Become a fan of Slashdot on Facebook

 



Forgot your password?
typodupeerror
×

Submission + - What Does The NSA Think Of Cryptographers? (i-programmer.info)

mikejuk writes: A recently declassified NSA house magazine, CryptoLog, reveals some interesting attitudes between the redactions. What is the NSA take on cryptography?
The article of interest is a report of a trip to the 1992 EuroCrypt conference by an NSA cryptographer whose name is redacted.We all get a little bored having to sit though presentations that are off topic, boring or even down right silly but we generally don't write our opinions down. In this case the criticisms are cutting and they reveal a lot about the attitude of the NSA cryptographers. You need to keep in mind as you read that this is intended for the NSA crypto community and as such the writer would have felt at home with what was being written.
Take for example:
Three of the last four sessions were of no value whatever, and indeed there was almost nothing at Eurocrypt to interest us (this is good news!). The scholarship was actually extremely good; it’s just that the directions which external cryptologic researchers have taken are remarkably far from our own lines of interest.
It seems that back in 1992 academic cryptographers were working on things that the NSA didn't consider of any importance. Could things be the same now?
The gulf between the two camps couldn't be better expressed than:
The conference again offered an interesting view into the thought processes of the world’s leading “cryptologists.” It is indeed remarkable how far the Agency has strayed from the True Path.
The ironic comment is clearly suggesting that the NSA is on the "true path" whatever that might be.
Clearly the gap between the NSA and the academic crypto community is probably as wide today with the different approaches to the problem being driven by what each wants to achieve. It is worth reading the rest of the article.

Comment Moving is always an option (Score 1) 405

"When I ask my other tech friends what they would do, they simply suggest changing ISPs. Nobody likes Comcast, but I don't have a choice here. I'm two years into a three-year contract. So, moving is not an option"

Moving is always an option. But you have to eat the cost of one year of Comcast. Sorry, but that's your solution.

Comment Re:Sounds like what Sun did (Score 1) 525

You seem to think that realeasing something as Open Source magically causes it to run well on all platforms. It takes work to port the code to different platforms and a commitment to mainaining and reression testing the stack on all those platforms. You need to provide motive to do all that, which is never going to happen. The people who are qualified to develop on and for Linux won't touch it with a ten foot pole.

Comment Re:LMFAO (Score 1) 139

Because of inherent drift, inertial navigation is inherently suited only to fast vehicles that get to where they're going in just a few minutes or hours, e.g., planes and missiles. Cargo ships do not qualify. It is best combined with GPS to "flywheel" through outages (e.g., vehicles in tunnels) and so it can be automatically recalibrated whenever GPS is available.

Besides LORAN-C, there used to be another low frequency radio navigation system even better suited for global shipping: Omega. It operated on even lower frequencies, in the 10-14 kHz (yes, kHz) range, and had worldwide reach unlike LORAN-C which was only regional. It was shut down in 1997.

Comment good to have backups (Score 1) 139

I certainly wouldn't bet that GPS satellites couldn't be destroyed, but most anti-sat weapons demonstrated so far work only on low altitude orbits. The US systems consist essentially of lobbing a small suborbital missile up in the path of the target satellite. Destroying a GPS satellite in a 20,000 km orbit takes a much bigger launch vehicle and considerably more time, and would be much harder to conceal from US space sensors.

Jamming and spoofing are the much bigger threats.

Comment are you sure? (Score 3, Informative) 139

LORAN-C would probably be rather resistant to EMP. Like just about everything military, the transmitting equipment would be designed to be EMP-resistant, and receiving equipment on vehicles would not be particularly susceptible. It's stuff with long cables that picks up EMP. LORAN-C is certainly much more jam-resistant than GPS. The transmitter power levels are/were enormously higher, some in the megawatt range, to overcome natural background noise and antenna inefficiency. Even the large towers used are only a small fraction of a wavelength (3 km). Also, LORAN-C operates by groundwave propagation (that's why the frequency is so low) so it's not very sensitive to solar activity.

Comment Re:Meanwhile, in the U.S. (Score 1) 139

Actually, the US military has a very simple way of selectively shutting down GPS: they locally jam the L1 frequency. The satellites also transmit on a second frequency, L2, with an encrypted, high precision "P(Y)" code for which the keys are closely controlled. They have receivers that can work with just the P(Y)-code, so it doesn't matter to them if L1 is jammed.

Comment Re:For all the idiots (Score 2) 87

No. I think I understnd how to interpret a commit log. If the commit was from a trusted source, ignore it. You have just narrowed down your search by at least 2 orders of magnitude. If you have a suspected commiter, scrutinize them. Commit logs go a very long way to taking your OMFG How will anyone analyze every change! to a pleasant rejoicing song of: Hey, it turns out we only have to review a very small subset!

Comment Re:For all the idiots (Score 1) 87

"But with Linux most contributors, be they individuals or companies, are primarily concerned with their own projects."

Your definition of contributor is skewed. A FOSS contributor may do so in many ways. Clearly a project lead for a major project isn't going to contribute further by analyzing the ecosystem; their plate is full. There are others, also known as contributors, who do this. Other contributors administer project websites or write documentation. There is a whole wide array of types of contributors.

That being said, clearly there are more developers than people doing security audits, and it would be nice to see more contribtors in all the other categories, actually.

Slashdot Top Deals

After Goliath's defeat, giants ceased to command respect. - Freeman Dyson

Working...