Senaterka Mareykanka Ron Wyden wuxuu u diray NSA talooyin ku saabsan VPN-yada
Senaterka Mareykanka ee ka tirsan xisbiga Dimuqraadiga Ron Wyden ayaa u diray hoggaamiyaha NSA, Jeneraal Joshua Rudd, qoraal ku saabsan in la bixiyo talooyin dhab ah oo ku saabsan sida VPN-yada loo isticmaalo si loo ilaaliyo xiriirka internetka ee dadka ka hortagga eedaysiga dowladaha dibadda.
Maxaa ku jira VPN-yada?
VPN-yada waxay u isticmaalaan xiriir la xiray oo u gudbiya internetka si loo ilaaliyo xogta internetka ee qofka, iyagoo ka dhigaya in aan la ogaan karin IP-ga qofka. Haddana, qaar ka mid ah VPN-yada ma ilaaliyaan xogta kale ee la xiriira, sida waqtiga iyo qiyaasta xogta, taas oo u oggolaan karta dowladaha inay sameeyaan faallooyin ku saabsan qofka.
Tani waxay keentay in Senaterka Wyden uu codsado in NSA ay bixiso talooyin ku saabsan sida loo isticmaalo VPN-yada si loo ilaaliyo xogta internetka ee qofka, iyadoo la eegayo xogta kale ee la xiriira.
Qoraalka Senaterka Wyden
Senaterka Wyden wuxuu qoraalkiisa ku yiri: 'Dadka Mareykan ee ka horreeya eedaysiga dowladaha dibadda, sida shaqaalaha dowladda, shirkadaha difaaca, warbaahinta, iyo xuquuqda aadanaha, waxay u baahan yihiin talooyin dhab ah oo ku saabsan sida loo ilaaliyo xogta internetka ee qofka.'
Wuxuu sidoo kale codsaday in NSA ay bixiso talooyin ku saabsan sida loo isticmaalo VPN-yada, iyadoo la eegayo xogta kale ee la xiriira, sida waqtiga iyo qiyaasta xogta.
Talooyinka NSA
Senaterka Wyden wuxuu codsaday in NSA ay bixiso talooyin ku saabsan sida loo isticmaalo VPN-yada, iyadoo la eegayo xogta kale ee la xiriira, sida waqtiga iyo qiyaasta xogta.
Wuxuu sidoo kale codsaday in NSA ay bixiso talooyin ku saabsan sida loo isticmaalo VPN-yada, iyadoo la eegayo xogta kale ee la xiriira, sida waqtiga iyo qiyaasta xogta.
US Senator Ron Wyden has formally requested that the National Security Agency update its public guidance to provide Americans with specific, actionable advice on how to use virtual private networks to protect against foreign surveillance.
The Request for Clarity
Sen. Ron Wyden (D-Ore.) sent a letter on Wednesday to Gen. Joshua Rudd, the director of the NSA, asking for specific recommendations on VPN configurations. He emphasized that Americans facing advanced foreign threats—including government personnel, defense contractors, journalists, and human rights defenders—deserve clear, honest advice about how best to protect their communications from surveillance by foreign adversaries.
While US agencies have previously recommended the use of VPNs, none have given recommendations on which ones provide adequate protection. Wyden stated that he requests the agency to update its existing public guidance on VPN configurations to address this critical gap in public information.
Technical Limitations of VPNs
VPNs funnel all of a user's Internet traffic through an encrypted connection to a remote server and allow users to hide their IP addresses from the destination servers they communicate with. However, the encrypted tunnel often terminates once a single server decrypts the traffic and sends it on to its final destination, meaning the decrypted traffic or the sending and destination IP addresses may be available for snooping by rogue employees or attackers who hack the server.
VPNs also don't encrypt certain types of metadata, such as time stamps, allowing nation-states to build profiles that can be useful in intelligence gathering. The letter further inquires about the use of random delays and cryptographic padding to thwart attacks that detect timing patterns or the size of messages, highlighting the nuanced architecture required for true security.
Evaluation of Specific Services
The letter also asks about the adequacy of specific services such as Apple Private Relay, Nym, and Tor, seeking the NSA's expert assessment on their protective capabilities. Wyden's inquiry touches on single-hop VPNs, which use a single server to decrypt traffic sent by the user and send it to its destination, as well as multi-hop architectures where traffic is funneled through two or more servers.
In these multi-hop setups, the first server sees only the IP address of the sender and the terminating server sees only the destination address, offering layered protection. The senator's detailed questions underscore the complexity of choosing a VPN that can withstand sophisticated surveillance techniques employed by foreign adversaries.
Ilaha iyo xuquuqda sawirka
Sawir: Ars Technica Xigasho
