9 September 2013

NSA Slides on Brazilian Oil Giant Spying

From: "David D" <david[at]7tele.com>
To: "'Crypto discussion list'" <cryptography[at]randombit.net>
Date: Mon, 9 Sep 2013 12:56:17 +0200
Subject: Re: [cryptography] New NSA Slides and Details Released last night
via Fantastico (BR)

http://g1.globo.com/fantastico/noticia/2013/09/nsa-documents-show-united-
states-spied-brazilian-oil-giant.html

No millisecond counter:

1:49  US-983 Stormbrew - Fiber connections

1:49  US-983 Stormbrew - "KEY CORPORATE PARTNER WITH ACCESS TO INTERNATIONAL CABLES, ROUTERS, AND SWITCHES".   (# traceroute google.com)

2:07 - "QUERY BY CERTIFICATE META DATA"

2:07 - "Private keys of Diginotar stolen by hacker"    FLYING PIG ...
Launch a MITM attack.

2:08 - mail.ru and server IP:  94.100.104.14

This site has broken out some of the screenshots from the video:

http://leaksource.wordpress.com/2013/09/09/economic-espionage-nsa-
spies-on-brazil-oil-giant-petrobras/

"How the attack was done:" image is most interesting. 

http://leaksource.files.wordpress.com/2013/09/nsa-brazil-5.png

Based on this slide, it appears that the bandwidth providers are dumping the
traffic at core routers directly to the NSA.

_______________________________________________
cryptography mailing list
cryptography[at]randombit.net
http://lists.randombit.net/mailman/listinfo/cryptography