Slashdot Mirror


Cisco Complains To Obama About NSA Adding Spyware To Routers

pdclarry (175918) writes "Glenn Greenwald's book No Place to Hide reveals that the NSA intercepts shipments of networking gear destined for overseas and adds spyware. Cisco has responded by asking the President to intervene and stop this practice, as it has severely hurt their non-U.S. business, with shipments to other countries falling from 7% for emerging countries to over 25% for Brazil and Russia."

38 of 297 comments (clear)

  1. Why bother with tricks? by Katatsumuri · · Score: 5, Insightful

    Why does NSA have to do this? Can't they just order Cisco to install this in their factory?

    Or did they co-operate in this way to prevent whistle-blowing or counterintelligence at the factory?

    In any case, I doubt Cisco didn't know about this. They are probably trying to save their face after a third party uncovered this.

    1. Re:Why bother with tricks? by CrimsonAvenger · · Score: 5, Informative

      Why does NSA have to do this? Can't they just order Cisco to install this in their factory?

      Actually, no. They can ASK Cisco to do this, but they have no legal power to order them to do this.

      Now, they may quietly PRETEND they have the legal power to order this, and phrase their request as an order. But they really can't do much if Cisco ignores them.

      --

      "I do not agree with what you say, but I will defend to the death your right to say it"
    2. Re:Why bother with tricks? by Tha_Zanthrax · · Score: 5, Insightful

      Cisco knew, they even had a 'choice' in the matter: cooperate with the government and keep your mouth shut about it or get your business ruined by that same government.

    3. Re:Why bother with tricks? by NotDrWho · · Score: 5, Insightful

      Why does NSA have to do this? Can't they just order Cisco to install this in their factory?

      Why risk someone at Cisco running to the press? Best to keep them out of the loop.

      --
      SJW's don't eliminate discrimination. They just expropriate it for themselves.
    4. Re:Why bother with tricks? by Charliemopps · · Score: 4, Insightful

      Why does NSA have to do this? Can't they just order Cisco to install this in their factory?

      Actually, no. They can ASK Cisco to do this, but they have no legal power to order them to do this.

      Now, they may quietly PRETEND they have the legal power to order this, and phrase their request as an order. But they really can't do much if Cisco ignores them.

      Except, you know, throw them in prison without a trial.
      An agency with no oversight, who's "requests" cannot be questioned openly without charges of treason, has the power to do anything they want to anyone they want.

    5. Re:Why bother with tricks? by CrimsonAvenger · · Score: 4, Insightful

      An agency with no oversight, who's "requests" cannot be questioned openly without charges of treason, has the power to do anything they want to anyone they want.

      Several things:

      1) "whose". Illiteracy doesn't actually make your arguments better.

      2) Treason is defined by the Constitution. Article 3, Section 3. Learn it, love it, live it. There's a reason why people don't get charged with treason all that often. Note that Snowden did NOT get charged with treason. Do you really think anyone at Cisco can be charged with treason if they can't charge Snowden with it?

      3) thank you for agreeing with me. They have no legal power to do so, though they can PRETEND they do by phrasing requests as orders. Alas, ignoring them doesn't actually get you in trouble.

      --

      "I do not agree with what you say, but I will defend to the death your right to say it"
    6. Re:Why bother with tricks? by NotDrWho · · Score: 5, Insightful

      If it weren't for Edward Snowden, Cisco would have never been able to complain--because no one would have ever known it was happening. Keep in mind that the NSA had been doing this kind of stuff for OVER 10 YEARS without a significant leak. So you can't blame them for functioning under the assumption that neither Cisco nor anyone else was ever going to know it was happening (until about 75 years from now, when it's finally declassified).

      --
      SJW's don't eliminate discrimination. They just expropriate it for themselves.
    7. Re:Why bother with tricks? by kilfarsnar · · Score: 4, Informative

      What in the patriot act gives them this power?

      You don't need the power officially. They have ways of getting what they want.

      [Quest's CEO] says he refused to cooperate based on advice from his lawyers that such an action would be illegal, as the NSA would not go through the normal process of asking the Foreign Intelligence Surveillance Court for a subpoena. About this time, he says the company’s ability to win unrelated government contracts - something it did not have trouble with before the NSA meeting - slowed significantly.

      And here

      I'm not saying anything in particular about Cisco's vulnerability to pressure from the NSA. I'm just saying they don't necessarily need explicit legal power to get what they want.

      --
      "What the American public doesn't know is what makes them the American public." -Ray Zalinsky (Tommy Boy)
    8. Re:Why bother with tricks? by kilfarsnar · · Score: 5, Insightful

      What they do is use their total information awareness to find some excuse to put the executives in prison for a completely different reason. The difference matters little to the executive.

      Now, who would do such a thing?

      --
      "What the American public doesn't know is what makes them the American public." -Ray Zalinsky (Tommy Boy)
    9. Re:Why bother with tricks? by Spamalope · · Score: 3, Insightful

      Not if the factory is in China.

      And now China has political cover if we notice them inserting their own changes into, say, the ethernet PHY compromising every router regardless of firmware revision. Or adds their own Stuxnet onto the support CDs included with the router.

    10. Re:Why bother with tricks? by AHuxley · · Score: 3, Informative

      They should have known. The ideas behind Project SHAMROCK and https://en.wikipedia.org/wiki/... should have been a hint.
      The Martin and Mitchell defection in 1960 did offer the hint 'intercepting and deciphering the secret communications of its own allies"
      https://en.wikipedia.org/wiki/...
      There where a few magazine and books over the 1970-80's that also offered a view of global telco reach, indexing, storage and tracking under ECHELON.
      Copper, optical it all has to move via some nations backhaul... that so cheap peering loop
      The reading back to the press of embassy traffic sent on trusted crypto should have been a hint.
      So "anyone else was ever going to know" seems to be a lot of nations where happy to see their telco systems entire output shared with 5 other nations (and a few others) for decades in some form as part of a mil deal.

      --
      Domestic spying is now "Benign Information Gathering"
    11. Re:Why bother with tricks? by bill_mcgonigle · · Score: 3, Informative

      Alas, ignoring them doesn't actually get you in trouble.

      Yeah, right.

      Joseph Nacchio.

      Three Felonies a Day.

      --
      My God, it's Full of Source!
      OUTSIDE_IP=$(dig +short my.ip @outsideip.net)
    12. Re:Why bother with tricks? by CanHasDIY · · Score: 4, Insightful

      What in the patriot act gives them this power?

      You don't need the power officially. They have ways of getting what they want.

      [Quest's CEO] says he refused to cooperate based on advice from his lawyers that such an action would be illegal, as the NSA would not go through the normal process of asking the Foreign Intelligence Surveillance Court for a subpoena. About this time, he says the company’s ability to win unrelated government contracts - something it did not have trouble with before the NSA meeting - slowed significantly.

      In other words, once you start sucking on Satan's cock, you're not allowed to stop. Ever.

      There's a lesson to be learned there...

      --
      An enigma, wrapped in a riddle, shrouded in bacon and cheese
    13. Re:Why bother with tricks? by Lumpy · · Score: 5, Funny

      You cant, It's a criminal offense to actually read that part of the patriot act.

      --
      Do not look at laser with remaining good eye.
    14. Re:Why bother with tricks? by Lumpy · · Score: 5, Insightful

      Actually you can, Cisco can start hiring contractor security firms and get more guns than the NSA. an NSA agent that has a M16 rifle pushed in his face by contractors and being told to "please leave the premises..... SIR!" has two options, he can leave or he can be killed in self defense.

      A large very rich corperation can get away with a hired army to protect themselves from the government.

      but that slippery slope is very steep and very very slippery.

      --
      Do not look at laser with remaining good eye.
  2. Hypocritical by DaMattster · · Score: 5, Interesting

    I find it funny how the US government accused Huawei and ZTE of building in backdoor access while engaging in the exact same practice. I don't doubt that they do, they just haven't been caught red-handed. Pun full intended. I'm guessing that even if Obama were to issue an executive order halting the process, it would be largely for show. The actions will continue under renewed secrecy.

    1. Re:Hypocritical by Anonymous Coward · · Score: 5, Insightful

      It takes one to know one. The US government was afraid of that kind of thing exactly because they knew they were doing it to everybody else.

    2. Re:Hypocritical by upuv · · Score: 3, Interesting

      How do you think the NSA found the Chinese back doors?

      Kinda of a duh moment don't you think?

    3. Re:Hypocritical by NotDrWho · · Score: 5, Interesting

      I find it funny how the US government accused Huawei and ZTE of building in backdoor access while engaging in the exact same practice.

      It's funny. I was watching the news this morning and one of the lead stories was about the arrest of a bunch of Chinese officials for "cyberspying." And the first thing that I thought when I saw that was "I wonder what the Administration is trying to hide with this stunt." So I come on Slashdot and this is the first story I see this morning. Guess I know now why those Chinese dudes got arrested.

      Smart strategy. Whenever a story breaks about YOUR cyberspying, just stage a distraction stunt to highlight OTHER COUNTRY'S cyberspying.

      --
      SJW's don't eliminate discrimination. They just expropriate it for themselves.
    4. Re:Hypocritical by MaskedSlacker · · Score: 5, Insightful

      In the case of Cisco most of the world can trust their gear with the exception of people who are direct targets of the NSA.

      If there is anything we have learned since the Snowden Saga started, it is that most of the world are direct targets of the NSA. That is, your post is self-nullifying and vanishes in a poof of logic.

    5. Re:Hypocritical by AmiMoJo · · Score: 5, Insightful

      I'm glad America approves me hacking American systems and spying on American people. After all, foreigners are fair game, and Americans are foreigner to me, so...?

      --
      const int one = 65536; (Silvermoon, Texture.cs)
      SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
  3. What a freak show by ruir · · Score: 3, Informative

    It is rather obvious Cisco and Microsoft have backdoors. This seems like a political show because coming to the media saying "We dont have any backdoors" would not be politically correct. Any foreign government that uses this equipment is just dumb at best.

  4. How do you know if your hardware has this? by NotSoHeavyD3 · · Score: 5, Funny

    Oh that's easy, your cisco hardware actually works. I'll be here all night folks. Try the fish.

    --
    Did you know 80 to 90% of the moderators on slashdot wouldn't recognize a troll even if one dragged them under a bridge.
  5. Too late by sjbe · · Score: 5, Insightful

    Problem is that there is pretty much no possible way Cisco can put the toothpaste back in the tube. They have no simple way to prove to potential customers that their gear hasn't been hacked or compromised in some way. The actions (real or perceived) of the NSA have basically screwed a number of US companies in overseas markets where security is any sort of a concern.

    Basically even the perception that the NSA may have compromised the equipment is enough to keep people from buying Cisco. Of course then the question becomes who do you trust? The Chinese make a lot of gear but they are probably trusted even less than the Americans if anything. Unless the gear is manufactured domestically under supervision it's unclear how you ensure that no one has introduced undesirable code/hardware.

  6. Re:Hey Obama by CreatureComfort · · Score: 3, Insightful

    Troll.

    You understand the complaint is that they BOUGHT the congress, so they could have the tax code changed so they could legally shift their share of tax responsibility to others? So, while yes you are technically correct, you, and they, are so morally bankrupt I can't understand how you can live with yourself.

    --
    "Unheard of means only it's undreamed of yet,
    Impossible means not yet done." ~~ Julia Ecklar
  7. Don't complain. Sue. by Karmashock · · Score: 3, Interesting

    Don't complain. Sue.

    --
    I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
    1. Re:Don't complain. Sue. by Mitreya · · Score: 3, Informative

      Don't complain. Sue.

      "State secrets".
      Allowing the lawsuit to proceed will expose state secrets and undermine the all-important War on Terror.
      Next suggestion?

    2. Re:Don't complain. Sue. by rizole · · Score: 4, Funny

      That's a very specific post. Besides, I haven't seen Sue complain about this issue anyway.

  8. Re:No. And there is a precedent. by MaskedSlacker · · Score: 3, Interesting

    The Republican spin machine will easily manipulate their "base" to not only accept it, but DEMAND that the big corp's profits are protected at the base's expense.

    Let's face it, the electorate is informed by mass media and mass media is incompetent and in bed with their corporate masters.

    You can't have it both ways. Either they're willful manipulators or incompetent buffoons, but not both. At the most they might be willful manipulators pretending to be incompetent buffoons, but that is not the same thing.

  9. Feeling ashamed by Chewbacon · · Score: 5, Insightful

    ...to think 40 years ago we were on the brink of nuclear war with a country that did shit like this.

    --
    Chewbacon
    The Bible is like Wikipedia: written by a bunch of people and verifiable by questionable sources.
  10. Why bother with tricks? by Anonymous Coward · · Score: 4, Insightful

    See Plausible deniability

    Plausible deniability is a term coined by the CIA in the early 1960s to describe the withholding of information from senior officials in order to protect them from repercussions in the event that illegal or unpopular activities by the CIA became public knowledge.

    It's roots go back to Eisenhower's NSC Directive NSC 5412 of March 15, 1954, which defined "covert operations" as "...all activities conducted pursuant to this directive which are so planned and executed that any U.S. Government responsibility for them is not evident to unauthorized persons and that if uncovered the U.S. Government can plausibly disclaim any responsibility for them." [NSC 5412 was de-classifed in 1977, and is located at the National Archives, RG 273.]

    Otherwise known as "They think you're a fucking dumb cunt."

  11. USA advised Australia not to purchase chinese by felixrising · · Score: 5, Insightful

    During the NBN infrastructure procurement process, apparently the USA provided intelligence to Australia indicating Chinese owned Huawei be excluded as a supplier . Not doubt to aid both Cisco's chances of winning the bid, whilst also providing an easy in for the NSA to get it's ears pre-installed in Australia's NBN well in advance. It certainly smells dirty to me...

  12. cisco survives because of autopilot. by nimbius · · Score: 3, Insightful

    Organizational stagnation keeps cisco in the money. Their contracts are draconian, their prices are exorbitant, they bully IT departments that try to divest from them, and their support/documentation model is based on the 1970's approach to servicing a maytag washer. namely, that only the cloistered few shall have access.

    you might need them for carrier grade (whatever that means these days) equipment but largely their market share has diminished because of competition and open source. PF and IPTables solved the firewall part, CARP and keepalived solved redundancy, and asian companies like TPLink took what they learned from years of running Cisco factories and put it into a much more reasonable offering that doesnt include secret spy chips. that is unless you ask an american intelligence agency (whatever that means these days) in which case theyre riddled with evil and you need to keep buying Cisco.

    --
    Good people go to bed earlier.
  13. DIY routers looking better all the time by Mark+of+the+North · · Score: 5, Informative

    Putting open source routing software on a rack-mount PC equipped with a few NICs is looking better all the time. Since the open source routing software solutions are getting quite good, this is doable. I did it and wouldn't go back:

    About three years ago I noticed that our Cisco routers were a bottle-neck, worryingly old, and I was the only member of my staff comfortable with their CLI. We definitely did not have the budget to buy new Cisco routers, so I looked into HP and D-Link layer-3 switches. They were still too expensive. We used OpenWRT on some wireless routers, so the idea of using open source routing software was not new to us. Tested using plain Linux as a router. That worked, but was (way) over my staff's head. Tried Vyatta on the same hardware. At that time Vyatta's web-interface was a joke, making it no better than plain Linux for our purposes. (The web-interface may have improved since then and as a virtual router in a VM environment, Vyatta looks quite good.) Untangle was decent, but all of the interesting features had to be bought, which nullifies most of the advantages of it being open source. Heard about pfSense on the Linux Action Show and gave it a try.

    Testing pfSense and learning its feature-set convinced us that it could do everything we needed (NAT, routing/firewalling between VLANs and the outside world) as well as do some other nice tricks (VPN concentrator, web caching/filtering, nice graphs of important stats, logging web usage, acting as a DHCP and DNS server, etc.). Basically, pfSense does everything that OpenWRT does and more since it expects to be run on more powerful standard hardware. Since it runs on standard hardware, the community isn't as fragmented as with OpenWRT, and more of pfSense's users are applying it in a professional environment, so the community support is quite good. The paid support is excellent. Being able to replace a failing router or NIC with something we had on the shelf is nice too.

    So we had an open source routing solution that fit our needs, and much better than Cisco's offerings. But shifting all of our routing from Cisco to pfSense was a bold move. The Huawei story was the clincher for us. If Huawei did it, Cisco could too. That realization lead to my decision to always use an open source solution on network edge devices. This story seems to support that decision.

  14. Re:The GOP are going to have a meltdown by Dishevel · · Score: 4, Insightful

    I am unsure if you realize this, but for the last 6 years Obama has been President, with the democrats owning the Senate since well before that. The biggest people complaining about this seem to be Rand Paul and sadly only a few others. Meanwhile the stupid and annoying cunts Barbara Boxer and Nancy Pelosi circle jerk around how we need this surveillance state.

    I am unsure if you realize this but even the Republican mainstream will not fight too hard to get rid of Big Brother.

    Government whores just want more government power over the people. Republicans and Democrats are to blame for this shit.

    --
    Why is it so hard to only have politicians for a few years, then have them go away?
  15. Well it's a good thing.... by ogdenk · · Score: 5, Informative

    Instead of buying backdoored equipment that's been tampered with by NSA employees, I replaced a $6,000 Cisco AVA box with a 1U dual-core atom box running pfSense for about a grand. I've also reflashed the various WRT-series routers in the field with DD-WRT. ....And now our official new IT policy is "thou shalt not buy Cisco/Linksys gear".

    Way to go NSA, you sank what little remains of the US tech industry. And it's not Snowden's fault in the least for revealing the crimes and assault on our liberty at the hands of the NSA. It's the NSA's fault for committing the serious crimes against their own people in the first place. They should be shut down, tarred, feathered and put on trial for becoming domestic terrorists. Don't tread on me.

  16. Someday when Lord Christ Obama is President by gelfling · · Score: 3, Informative

    He can fix all the things.

  17. Re:No. And there is a precedent. by Remus+Shepherd · · Score: 4, Insightful

    Don't pin your hopes on teaching people what your religion believes. *Every* religion believes in wacky, nonsensical things that can be twisted around and laughed at.

    Teach people that your religion *acts well*. That should be your central difference with Scientology -- the Scientologists break the law to spy on and destroy their enemies, while legitimate religions treat people fairly. Belief does not matter at all. The way a religion acts is what makes them honorable or criminal.

    --
    Genocide Man -- Life is funny. Death is funnier. Mass murder can be hilarious.