imported>mutante mNo edit summary |
imported>mutante mNo edit summary |
||
| (One intermediate revision by the same user not shown) | |||
| Line 1: | Line 1: | ||
How NSA access was built into Windows |
How [[NSA]] access was built into [[Windows]] |
||
Duncan Campbell 04.09.1999 |
Duncan Campbell 04.09.1999 |
||
| Line 5: | Line 5: | ||
http://www.heise.de/tp/english/inhalt/te/5263/1.html |
http://www.heise.de/tp/english/inhalt/te/5263/1.html |
||
ADVAPI.DLL works closely with Microsoft Internet Explorer, but will only run |
ADVAPI.DLL works closely with [[Microsoft]] [[Internet Explorer]], but will only run [[crypto]]graphic functions that the US [[government]]s allows [[Microsoft]] to export. That information is bad enough news, from a European point of view. Now, it turns out that ADVAPI will run special programmes inserted and controlled by [[NSA]]. As yet, no-one knows what these programmes are, or what they do. |
||
...Then he checked the latest Service Pack release for Windows NT4, [External Link] Service Pack 5. He found that Microsoft's developers had failed to remove or "strip" the debugging symbols used to test this software before they released it. Inside the code were the labels for the two keys. One was called "KEY". The other was called "NSAKEY".... |
...Then he checked the latest [[Service Pack]] release for Windows NT4, [External Link] Service Pack 5. He found that Microsoft's developers had failed to remove or "strip" the debugging symbols used to test this software before they released it. Inside the code were the labels for the two keys. One was called "KEY". The other was called "NSAKEY".... |
||
Third Key! hahaha |
Third Key! hahaha |
||
.."But according to two witnesses attending the conference, even Microsoft's top crypto programmers were astonished to learn that the version of ADVAPI.DLL shipping with Windows 2000 contains not two, but three keys. Brian LaMachia, head of CAPI development at Microsoft was "stunned" to learn of these discoveries, by outsiders." |
.."But according to two witnesses attending the conference, even Microsoft's top [[crypto]] programmers were astonished to learn that the version of ADVAPI.DLL shipping with Windows 2000 contains not two, but three keys. Brian LaMachia, head of [[CAPI]] development at Microsoft was "stunned" to learn of these discoveries, by outsiders." |
||
http://www.wired.com/news/technology/0,1282,21577,00.html |
http://www.wired.com/news/technology/0,1282,21577,00.html |
||
| Line 20: | Line 20: | ||
<put in up-to-date info here, visitor> |
<put in up-to-date info here, visitor> |
||
or even hoax after all? (i dont think so) |
or even [[hoax]] after all? (i dont think so) |
||
Latest revision as of 20:45, 2 March 2005
How NSA access was built into Windows
Duncan Campbell 04.09.1999
http://www.heise.de/tp/english/inhalt/te/5263/1.html
ADVAPI.DLL works closely with Microsoft Internet Explorer, but will only run cryptographic functions that the US governments allows Microsoft to export. That information is bad enough news, from a European point of view. Now, it turns out that ADVAPI will run special programmes inserted and controlled by NSA. As yet, no-one knows what these programmes are, or what they do.
...Then he checked the latest Service Pack release for Windows NT4, [External Link] Service Pack 5. He found that Microsoft's developers had failed to remove or "strip" the debugging symbols used to test this software before they released it. Inside the code were the labels for the two keys. One was called "KEY". The other was called "NSAKEY"....
Third Key! hahaha
.."But according to two witnesses attending the conference, even Microsoft's top crypto programmers were astonished to learn that the version of ADVAPI.DLL shipping with Windows 2000 contains not two, but three keys. Brian LaMachia, head of CAPI development at Microsoft was "stunned" to learn of these discoveries, by outsiders."
http://www.wired.com/news/technology/0,1282,21577,00.html You know this story, its old, Wonder what is up-to-date info in current XP versions...ADVAPI.DLL still alive? renamed? got more advanced? nobody found it yet?
<put in up-to-date info here, visitor>
or even hoax after all? (i dont think so)