#backdoors
The 30-year-old internet backdoor law that came back to bite
News broke this weekend that China-backed hackers have compromised the wiretap systems of several U.S. telecom and internet providers, likely in an effort to gather intelligence on Americans.
The wiretap systems, as mandated under a 30-year-old U.S. federal law, are some of the most sensitive in a telecom or internet provider’s network, typically granting a select few employees nearly unfettered access to information about their customers, including their internet traffic and browsing histories.
But for the technologists who have for years sounded the alarm about the security risks of legally required backdoors, news of the compromises are the “told you so” moment they hoped would never come but knew one day would.
“I think it absolutely was inevitable,” Matt Blaze, a professor at Georgetown Law and expert on secure systems, told TechCrunch regarding the latest compromises of telecom and internet providers.
Fact is, any intentional backdoor is not going to be secure. Secrets don’t remain secret. That is just the way things are, and more so if more than one person knows about it.
“There’s no way to build a backdoor that only the ‘good guys’ can use,” said Signal president Meredith Whittaker, writing on Mastodon.
The theory around backdoors comes from the same era as changing your password every 30 days. Times have changed, and we should know better in 2024.
See techcrunch.com/2024/10/07/the-…
#Blog, #backdoors, #security, #technology
The U.K. Government Is Very Close To Eroding Encryption Worldwide
The #U.K. Parliament is pushing ahead with a sprawling internet regulation bill that will, among other things, undermine the #privacy of people around the world. The Online Safety Bill, now at the final stage before passage in the House of Lords, gives the British #government the ability to force #backdoors into #messaging services, which will destroy #end-to-end encryption. No amendments have been accepted that would mitigate the bill’s most dangerous elements.
https://www.eff.org/deeplinks/2023/07/uk-government-very-close-eroding-encryption-worldwide
#Axiomtek limits itself to CPUs with #nsa #backdoors even in 2022 when the world is moving on... https://linuxgizmos.com/3-5-inch-tiger-lake-u-sbc-offers-triple-m-2-slots/
#Nexcom also chose CPUs with #nsa #backdoors https://linuxgizmos.com/apollo-lake-telematics-system-features-hailo-8-npu/
#purism : we ship you a laptop with hardware #backdoors (M.E. in " Intel Core i7 10710U, 6 cores & 12 threads") but we'll put some nail polish on a bunch of sdcrews to make up for it. #SecurityThreatre
#vmware : let's blame #linux for our #backdoors because we did, after all, misuse Linux code. http://techrights.org/2020/04/28/openwashing-vmware-after-gpl-abuses/ #gplviolations #microsoft
#github moreover wants you to do things which make it easier for #nsa (now GitHub management, #microsoft hired from there) to implant #backdoors in your project, even without you knowint it. They do this offline (code) and in vitro (compilation) when you outsource to Actions etc. Very, very bad. NO SERIOUS #security project should be considered legit if on GitHub.
#CISA Compiles Free Cybersecurity Services and Tools for Network Defenders | CISA ⚓ https://us-cert.cisa.gov/ncas/current-activity/2022/02/18/cisa-compiles-free-cybersecurity-services-and-tools-network ䷉ #nsa #backdoors http://techrights.org/2021/10/29/microsoft-national-security-threat/
Oh, great. #backdoors in your #graphics handling too. https://www.gamingonlinux.com/2022/02/intel-confirms-standalone-arc-graphics-due-in-q2-also-project-endgame-this-year go away, #intel http://techrights.org/wiki/Intel_leaks
#DFI has slso chosen a processor with #NSA #backdoors https://linuxgizmos.com/elkhart-lake-powers-mini-type-10-qseven-and-embedded-pc-products/
The motherboard has #intel #nsa #backdoors in it https://linuxgizmos.com/embedded-mini-pc-builds-on-3-5-inch-rk3399-sbc/ #seco
● NEWS ● #BruceSchneier #Microsoft #Windows TCO ☞ On the Irish Health Services Executive Hack https://www.schneier.com/blog/archives/2022/02/on-the-irish-health-services-executive-hack.html "really bad security practices: [...]" like using Windows with #backdoors http://techrights.org/2020/06/09/windows-disaster-zones/
#Seco chose hardware platform with #nsa #backdoors https://linuxgizmos.com/elkhart-lake-powers-pico-itx-qseven-and-smarc-boards/
