TwitterFacebook

Is the XKeyScore Code Released in Germany Faked?

Expert analysis uncovers serious misrepresentations and possible fakery
Technology • Views: 27,017

Following up on our post about the wildly exaggerated claims made about the purported XKeyScore source code released in Germany this week by hacker Jacob Applebaum, here’s a very interesting post by cybersecurity expert Robert Graham with evidence that the code may have been at least partly faked: Errata Security: Validating XKeyScore Code.

The burning questions about the XKeyScore “source code” is whether it’s real, and whether it come from Snowden. The Grugq (@thegrugq) has some smart insight into this, and I have my own expertise with deep-packet-inspection code. I thought I’d write up our expert analysis to the questions.

TL;DR: we believe the code partly fake and that it came from the Snowden treasure trove.

A slightly longer summary is:

  1. The signatures are old (2011 to 2012), so it fits within the Snowden timeframe, and is unlikely to be a recent leak.
  2. The code is weird, as if they are snippets combined from training manuals rather than operational code. That would mean it is "fake".
  3. The story makes claims about the source that are verifiably false, leading us to believe that they may have falsified the origin of this source code.
  4. The code is so domain specific that it probably is, in some fashion, related to real XKeyScore code - if fake, it's not completely so.

Here’s a point that jumped out at me immediately upon looking at the code: all over the Internet, people are claiming that the code identifies linuxjournal.com as an “exremist forum” — but that’s simply false. As I tweeted two days ago:

Graham’s post agrees with this evaluation:

Another misrepresentation in the story is that the source calls the Linux Journal an extremist forum. That’s not true.

A comment does say that TAILS is “a comsec mechanism advocated by extremists on extremist forums”. This is true, as the picture (from the Grugq) demonstrates on the right: it’s a picture from an ISIS/jihad forum advocating the use of TAILS. But nowhere does it claim that the Linux Journal is one of those extremists — that’s something willfully made up by the authors of the story.

That the story already misrepresents the meaning of this source code hints that it may already be misrepresenting the provenance.

Exactly. Something smells very fishy here. Read the whole thing. And for those interested in the highly technical details, here’s Graham’s post going through the code line by line.

^ back to top ^

TwitterFacebook

Turn off all ads for a full year by subscribing!
Take advantage of our yearly subscription, and save 50% off the normal subscription price! One-year ad-free subscriptions are just $59.95. Turn off all ads for a full year by subscribing now and save!
Read more...

► LGF Headlines

  • Loading...

► Tweeted Articles

  • Loading...

► Tweeted Pages

  • Loading...

► Top 10 Comments

  • Loading...

► Bottom Comments

  • Loading...

► Recent Comments

  • Loading...

► Tools/Info

► Tag Cloud

► Contact

You must have Javascript enabled to use the contact form.
Your email:

Subject:

Message:


Messages may be published unless you request otherwise.
Tech Note:
Using the Contact Form
LGF Pages

This button leads to the main index of LGF Pages, our user-submitted articles. You can post your own LGF Pages simply by registering a free account with us.

Create a Page

This is the LGF Pages posting bookmarklet. To use it, drag this button to your browser's bookmark bar, and title it 'LGF Pages' (or whatever you like). Then browse to a site you want to post, select some text on the page to use for a quote, click the bookmarklet, and the Pages posting window will appear with the title, text, and any embedded video or audio files already filled in, ready to go.

Or... you can just click this button to open the Pages posting window right away.

Last updated: 2015-06-25 5:21 pm PDT

LGF User's Guide RSS Feeds
Recent Pages
EiMitch
We Built Their Death Squads: ISIS’s Bizarre Origin Story
cracked.com ISIS -- the Islamic State in Iraq and Syria -- is one of the least funny organizations on the planet. From child trafficking to attempted genocide, everything they touch turns into a big steaming pile of tragedy. Things seem ...

37 minutes ago
Views: 23 • Comments: 0
Tweets: 0 • Rating: 0
Cheechako
Test Pilot Admits the F-35 Can’t Dogfight
War Is Boringby DAVID AXE A test pilot has some very, very bad news about the F-35 Joint Strike Fighter. The pricey new stealth jet can't turn or climb fast enough to hit an enemy plane during a dogfight ...

1 day, 13 hours ago
Views: 345 • Comments: 5
Tweets: 0 • Rating: 1
Thanos
Supreme Court Temporarily Blocks Texas Abortion Law
The Supreme Court on Monday put a temporary hold on a Texas law that abortion rights groups say would have led to the closures of all but a handful of the state's abortion clinics. The law, which was to ...

1 day, 21 hours ago
Views: 148 • Comments: 0
Tweets: 0 • Rating: 0
Rocky-in-Connecticut
NBC Hands an Asshat his Ass
money.cnn.com Business is business. And business is pretty sweet these days when blowhard Know-nothings like Trump get what's coming.

2 days, 2 hours ago
Views: 263 • Comments: 0
Tweets: 0 • Rating: 2
PhillyPretzel
Patrick Macnee dies
I was looking at Philly com this morning and I saw this article. I was one of those who watched some episodes of this old series and liked it. Please read this article on Patrick Macnee from their website: philly.com ...

3 days, 5 hours ago
Views: 261 • Comments: 1
Tweets: 0 • Rating: 2
FemNaziBitch
Many See a Victory for Children, Too - Video
Thousands, including parents, babies and dogs, flocked to the Supreme Court after its ruling on same-sex marriage. Supporters spoke about how they thought the ruling helped maintain and support families. More: Many See a Victory for Children, Too - ...

3 days, 12 hours ago
Views: 237 • Comments: 0
Tweets: 0 • Rating: 0
Lumberhead
‘It’s Time for Good Cops to Do Something About Bad Cops’
Today's relationship between the Baltimore police department and the city's black residents was determined by neither Obama Administration statements nor New York Times editorials nor liberal hashtag activists. Rather, it was determined by years of interactions between residents of ...

3 days, 21 hours ago
Views: 716 • Comments: 0
Tweets: 36 • Rating: 1
SteveMcGaziBolaGate
Schoolchildren Build a Better Condom
From philly.com "A group of schoolchildren from Essex, England, have invented a condom that detects sexually transmitted infections such as chlamydia and syphilis."The condom would change color to warn the couple if a strain of bacteria is present." That's the ...

1 week ago
Views: 371 • Comments: 3
Tweets: 0 • Rating: 1
aagcobb
A New Study Gives Us Another Reason to Celebrate Working Mothers - Vox
Matthew Yglesias, Vox: A New Study Gives Us Another Reason to Celebrate Working Mothers - Vox The researchers find statistically significant differences in outcomes for both boys and girls, though the outcomes are different. Daughters of working moms grow up ...

1 week ago
Views: 270 • Comments: 0
Tweets: 0 • Rating: 0
Great White Snark
Hypocritical Taylor Swift Photo Contract: Break Our Rules, and We Can Break Your Gear
Pop star power play. Yesterday, photographer Jason Sheldon published an open letter to Taylor Swift, accusing the singer of being a hypocrite by accusing Apple of treating artists unfairly while herself handing out heavy-handed contracts for concert photographers to sign. ...

1 week, 1 day ago
Views: 647 • Comments: 7
Tweets: 0 • Rating: 2
 Frank says:

The formal structure of "You Didn't Try to Call Me" is not revolutionary, but it is interesting. You don't care. -- Liner notes for "You Didn't Try to Call Me" on "Freak Out!"