Tuesday, September 10, 2013

New NSA Slides and Details Released last night via Fantastico (BR)

From: "David D" <david[at]7tele.com>
To: "XXXYYY discussion list'" <XXXat]YYY.net>
Date: Mon, 9 Sep 2013 12:56:17 +0200
Subject: Re: [cryptography] New NSA Slides and Details Released last night
via Fantastico (BR)
http://g1.globo.com/fantastico/noticia/2013/09/nsa-documents-show-united-
states-spied-brazilian-oil-giant.html


No millisecond counter:

1:49  US-983 Stormbrew - Fiber connections

1:49  US-983 Stormbrew - "KEY CORPORATE PARTNER WITH ACCESS TO INTERNATIONAL CABLES, ROUTERS, AND SWITCHES".   (# traceroute google.com)

2:07 - "QUERY BY CERTIFICATE META DATA"

2:07 - "Private keys of Diginotar stolen by hacker"    FLYING PIG ...
Launch a MITM attack.

2:08 - mail.ru and server IP:  94.100.104.14

This site has broken out some of the screenshots from the video:
http://leaksource.wordpress.com/2013/09/09/economic-espionage-nsa-
spies-on-brazil-oil-giant-petrobras/

"How the attack was done:" image is most interesting. 
http://leaksource.files.wordpress.com/2013/09/nsa-brazil-5.png
Based on this slide, it appears that the bandwidth providers are dumping the
traffic at core routers directly to the NSA.

No comments:

Post a Comment