What Microsoft tell Law Enforcement about Win 7

[Mika]

Nonsense.

How the hell are you going to hide a backdoor in source code? Thats the most ridiculous thing I read in a while, that there would be government backdoors hidden in opensource software and no one would have spotted it?

Secondly, US export restriction concern(ed).. export. It would not affect anyone outside the US implementing encryption in linux and it didnt affect anyone outside the US unless they want to buy US technology (think microsoft products).

Last point, things have changed. Read this here:
http://en.wikipedia.org/wiki/Bernstein_v._United_States

Opensource encryption is not immune to implementation errors or less than perfect algorithms, but unless they secretly cracked all known encryption algorithms or developed quantum computers, its ludicrous to think NSA or whomever could crack a well configured dm-crypt drive.

[Hephasteus]

Originally Posted by Mika

Nonsense.

How the hell are you going to hide a backdoor in source code? Thats the most ridiculous thing I read in a while, that there would be government backdoors hidden in opensource software and no one would have spotted it?

Secondly, US export restriction concern(ed).. export. It would not affect anyone outside the US implementing encryption in linux and it didnt affect anyone outside the US unless they want to buy US technology (think microsoft products).

Last point, things have changed. Read this here:
http://en.wikipedia.org/wiki/Bernstein_v._United_States

Opensource encryption is not immune to implementation errors or less than perfect algorithms, but unless they secretly cracked all known encryption algorithms or developed quantum computers, its ludicrous to think NSA or whomever could crack a well configured dm-crypt drive.

Which is why open source is fine as long as it's kept under a few percent of installed base. But you have to realize that even security enhanced linux is written by the NSA so your system is just as secure in relaxed mode as in enforcing. Windows is never secure. EVER.

http://www.heise.de/tp/r4/artikel/5/5263/1.html

They mostly rely on using cell phones though to collect information. They are able to turn cell phones into bugging devices without even showing them as being on. And yes I used to have a cell phone that ran perfectly for about a year. I would have to charge it about every 4 days because I don't talk on phone much. Then it would randomly start draining every day. I started researching it and figured someone was eavesdropping. I then went to cancel my account with verizon and got a big song and dance number then verizon started sending me bill for account after it was closed then started adding on more and more to the bill as I FORCEFULLY TOLD THEM they were full of crap and to step off.

The problem is the "authorities" and "law enforcement" are the most corrupt individuals on the planet but people are fooled because they appear to put alot of effort into enforcing the laws. They don't enforce them with themselves. They simply try to limit small time competition to maintain their monopoly on corruption. So by appearing to be law abiding to many people they get to maintain the same crappy system that has been in place for the last century.

[Mika]

Originally Posted by Hephasteus

Which is why open source is fine as long as it's kept under a few percent of installed base. But you have to realize that even security enhanced linux is written by the NSA so your system is just as secure in relaxed mode as in enforcing.

Nonsense. It doesnt matter who wrote it, if its the NSA, KGB, Bin Laden or little green Marsmen. When will you realize Linux is distributed as source code? The source code is there for everyone to look at, and definitely for something like a kernel, it is being looked at constantly. Every day, probably by thousands of people who look, learn, tweak, modify, submit patches, review patches, test patches, compile, package and distribute this stuff. There is nothing secret in there. There cant be. SEL does exactly what it advertises it does, and if you dont believe that, go read the code and check yourself.

Windows is never secure. EVER.

No OS is completely secure. On every machine, if you gain physical access, there are ways to rootkit the machine. Whether its linux, windows, BSD or NonStop.

Its possible there are government backdoors in windows to make things easier, without the source code its impossible to tell for sure, but all this NSA key conspiracy stuff doesnt change anything. If the NSA would ask MS help to hack a PC, they wouldnt say no. All they need to do is send an MS signed update that contains a rootkit to a specific machine, and voila. If the NSA has its own keys, which may well be the case, the only difference is they can do it without asking microsoft. Big Deal.

They mostly rely on using cell phones though to collect information. They are able to turn cell phones into bugging devices without even showing them as being on.

If you feel paranoid, buy an Android phone (Paranoid android ) and install http://www.cyanogenmod.com/ firmware so you are sure there are no closed source vendor customizations and additions. But even with such a completely FOSS phone, if you lose sight of it for a few minutes, the "NSA" could have installed a rootkit.

Regardless, if indeed your phone was hacked that way, it seems unlikely it was the government doing complicated spying stuff, and much much more likely its someone you know personally. Probably know very well who installed a spying app on your phone. You can buy these under the counter in most cell phone shops, and they indeed pretty much do what you describe.

[Hephasteus]

Originally Posted by Mika

Nonsense. It doesnt matter who wrote it, if its the NSA, KGB, Bin Laden or little green Marsmen. When will you realize Linux is distributed as source code? The source code is there for everyone to look at, and definitely for something like a kernel, it is being looked at constantly. Every day, probably by thousands of people who look, learn, tweak, modify, submit patches, review patches, test patches, compile, package and distribute this stuff. There is nothing secret in there. There cant be. SEL does exactly what it advertises it does, and if you dont believe that, go ahead the code and check yourself.

The kernel code is over 6 million lines and growing. There are 1000 of eyes on it constantly which makes it hard for it to get messed with. But the people who work on it work for IBM, intel, etc etc. Which quite simply means it's constantly being undermined in some form or another. This is not paranoia or delusion it's simply the way humanity works from group perspectives and how personal and societal power functions. We are not seeking oneness we are seeking dominant monopolies with the power to undermine, negate, screwover and bend those outside the monopoly structure to the will of the monopoly. It works in ANY group, ANY company, ANY country. These forces are always present always operating. What looks like attempts to co-create with the open source community are more often than not simply lip service to allow things to happen and gain the constructive assistance of individuals who will NOT conform from within the group and then hijack their efforts and use them for the monopoly.
Having the source is awesome but it still doesn't negate the fact that it's all simply too big and too complex to "check" for yourself.
Humanity is simply unable to evolve relationships that are nothing more than various forms of gang violence. Once a gang achieves sufficient security they spend all their effort trying to screw over anything that threatens that security.
I read a story on here about NEC making 3 million usb 3.0 ports and I LAUGH at the rediculousness of it. Sales reports have simply become gang violence inventory reports. I'm really happy that the computer butthole gangs are providing for their butthole gang members. I'm dying to see how many of this and that is sold to build cloud computers and server farms and stupid crap that serves nobody but shepards. And don't believe in the good shepard. It's a trap to fool the sheep. You're going to get eaten. Period.
http://www.poptech.org/popcasts/juan...__poptech_2006

[Mika]

Originally Posted by Hephasteus

The kernel code is over 6 million lines and growing.

Thats not important, its how it grows. People write code and patches, and those get published, reviewed, tested and then accepted or rejected in the tree. You cant just sneak secret code in there. Even if you bribed Linus Torvalds who currently still maintains the kernel tree afaik, chances that a secret backdoor would sneak in there and no one else would notice are about zero.

Few people may look at all the source, but every change is being looked at and most parts of kernel are constantly being looked at, improved or modified. Besides, 6 million lines is not nothing, but there are more than 3000 kernel developers and probably 10x or 100x more hobbyist developers looking at or working on their own code without submitting official patches. Even if you look at the contributing developers only, its just 2.000 lines per developer on average. Thats nothing. Especially since the vast majority of those 6 million lines are device drivers.

I read a story on here about NEC making 3 million usb 3.0 ports and I LAUGH at the rediculousness of it. Sales reports have simply become gang violence inventory reports. I'm really happy that the computer butthole gangs are providing for their butthole gang members. I'm dying to see how many of this and that is sold to build cloud computers and server farms and stupid crap that serves nobody but shepards. And don't believe in the good shepard. It's a trap to fool the sheep. You're going to get eaten. Period.
http://www.poptech.org/popcasts/juan...__poptech_2006

What does any of this have to do with anything? Whats funny about nec shipping usb controllers??

[Hephasteus]

You'll just have to watch the video and come to understanding.

Yes linux is extremely hard to compromise any open source is which is why open source has been fought so hard.
Here's a funny story about gang cooperation.
http://torrentfreak.com/bittorrent-a...to-dump-linux/