[cryptography] NSA can spy on smart phone data
----- Forwarded message from ianG <iang@iang.org> ----- Date: Sun, 08 Sep 2013 20:11:47 +0300 From: ianG <iang@iang.org> To: Crypto discussion list <cryptography@randombit.net> Subject: [cryptography] NSA can spy on smart phone data User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130801 Thunderbird/17.0.8 http://www.spiegel.de/international/world/privacy-scandal-nsa-can-spy-on-sma... Privacy Scandal: NSA Can Spy on Smart Phone Data SPIEGEL has learned from internal NSA documents that the US intelligence agency has the capability of tapping user data from the iPhone, devices using Android as well as BlackBerry, a system previously believed to be highly secure. The United States' National Security Agency intelligence-gathering operation is capable of accessing user data from smart phones from all leading manufacturers. Top secret NSA documents that SPIEGEL has seen explicitly note that the NSA can tap into such information on Apple iPhones, BlackBerry devices and Google's Android mobile operating system. The documents state that it is possible for the NSA to tap most sensitive data held on these smart phones, including contact lists, SMS traffic, notes and location information about where a user has been. The documents also indicate that the NSA has set up specific working groups to deal with each operating system, with the goal of gaining secret access to the data held on the phones. In the internal documents, experts boast about successful access to iPhone data in instances where the NSA is able to infiltrate the computer a person uses to sync their iPhone. Mini-programs, so-called "scripts," then enable additional access to at least 38 iPhone features. The documents suggest the intelligence specialists have also had similar success in hacking into BlackBerrys. A 2009 NSA document states that it can "see and read SMS traffic." It also notes there was a period in 2009 when the NSA was temporarily unable to access BlackBerry devices. After the Canadian company acquired another firm the same year, it changed the way in compresses its data. But in March 2010, the department responsible at Britain's GCHQ intelligence agency declared in a top secret document it had regained access to BlackBerry data and celebrated with the word, "champagne!" The documents also state that the NSA has succeeded in accessing the BlackBerry mail system, which is known to be very secure. This could mark a huge setback for the company, which has always claimed that its mail system is uncrackable. In response to questions from SPIEGEL, BlackBerry officials stated, "It is not for us to comment on media reports regarding alleged government surveillance of telecommunications traffic." The company said it had not programmed a "'back door' pipeline to our platform." The material viewed by SPIEGEL suggests that the spying on smart phones has not been a mass phenomenon. It has been targeted, in some cases in an individually tailored manner and without the knowledge of the smart phone companies. Visit SPIEGEL ONLINE International on Monday for the full article. _______________________________________________ cryptography mailing list cryptography@randombit.net http://lists.randombit.net/mailman/listinfo/cryptography ----- End forwarded message ----- -- Eugen* Leitl <a href="http://leitl.org">leitl</a> http://leitl.org ______________________________________________________________ ICBM: 48.07100, 11.36820 http://ativel.com http://postbiota.org AC894EC5: 38A5 5F46 A4FF 59B8 336B 47EE F46E 3489 AC89 4EC5
-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 On 08.09.2013 22:22, Eugen Leitl wrote:
----- Forwarded message from ianG <iang@iang.org> -----
Date: Sun, 08 Sep 2013 20:11:47 +0300 From: ianG <iang@iang.org> To: Crypto discussion list <cryptography@randombit.net> Subject: [cryptography] NSA can spy on smart phone data User-Agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130801 Thunderbird/17.0.8
http://www.spiegel.de/international/world/privacy-scandal-nsa-can-spy-on-sma...
*snip*
The material viewed by SPIEGEL suggests that the spying on smart phones has not been a mass phenomenon. It has been targeted, in some cases in an individually tailored manner and without the knowledge of the smart phone companies.
Spiegel is as funny as always. Why doing the hard work to hack a phone if you can get the data right out of the cloud ecosystem? While the article is technically not false it doesn't tell us all, it lulls the people into false safety. - -- gpg: 0x5D8BB0A9 -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.12 (GNU/Linux) iQGcBAEBAgAGBQJSLPjEAAoJEPCgX0tdi7CphIoMALKpWnmqJVF67czWh6UZetW6 wQ8dJrj9v2+LXZwNagFtijYqrmkMA9slzYa5roXHYdilD2ymdHjOa6I6we6R6UTU /aGdXjXP9HtlCqG7RCIn6wjntJFJVG3ntF5py4VZosfClV5vC7ECW5D1eL8Ma2v3 7scSBXQkuYeQ0EV+FetNfauUZ1Sqa+Ru8VYlSdHQa9ii59UJVAq9IlXGsBX241+A q3igjfGJlhNCq0a3OLy61tKA1z0FfrNDy3p89llKrFqfkZsenj7JR1RxJgh2lDi4 EJdNPK5gr3CHGJrixY55O2PZk2dzX0FGNDsre1uGfUlLDRhO1ZoxldTHgq6Sz/X5 bi79bBsJXjw/F8sn8kpL1CVkaow/spoUTOy+zyHe6TwYynwrpcgxYsJhILqBuasC pEAzWfBOMl3eUkJnw0e5XEu5kl1+iAO9zE7IwEwYL1Lpox3R9ip1KNKBUU9d3AxU cv0YL5dvxJjngc2HiMeFlUoGjpEN7Meuu5exyY9QqQ== =LPLc -----END PGP SIGNATURE-----
participants (2)
-
Eugen Leitl
-
Jan H. Krueger