News for hackers. Stuff that matters.
Re:RSA chief believed cryptographers’ warnings on Dual EC DR... by elmo2you on Friday September 03, 2021 @11:42AM (#28405652)
Since when can they not refuse a NSA backdoor? Where does the mandate come from, with which the NSA supposedly can instruct commercial/private entities to integrate technological back doors? Does it even have such a legal mandate. I'm sure the NSA will argue that they do, but that doesn't mean they actually have it.
Re:RSA chief believed cryptographers’ warnings on Dual EC DR... by trasz on Friday September 03, 2021 @11:56AM (#28405851)
Some of the ways are already known: your company can be denied lucrative government contracts if you deny. Or you might learn you can't export your products due to export restrictions. Other ways are known to exist, but details are not available yet - go read about National Security Letters, or kangaroo "secret courts".
Re:RSA chief believed cryptographers’ warnings on Dual EC DR... by HappySweeney on Friday September 03, 2021 @12:34PM (#28406373)
Not that I don't agree, but how do you know the secret courts are kangaroo?
Re:RSA chief believed cryptographers’ warnings on Dual EC DR... by kook_throwaway on Friday September 03, 2021 @12:37PM (#28406407)
The fact that it's secret.

Also that you aren't even allowed to show up to defend yourself. [1]

Also that they denied 11 out of 34,000 requests over a 35 year period.

Also that the judges are appointed by one person and don't even need congressional approval.

How could it possibly not be a kangaroo court?

[1] https://en.m.wikipedia.org/wiki/Ex_parte

Re:RSA chief believed cryptographers’ warnings on Dual EC DR... by Spooky23 on Friday September 03, 2021 @01:10PM (#28406794)
Courts that aren’t adversarial are just interpreting law. Secrecy makes it worse by eliminating accountability by the petitioner and judge.

For a non-secret example, look at the Social Security “fair hearings”, where an administrative law judge basically listens to a petition and makes a decision. The standards vary significantly by locale.

Re:RSA chief believed cryptographers’ warnings on Dual EC DR... by bdamm on Friday September 03, 2021 @02:44PM (#28407821)
Government buyers that are less important (e.g. state level tollways) would be mandated to buy the backdoored algorithm by having the federal government cook it into a specification of how to buy tollway equipment, for example. Once the backdoored algorithm is in the product suite, it can be put to work on a more tactical level.