National Security Agency has backdoor access to all Windows software since the release of Windows 95

Man. That's actually frightening. It's like the USA and maybe Canada(haven't heard of anything yet) is slowly becoming the idea of which George Orwell envisioned in his 1984 book(Great read! Definitely check it out if you haven't!).
 

Smurf Eater

Donator Supreme!
Man. That's actually frightening. It's like the USA and maybe Canada(haven't heard of anything yet) is slowly becoming the idea of which George Orwell envisioned in his 1984 book(Great read! Definitely check it out if you haven't!).
It's like the United States is trying to rule the world and create a one world government...
 

Smurf Eater

Donator Supreme!
Imagine what you could do with all the information on the majority of computers in existence since 1995. You would know everyone's dark secrets, all their planned moves. You could bend the world to your will.
 

Smurf Eater

Donator Supreme!
old news. What the key is most likely used for, rather than to SPAI ON JOO, is this.
If you read the article, there are two drivers that had unknown functions, the other one did exactly what you posted, the CryptEncrypt function. The other ADVAPI.DLL is the NSA's backdoor to your system.
 

Gatherix

Death by Darkly
If you read the article, there are two drivers that had unknown functions, the other one did exactly what you posted, the CryptEncrypt function. The other ADVAPI.DLL is the NSA's backdoor to your system.


Assuming the slew of articles are correct, all said functions are contained in the same driver, ADVAPI.DLL

The quotes/data in the first article are quoting the second article, which according to the timestamp was from 1999. What new information is the new article presenting that's not contained in the old? I might just be missing something too.
 

dead mike

TD Member, Legend, Puncher of Faces, Chatbox King
i think cellphones f you over more then anything, i noticed going through the files (not in an obvious spot either, sneaky gypsys) my phone has logmein installed, presumably just for tech support, but u know how that goes.

email, irc, traffic its all generally unencrypted, and from what i understand, all the nsa has to do is make a trusted certificate in windows and all your shit goes through them in the clear. not to mention the gold mine that is google, facebook and the like. 1984 knock knock at your front door

in conclusion, get money, pay your tax, the government will love you.
 

Smurf Eater

Donator Supreme!
I guess you don't remember the news that broke about how there is a company that collects "anonymous" information in a background application that runs on every android phone, and most other phone operations. It turned out that it would record every keystroke, even if you were on a secure HTTPS connection, and send all the information to a server, that the FBI I believe it was, had access to.
 

dead mike

TD Member, Legend, Puncher of Faces, Chatbox King
lolsy one i read was WhatsApp messenger, as soon as you install it your whole contact list gets sent to some place in pakistan for storage
 

Gatherix

Death by Darkly
i think cellphones f you over more then anything, i noticed going through the files, my phone has logmein installed, presumably just for tech support, but u know how that goes.

email, irc, traffic its all generally unencrypted, and from what i understand, all the nsa has to do is make a trusted certificate in windows and all your shit goes through them in the clear. not to mention the gold mine that is google, facebook and the like. 1984 knock knock at your front door

in conclusion, get money, pay your tax, the government will love you.


The NSA doesn't pose as much of a threat to your privacy as a skilled hacker/skip-tracer, assuming you're a US citizen. Unless you've been hiding your assets behind an annually dissolved corporation, have no personal bank accounts, have prevented any/all info about you from entering the web, and never given out your real personal information to a non-governmental party (including your landlord), then you're privacy is gone. Keep in mind that a commercial VPN doesn't protect your virtual traffic entirely either, even if you paid anonymously; many keep extensive connection logs depending on where the company and their exit nodes/servers are located, and if those servers are in a country other than the US (which most are), the NSA can do all the snooping they want on you until they firmly conclude that you're actually a US citizen.
 

Gatherix

Death by Darkly
I guess you don't remember the news that broke about how there is a company that collects "anonymous" information in a background application that runs on every android phone, and most other phone operations. It turned out that it would record every keystroke, even if you were on a secure HTTPS connection, and send all the information to a server, that the FBI I believe it was, had access to.


It's not breaking news, not did I forget it; people's information and behaviors have been public for awhile. Sure, that particular situation may have been what riled the general populous up, but it's not new at all.

Sorry for the double-post. :whistle:
 

$alvador

TD Member
If you read the article, there are two drivers that had unknown functions, the other one did exactly what you posted, the CryptEncrypt function. The other ADVAPI.DLL is the NSA's backdoor to your system.

The article is confusing then because advapi32.dll is advapi.dll. Just like shell32.dll is shell.dll, same functionality and name but it got the 32 suffix so people knew that it was 32-bit when Windows became a mix of 16/32-bit. Now that Windows is a mix of 32/64-bit, those 32-bit libraries remained because there was no advantage to recompile them for 64-bit when the compatibility layer makes sure they work as intended.

It's like Gathertrix sed, NSA is no match for a hacker and/or skip-tracer. I remember when I was working collections for a U.S. company we only had limited LexisNexis access and I still wound up following some crazy trails. I located one dude who had moved to Japan, not told any of his creditors about it, and had no plans to return to the U.S. Then there was this guy who lived in a suburb of NYC for years before disappearing almost completely. His new "address" was a hand-drawn map with a description of the trailer he lived in on a native reserve in Oklahoma. Just goes to show you, even if you have no fixed address, no bank account, no cell phone, and your name is John A. Smith, if you use your SSN for anything you will be found.
 

$alvador

TD Member
No, it's just the same stuff rehashed and with some text bolded. It still doesn't explain how an encryption key that's not even tied to authenticating users (on a single-user OS, no less) would come anywhere near constituting a backdoor of any kind. At best, it could come in handy encrypting data for exfiltration but there's no connection to imply it would make infiltrating a system any easier.

Funny thing is in all this Snowden news it came out that the NSA was buying knowledge of 0-day exploits from MS and other tech companies before they released patches. In many cases, exploits simply go unpatched because it would take too much time and effort (read:cash money) to be worth patching when only a few people in the world would be privy to the nature of the exploit anyway.

The biggest irony of the situation is that if the NSA really did have a backdoor into everyone's box they've sure been using a lot more restraint than random kids from CCCP who have no qualms about getting malware onto every. fucking. device you own.
 

OG buckshot jr

TD Admin
I guess you don't remember the news that broke about how there is a company that collects "anonymous" information in a background application that runs on every android phone, and most other phone operations. It turned out that it would record every keystroke, even if you were on a secure HTTPS connection, and send all the information to a server, that the FBI I believe it was, had access to.
This was HTC, not all Android phones. Also, it was never proven that it was recording anything, rather that it contained the possibility of doing so.

You're paranoid, man.
 
Top