• mlg@lemmy.world
    link
    fedilink
    English
    arrow-up
    63
    ·
    1 day ago

    Even though the NSA sits on a trove of zero day vulnerabilities, they still need to ensure their systems (and by some extension, America’s systems) are actually secure.

    They also developed Ghidra which is a fantastic reverse engineering tool.

    SELinux and Tor aren’t a super duper secret fed backdoor, they’re FOSS security software that gains a lot of benefit for being open source.

    If you want an actual backdoor that the NSA has conventiently abused before, look at the Intel management engine CVEs which Snowdon exposed they had made several custom implants for.

    Or the classic 2017 Windows Eternal Blue exploit which the NSA admitted to holding on to for 5 years even though the rumor is they probably discovered it back in the Windows XP era lol.

    • BCsven@lemmy.ca
      link
      fedilink
      arrow-up
      13
      ·
      24 hours ago

      Yep I had a work computer that was affected by the Intel null password exploit in 2017. Event logs showed access allowed without password credential supplied, and my camera had been turned on permanently. The camera on/off only toggled the LED state.