Electrospaces

I think you are asking something like, "does Apple voluntarily share my information?" Read some of the articles in [0]. At this point, I think it is pretty safe to assume that most large countries and some large companies can access your iCloud data with limited effort. [0] https://www.electrospaces.net/

I guess you're referring to http://electrospaces.blogspot.de/2017/06/dutch-russian-cyber-crime-cas… https://www.volkskrant.nl/4497360/ https://www.volkskrant.nl/kijkverder/2017/hacker/ To me this paints a pretty realistic picture of how difficult it is for western LE to co-operate with Russia, it's not impossible but it certainly isn't easy. Both sides will be cherry-picking the things they share, with the Russian cops facing ever-increasing pressure from the intelligence side of things. It's worth remembering that this story ended with Sergei Mikhailov in a Russian jail cell facing charges of treason. No, I don't believe hosting in Russia will magically solve all of your problems. I however do believe that it'll make LE co-operation significantly more difficult, especially after the recent events.

Moderators - Could you please add [2013] to the title? The article seems to mix up the PRISM and Upstream programs. For more information, I'd recommend either the Privacy and Civil Liberties Oversight Board report of Section 702 collection[1] (VERY long) or this post from Top Level Communications analyzing the PRISM program[2] (much more accessible). [1] http://www.pclob.gov/All%20Documents/Report%20on%20the%20Section%20702… [2] http://electrospaces.blogspot.fr/2014/04/what-is-known-about-nsas-pris… EDIT: corrected link

"In the telcos, singlemode fiber is used to connect long distance switches, central offices and SLCs (subscriber loop carriers, small switches in pedestals in subdivisions or office parks or in the basement of a larger building). Practically every telco's network is now fiber optics except the connection to the home." [1] Specifically, AT&T has transitioned its PSTN backbone fully to SIP, which is a form of VoIP: "AT&T will exchange SIP traffic at the access border controller layer (i.e. SBCs, more specifically Acme Packet SBCs) via IP handoff at a few "strategic locations," directly peering with a select number of Tier 1 carriers. AT&T will also provide transit and direct termination through its network and support all roaming traffic to interwork with other wireless carriers" [2] So both voice and data are going over the same fiber lines, since it's all IP (which reduces costs considerably.) We know that Room 641A was one of many QUANTUM locations, where traffic was beam-split. [3] It seems from [4], that we have confirmation that TURMOIL and INCENSER snarf up PSTN as well as IP. Since all of that was working well before 2010, and we know TEMPORA acts as a buffer for high-volume stuff (fed by the Narus machines), and voice is IP now because of SIP, I feel reasonably confident it's getting stored at some duration at the exchanges. 1. https://www.lanshack.com/fiber-optic-tutorial-network.aspx 2.…

I'm going to focus on voice as messengers are all over the place. People originally wanted secure voice. They started out as custom or value-added devices that, if worth a crap, often had special protections like dedicated IC's for crypto and TEMPEST protection: https://electrospaces.blogspot.com/2012/06/highly-secure-mobile-phones… Those were usually very simple. A good thing compared to modern ones. They all cost in the $1,000-3,000 per unit range due to extra costs and low volume. Sectera Edge was probably most secure and rugged. Cryptophone was easy to use plus had nice features like hardened Windows and published source for crypto. You basically called the person, read out what was on your screen, listened to them do the same, and listen to each other's voices to make sure you recognized them. It was favorite outside of just defense use. Switched to Android later. That's the demo I found. http://www.cryptophone.de/en/products/mobile/ https://www.youtube.com/watch?v=RchMr2B1KuU Note: The letters you see are the codes you read. These were pretty expensive. So, companies started developing software for regular phones... often one or two models... that turned them into encrypted phones optionally with hardening. Prior list had some. SecureStar (PhoneCrypt), SecureGSM, and Cellcrypt come to mind. Eventually, recognizing encryption wasn't enough, this segment sort of combined with Android and other software to produce dedicated phones that were cheaper than…

Not everything Secretary Clinton did was TS/SCI. The common practice is an Android device[0] that is approved to SECRET only. This would suffice for general email and messaging. My understanding is that President Obama's blackberry [1] isn't really a mobile device as configured. This blackberry device connects to the a custom secure base station [2] or picocell, that follows him around just like the Football[3], when outside certain vehicles. Another factor is that TS/SCI access is restricted by location. eg. AF1 or the Presidential vehicle. I'm not sure the Secretary of State would have a full time [*24/7] detail, although as former First Lady, Sec. Clinton would have a Secret Service detail which is funded separately. It would be more likely that the NSA offered a different solution and State Dept. bureaucrat balked at the cost involved, especially something like following senior staff around with a football. [0] http://www.boeing.com/defense/boeing-black/index.page [1] http://www.technologytell.com/gadgets/156930/yes-president-obama-still… [2] http://electrospaces.blogspot.com/2013/04/how-obamas-blackberry-got-se… [3] https://en.wikipedia.org/wiki/Nuclear_football Edit: 24/7 detail at home. On official trips, the Secretary of State would have a security detail as commented by carboncopy below.

A road trip perhaps to the Lucius D. Clay Barracks near Wiesbaden. Dagger base, etc. BND pretending to be blind to co-operation efforts and practically subservient to Cryptologic activity seeking NSA and others. See also https://www.electrospaces.net/2015/01/german-investigation-of-cooperat…

Thank you. The most recent completely new information from the Snowden files is found in Jacob Appelbaum's 2022 thesis[1], in which he revealed information that had not been previously public (not found on any previously published documents and so on). And AFAIK, the most recent new information from the published documents (along with this post) might actually be in our other posts[2], but there might be some others we aren't aware of. [1]: https://www.electrospaces.net/2023/09/some-new-snippets-from-snowden-d… [2]: Part 2: https://libroot.org/posts/going-through-snowden-documents-part-2/ and part 3: https://libroot.org/posts/going-through-snowden-documents-part-3/

Really? Do you want a real-world example have a look at US White House: > President Obama talks on the phone aboard Air Force One. April 10, 2014. > The Airborne Executive Phone has the red light on, which means it's a secure call. https://www.electrospaces.net/2017/01/the-presidential-communications.… It is further made more clear because NSA literally calls their secure network the red network.

The linked tweet screenshots a blog post[1] that is an analysis of a pHd thesis[2] [1] - https://www.electrospaces.net/2023/09/some-new-snippets-from-snowden-d… [2] - https://pure.tue.nl/ws/portalfiles/portal/197416841/20220325_Appelbaum…

The really concerning part is to be STILL believing that after the Snowden scandal, after everybody has seen the slides that explain in detail how the NSA sends an FBI team to gather data from (then, in 2013) Microsoft, Yahoo, Google, Facebook, PalTalk, YouTube, Skype, AOL, Apple (and Dropbox being planned). Also how Yahoo first refused but was forced to comply by the Foreign Intelligence Surveillance Court of Review. https://www.electrospaces.net/2014/04/what-is-known-about-nsas-prism-p… (Note that supposedly, "the companies prefer installing their own monitoring capabilities to their networks and servers, instead of allowing the FBI to plug in government-controlled equipment.")

TEMPEST[1] / Van Eck threats are still prevalent. All EMF is going to leak information so sensitive devices have shielding when they are under elevated threat. See the government-grade shielding on Trump's monitor here: https://electrospaces.blogspot.com/2017/11/trumps-communications-equip… [1] https://en.wikipedia.org/wiki/Tempest_(codename)

You care about some simple headers, because that's what you "see", but Vodafone is much worse https://electrospaces.blogspot.co.uk/2014/11/incenser-or-how-nsa-and-g…

>What would data protection by Chinese companies even mean? They're already comprehensively cooperating with the CCP. Well even if it looked anything like the EU's GDPR, even then the CCP would still have a carte blanche to collect whatever they wanted, just as the BND [0], AVID [1] et al do so today, and at least the politicians could pat them selves on the back about how they are protecting their people, while continuing to subvert such protections. [0] https://electrospaces.blogspot.com/2016/09/secret-report-reveals-germa… [1] https://electrospaces.blogspot.com/2014/02/dutch-government-tried-to-h…

Here's the list you will find ETERNALBLUE on: http://electrospaces.blogspot.com/p/nsas-tao-division-codewords.html?m…

FAIRVIEW is the NSA name for their partnership with AT&T. https://www.propublica.org/article/nsa-spying-relies-on-atts-extreme-w… http://electrospaces.blogspot.com/2015/08/fairview-collecting-foreign.…

"...there is no evidence that Cisco has collaborated with American spy agencies." According to Snowden's files, Cisco is among those companies that have strategic partnership with NSA http://revolution-news.com/strategic-partnerships-new-snowden-leaks-re… Plus, this http://electrospaces.blogspot.gr/2015/04/some-equipment-that-connects-…

They (NSA, GCHQ) stole many SIM card authentication keys, so they can probably eavesdrop on UMTS conversations with them: http://electrospaces.blogspot.com/2015/02/nsa-and-gchq-stealing-sim-ca…

Details: http://electrospaces.blogspot.com/2013/04/how-obamas-blackberry-got-se… SecurVoice software by Genesis Key, a short list of contacts that also have compatible communications devices (unclear if that's required or if that's only for classified communications, since a photo caption has Obama calling Romney), and possibly other hardware or firmware modifications that are not disclosed. IMEI kept secret, and the phone might only connect to a special secured base station.

It's doubtful Snowden was in possession of his NSA data dump at the time he arrived to Moscow, the things he had memorized would have been of very limited value. If the Russian government was in possession of his data, I'd consider it fairly surprising that they seemingly never leaked any of the materials. While it's not strictly impossible that Snowden through the Russian Government was the "second source", given that all the leaks from the second source came after Snowden had landed in Moscow, none of the "second source" files were included within the Snowden dump a bunch of journalists have access to. There are also various more specific reasons to belive that Snowden probably would not have had access to all the things originating from the second source, and even more so many of the things originating from TSB. Same is true of Snowden possibly being TSB, whether or not "second source" and the TSB were the one and the same. It's just not really credible. Here's a good starting point if you're not familiar with the second source https://www.electrospaces.net/2017/09/are-shadow-brokers-identical-wit…

> I wrote blog entry on this subject with a very similar name [0] which covers the CryptoAG story in more detail. It doesn't have the 2020 news. [0]: A Brief History of NSA Backdoors (2013), https://www.ethanheilman.com/x/12/index.html Wow this is super interesting I noticed this paragraph in the text. > 2013, Enabling for Encryption Chips: In the NSA's budget request documents released by Edward Snowden, one of the goals of the NSA's SIGINT project is to fully backdoor or "enable" certain encryption chips by the end of 201311. It is not publicly known to which encryption chips they are referring. From what I know Cavium is one of these "SIGINT enabled" chip manufactures. > https://www.electrospaces.net/2023/09/some-new-snippets-from-snowden-d… >> "While working on documents in the Snowden archive the thesis author learned that an American fabless semiconductor CPU vendor named Cavium is listed as a successful SIGINT "enabled" CPU vendor. By chance this was the same CPU present in the thesis author's Internet router (UniFi USG3). The entire Snowden archive should be open for academic researchers to better understand more of the history of such behavior." (page 71, note 21) > https://www.computerweekly.com/news/366552520/New-revelations-from-the… Unfortunately the relevant text for the second is pretty long so I dont wanna quote it.

> Fair point, though we did get GCHQ's data. No, the US gets some of GCHQ's intelligence reports, not all of GCHQ'S data. > According to [1], the NSA mass-collects VoIP partly through XKEYSCORE, FALLOUT and TURMOIL (harvested from INCENSER/DS-300/others), and PSTN through LOPERS (though it's unclear if LOPERS ingests domestic (INCENSER) data or just Europe<->Asia (DANCINGOASIS) data.) Do you even read your own sources? INCENSER (https://electrospaces.blogspot.com/2014/11/incenser-or-how-nsa-and-gch… designates a cable that links Europe and Asia. None of the collection points you listed are domestic, and none of them collect comtents, only metadata. In Snowden's documents, the only contents that were collected were in regions hostile to the United States. Read https://www.dni.gov/files/documents/Minimization%20Procedures%20used%2… for an executive summary of NSA data collection, which all of Snowden's documents agree with, once you understand what they say.

Here are some excerpts from the WSJ paywalled article: Cellphones are programmed to connect automatically to the strongest cell tower signal. The device being used by the U.S. Marshals Service identifies itself as having the closest, strongest signal, even though it doesn’t, and forces all the phones that can detect its signal to send in their unique registration information. Even having encryption on one’s phone, such as Apple Co. ’s iPhone 6 now includes, doesn’t prevent this process... The program cuts out phone companies as an intermediary in searching for suspects. Rather than asking a company for cell-tower information to help locate a suspect, which law enforcement has criticized as slow and inaccurate, the government can now get that information itself. People familiar with the program say they do get court orders to search for phones, but it isn’t clear if those orders describe the methods used because the orders are sealed. Also unknown are the steps taken to ensure data collected on innocent people isn’t kept for future examination by investigators. A federal appeals court ruled earlier this year that over-collection of data by investigators, and stockpiling of such data, was a violation of the Constitution. This isn't exactly new. Harris' Stingray price list has AIRBRN-KIT-CONUS for sale for $9,000, dating back to 2008: https://info.publicintelligence.net/Harris-SurveillancePriceList.pdf Here's a 2013 post on the so-called…

Yeah, but chancellor Merkel must be really pissed off with all the latest shenanigans [1] by her friends across the pond... And everybody else must be really pissed off with the latest documents. Here's the punch line: > Intercepting communications overseas has clear advantages for the NSA, with looser restrictions and less oversight. NSA documents about the effort refer directly to “full take,” “bulk access” and “high volume” operations on Yahoo and Google networks. Such large-scale collection of Internet content would be illegal in the United States, but the operations take place overseas, where the NSA is allowed to presume that anyone using a foreign data link is a foreigner. [1] http://electrospaces.blogspot.nl/2013/10/how-nsa-targeted-chancellor-m… [2] http://www.washingtonpost.com/world/national-security/nsa-infiltrates-…

The USGS LIDAR maps. https://www.usgs.gov/faqs/what-lidar-data-and-where-can-i-download-it ... direct links from https://prd-tnm.s3.amazonaws.com/LidarExplorer/index.html#/ then click an area and on the right click an icon to bring up a point cloud viewer... it's fiddly, but incredible. This site for its depth on a niche subject (nike missiles): http://ed-thelen.org/ and for military telecom: https://www.electrospaces.net/p/index_15.html similarly, for another niche (very old computers): http://bitsavers.org Evan Amos pictures of game consoles on wikipedia are pretty cool because of how comprehensive they are. https://commons.wikimedia.org/wiki/User:Evan-Amos nostalgia http://16colo.rs