CIA bought an encryption company and used it to spy on clients and countries

https://www.businessinsider.com/cia-secretly-bought-encryption-company-crypto-ag-spy-countries-report-2020-2

by edu • 6 years ago

52 16 6 years ago

ekimekim• 6 years ago

Original Washington Post article discussed here: https://news.ycombinator.com/item?id=22297963

jokoon• 6 years ago

Is the leak coming from wikileaks? I've heard Assange will soon go to trial. I was still wondering about that "dead's man switch", although I'm not sure it will activate if he get convicted.

_-___________-_2• 6 years ago

I read about this quite a while ago, and while it's a revelation, it doesn't seem big enough to be Assange's dead man's switch. Most people are just going to shrug at this.

fit2rule2• 6 years ago

I have heard it from the crypto cognoscenti circles I know, that this is the calm before the storm and that there will be many, many more leaks to come during the actual trial period.

The idea is to point out to the world that Julian isn't the only leaker.

This terrifies the spook establishment, and they are therefore preparing for their own campaign of controlled releases, designed to dull the general publics' appetite for the subject.

I mean, this is all conjecture and hearsay, but it sure is an interesting time to be watching the show. I do believe we are seeing a cyberwar, like legitimately, underneath all the battle reports ..

cryptos2• 6 years ago

The same could happen with Threema. As much as I like and want to trust Threema, but the story could be repeated, even if I think, that it is not used by governments or military large-scale.

Essentially every closed source crypto application isn't trustworthy. Same is true for operating systems.

bangboombang2• 6 years ago

Exactly my first thought. I like Threema and one of the reasons I was an early adopter is that the founder worked on m0n0wall before, an OSS firewall that I used for a long time, in contrast to it being just some guy I never heard of. It made me accept the closed source nature. Another big factor was that I indeed consider Switzerland to be a more trustworthy/neutral party in general when it comes to global politics, but this obviously doesn't have to apply to every single individual in that country.

_-___________-_2• 6 years ago

Why use Threema when there are alternatives that are not closed-source? You had to begin to use Threema, which presumably carries the same difficulty as beginning to use something which isn't as questionable.

PeterStuer• 6 years ago

While you are not wrong, it would be naive to assume key Open Source projects are not infiltrated by the CIA.

PappaPatat• 6 years ago

I take it you name Threema just because it's Swiss like the Crypto AG or is there a specific reason to single them out?

cryptos2• 6 years ago

crypto + Switzerland just triggered the thought. Nothing else is special about my example.

jo-m2• 6 years ago

Side note: Threema is a Swiss "GmbH" corporation, meaning that all the owners and the number of their shares are public in the Swiss commercial register [0], and those have to be natural persons. So it would be slightly harder to hide ownership. Those people can still be straw men, though.

[0] https://sz.chregister.ch/cr-portal/auszug/auszug.xhtml?uid=C...

fit2rule2• 6 years ago

The free world needs to realise that no matter what systems of enormous value to the world we build, others will attempt to usurp that power for their own needs.

It happens with all technology. The reason is, all technology can be weaponised.

Some simple facts .. The institutions covered by Crypto AG's technology products, were attempting to maintain their own secrecy. They were, thus, usurped by their own technology - and the CIA merely exploited this fact.

This case with the CIA directly addresses the lynchpin in the military-industrial-surveillance states' armour - the ability to keep secrets.

From a certain perspective, one might say that .. the Vaticans .. inability to keep secrets is a blessing and a curse. This is also true of many of the other clients. Would that we had access to all the things the CIA knows, as a world people, mmm..

These groups weaponised their own technology, against themselves, by using it to keep secrets. It also happens to be the spooks' biggest weakness too: the light of truth melts any and all justification for these peoples existence, and it whither them.

Let us try a thought experiment: If the Vatican applied its vast resources to providing a "Peoples Internet" a la Starlink, instead of using its billions to hide heinous secrets, would the technology of communication have been so easily weaponised?

All secrets are weapons, because you cannot have a secret without technology - and all technology can be weaponised.

So this is a foot-bullet on the part of Crypto AG, the Vatican et al., and a big win for the CIA - because it means these institutions will now be making more commitment, alas not less - to the keeping of secrets.

jo-m2• 6 years ago

A lot of this has been known for 25 years: https://www.spiegel.de/spiegel/print/d-9088423.html

lallysingh• 6 years ago

Is this why US export encryption had to be 40 bits? To push countries to a vendor that was compromised?

CIA bought an encryption company and used it to spy on clients and countries

Related Stories