Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > alt.computer.security > #6296

Re: Another Pseudo Secure Encryption Bites The Dust - Thank Goodness

Cross-posted to 2 groups.

Show all headers | View raw

On 02 Mar 2023, rat <rat@dc.nest> posted some
news:5d96169f39a348427c931bbab9c44401@dizum.com: 

> On 02 Mar 2023, Grant Taylor <gtaylor@tnetconsulting.net> posted some 
> news:ttr4m9$oro$1@tncsrv09.home.tnetconsulting.net:
> 
>> On 3/2/23 1:24 PM, The Stuff of Legend wrote:
>>> Gentlemen, this is fairly old news. The EncroChat servers were
>>> breached by the French authorities as early as 2019, using a
>>> technique similar to that used to gain access to the BlackBerry
>>> network a couple of years earlier.
>> 
>> Nothing about what you shared indicated that authorities /broke/ or 
>> /cracked/ the encryption used.
>> 
>> Getting inside the network another way is completely independent of
>> the encryption used.
>> 
>> xkcd 538 -- Security -- comes to mind
>>   - https://xkcd.com/538/
> 
> All it takes is a tech inside a DC cage with a USB drive.  Plug it in,
> the OS does the rest when it reads the drive file system.  Takes less
> than a minute to compromise a system.  Pull the drive on the way out
> and nobody is the wiser.
> 
> A COLO looks impressive on the outside and even more internally.  But 
> techs are badged to work in them to save time getting in and out. 
> There are blind spots and it is not uncommon for equipment grid / cage
> locations to be misidentified on access requests.  
> 
> Familiarity breeds contempt and opens doors.

There are cameras above some cages but many of those team members
monitoring activity have no direct view of a tech working inside a
cabinet or rack.  

They can see when a server is pulled out in front for example because that 
is where the cameras are aimed, but any access of port or USB connections 
on the back of the server are not visible.  

Back to alt.computer.security | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Re: Another Pseudo Secure Encryption Bites The Dust - Thank Goodness The Stuff of Legend <Use-Author-Supplied-Address-Header@[127.1]> - 2023-03-02 20:24 +0000
  Re: Another Pseudo Secure Encryption Bites The Dust - Thank Goodness Grant Taylor <gtaylor@tnetconsulting.net> - 2023-03-02 14:32 -0700
    Re: Another Pseudo Secure Encryption Bites The Dust - Thank Goodness rat <rat@dc.nest> - 2023-03-03 00:22 +0100
      Re: Another Pseudo Secure Encryption Bites The Dust - Thank Goodness none <anon@anonymous.com> - 2023-03-03 02:24 +0100
      Re: Another Pseudo Secure Encryption Bites The Dust - Thank Goodness Grant Taylor <gtaylor@tnetconsulting.net> - 2023-03-02 23:18 -0700
        Re: Another Pseudo Secure Encryption Bites The Dust - Thank Goodness rat <rat@dc.nest> - 2023-03-04 08:43 +0100
          Re: Another Pseudo Secure Encryption Bites The Dust - Thank Goodness Grant Taylor <gtaylor@tnetconsulting.net> - 2023-03-04 10:23 -0700

csiph-web