# NSA Undermines Internet Security **URL:** \ **Category:** Great Debates\ **Created:** [September 6, 2013, 11:16am UTC](https://boards.straightdope.com/t/nsa-undermines-internet-security/668166 "2013-09-06T11:16:07Z")\ **Posts on this page:** 6\ **Page:** 3
**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\ **Post date:** [September 9, 2013, 2:57pm UTC](https://boards.straightdope.com/t/nsa-undermines-internet-security/668166/41 "2013-09-09T14:57:39Z")
> [@Steve\_MB](#): > > From the story linked in the OP (toward the end: I saw that, and that’s what triggered my question. Do you know what the weakness was, and what standard it applied to? The article was vague, but I thought I remembered reading something on slashdot a few years ago about the same thing. ---
**Author:** ![Steve\_MB](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steve_mb/32/5339_2.png) [@Steve\_MB](https://boards.straightdope.com/u/Steve_MB)\ **Post date:** [September 9, 2013, 3:20pm UTC](https://boards.straightdope.com/t/nsa-undermines-internet-security/668166/42 "2013-09-09T15:20:01Z")
> [@RitterSport](#): > > I saw that, and that’s what triggered my question. Do you know what the weakness was, and what standard it applied to? The article was vague, but I thought I remembered reading something on slashdot a few years ago about the same thing. Apparently it refers to [the Dual\_EC\_DRBG random number generator](https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html), which isn’t really random if you have the backdoor “skeleton key”. ---
**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\ **Post date:** [September 9, 2013, 3:43pm UTC](https://boards.straightdope.com/t/nsa-undermines-internet-security/668166/43 "2013-09-09T15:43:15Z")
> [@Steve\_MB](#): > > Apparently it refers to [the Dual\_EC\_DRBG random number generator](https://www.schneier.com/blog/archives/2007/11/the_strange_sto.html), which isn’t really random if you have the backdoor “skeleton key”. Thanks! And, thanks for starting this thread. While the earlier NSA stories were shocking to me, this part of it was by far the most disturbing. When I first read the NY Times article, I wanted to start a thread, but thought I couldn’t do it justice. It would have been, “Look at this! I’m flabbergasted.” ---
**Author:** ![Capt.Ridley\_s\_Shooting\_Party](https://avatars.discourse-cdn.com/v4/letter/c/cc9497/32.png) [@Capt.Ridley\_s\_Shooting\_Party](https://boards.straightdope.com/u/Capt.Ridley_s_Shooting_Party)\ **Post date:** [September 10, 2013, 9:02am UTC](https://boards.straightdope.com/t/nsa-undermines-internet-security/668166/44 "2013-09-10T09:02:06Z")
It seems reasonable now to assume that virtually every US technology company from hardware manufacturers and operating system developers upwards is either compromised or has been forced to insert backdoors into its software and hardware, disclose private keys, help install man-in-the-middle attacks, and so on. In which case why would anybody not from the US want to use those company’s services, especially if you’re a company providing services or developing competing products with an American company (as it’s now pretty obvious that the NSA is also conducting widespread economic espionage — see the massive and otherwise inexplicable spying against Germany, for instance)? It seems in its quest to know about everything that everybody is doing online in the name of “national security” the NSA considers the same tech-economy that makes their activities possible a fair sacrifice. ---
**Author:** ![RitterSport](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/rittersport/32/6326_2.png) [@RitterSport](https://boards.straightdope.com/u/RitterSport)\ **Post date:** [September 10, 2013, 11:00am UTC](https://boards.straightdope.com/t/nsa-undermines-internet-security/668166/45 "2013-09-10T11:00:34Z")
Well, without all of those back doors and monitoring, they never could have stopped those guys who wanted to bomb the Boston Marathon using pressure cookers. ---
**Author:** ![Steve\_MB](https://sea3.discourse-cdn.com/straightdope/user_avatar/boards.straightdope.com/steve_mb/32/5339_2.png) [@Steve\_MB](https://boards.straightdope.com/u/Steve_MB)\ **Post date:** [September 10, 2013, 11:10am UTC](https://boards.straightdope.com/t/nsa-undermines-internet-security/668166/46 "2013-09-10T11:10:38Z")
> [@Capt.Ridley\_s\_Shooting\_Party](#): > > It seems reasonable now to assume that virtually every US technology company from hardware manufacturers and operating system developers upwards is either compromised or has been forced to insert backdoors into its software and hardware, disclose private keys, help install man-in-the-middle attacks, and so on. In which case why would anybody not from the US want to use those company’s services, especially if you’re a company providing services or developing competing products with an American company (as it’s now pretty obvious that the NSA is also conducting widespread economic espionage — see the massive and otherwise inexplicable spying against Germany, for instance)? > > It seems in its quest to know about everything that everybody is doing online in the name of “national security” the NSA considers the same tech-economy that makes their activities possible a fair sacrifice. On the other hand, this angle offers some hope of reform – they aren’t just pissing off the peasants, they are lowering the levels of some Scrooge McDuck pools and pissing off people with real power. [Previous page](https://boards.straightdope.com/t/nsa-undermines-internet-security/668166.md?page=2)