Skip to content
 
If you can read this, either the style sheet didn't load or you have an older browser that doesn't support style sheets. Try clearing your browser cache and refreshing the page.

(Bleeping Computer)   If you've been using EncroChat, quick, tell us a CSB before you get arrested and hauled off to prison   (bleepingcomputer.com) divider line
    More: Awkward, Police, Crime, Federal Bureau of Investigation, international criminal networks, joint investigation team, European law enforcement agencies, joint effort, joint operation  
•       •       •

1196 clicks; posted to Geek » on 03 Jul 2020 at 12:33 PM (5 weeks ago)   |   Favorite    |   share:  Share on Twitter share via Email Share on Facebook



15 Comments     (+0 »)
 
View Voting Results: Smartest and Funniest
 
2020-07-03 12:14:00 PM  
How to hack.

Work the support line.

You are welcome.
 
2020-07-03 1:02:30 PM  
I guess if you really want a secure encrypted chat app, you have to write it yourself.
 
2020-07-03 1:11:49 PM  

TheGreatGazoo: I guess if you really want a secure encrypted chat app, you have to write it yourself.


They did write it themselves.
That's why it was cracked.
 
2020-07-03 1:38:05 PM  

TheGreatGazoo: I guess if you really want a secure encrypted chat app, you have to write it yourself.


Or don't use the same as everyone else.
 
2020-07-03 1:51:54 PM  

Herr Flick's Revenge: TheGreatGazoo: I guess if you really want a secure encrypted chat app, you have to write it yourself.

They did write it themselves.
That's why it was cracked.


It sounds like French police found one of the servers, got physical access to it, and cracked that open to get access to the whole network, all without the network operators realizing that their network had been cracked until the police decided it was time to lower the boom and let them know the jig was up by hijacking the network to serve up some malware to the criminals using the network right as the warrants started getting served.
 
2020-07-03 1:54:39 PM  

ClavellBCMI: Herr Flick's Revenge: TheGreatGazoo: I guess if you really want a secure encrypted chat app, you have to write it yourself.

They did write it themselves.
That's why it was cracked.

It sounds like French police found one of the servers, got physical access to it, and cracked that open to get access to the whole network, all without the network operators realizing that their network had been cracked until the police decided it was time to lower the boom and let them know the jig was up by hijacking the network to serve up some malware to the criminals using the network right as the warrants started getting served.


Oh, and I bet there are a few spies hoping they can get to a friendly embassy before the counter-intelligence people round them up.
 
2020-07-03 1:56:49 PM  
This will be used to justify backdooring encryption, BTW.
 
2020-07-03 2:14:58 PM  
Instead of taking down the network, might it have been wise to keep it going and pick users off on a continuing basis?  Now the organized criminals will just move to another platform that isn't monitored by police.

///I always assume
//the only truly secure network
/is a couple of tin cans connected by string
 
2020-07-03 3:56:58 PM  

TheGreatGazoo: I guess if you really want a secure encrypted chat app, you have to write it yourself.


You can't have one.  All computerized devices connected to the Internet or cell system are inherently insecure.

You need to encrypt/decrypt offline.  Preferably manually, and preferably using a pen and paper one time pad system if you really want absolutely secure communications.
 
2020-07-03 4:00:27 PM  

I am Tom Joad's Complete Lack of Surprise: This will be used to justify backdooring encryption, BTW.


You can always do it manually.
 
2020-07-03 4:12:26 PM  

ClavellBCMI: Herr Flick's Revenge: TheGreatGazoo: I guess if you really want a secure encrypted chat app, you have to write it yourself.

They did write it themselves.
That's why it was cracked.

It sounds like French police found one of the servers, got physical access to it, and cracked that open to get access to the whole network, all without the network operators realizing that their network had been cracked until the police decided it was time to lower the boom and let them know the jig was up by hijacking the network to serve up some malware to the criminals using the network right as the warrants started getting served.


Or even just pulled some man in the middle stuff - but yeah they certainly had valid evidence that there was massive criminal activity here.  Not so much a "get those guys, they have encryption!" as it is "get those guys, they're criming up the place bigtime - we're past their encryption we can prove it!"
 
2020-07-03 8:46:47 PM  
Is this the same EU that is extremely worried about individual privacy? Suppose I'm just paranoid, not criminal, and I used this system. Did they collect my completely legal communications? Because it sure sounds like they didn't discriminate.
 
2020-07-04 12:12:12 PM  

ClavellBCMI: Herr Flick's Revenge: TheGreatGazoo: I guess if you really want a secure encrypted chat app, you have to write it yourself.

They did write it themselves.
That's why it was cracked.

It sounds like French police found one of the servers, got physical access to it, and cracked that open to get access to the whole network, all without the network operators realizing that their network had been cracked until the police decided it was time to lower the boom and let them know the jig was up by hijacking the network to serve up some malware to the criminals using the network right as the warrants started getting served.


Or if they did wite it themselves they were sloppy with key handling.  Either that or PGP has been broken.  They probably (hopefully) started small and didn't scale up proper key handling.  Yeah, just email me your public key.

Or Namecheap wasn't fooled by 'sinisteractors.com' and their cert requests.
 
2020-07-04 3:39:24 PM  
60,000 users, holy crap
 
2020-07-04 3:50:26 PM  

Some Junkie Cosmonaut: ClavellBCMI: Herr Flick's Revenge: TheGreatGazoo: I guess if you really want a secure encrypted chat app, you have to write it yourself.

They did write it themselves.
That's why it was cracked.

It sounds like French police found one of the servers, got physical access to it, and cracked that open to get access to the whole network, all without the network operators realizing that their network had been cracked until the police decided it was time to lower the boom and let them know the jig was up by hijacking the network to serve up some malware to the criminals using the network right as the warrants started getting served.

Or even just pulled some man in the middle stuff - but yeah they certainly had valid evidence that there was massive criminal activity here.  Not so much a "get those guys, they have encryption!" as it is "get those guys, they're criming up the place bigtime - we're past their encryption we can prove it!"


From the article:
How EncroChat was dismantled

French Gendarmerie and judicial authorities started investigating EncroChat in 2017 after finding that these devices  - using French servers - were being regularly seized in operations targeting organized crime.
"Eventually, it was possible to put a technical device in place to go beyond the encryption technique and have access to the users' correspondence," the Europol explained.
 
Displayed 15 of 15 comments

View Voting Results: Smartest and Funniest

This thread is closed to new comments.

Continue Farking




On Twitter



  1. Links are submitted by members of the Fark community.

  2. When community members submit a link, they also write a custom headline for the story.

  3. Other Farkers comment on the links. This is the number of comments. Click here to read them.

  4. Click here to submit a link.