Windows/NSAKey

From s23
Jump to navigation Jump to search

How NSA access was built into Windows

Duncan Campbell 04.09.1999

http://www.heise.de/tp/english/inhalt/te/5263/1.html

ADVAPI.DLL works closely with Microsoft Internet Explorer, but will only run cryptographic functions that the US governments allows Microsoft to export. That information is bad enough news, from a European point of view. Now, it turns out that ADVAPI will run special programmes inserted and controlled by NSA. As yet, no-one knows what these programmes are, or what they do.

...Then he checked the latest Service Pack release for Windows NT4, [External Link] Service Pack 5. He found that Microsoft's developers had failed to remove or "strip" the debugging symbols used to test this software before they released it. Inside the code were the labels for the two keys. One was called "KEY". The other was called "NSAKEY"....

Third Key! hahaha

.."But according to two witnesses attending the conference, even Microsoft's top crypto programmers were astonished to learn that the version of ADVAPI.DLL shipping with Windows 2000 contains not two, but three keys. Brian LaMachia, head of CAPI development at Microsoft was "stunned" to learn of these discoveries, by outsiders."

http://www.wired.com/news/technology/0,1282,21577,00.html You know this story, its old, Wonder what is up-to-date info in current XP versions...ADVAPI.DLL still alive? renamed? got more advanced? nobody found it yet?

<put in up-to-date info here, visitor>

or even hoax after all? (i dont think so)