Full Disclosure mailing list archives

Re: Obama Order Sped Up Wave of Cyberattacks Against Iran


From: Benjamin Kreuter <ben.kreuter () gmail com>
Date: Sun, 10 Jun 2012 19:12:12 -0400

On Sun, 10 Jun 2012 14:29:23 -0700
coderman <coderman () gmail com> wrote:

On Sun, Jun 10, 2012 at 2:22 PM, coderman <coderman () gmail com> wrote:
...
we can split hairs on the origin and naming of a given capability,
but these are CALEA (aka "lawful intercept") functions used
unlawfully.

more fun reading, if you're curious:

"Exploiting Lawful Intercept to Wiretap the Internet"
http://www.blackhat.com/presentations/bh-dc-10/Cross_Tom/BlackHat-DC-2010-Cross-Attacking-LawfulI-Intercept-slides.pdf

"Lawful Interception and Countermeasures"
http://web.it.kth.se/~maguire/DEGREE-PROJECT-REPORTS/080922-Romanidis_Evripidis-with-cover.pdf


... and, there are rumors VUPEN got hacked a few days ago. their
weaponized exploits, also marketed as "lawful intercept" technologies,
are sure to be abused if now in the wild.

we could do this all day! ;)

Like I said, I have no doubt that it happens or that there are
vulnerabilities -- I just wanted examples specifically from the US, or
at least some indication that CALEA's mandates are synchronized with
requirements in other countries to the point where any attacks on
systems in other countries could have be carried out here.

-- Ben

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/



-- 
Benjamin R Kreuter
UVA Computer Science
brk7bx () virginia edu
KK4FJZ

--

"If large numbers of people are interested in freedom of speech, there
will be freedom of speech, even if the law forbids it; if public
opinion is sluggish, inconvenient minorities will be persecuted, even
if laws exist to protect them." - George Orwell

Attachment: signature.asc
Description:

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/

Current thread: