News for hackers. Stuff that matters.

A comment on Internet traffic for Google, Facebook, Apple was briefly rerouted to Russia. Parent comment

Re:Internet traffic for Google, Facebook, Apple was briefly ... by kkarp on Wednesday December 13, 2017 @02:56AM (#15912750)
China did the same but for bigger scale in the past. The reason to do this is to store all traffic for future analysis. Now it is protected by https but there is no protocol or cryptography which couldn't be exploited in the future.

https://arstechnica.com/information-technology/2010/11/how-c...

[ Parent | on HN ]
Re:Internet traffic for Google, Facebook, Apple was briefly ... by xfs on Wednesday December 13, 2017 @04:17AM (#15913079)
Google themselves have done the same thing https://www.theregister.co.uk/2017/08/27/google_routing_blun....

But as we all know, NSA does store all traffic for future analysis. A BGP leak from China or Russia, be that as it may, almost surely has nothing to do with storing traffic.

[ Parent | on HN ]
Re:Internet traffic for Google, Facebook, Apple was briefly ... by lern_too_spel on Wednesday December 13, 2017 @11:49AM (#15915399)
> But as we all know, NSA does store all traffic for future analysis.

{{Citation needed}}

[ Parent | on HN ]
Re:Internet traffic for Google, Facebook, Apple was briefly ... by deadmetheny on Wednesday December 13, 2017 @03:02PM (#15917136)
Don't be daft. People said the same thing about the NSA sniffing traffic before Snowden, and big fucking surprise, it turned out to be true.
[ Parent | on HN ]
Re:Internet traffic for Google, Facebook, Apple was briefly ... by lern_too_spel on Wednesday December 13, 2017 @07:56PM (#15919125)
Nothing in Snowden's docs says that the NSA was collecting and storing all the traffic it could find for later analysis, which was GGP's unsupported claim.
[ Parent | on HN ]
Re:Internet traffic for Google, Facebook, Apple was briefly ... by jcoffland on Wednesday December 13, 2017 @03:00AM (#15912765)
Isn't forward secrecy helpful in protecting against exactly this kind of thing?
[ Parent | on HN ]
Re:Internet traffic for Google, Facebook, Apple was briefly ... by icebraining on Wednesday December 13, 2017 @03:04AM (#15912781)
That only protects against breaches of the long-term key, not against attacks on the cipher itself, AFAIK. So if in the future they manage to attack AES (or whatever cipher the connection was using), forward secrecy won't help.
[ Parent | on HN ]
Re:Internet traffic for Google, Facebook, Apple was briefly ... by wolf550e on Wednesday December 13, 2017 @03:46AM (#15912955)
If you use 1024 bit DH with a common group (old/misconfigured web and email servers do this) then it is suspected nation states can break the DH, get the shared symmetric key and decrypt all traffic.

For ECDHE over P-256, they would need to wait for a big quantum computer (which will break all recorded traffic that used a non-quantum resistant key exchange, which is all current traffic).

[ Parent | on HN ]
Re:Internet traffic for Google, Facebook, Apple was briefly ... by pixl97 on Wednesday December 13, 2017 @08:57AM (#15914198)
Are you sure your apps fail to connect if they don't negotiate forward secrecy?
[ Parent | on HN ]