NSA Has Keys To Most Internet Encryption

[Sledgstone 8,672]

http://www.npr.org/blogs/thetwo-way/2013/09/05/219367716/reports-nsa-has-keys-to-most-internet-encryption
 

The National Security Agency has the keys to most Internet encryption methods and it has gotten them by using supercomputers to break them and by enlisting the help of private IT companies, and are reporting.

In plain English, this means that many of the tools — like , used by many banks and email providers — that people worldwide have come to believe protect them from snooping by criminals and governments are essentially worthless when it comes to the NSA.

The revelations are the latest from documents leaked by former NSA contractor Edward Snowden.

While the main premise of the story isn't surprising — one of the main goals of the NSA is code-breaking, after all — the breadth of the program and some of the "trickery" described in the pieces are.

One of the more interesting finds is that the NSA spent $250 million a year to engage "the U.S. and foreign IT industries to covertly influence and/or overtly leverage their commercial products' designs" to make them "exploitable," the Times reports.

Essentially, the paper says, the U.S. was lobbying IT companies into programming a backdoor into their encryption products.

 

"In one case, after the government learned that a foreign intelligence target had ordered new computer hardware, the American manufacturer agreed to insert a back door into the product before it was shipped, someone familiar with the request told The Times.

"The 2013 N.S.A. budget request highlights "partnerships with major telecommunications carriers to shape the global network to benefit other collection accesses" — that is, to allow more eavesdropping.

"At Microsoft, as , the N.S.A. worked with company officials to get pre-encryption access to Microsoft's most popular services, including Outlook e-mail, Skype Internet phone calls and chats, and SkyDrive, the company's cloud storage service.

"Microsoft asserted that it had merely complied with 'lawful demands' of the government, and in some cases, the collaboration was clearly coerced. Executives who refuse to comply with secret court orders can face fines or jail time."

 

Wow.. The government is probably big data harvesting everyone's skype chats and outlook emails.. and if they have full access to SSL.. then all forms of secure internet connections like with banks, paypal, twitter and facebook accounts are meaningless to the NSA when they have someone targeted.

 

I can understand the government needing tools to protect us against terrorists, etc.. but it seems like overkill. It makes me wonder what other countries are capable of.