIcUVkUFdVaEg5L3oxTDRYNG5wMHZ1Q2gxY0xkc0lIeUdFaXNPOWs0CjdROWlnTjE4 bm5mN1p4NGtDaDFUMlJ4TUhuMk1ENmEyUG5jSitkZnlHenJiOEVZeDVEdk5YSlRVVnZQT1UySngK d09nZ0JBVlZvREVndElWZGQ4aGxObkVJVkVyZk9jSFNYSUlZdUt2bmN2OTBiZS92SHJoSXdYdjlP MVBEUkpWWAp4SWlZamxKM2lvK1BrZU54NDZHbENFTG80cVMxblcwOFdZUXpNL2JSU2hRYkVvcVhu SEphY1d5S1RvdXVsc0ZRCmROTzdLcVM5SXJHL0JyeTV5ZmhIWjdnWXd6SExiVHdCd3pmUzdZZFVQ b1dRS0VUYndXbWJTaDBtNVhJaHhORkwKZkE1NDdDazBkVHFYV3QxNDlzaE5IckpYMUduUjJ3WTRy cjZFenA4c3dENEhLNHk2SHpkYitWc0pRTVpxTmFPcAp4R0c3elRseml5NUorSTYycEU2SlFldGZ6 cGZSYU9tTDZPT2lnYkVWbmw0VEY2STMxeE85SXVoalBqUEdnSHkwCjBRZlloekpVM0ZyZS80TzdU Mm9pCj1PS2lVCi0tLS0tRU5EIFBHUCBTSUdOQVRVUkUtLS0tLQo= --===============5857290694173575130==--