Another Snowden leak :lol:
Basically the NSA paid RSA 10 million to use a type of cryptography that was insecure and they could break 
More info from an article in 2007 https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html
Pretty damn wild, though not surprising. I can only imagine what has not been uncovered at this point.
Some more fun:
Here’s how they hack your iPhone:
“DROPOUT JEEP is a software implant for the Apple iPhone that utilizes modular mission applications to provide specific SIGINT functionality. This functionality includes the ability to remotely push/pull files from the device. SMS retrieval, contact list retrieval, voicemail, geolocation, hot mic, camera capture, cell tower location, etc. Command, control and data exfiltration can occur over SMS messaging or a GPRS data connection. All communications with the implant will be covert and encrypted.”
This thread title reminds me of a bad Craigslist personal ad lol
I guess I shouldnt be, but I’m surprised by RSA. Being an industry standard security firm and putting your rep on the line like that?
I can see it but for $10 million? Is that all national security is worth today, in the age of TRILLIONS?
Well this was years ago
I’m sure as a large corp its hard hide some insane amount of money 10 million isn’t that much…
Also the way in which this happened it was easy to place blame and act innocent.
RSA may very well have not known that the crypto was flawed. However, they probably should have looked into it. If NSA pays you 10 million to use something they made and make it the default choice for your customers, then you should realize that something’s fishy.
That crypto algorithm was the default in the program, but individual administrators are/were free to choose whatever crypto they wanted. It being default, though, probably leads to the majority of RSA’s customers using it.
It’s been making me consider taking additional math classes when I go back to college
crypto is fascinating topic… I have a hard time following it though, since it’s a very dry topic. With this NSA stuff going around, and with encryption being used more and more to protect data, it’s becoming an increasingly useful knowledge area.