Re: Revealed: NSA program collects 'nearly everything a user does on the internet'

[Warren Bailey <wbailey () satelliteintelligencegroup com>]

And how many people utilize a VPN for site to site? You can convince me you can spin up an Ipsec connection, but at 
that point your "originating gateway" changed from your way to the Internet to the VPN's way. Either.. Way.. You still 
head out in clear channel Internet and get owned elsewhere. I can't see a giant "this doesn't work here" sign on much 
except for Tor.


Sent from my Mobile Device.


-------- Original message --------
From: Chris Boyd <cboyd () gizmopartners com>
Date: 07/31/2013 8:52 AM (GMT-08:00)
To: NANOG <nanog () nanog org>
Subject: Re: Revealed: NSA program collects 'nearly everything a user does on the internet'



On Jul 31, 2013, at 10:26 AM, "<<\"tei''>>>" <oscar.vives () gmail com> <oscar.vives () gmail com> wrote:

> - Have I read it correctly.  Can then break into a vpn connection,
> then leach documents that a german in pakistan is sending to his
> office in germany?

I would guess that it's becasuse many VPN services still support PPTP which can be attacked as outlined here:
http://www.schneier.com/paper-pptpv2.html

--Chris