full-disclosure - Re: Obama Order Sped Up Wave of Cyberattacks Against Iran

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Message-ID: <20120610191212.4aadf017@terabyte>
Date: Sun, 10 Jun 2012 19:12:12 -0400
From: Benjamin Kreuter <ben.kreuter@...il.com>
To: coderman <coderman@...il.com>
Cc: full-disclosure@...ts.grok.org.uk
Subject: Re: Obama Order Sped Up Wave of Cyberattacks
	Against Iran

On Sun, 10 Jun 2012 14:29:23 -0700
coderman <coderman@...il.com> wrote:

> On Sun, Jun 10, 2012 at 2:22 PM, coderman <coderman@...il.com> wrote:
> > ...
> > we can split hairs on the origin and naming of a given capability,
> > but these are CALEA (aka "lawful intercept") functions used
> > unlawfully.
> 
> more fun reading, if you're curious:
> 
> "Exploiting Lawful Intercept to Wiretap the Internet"
> http://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/BlackHat-DC-2010-Cross-Attacking-LawfulI-Intercept-slides.pdf
> 
> "Lawful Interception and Countermeasures"
> http://web.it.kth.se/~maguire/DEGREE-PROJECT-REPORTS/080922-Romanidis_Evripidis-with-cover.pdf
> 
> 
> ... and, there are rumors VUPEN got hacked a few days ago. their
> weaponized exploits, also marketed as "lawful intercept" technologies,
> are sure to be abused if now in the wild.
> 
> we could do this all day! ;)

Like I said, I have no doubt that it happens or that there are
vulnerabilities -- I just wanted examples specifically from the US, or
at least some indication that CALEA's mandates are synchronized with
requirements in other countries to the point where any attacks on
systems in other countries could have be carried out here.

-- Ben

> _______________________________________________
> Full-Disclosure - We believe in it.
> Charter: http://lists.grok.org.uk/full-disclosure-charter.html
> Hosted and sponsored by Secunia - http://secunia.com/
> 


-- 
Benjamin R Kreuter
UVA Computer Science
brk7bx@...ginia.edu
KK4FJZ

--

"If large numbers of people are interested in freedom of speech, there
will be freedom of speech, even if the law forbids it; if public
opinion is sluggish, inconvenient minorities will be persecuted, even
if laws exist to protect them." - George Orwell

Download attachment "signature.asc" of type "application/pgp-signature" (837 bytes)

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/