TwitterFacebook

Is the XKeyScore Code Released in Germany Faked?

Expert analysis uncovers serious misrepresentations and possible fakery
Technology • Views: 25,411

Following up on our post about the wildly exaggerated claims made about the purported XKeyScore source code released in Germany this week by hacker Jacob Applebaum, here’s a very interesting post by cybersecurity expert Robert Graham with evidence that the code may have been at least partly faked: Errata Security: Validating XKeyScore Code.

The burning questions about the XKeyScore “source code” is whether it’s real, and whether it come from Snowden. The Grugq (@thegrugq) has some smart insight into this, and I have my own expertise with deep-packet-inspection code. I thought I’d write up our expert analysis to the questions.

TL;DR: we believe the code partly fake and that it came from the Snowden treasure trove.

A slightly longer summary is:

  1. The signatures are old (2011 to 2012), so it fits within the Snowden timeframe, and is unlikely to be a recent leak.
  2. The code is weird, as if they are snippets combined from training manuals rather than operational code. That would mean it is "fake".
  3. The story makes claims about the source that are verifiably false, leading us to believe that they may have falsified the origin of this source code.
  4. The code is so domain specific that it probably is, in some fashion, related to real XKeyScore code - if fake, it's not completely so.

Here’s a point that jumped out at me immediately upon looking at the code: all over the Internet, people are claiming that the code identifies linuxjournal.com as an “exremist forum” — but that’s simply false. As I tweeted two days ago:

Graham’s post agrees with this evaluation:

Another misrepresentation in the story is that the source calls the Linux Journal an extremist forum. That’s not true.

A comment does say that TAILS is “a comsec mechanism advocated by extremists on extremist forums”. This is true, as the picture (from the Grugq) demonstrates on the right: it’s a picture from an ISIS/jihad forum advocating the use of TAILS. But nowhere does it claim that the Linux Journal is one of those extremists — that’s something willfully made up by the authors of the story.

That the story already misrepresents the meaning of this source code hints that it may already be misrepresenting the provenance.

Exactly. Something smells very fishy here. Read the whole thing. And for those interested in the highly technical details, here’s Graham’s post going through the code line by line.

^ back to top ^

TwitterFacebook

Turn off all ads for a full year by subscribing!
For about 33 cents a day (per month) or 22 cents a day (per year), our subscription option turns off all advertisements at LGF!
Read more...

► LGF Headlines

  • Loading...

► Tweeted Articles

  • Loading...

► Tweeted Pages

  • Loading...

► Top 10 Comments

  • Loading...

► Bottom Comments

  • Loading...

► Recent Comments

  • Loading...

► Tools/Info

► Tag Cloud

► Contact

You must have Javascript enabled to use the contact form.
Your email:

Subject:

Message:


Messages may be published unless you request otherwise.
Tech Note:
Using the Contact Form
LGF Pages

This button leads to the main index of LGF Pages, our user-submitted articles. You can post your own LGF Pages simply by registering a free account with us.

Create a Page

This is the LGF Pages posting bookmarklet. To use it, drag this button to your browser's bookmark bar, and title it 'LGF Pages' (or whatever you like). Then browse to a site you want to post, select some text on the page to use for a quote, click the bookmarklet, and the Pages posting window will appear with the title, text, and any embedded video or audio files already filled in, ready to go.

Or... you can just click this button to open the Pages posting window right away.

Last updated: 2014-03-07 2:19 pm PST

LGF User's Guide
Recent Pages
Randall Gross
San Diego Comic Con 2014 (SDCC) Cosplay Music Video
To celebrate us recently hitting 100,000 Subscribers & 100 videos make sure you watch to the end for a little give away competition. To enter you must tweet us who you would like to see Nathan Fillion & Adam ...

11 hours, 18 minutes ago
Views: 97 • Comments: 0
Tweets: 0 • Rating: 1
CriticalDragon1177
Skepchick - Food is for White Liberals What Sex Is For The Religious Right
An interesting commentary by Julia Burke, on the obsession some people on the far left have with food, and how it is similar to how some people on right feel about sex. Do you agree? Do you think the analogy ...

1 day, 15 hours ago
Views: 342 • Comments: 8
Tweets: 1 • Rating: 1
EiMitch
Cracked: 5 Reasons The Classic American Summer is Totally Dead
They could've called this article "Look at how 'supply-side' economics, anti-environmentalism, and all-around pro-oligarch legislation and ideology has destroyed some of the most iconic, classic Americana." cracked.com Oh, and gentrification-based laws are also robbing us of the classic ice-cream truck ...

1 day, 16 hours ago
Views: 229 • Comments: 0
Tweets: 0 • Rating: 1
_RememberTonyC
Qatar, Bergdahl, and Hamas
One thing we have learned in the current conflict is that Hamas has three main sponsors: Turkey, Iran, and Qatar. So when Bergdahl was released and the five taliban bigs were released into the "custody" of Qatar, we basically handed ...

2 days, 10 hours ago
Views: 195 • Comments: 1
Tweets: 0 • Rating: 0
Skip Intro
Outside Money Drives a Deluge of Political Ads
WASHINGTON -- An explosion of spending on political advertising on television -- set to break $2 billion in congressional races, with overall spots up nearly 70 percent since the 2010 midterm election -- is accelerating the rise of moneyed ...

3 days, 20 hours ago
Views: 236 • Comments: 1
Tweets: 4 • Rating: 3
Rightwingconspirator
Washington, D.C., Handgun Carry Ban Is Ruled Unconstitutional
I agree. Bans are not an option. Jurisdictions like DC will just have to deal with the fact that regulation is the path. Bans don't work. Bans are illegal and unwise. It's simple. we as a society have chosen to ...

4 days, 15 hours ago
Views: 567 • Comments: 95
Tweets: 1 • Rating: 6
Romantic Heretic
Preventing Poverty Not Allowed As A Goal for Charity
The Canada Revenue Agency (Canada's equivalent of the IRS) has told OXFAM Canada that it cannot list 'preventing poverty' as a goal, only 'alleviating' it. The reason is "Relieving poverty is charitable, but preventing it is not." This is just ...

6 days, 17 hours ago
Views: 538 • Comments: 12
Tweets: 0 • Rating: 5
FemNaziBitch
Safer Era Tests Wisdom of ‘Broken Windows’ Focus on Minor Crime
While the apparent chokehold fueled much of the initial public outcry, community leaders have begun asking whether focusing police officers so intently on such petty offenses makes sense in a city that is far different and far safer than ...

1 week ago
Views: 432 • Comments: 2
Tweets: 0 • Rating: 1
Mentis Fugit
Frisson
Over at the quirky Riddled blog, I encountered this music video link. I have the album, but I had last listened long ago, and I had forgotten the lyrics. The lengthy, moody intro slowly drew me back thirty five years, ...

1 week, 2 days ago
Views: 298 • Comments: 0
Tweets: 0 • Rating: 0
BadExampleMan
The painful futility of war
This makes me furious. These men pledged their loyalty to their country and their country betrayed them. It treated them as disposable, throwing their lives away in a war that was premised on lies, that was chosen gleefully, and that ...

1 week, 4 days ago
Views: 484 • Comments: 0
Tweets: 1 • Rating: 1
 Frank says:

Ever try to have a conversation with someone on drugs? It just doesn't work... -- Sometime during the summer of 1987, when asked by a DC reporter, "what are your feelings on the war on drugs?" His first response was to criticize the inherent invasion of privacy, followed by the above statement against drug use.