Bruce Schneier has written about The Further Democratization of QUANTUM, the NSA's program for packet injection:
...when I was working with the Guardian on the Snowden documents, the one top-secret program the NSA desperately did not want us to expose was QUANTUM. This is the NSA's program for what is called packet injection -- basically, a technology that allows the agency to hack into computers. Turns out, though, that the NSA was not alone in its use of this technology. The Chinese government uses packet injection to attack computers. The cyberweapons manufacturer Hacking Team sells packet injection technology to any government willing to pay for it. Criminals use it. And there are hacker tools that give the capability to individuals as well. All of these existed before I wrote about QUANTUM. By using its knowledge to attack others rather than to build up the Internet's defenses, the NSA has worked to ensure that anyone can use packet injection to hack into computers.
And now it's become a homework assignment:
Michalis Polychronakis at Stony Book has assigned building QUANTUM as a homework assignment. It's basically sniff, regexp match, swap sip/sport/dip/dport/syn/ack, set ack and push flags, and add the payload to create the malicious reply. Shouldn't take more than a few hours.
The assignment is due May 1st.
(Score: 3, Interesting) by Anonymous Coward on Saturday April 25 2015, @11:45PM
The first time I heard (and used) packet injection was in the '90s. Up until 2006 the NSA did actively try to help secure things. Then they went silent and stopped updating some of the best hardening guides available at the time. Now we have this. I don't even have a speculative idea why, but something happened in 2005 or 2006 that changed US citizens and organizations from something worth protecting to the enemy that needs to be attacked.
(Score: 3, Informative) by Fauxlosopher on Sunday April 26 2015, @02:21PM
Sorry, no sale. Between beasties like Echelon (1971) and Carnivore (1997), it's been obvious for a good long while now that fedgov spy agencies have not been the friend of the little US citizen.
(Score: 2) by isostatic on Sunday April 26 2015, @02:39PM
The American presidnet kills far more people than all the Mafia bosses combined, so the difference in outrage is clear, and not in the way you describe.