bugtraq - RE: Cryptome: NSA has real-time access to Hushmail servers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <F9C0B32C4FFE7147BD0FF6A40BE806E701AD83@Hammer_Exchange.hammerofgod.com>
Date: Fri, 21 Dec 2007 10:51:30 -0800
From: "Thor (Hammer of God)" <thor@...merofgod.com>
To: <bugtraq@...urityfocus.com>
Subject: RE: Cryptome: NSA has real-time access to Hushmail servers

In addition, it is reported that breached SSL sessions have been traced
back to IP resources located in the North Pole and controlled by one
"Kr1S Kr1gL3" who has apparently privately purchased access rights to
all Hushmail data in an effort to determine which users have been
"naughty" and which have been "nice." 

Coincidence?  I don't think so.

t



> -----Original Message-----
> From: Juha-Matti Laurio [mailto:juha-matti.laurio@...ti.fi]
> Sent: Friday, December 21, 2007 8:16 AM
> To: bugtraq@...urityfocus.com
> Subject: Cryptome: NSA has real-time access to Hushmail servers
> 
> A frequent source 'A' sending updated NSA-Affiliated IP resources to
> Cryptome's Web site has reported the following new information:
> 
> "Certain privacy/full session SSL email hosting services have been
> purchased/changed operational control by NSA and affiliates within the
> past few months, through private intermediary entities."
> 
> Reportedly the following services are controlled:
> 
> Hushmail / Canada (http://www.hushmail.com/ ),
> Guardster / USA (http://www.guardster.com/ ), and
> SAFe-mail.net / Israel (http://www.safe-mail.net/ )
> 
> Link:
> NSA Controls SSL Email Hosting Services:
> http://cryptome.org/nsa-ssl-email.htm
> 
> SecuriTeam Blogs:
> http://blogs.securiteam.com/?p=1052
> 
> Additionally, there is more information about NSA's role on Windows
> security software industry provided ('further details regarding which
> publishers and their means of facilitation' mentioned by Cryptome post
> on 1st Nov, link mentioned in Bugtraq post referenced below).
> 
> Cryptome: NSA has access to Windows Mobile smartphones
> http://www.securityfocus.com/archive/1/483129
> 
> Juha-Matti