Unsealed court docs reveal fight against gag orders by tech companies

On Friday, court documents were unsealed that reveal a push against gag orders by Microsoft, Facebook, Google, and Yahoo, with the argument behind it being violation of the First Amendment. … Continue reading

Kim Dotcom points out Cisco “backdoor” for law enforcement

It would appear that Kim Dotcom does not trust United States-made electronics. He suggests this week that the world should “never trust US tech”, using #NSA to point out a … Continue reading

NSA details Heartbleed “mitigations” in new report

Amidst the Heartbleed bug hoopla this month was a claim the NSA knew about and actively exploited the vulnerability, something the agency soon denied. Apparently in line with that claim, … Continue reading

NSA Denies Knowledge Of Heartbleed Vulnerability

NSA Denies Knowledge Of Heartbleed VulnerabilityThe NSA is an organization that has its fair share of detractors, where we did mention how the NSA was aware of the Heartbleed vulnerability for years at the end of last week. It seems as though the US National Security Agency (NSA) has stepped forward to deny any knowledge of the Heartbleed online security flaw since, touting that they do not know and were not aware of the flaw in OpenSSL which could be exploited to harvest data.

Just a side note here for the uninitiated – OpenSSL happens to be an online-data scrambling software that is used to protect sensitive data, with passwords being one of them. It was in 2013 that NSA leaker Edward Snowden claimed the NSA themselves introduced vulnerabilities to security software on purpose, which has led to such speculation that has since been denied by the NSA.

In fact, Robin Seggelman, a German computer programmer, has already stepped forward to accept responsibility for the Heartbleed bug’s existence, saying, “It’s tempting to assume that, after the disclosure of the spying activities of the NSA and other agencies, but in this case it was a simple programming error in a new feature, which unfortunately occurred in a security-relevant area. It was not intended at all, especially since I have previously fixed OpenSSL bugs myself, and was trying to contribute to the project.”

Well, there you have it – Heartbleed stemmed from Seggelman’s effort in making amends to the OpenSSL cryptographic library at the end of 2011.

NSA Denies Knowledge Of Heartbleed Vulnerability , original content from Ubergizmo, Filed in Computers, heartbleed, ,

NYT: Obama Lets the NSA Exploit Some Internet Flaws

NYT: Obama Lets the NSA Exploit Some Internet Flaws

Over the weekend, it was revealed that President Obama thinks that when the National Security Agency discovers major flaws in Internet security, they should be allowed to exploit it if there’s a "a clear national security or law enforcement need."

Read more…




Obama: NSA to expose not exploit bugs like Heartbleed

Potentially catastrophic internet security exploits like Heartbleed should be publicized rather than covertly used for surveillance, President Obama has reportedly told the NSA and other intelligence divisions, although exceptions to … Continue reading

NSA Apparently Knew About Heartbleed Vulnerability For Years [Report]

NSA Apparently Knew About Heartbleed Vulnerability For Years [Report]The Heartbleed bug has making a lot of waves recently and for those unfamiliar, it’s a vulnerability with the OpenSSL technology that could have potentially affected at least two-thirds of the internet, since many web services and online companies take advantage of the technology and implement it on their websites.

Now this vulnerability has been around for years but it was only recently that it was discovered, or was it? According to Bloomberg, they cite “two people familiar with the matter” who claims that this is actually an issue that the NSA has discovered and has exploited the flaw for years. They claim that the NSA has since been using this flaw to gather critical intelligence and have been doing so on a regular basis. (more…)

  • Follow: Web, heartbleed, , ,
  • NSA Apparently Knew About Heartbleed Vulnerability For Years [Report] original content from Ubergizmo.

    NSA denies Heartbleed knowledge and exploitation

    The NSA has denied knowledge of the Heartbleed bug, following allegations that not only did the security agency discover the exploit two years ago, but that it opted to keep … Continue reading

    Here’s how much of your Facebook life the government wants

    The second wave of Facebook’s sharing of Government Request data comes this week in short form. Facebook is one of a collection of groups to have begun showing off what … Continue reading

    NSA exploited Heartbleed for two years claim insiders [Updated]

    The NSA has not only known about the Heartbleed bug for at least two years, but exploited it in regular surveillance attacks, insider sources have alleged, opting to keep the … Continue reading