News for hackers. Stuff that matters.
Re:Technical feasibility of decrypting https by replacing th... by venomsnake on Sunday July 14, 2013 @04:33PM (#6042129)
Does NSA really have to use side channels? They could just send NSL to amazon for full memory dump and hdd clones of the virtual machine in question.

There are much easier ways to obtain data than subverting the crypto. This makes sense only for communications between secure endpoints. Like the Russian embassy sending data back home in Moscow. The security in this case comes from the fact that NSA cannot freely make intrusions without risking triggering a diplomatic incident/war - not that the Russian networks are secure in some absolute sense.

Re:Technical feasibility of decrypting https by replacing th... by rorrr2 on Sunday July 14, 2013 @08:48PM (#6042991)
> They could just send NSL to amazon for full memory dump and hdd clones of the virtual machine in question

If everything is encrypted (disk, communications) and keys aren't stored in memory / CPU cache, then that won't work.

Re:Technical feasibility of decrypting https by replacing th... by venomsnake on Monday July 15, 2013 @03:07AM (#6044130)
Unless amazon have homomorphic encryption services how exactly will you be able to do something with the vm without having the keys in memory? NSA just have to wait to fire it up.
Re:Technical feasibility of decrypting https by replacing th... by yen223 on Sunday July 14, 2013 @11:41PM (#6043567)
"If"