TwitterFacebook

Is the XKeyScore Code Released in Germany Faked?

Expert analysis uncovers serious misrepresentations and possible fakery
Technology • Views: 25,656

Following up on our post about the wildly exaggerated claims made about the purported XKeyScore source code released in Germany this week by hacker Jacob Applebaum, here’s a very interesting post by cybersecurity expert Robert Graham with evidence that the code may have been at least partly faked: Errata Security: Validating XKeyScore Code.

The burning questions about the XKeyScore “source code” is whether it’s real, and whether it come from Snowden. The Grugq (@thegrugq) has some smart insight into this, and I have my own expertise with deep-packet-inspection code. I thought I’d write up our expert analysis to the questions.

TL;DR: we believe the code partly fake and that it came from the Snowden treasure trove.

A slightly longer summary is:

  1. The signatures are old (2011 to 2012), so it fits within the Snowden timeframe, and is unlikely to be a recent leak.
  2. The code is weird, as if they are snippets combined from training manuals rather than operational code. That would mean it is "fake".
  3. The story makes claims about the source that are verifiably false, leading us to believe that they may have falsified the origin of this source code.
  4. The code is so domain specific that it probably is, in some fashion, related to real XKeyScore code - if fake, it's not completely so.

Here’s a point that jumped out at me immediately upon looking at the code: all over the Internet, people are claiming that the code identifies linuxjournal.com as an “exremist forum” — but that’s simply false. As I tweeted two days ago:

Graham’s post agrees with this evaluation:

Another misrepresentation in the story is that the source calls the Linux Journal an extremist forum. That’s not true.

A comment does say that TAILS is “a comsec mechanism advocated by extremists on extremist forums”. This is true, as the picture (from the Grugq) demonstrates on the right: it’s a picture from an ISIS/jihad forum advocating the use of TAILS. But nowhere does it claim that the Linux Journal is one of those extremists — that’s something willfully made up by the authors of the story.

That the story already misrepresents the meaning of this source code hints that it may already be misrepresenting the provenance.

Exactly. Something smells very fishy here. Read the whole thing. And for those interested in the highly technical details, here’s Graham’s post going through the code line by line.

^ back to top ^

TwitterFacebook

Turn off all ads for a full year by subscribing!
For about 33 cents a day (per month) or 22 cents a day (per year), our subscription option turns off all advertisements at LGF!
Read more...

► LGF Headlines

  • Loading...

► Tweeted Articles

  • Loading...

► Tweeted Pages

  • Loading...

► Top 10 Comments

  • Loading...

► Bottom Comments

  • Loading...

► Recent Comments

  • Loading...

► Tools/Info

► Tag Cloud

► Contact

You must have Javascript enabled to use the contact form.
Your email:

Subject:

Message:


Messages may be published unless you request otherwise.
Tech Note:
Using the Contact Form
LGF Pages

This button leads to the main index of LGF Pages, our user-submitted articles. You can post your own LGF Pages simply by registering a free account with us.

Create a Page

This is the LGF Pages posting bookmarklet. To use it, drag this button to your browser's bookmark bar, and title it 'LGF Pages' (or whatever you like). Then browse to a site you want to post, select some text on the page to use for a quote, click the bookmarklet, and the Pages posting window will appear with the title, text, and any embedded video or audio files already filled in, ready to go.

Or... you can just click this button to open the Pages posting window right away.

Last updated: 2014-03-07 2:19 pm PST

LGF User's Guide
Recent Pages
FemNaziBitch
Attn: Why I Thought Abuse and Violence Was the Way of the World
. . . I never really knew or understood what violence against women was, even as it flooded through so many parts of my life. It's almost like I never knew the things I saw were considered a crime. ...

1 hour, 42 minutes ago
Views: 70 • Comments: 1
Tweets: 0 • Rating: 0
aagcobb
Climate Change Economics: New Report Says Nixing Fossil Fuels Won’t Be Expensive.
Eric Holthaus, Slate: Climate Change Economics: New Report Says Nixing Fossil Fuels Won't Be Expensive. Essentially, the report takes a refreshingly short-term look at what many still assume to be a long-term problem. Here's the basic calculation: Assume $90 trillion ...

2 hours, 50 minutes ago
Views: 46 • Comments: 2
Tweets: 0 • Rating: 0
theliel
AEI Decides to Weigh in on #GamersGate
So Polygon showcases the AEI's anti-femminist response to #gamergate talking about how games are for dudes and dudes need that space to continue being dudes and bitches should get back in that kitchen where they belong. Link is to Polygon ...

9 hours, 19 minutes ago
Views: 78 • Comments: 0
Tweets: 0 • Rating: 1
Randall Gross
North KC Says Free Gigabit for All - MUNI Network
Here's one that should stump opponents of municipal networks: A Missouri city is turning over operation of its fiber network to a local data center and plans to give away gigabit services to local residents after a one-time fee. ...

13 hours, 4 minutes ago
Views: 127 • Comments: 1
Tweets: 0 • Rating: 1
CriticalDragon1177
Alternet - Nicholas Wade’s Flawed Book Rewrites the History of Scientific Racism
Jon Phillips takes on Nicholas Wade's claims, and proves once again that so called "scientific" racism is little more than a pseudoscience. This was originally posted in September 2014 edition of the Southern Poverty Law Center's Intelligence Report, ( ...

1 day, 3 hours ago
Views: 196 • Comments: 0
Tweets: 0 • Rating: 0
Lumberhead
Angry Letters to the One Member of Congress Who Voted Against the War on Terror - the Atlantic
My first attempt at a page - so here we go: The article is a little long but well worth while. I found it to be nicely balanced with interesting excerpts from supporters as well as detractors. Barbara Lee was ...

2 days, 6 hours ago
Views: 315 • Comments: 2
Tweets: 1 • Rating: 5
The War TARDIS
Doctor Who “Listen” Open Thread
I'm back. Last week, I couldn't do this thread, as something more important was going on. One of my best friends, a sweet, and very devout Christian, is going to the UK to help a Christian Group in Oxford, and ...

4 days, 4 hours ago
Views: 297 • Comments: 42
Tweets: 0 • Rating: 3
Rightwingconspirator
Are Higher Frame Rates Really a Better Moving Image in Cinema?
As a guy who scratches the surface of this medium with humble indy efforts and some industrial video experience I have to watch carefully. If I commit to the wrong camera or format, it can hurt financially. Once I had ...

5 days, 6 hours ago
Views: 492 • Comments: 7
Tweets: 25 • Rating: 6
Slap
For guitar fans…
I suppose one needs to be a guitar freak of a certain age to recognize both of these guys. Gabrels' work might be familiar to fans of Bowie/Tin Machine. Nelson's work? I believe him to be one of the most ...

5 days, 9 hours ago
Views: 318 • Comments: 2
Tweets: 0 • Rating: 1
GlutenFreeJesus
Check your gmail accounts!
Here's the link to the tool. One of mine was on that list, so I changed the password. Good luck! isleaked.com

1 week ago
Views: 548 • Comments: 2
Tweets: 0 • Rating: 7
 Frank says:

Ugly as I mights be, I am your futum!