Hacker Newsnew | past | comments | ask | show | jobs | submitlogin



This is not that concept. That concept is no one but us can technically complete the exploit. Technical feasibility in that you need a supercomputer to do it, not protecting a backdoor with the normal cia triad


That doesn't seem correct:

    If they determine the vulnerability is only exploitable by the NSA for reasons
    such as computational resources, budget, or skill set, they label it as NOBUS
    and will not move to patch it, but rather leave it open to exploit against current
    or future targets.
If (!) the NSA regards ssh keys as secure, then from that article it sounds like the NOBUS thing would fit.


Is it legal and possible for the NSA to socially attack someone with mental health issues this way?

I'd like to rule-out some state actors by the mere heartbreaking act of socially engineering and targeting a person in pain.

Not even considering the original maintainer may be a US citizen (idk).


You do realize that plenty of state actors have no qualms with physically torturing and killing people in the most gruesome ways possible, right? Online bullying is peanuts in that context.


That would only fit "If (!) the NSA regards ssh keys as secure >for everyone but them<


Not sure why? My thinking in this hypothetical scenario is that the NSA would have the private key, which is why it would be a NOBUS thing.

If they didn't have the key though, then yeah it doesn't fit. Unless they can walk through ssh key security anyway. :)




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: