TwitterFacebook

Is the XKeyScore Code Released in Germany Faked?

Expert analysis uncovers serious misrepresentations and possible fakery
Technology • Views: 25,714

Following up on our post about the wildly exaggerated claims made about the purported XKeyScore source code released in Germany this week by hacker Jacob Applebaum, here’s a very interesting post by cybersecurity expert Robert Graham with evidence that the code may have been at least partly faked: Errata Security: Validating XKeyScore Code.

The burning questions about the XKeyScore “source code” is whether it’s real, and whether it come from Snowden. The Grugq (@thegrugq) has some smart insight into this, and I have my own expertise with deep-packet-inspection code. I thought I’d write up our expert analysis to the questions.

TL;DR: we believe the code partly fake and that it came from the Snowden treasure trove.

A slightly longer summary is:

  1. The signatures are old (2011 to 2012), so it fits within the Snowden timeframe, and is unlikely to be a recent leak.
  2. The code is weird, as if they are snippets combined from training manuals rather than operational code. That would mean it is "fake".
  3. The story makes claims about the source that are verifiably false, leading us to believe that they may have falsified the origin of this source code.
  4. The code is so domain specific that it probably is, in some fashion, related to real XKeyScore code - if fake, it's not completely so.

Here’s a point that jumped out at me immediately upon looking at the code: all over the Internet, people are claiming that the code identifies linuxjournal.com as an “exremist forum” — but that’s simply false. As I tweeted two days ago:

Graham’s post agrees with this evaluation:

Another misrepresentation in the story is that the source calls the Linux Journal an extremist forum. That’s not true.

A comment does say that TAILS is “a comsec mechanism advocated by extremists on extremist forums”. This is true, as the picture (from the Grugq) demonstrates on the right: it’s a picture from an ISIS/jihad forum advocating the use of TAILS. But nowhere does it claim that the Linux Journal is one of those extremists — that’s something willfully made up by the authors of the story.

That the story already misrepresents the meaning of this source code hints that it may already be misrepresenting the provenance.

Exactly. Something smells very fishy here. Read the whole thing. And for those interested in the highly technical details, here’s Graham’s post going through the code line by line.

^ back to top ^

TwitterFacebook

Turn off all ads for a full year by subscribing!
For about 33 cents a day (per month) or 22 cents a day (per year), our subscription option turns off all advertisements at LGF!
Read more...

► LGF Headlines

  • Loading...

► Tweeted Articles

  • Loading...

► Tweeted Pages

  • Loading...

► Top 10 Comments

  • Loading...

► Bottom Comments

  • Loading...

► Recent Comments

  • Loading...

► Tools/Info

► Tag Cloud

► Contact

You must have Javascript enabled to use the contact form.
Your email:

Subject:

Message:


Messages may be published unless you request otherwise.
Tech Note:
Using the Contact Form
LGF Pages

This button leads to the main index of LGF Pages, our user-submitted articles. You can post your own LGF Pages simply by registering a free account with us.

Create a Page

This is the LGF Pages posting bookmarklet. To use it, drag this button to your browser's bookmark bar, and title it 'LGF Pages' (or whatever you like). Then browse to a site you want to post, select some text on the page to use for a quote, click the bookmarklet, and the Pages posting window will appear with the title, text, and any embedded video or audio files already filled in, ready to go.

Or... you can just click this button to open the Pages posting window right away.

Last updated: 2014-03-07 2:19 pm PST

LGF User's Guide
Recent Pages
FemNaziBitch
Attn: The Youth Vote: 10 Reasons It Matters Even More Than You Think
The 2014 midterms are on the horizon... FacebookShare Mail Want More?! 10. 21 percent (46 million) of all eligible voters in 2012 were 18-29 years old. By 2020, young voters will boast about 90 million eligible voters. More: Attn: ...

5 hours, 44 minutes ago
Views: 78 • Comments: 0
Tweets: 0 • Rating: 0
Randall Gross
Last Week Tonight - Ayn Rand
From HBO's Last Week Tonight with John Oliver. All rights belong to HBO. Check out the official channel here: youtube.com

13 hours, 36 minutes ago
Views: 188 • Comments: 1
Tweets: 0 • Rating: 3
Lumberhead
Eric Holder Blew It as Attorney General. His Replacement Will Too. - the Week
The best thing about Eric Holder's time as the U.S. attorney general was that he was the first one in decades to really care about civil rights. The worst thing was, well basically everything else. Holder, who yesterday announced ...

21 hours, 28 minutes ago
Views: 185 • Comments: 0
Tweets: 0 • Rating: 0
HamSandwich
Activist who urged killing Israelis nominated for top EU award
Alaa Abdel Fattah, 32, an Egyptian blogger and political activist, has been arrested numerous times by Egyptian authorities since the eruption of a popular revolution in the country in early 2011. Abdel Fattah, who boasts 626,000 followers on Twitter ...

1 day, 4 hours ago
Views: 174 • Comments: 0
Tweets: 0 • Rating: 1
Rightwingconspirator
Visiting Mt Wilson And It’s Dramatic Weather
All taken just yesterday. Canon 7D and a Tamron lens. The clouds ripping through were just amazing. And some stunning Fall color in unexpected places

1 day, 7 hours ago
Views: 184 • Comments: 5
Tweets: 2 • Rating: 6
Souliren
Dropkick Murphys - Celtic punk from the USA?
I never heard of these guys until a half hour ago. Apparently they are famous. A Celtic punk band from Massachusetts? There is art here. The Rose Tattoo I'm shipping up to Boston.

3 days, 7 hours ago
Views: 423 • Comments: 16
Tweets: 0 • Rating: 5
CriticalDragon1177
Secular Talk - Limbaugh’s Sidekick: Segregation Was The ‘Good Ole’ Days’ (Video)
KYle Kulinski, exposes the stupidity of "Snerdley,"

5 days, 13 hours ago
Views: 770 • Comments: 12
Tweets: 0 • Rating: 3
darthstar
Darth offered cup of virtual coffee after snark
Yep. There it is. littlegreenfootballs.com

5 days, 19 hours ago
Views: 547 • Comments: 2
Tweets: 2 • Rating: 5
Ryan King
Fox article comments full of racism on Facebook
Fox is no different from Breitbart or Dim Hoft; their business model is to titilate hatred and bigotry with the right kind of 'journalism' and let the minions hurr durr durr. This happens all the time. Arrest Warrant Charges Man ...

5 days, 20 hours ago
Views: 678 • Comments: 0
Tweets: 2 • Rating: 4
aagcobb
Three Reasons Why New Zealand Has the Best-Designed Government in the World - Vox
Dylan Matthews, Vox: Three Reasons Why New Zealand Has the Best-Designed Government in the World - Vox New Zealand has the most democratic government in the world because it has a well-designed electoral system of mixed district and proportional ...

6 days, 10 hours ago
Views: 610 • Comments: 6
Tweets: 0 • Rating: 2
 Frank says:

People make a lot of fuss about my kids having such supposedly 'strange names', but the fact is that no matter what first names I might have given them, it is the last name that is going to get them in trouble. -- From the Real Frank Zappa Book - Mr. Dad chapter