News for hackers. Stuff that matters.
Re:NSA infiltrates links to Yahoo, Google data centers world... by ori_b on Wednesday October 30, 2013 @01:55PM (#6641939)
> Google was letting information flow between its data center completely unencrypted until last month. http://www.washingtonpost.com/business/technology/google-enc.... Last month!

Over their own private WAN. The analogy would be sending things in the clear over your LAN. [Citation: http://www.eecs.berkeley.edu/~rcs/research/google-onrc-slide...]

Re:NSA infiltrates links to Yahoo, Google data centers world... by mapgrep on Wednesday October 30, 2013 @02:04PM (#6642000)
The likelihood miles and miles of cabling, much of it presumably leased, will be compromised is nowhere near comparable to the likelihood a normal, single-location office/home ethernet LAN will be compromised. (And if you think both are easily compromised, that only adds to my original point.)
Re:NSA infiltrates links to Yahoo, Google data centers world... by DannyBee on Wednesday October 30, 2013 @03:18PM (#6642583)
Re:NSA infiltrates links to Yahoo, Google data centers world... by outworlder on Wednesday October 30, 2013 @03:24PM (#6642636)
Fiber optic links are not so easily compromised. Not without service interruption, which will raise quite a few eyebrows.
Re:NSA infiltrates links to Yahoo, Google data centers world... by ck2 on Wednesday October 30, 2013 @03:35PM (#6642741)
The US has submarines which are entirely designed to splice fiber optics without interruption.

They literally bring part of the cable into the sub and work on it from there.

Re:NSA infiltrates links to Yahoo, Google data centers world... by chubot on Wednesday October 30, 2013 @05:01PM (#6643356)
Citation for that? Seems plausible but I'm interested in any details.
Re:NSA infiltrates links to Yahoo, Google data centers world... by jellicle on Wednesday October 30, 2013 @05:37PM (#6643596)
http://cryptome.org/eyeball/mmp/jimmy-carter.htm

Apparently the procedure is to position the USS Jimmy Carter over the cable, send out a remote vehicle to grab the cable and pull it up to the sub, splice in tapping equipment, and then drop the cable.

Intercontinental cables are less than one inch in diameter in deep water. If the sub plants the tap in deep water, it's extremely unlikely that anyone would ever discover it. There are a few cable repair ships that pull broken cables to the surface and fix them, but other than that... No one can reach it and no one will bother it.

The most interesting thing is actually getting the data back to the U.S. Do they run a separate cable alongside the existing cable? Getting SMALL bits of data back to the U.S. is easy, can just broadcast it. But LARGE amounts of data? Tricky.

Re:NSA infiltrates links to Yahoo, Google data centers world... by jlgreco on Wednesday October 30, 2013 @05:45PM (#6643635)
> There are a few cable repair ships that pull broken cables to the surface and fix them, but other than that... No one can reach it and no one will bother it.

Even if you pull the cable up to repair it, it is unlikely that you would discover the tap. The device used in Operation Ivy Bells was designed to detach from the cable if the cable was lifted. Non-intrustive tapping might not be possible with fiber (it isn't, as far as I know), but I expect they have other mechanisms to avoid discovery. Perhaps lifting the cable would cause the cable to "snap" on either side of the tap, before the device could be lifted.

http://en.wikipedia.org/wiki/Operation_Ivy_Bells

http://www.fas.org/irp/eprint/ic2000/ivy_bells_pod.jpg

Re:NSA infiltrates links to Yahoo, Google data centers world... by Perseids on Wednesday October 30, 2013 @08:25PM (#6644519)
Why is the traffic in the fiber cables not encrypted between the endpoints? That would instantly nullify the attacks. Is AES hardware not cheap enough yet?
Re:NSA infiltrates links to Yahoo, Google data centers world... by jlgreco on Wednesday October 30, 2013 @08:59PM (#6644634)
Traditionally encryption is left to higher layers.
Re:NSA infiltrates links to Yahoo, Google data centers world... by g8oz on Wednesday October 30, 2013 @11:04PM (#6644987)
A few years ago the cable that connects Pakistan to the Internet was mysteriously cut. I wonder where the Jimmy Carter was at that time.
Re:NSA infiltrates links to Yahoo, Google data centers world... by spunky on Wednesday October 30, 2013 @03:42PM (#6642794)
Re:NSA infiltrates links to Yahoo, Google data centers world... by zachrose on Wednesday October 30, 2013 @02:14PM (#6642070)
Google doesn't actually own the underwater cables though. So isn't the analogy more like sending things through a LAN in a building that you're renting?
Re:NSA infiltrates links to Yahoo, Google data centers world... by DannyBee on Wednesday October 30, 2013 @04:55PM (#6643318)
Re:NSA infiltrates links to Yahoo, Google data centers world... by dsl on Wednesday October 30, 2013 @05:58PM (#6643713)
From the link:

> Google is buying a piece of a new transpacific fiber optic cable

Only a half dozen or so companies actually own undersea fiber. It requires a huge amount of effort to lay and maintain including hundred million dollar cable ships.

Everyone (even Google) leases, or in this case buys, capacity on shared cables.

Re:NSA infiltrates links to Yahoo, Google data centers world... by generj on Wednesday October 30, 2013 @08:37PM (#6644569)
Google has the cash to lay their own now though.

Or just buy a company which does.

I wouldn't be surprised if they do so in the future.

Re:NSA infiltrates links to Yahoo, Google data centers world... by crucifiction on Wednesday October 30, 2013 @11:30PM (#6645055)
What is the point? If they can tap the cables it seems like owning your own just causes a false sense of security.
Re:NSA infiltrates links to Yahoo, Google data centers world... by generj on Thursday October 31, 2013 @09:08AM (#6646540)
It provides better legal grounds to sue.
Re:NSA infiltrates links to Yahoo, Google data centers world... by ams6110 on Wednesday October 30, 2013 @06:29PM (#6643916)
Do not trust that your internal networks are secure. Any links carrying business or customer data should be encrypted.

I remember over a decade ago talking with the security head of a university where I was working, about a new system design. I made some comment like "well this is all on the machine room network" and his response was "I wouldn't trust the machine room network." Pretty eye-opening since he was the person responsible for its security.

Re:NSA infiltrates links to Yahoo, Google data centers world... by Moral_ on Wednesday October 30, 2013 @02:38PM (#6642270)
http://www.cs.uccs.edu/~xzhou/teaching/CS522/Projects/SIGCOM...

There's the actual paper google wrote. It's very good. OpenFlow is a terrific piece of technology.

Re:NSA infiltrates links to Yahoo, Google data centers world... by brown9-2 on Wednesday October 30, 2013 @02:46PM (#6642336)
Do they actually own and operate all of the wires between various datacenters? That sounds like a huge undertaking.
Re:NSA infiltrates links to Yahoo, Google data centers world... by mindcrime on Wednesday October 30, 2013 @03:55PM (#6642894)
I doubt they own all of the links they use worldwide, but Google did go on a buying binge a few years ago, acquiring large amounts of "dark fiber". There's some discussion about that whole topic here:

http://www.howstuffworks.com/tech-myths/5-myths-about-google...

http://news.cnet.com/Google-wants-dark-fiber/2100-1034_3-553...

http://www.lightreading.com/document.asp?doc_id=633236

Re:NSA infiltrates links to Yahoo, Google data centers world... by blablabla123 on Wednesday October 30, 2013 @04:08PM (#6642972)
Assuming that the fiber end points only touch Google data centers, this would be ok, I guess.