{"id":12936,"date":"2015-06-27T13:08:26","date_gmt":"2015-06-27T17:08:26","guid":{"rendered":"http:\/\/streamingradioguide.com\/startingover\/?p=12936"},"modified":"2015-06-27T13:08:26","modified_gmt":"2015-06-27T17:08:26","slug":"more-fruit-from-the-snowden-tree","status":"publish","type":"post","link":"https:\/\/streamingradioguide.com\/startingover\/?p=12936","title":{"rendered":"More fruit from the Snowden tree"},"content":{"rendered":"

CISCO warns of back door built into equipment<\/a><\/p>\n

CISCO makes much of the equipment that runs and secures the Internet. Snowden’s leaks already disclosed that the NSA has complete access to CISCO gear, including the ability to install software modifications.<\/p>\n

Now we know how for at least some devices. A little boring technical stuff. SSH is the main tool used to connect remotely to devices on the Internet. There are several ways to prove to the remote device that it should let you in. The simple method is sending a userid and password. For many situations, that is impractical. For example, I frequently connect the test machine to the production machine in Texas. If I was using passwords, I would have to constantly type the password (risking someone watching my keyboard) or “hard code” the password somewhere.<\/p>\n

A better alternative is a public\/private key exchange. Both computers have a secret private key and a public key. You can’t derive my private key if I give you my public key. But if you take my public key and combine it with your private key, the resulting key establishes beyond any reasonable doubt that both ends know who the other end is. Someone recording the exchange of keys still cannot derive a private key or be able to masquerade as a real device.<\/p>\n

What CISCO just admitted is every device in their advisory has a hard coded key for its support responsibilities. This allows anyone with knowledge of that private SSH key for CISCO support to connect to the device as an authenticated user. All if takes is for CISCO to provide that key to government agencies, or a hacker or ex-employee to find and leak the private key, and every internet connected CISCO device affected is vulnerable to complete remote control by unknown remote persons.<\/p>\n

If Snowden doesn’t get a Nobel Peace Prize, the award has no meaning<\/p>\n","protected":false},"excerpt":{"rendered":"

CISCO warns of back door built into equipment CISCO makes much of the equipment that runs and secures the Internet. Snowden’s leaks already disclosed that the NSA has complete access to CISCO gear, including the ability to install software modifications. … Continue reading →<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[108,167,135,172],"tags":[],"class_list":["post-12936","post","type-post","status-publish","format-standard","hentry","category-collapse-of-america","category-fascism-comes-to-america","category-internet-insecurity","category-police-state-america-collapse-of-america"],"_links":{"self":[{"href":"https:\/\/streamingradioguide.com\/startingover\/index.php?rest_route=\/wp\/v2\/posts\/12936","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/streamingradioguide.com\/startingover\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/streamingradioguide.com\/startingover\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/streamingradioguide.com\/startingover\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/streamingradioguide.com\/startingover\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=12936"}],"version-history":[{"count":3,"href":"https:\/\/streamingradioguide.com\/startingover\/index.php?rest_route=\/wp\/v2\/posts\/12936\/revisions"}],"predecessor-version":[{"id":12939,"href":"https:\/\/streamingradioguide.com\/startingover\/index.php?rest_route=\/wp\/v2\/posts\/12936\/revisions\/12939"}],"wp:attachment":[{"href":"https:\/\/streamingradioguide.com\/startingover\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=12936"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/streamingradioguide.com\/startingover\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=12936"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/streamingradioguide.com\/startingover\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=12936"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}