PDA

View Full Version : The NSA Has Inserted Its Code Into Android OS, Or Three Quarters Of All Smartphones



TargeT
11th July 2013, 12:40
In a Fascist state (world?) that we live in I am really not suprised, in fact I would be suspect of any large corporation; as it is very likely that the corporation has goverment ties and is doing something that is NOT in your best interest.

This is honestly worse than 1984, instead of the Telescreen (which at least was just in your house or in public) you CARRY the same type of device with you; a device that can listen in or record video of its surroundings even when you think it is off.


Over a decade ago, it was discovered that the NSA embedded backdoor access into Windows 95, and likely into virtually all other subsequent internet connected, desktop-based operating systems. However, with the passage of time, more and more people went "mobile", and as a result the NSA had to adapt. And adapt they have: as Bloomberg reports, "The NSA is quietly writing code for Google’s Android OS."

Is it ironic that the same "don't be evil" Google which went to such great lengths in the aftermath of the Snowden scandal to wash its hands of snooping on its customers and even filed a request with the secretive FISA court asking permission to disclose more information about the government’s data requests, is embedding NSA code into its mobile operating system, which according to IDC runs on three-quarters of all smartphones shipped in the first quarter? Yes, yes it is.

Google spokeswoman Gina Scigliano confirms that the company has already inserted some of the NSA’s programming in Android OS. "All Android code and contributors are publicly available for review at source.android.com." Scigliano says, declining to comment further.

From Bloomberg:

Through its open-source Android project, Google has agreed to incorporate code, first developed by the agency in 2011, into future versions of its mobile operating system, which according to market researcher IDC runs on three-quarters of the smartphones shipped globally in the first quarter. NSA officials say their code, known as Security Enhancements for Android, isolates apps to prevent hackers and marketers from gaining access to personal or corporate data stored on a device. Eventually all new phones, tablets, televisions, cars, and other devices that rely on Android will include NSA code, agency spokeswoman Vanee’ Vines said in an e-mailed statement. NSA researcher Stephen Smalley, who works on the program, says, “Our goal is to raise the bar in the security of commodity mobile devices.”

See, there's no need to worry: the reason the NSA is generously providing the source code for every Google-based smartphone is for your own security. Oh but it's open-sourced, so someone else will intercept any and all attempts at malice. We forgot.

The story continues:

In a 2011 presentation obtained by Bloomberg Businessweek, Smalley listed among the benefits of the program that it’s “normally invisible to users.” The program’s top goal, according to that presentation: “Improve our understanding of Android security.”

Well one wouldn't want their bug to be visible to users now, would one...

Vines wouldn’t say whether the agency’s work on Android and other software is part of or helps with Prism. “The source code is publicly available for anyone to use, and that includes the ability to review the code line by line,” she said in her statement. Most of the NSA’s suggested additions to the operating system can already be found buried in Google’s latest release—on newer devices including Sony’s Xperia Z, HTC’s One, and Samsung Electronics’ Galaxy S4. Although the features are not turned on by default, according to agency documentation, future versions will be. In May the Pentagon approved the use of smartphones and tablets that run Samsung’s mobile enterprise software, Knox, which also includes NSA programming, the company wrote in a June white paper. Sony, HTC, and Samsung declined to comment.

Apple appears to be immune from this unprecedented breach of customer loyalty, if only for now, although open-sourced Linux may not be as lucky:

“Apple (AAPL) does not accept source code from any government agencies for any of our operating systems or other products,” says Kristin Huguet, a spokeswoman for the company. It’s not known if any other proprietary operating systems are using NSA code. SE for Android is an offshoot of a long-running NSA project called Security-Enhanced Linux. That code was integrated a decade ago into the main version of the open-source operating system, the server platform of choice for Internet leaders including Google, Facebook (FB), and Yahoo! (YHOO). Jeff Zemlin, the executive director of the Linux Foundation, says the NSA didn’t add any obvious means of eavesdropping. “This code was peer-reviewed by a lot of people,” he says.+

But that's not all:

The NSA developed a separate Android project because Google’s mobile OS required markedly different programming, according to Smalley’s 2011 presentation. Brian Honan, an information technology consultant in Dublin, says his clients in European governments and multinational corporations are worried about how vulnerable their data are when dealing with U.S. companies. The information security world had been preoccupied with Chinese hacking until recently, Honan says. “With Prism, the same accusations can be laid against the U.S. government.”

In short: the (big brother supervised) fun never stops in Stasi 2.0 world. Just buy your 100 P/E stocks, eat your burgers, watch your Dancing With The Stars, pay your taxes, and engage in as much internet contact with other internet-addicted organisms as possible and all shall be well.

Oh, and from this...

http://www.zerohedge.com/sites/default/files/images/user5/imageroot/2013/07/phone_bug.gif


To this

http://www.zerohedge.com/sites/default/files/images/user5/imageroot/2013/07/your%20move%20NSA.jpg

http://www.zerohedge.com/news/2013-07-09/nsa-has-inserted-its-code-android-os-bugging-three-quarters-all-smartphones

DouglasDanger
12th July 2013, 00:17
Anyone who thinks they are safe by puting thier plans for terrorism/criminal behaviour on thier phone, computer or internet deserves to be caught, cause they have to be realy stupid to think any of this tech is secure or ever has been. Did the Soprano's /Good Fella's/ Godfather not teach anyone anything? nothing Private/criminal is to be recorded, repeated in public or on a phone. Secret societies know these rules, how do you think they keep secrets, they are only passed face to face where and when no one can over hear. The public has always been nieve thinking it was not being done, who owns google should have been an alarm bell as to what the tech was going to be used for, but! at least we all know now for the future.

Wrapping the laptop in tinfoil, good one I got a chuckle out of that....

toad
12th July 2013, 02:55
Lets assume this is true, just another reason to root your phone and put your own modd'd version of android on your phone. Its amazing my phones battery lasts 250% longer, charges in 10 minutes runs at nearly 2ghz and I can do so much more, the bloated default android that gets fuddled with by your carrier ruins all the good things about android.

TargeT
12th July 2013, 03:02
Lets assume this is true, just another reason to root your phone and put your own modd'd version of android on your phone. Its amazing my phones battery lasts 250% longer, charges in 10 minutes runs at nearly 2ghz and I can do so much more, the bloated default android that gets fuddled with by your carrier ruins all the good things about android.

rooting still uses the base android code... that's basically what this article is saying, it's a part of the operating system now.

I'm not heavy into programming, only light apps and scripts; so I can't say what's been done to the app but it's opensource so it would have to be VERY discrete; or maybe it's actually nothing of concern at all (at this time) and this is just a form of lulling us into getting used to this type of action, and eventually other things will be inserted.

Regardless it's concerning that the NSA is branching out like this and involving themselves in so much of our lives.

Azt
12th July 2013, 03:59
Google do no evil or see no evil (in doing) ?

toad
12th July 2013, 04:13
Lets assume this is true, just another reason to root your phone and put your own modd'd version of android on your phone. Its amazing my phones battery lasts 250% longer, charges in 10 minutes runs at nearly 2ghz and I can do so much more, the bloated default android that gets fuddled with by your carrier ruins all the good things about android.

rooting still uses the base android code... that's basically what this article is saying, it's a part of the operating system now.

I'm not heavy into programming, only light apps and scripts; so I can't say what's been done to the app but it's opensource so it would have to be VERY discrete; or maybe it's actually nothing of concern at all (at this time) and this is just a form of lulling us into getting used to this type of action, and eventually other things will be inserted.

Regardless it's concerning that the NSA is branching out like this and involving themselves in so much of our lives.

Thing is Android is open-source, the source code is published and anyone can look and search threw it. If it contained anything suspect or Orwellian, people would find out very quickly, also if the NSA was actually doing what alot might suspect why would they publish it openly. The NSA has been working with Android to develop Security Enhancements, which I can assume most people will assume its going to be something nefarious and something terrible, but the NSA has done this before when they worked with the Linux community to provide enhancements to its security, and a good part of the community scrutinized the code and found nothing related to eavesdropping and they were actually providing solid security enhancements. You have to understand that the NSA uses Linux/Android so it makes sense they would want to work with the developers to help maximize security. Just cause its NSA doesnt absolutely mean that something malicious is without a doubt involved.

¤=[Post Update]=¤

source.android.com