Hacker News new | past | comments | ask | show | jobs | submit login

It's pretty rash for the article to suggest that the RSA algorithm might have been broken. If the key really has been stolen, it seems far more likely that it was breached due to crap IT security than a recently-discovered bombshell weakness in the RSA algorithm.

For example, the RSA corporation's SecurID service (not to be confused with the RSA algorithm) was compromised due to a spear-phishing attack containing an Excel spreadsheet with a Flash exploit. Then Lockheed Martin was breached because they use SecurID[1]. Lockheed Martin happens to make GPS satellites[2], so they might have a copy of the key...

This is completely speculative (in particular, Lockheed Martin claims no data was stolen and I know nothing about how GPS works). But in the past, there have been way more exploits due to insecure systems than to weak crypto (especially well-established crypto like RSA).

[1] http://en.wikipedia.org/wiki/SecurID#March_2011_system_compr... [2] http://en.wikipedia.org/wiki/USA-206




> in particular, Lockheed Martin claims no data was stolen If you had something particularly secret stolen you're not going to air it publicly. Agree with everything else though - even if this hypothesising is true it'll be down to a stolen key.




Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: