bugtraq - RE: Cryptome: NSA has real-time access to Hushmail servers

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <0CF59C4890F7A04AAC3B1E798E6F86F3016EFFD3@fsi32.fsidp.insidefsi.com>
Date: Thu, 27 Dec 2007 15:09:00 -0500
From: "Kevin Reiter" <KReiter@...idefsi.net>
To: <bugtraq@...urityfocus.com>
Subject: RE: Cryptome: NSA has real-time access to Hushmail servers

http://www.rsync.net/resources/notices/canary.txt

Not an ISP, but if your data resides on their server(s), ...

-----Original Message-----
From: Kurt Buff [mailto:kurt.buff@...il.com]
Sent: Thursday, December 27, 2007 12:26 PM
To: bugtraq@...urityfocus.com
Subject: Re: Cryptome: NSA has real-time access to Hushmail servers


Wasn't there an article or a post somewhere about an ISP that
maintained a canary web page with the statement "we haven't been
served with an NSL" and (I think) a date that was meant to be taken
down or perhaps merely not updated in such an event?

Cute idea, though I suppose they would also be subject to sanctions
for not maintaining it.

On Dec 26, 2007 1:33 PM,  <Valdis.Kletnieks@...edu> wrote:
> On Sat, 22 Dec 2007 14:02:18 +0200, Juha-Matti Laurio said:
> > Guardster Team has posted its response on 21st Dec to Cryptome:
>
> > "We can assure you that we do not cooperate with the NSA or any other
> > government agency anywhere in the world. We invite whomever is making this
> > statement to provide proof, rather than making a baseless accusation.
>
> Note that if they had been served with an NSL (National Security Letter),
> they may be legally *required* to lie about it while cooperating.  Actually
> truthfully saying "Yeah, an NSL showed up and we complied" could land them
> in jail....
>