NYT: NSA Put 100,000 Radio Pathway "Backdoors" In PCs 324
retroworks writes "The New York Times has an interesting story on how NSA put transmitters into the USB input devices of PCs, allowing computers unplugged from the Internet to still be monitored, via radio, from up to 8 miles away. The article mainly reports NSA's use of the technology to monitor Chinese military, and minor headline reads 'No Domestic Use Seen.' The source of the data was evidently the leak from Edward J. Snowden."
Re:Where are they? (Score:5, Informative)
According to TFA, a tiny transceiver can be built into the plastic plug base of a USB cord. Of course, one has not been spotted in the wild, but it sounds theoretically possible.
Re:Skeptical about the 8 miles (Score:5, Informative)
So, while inside a case it might not go 20 miles to cover a whole city, I could see being able to reach 8 miles, depending on how intelligently the system was designed in order to reduce the chances of being discovered. The other downside is that strong radio transmissions can interfere with things including speakers, which might make them obvious if not handled correctly.
Reading comprehension (Score:5, Informative)
of 100k devices in the field isn't supported by the article.
They infected 100k machines with software, most of them remotely.
(In that case, I consider the claimed number to be rather low even.)
It's right there in the first two paragraphs of TFA:
The National Security Agency has implanted software in nearly 100,000 computers around the world that allows the United States to conduct surveillance on those machines and can also create a digital highway for launching cyberattacks.
While most of the software is inserted by gaining access to computer networks, the N.S.A. has increasingly made use of a secret technology that enables it to enter and alter data in computers even if they are not connected to the Internet
Re:Where are they? (Score:5, Informative)
http://www.dailytech.com/Tax+and+Spy+How+the+NSA+Can+Hack+Any+American+Stores+Data+15+Years/article34010.htm [dailytech.com] (scroll down for the slide)
What it sends out to?
The usual new spy "rocks" or some other "network"
http://rt.com/usa/spy-rocks-lockheed-usa-771/ [rt.com]
http://www.theguardian.com/world/2012/jan/19/fake-rock-plot-spy-russians [theguardian.com]
Re:Where are they? (Score:5, Informative)
http://www.spiegel.de/international/world/catalog-reveals-nsa-has-back-doors-for-numerous-devices-a-940994.html [spiegel.de]
Some pictures:
Cottonmouth-I, USB spying device
http://www.spiegel.de/static/happ/netzwelt/2014/na/v1/pub/img/USB/S3223_COTTONMOUTH-I.jpg [spiegel.de]
Cottonmouth-II, USB spying device
http://www.spiegel.de/static/happ/netzwelt/2014/na/v1/pub/img/USB/S3223_COTTONMOUTH-II.jpg [spiegel.de]
Cottonmouth-III, USB spying device
http://www.spiegel.de/static/happ/netzwelt/2014/na/v1/pub/img/USB/S3223_COTTONMOUTH-III.jpg [spiegel.de]
Firewalk, ethernet spying device
http://www.spiegel.de/static/happ/netzwelt/2014/na/v1/pub/img/USB/S3223_FIREWALK.jpg [spiegel.de]
Ragemaster, monitor cable spying device
http://www.spiegel.de/static/happ/netzwelt/2014/na/v1/pub/img/Bildschirm/S3224_RAGEMASTER.jpg [spiegel.de]
There's many more in that cataloge, including software and hardware tools and devices.
Re:Americans (Score:5, Informative)
News flash: Europeans spy on American companies.
Re:Where are they? (Score:5, Informative)
1. Tiny transceivers are built into USB plugs and inserted into target computers. Small circuit boards may be placed in the computers themselves.
Re:Where are they? (Score:5, Informative)
http://www.spiegel.de/international/world/a-941262.html [spiegel.de]
Pics of the devices from the NSA catalog.
Re:Where are they? (Score:5, Informative)
It is not a transmitter. It is a radar reflector. You illuminate them with a strong radar, and detect the signal they create in turn. That allows them to be small and have long range.
Re:Where are they? (Score:4, Informative)
I got a laugh this morning watching NBC's morning show. Some reporter was talking about how some of these devices were embedded in USB cables. "Like these," he said, as he held up a RJ-45 ethernet cable. :-)
I got a laugh this morning reading /.. Some nerd was talking about how some reporter couldn't tell an ethernet cable from a USB cable, and mistakenly called it "RJ-45".
It's ok. You're just not nerd enough to know: RJ-45 is for phone. It is a similar (and physically compatible) form factor to the 8P8C plug commonly used for ethernet cabling.
For further reading:
RJ-45 [wikipedia.org]
8P8C [wikipedia.org]