Berlin blames leak on officer logging in via insecure Singapore hotel line

[shp0ngle]

https://www.politico.eu/article/german-defense-minister-blames-taurus-call-leak-officer-logging-via-insecure-hotel-line/

[dredmorbius]

What's the nature of WebEx's encryption which renders it impotent to channel-based attacks here? The article is parlously light on technical details.

Some light DDG'ing doesn't turn up any more substantive cryptographic discussion.

[shp0ngle → dredmorbius]

I think they allow people to join by just calling by phone.

The phone was tapped.

[dredmorbius → shp0ngle]

Ah, I was thinking that the WiFi or dialup connection (data, not voice) had been compromised.

Dialing in from an unsecured phone would be quite poor opsec. And tapping that phone quite a coup for the Russians.

[shp0ngle]

This is a political article (so it will probably get flagged, removed and downvoted) but, it relates to security and encryption, so I submitted it anyway

from the article:

> WebEx, a communications program from U.S.-based Cisco Systems, provides end-to-end encryption which allows for secure communications. However, if a participant dials in via a landline rather than using the app — as apparently happened in the case of the officer in Singapore — then the encryption is not guaranteed.

[dredmorbius → shp0ngle]

<https://news.ycombinator.com/item?id=9562917>

<https://news.ycombinator.com/item?id=8339325>

If you want to discuss the merits of an article, discuss its merits rather than anticipating attacks.

(IMO this submission is valid.)

[shp0ngle → dredmorbius]

okay, next time, cannot edit anymore