7
7/27/2019 Cryptome Cable Cuts Worldwide http://slidepdf.com/reader/full/cryptome-cable-cuts-worldwide 1/7 To: <[email protected]> Subject: RE: undersea cable cuts Date: Sun, 10 Feb 2008 06:12:38 -0500 Actually, tapping terrestrial fiber optic cable is easy: a 3db splitter will do it, though that introduces a break (which isnt a big deal: sonet/sdh rings will recover within 50 ms, in general). Its also fairly easy to introduce a tap that doesnt introduce a break, and this doesnt require spookish equipment at all:its kind of a hand-grip-looking thing that clamps onto the fiber and pulls some of the optical signal via cladding-mode coupling. Either of these methods introduce at least a 3db loss, which in many cases will just be assumed by the fibers owners to be some of the usual cultprits that cause loss, or simply a poor splice by the truck guys. Once you introduce optical amplification, however, its eavesdrop city and you can tap out some signal without the loss being evident to even OTDRs. Tapping an underwater cable is far, far harder, but the NSA is known by fiber guys to have at least two of the very expensive and very specialized subs necessary. At Bellcore, I actually consulted on some undersea project by the defense department, who were seeing intermittent losses on their underwater something-or-other, which they never told us. But, it was obvious that they were operating an OC-3 network via their own optical fibers, which I strongly suspect sat alongside or even inside the underwater cable. They probably had periodic stations to look for interesting chunks of traffic that they could tap (or electronically copy) into their own network, which Ill take a wild guess was probably ATM over OC-3, which would make sense for several reasons, including reach, which is critical in that environment. In this case, though, I dont think its us JbTs, just because theres too much business at stake. I suspect we have some new mode of fiber optic mujahadeen that are trying to hurt or seriously fuck up money flows into the middle east, but dont quote me on that. How did they do it? Dont know, but remember they were resourceful

Cryptome Cable Cuts Worldwide

Embed Size (px)

Citation preview

Page 1: Cryptome Cable Cuts Worldwide

7/27/2019 Cryptome Cable Cuts Worldwide

http://slidepdf.com/reader/full/cryptome-cable-cuts-worldwide 1/7

To: <[email protected]>Subject: RE: undersea cable cutsDate: Sun, 10 Feb 2008 06:12:38 -0500

Actually, tapping terrestrial fiber optic cable is easy: a 3dbsplitter will

do it, though that introduces a break (which isnt a big deal:sonet/sdh ringswill recover within 50 ms, in general).

Its also fairly easy to introduce a tap that doesnt introduce a break,andthis doesnt require spookish equipment at all:its kind of ahand-grip-looking thing that clamps onto the fiber and pulls some oftheoptical signal via cladding-mode coupling.

Either of these methods introduce at least a 3db loss, which in manycases

will just be assumed by the fibers owners to be some of the usualcultpritsthat cause loss, or simply a poor splice by the truck guys.

Once you introduce optical amplification, however, its eavesdrop cityand youcan tap out some signal without the loss being evident to even OTDRs.

Tapping an underwater cable is far, far harder, but the NSA is knownby fiberguys to have at least two of the very expensive and very specializedsubsnecessary.

At Bellcore, I actually consulted on some undersea project by thedefensedepartment, who were seeing intermittent losses on their underwatersomething-or-other, which they never told us. But, it was obvious thattheywere operating an OC-3 network via their own optical fibers, which Istronglysuspect sat alongside or even inside the underwater cable. Theyprobably hadperiodic stations to look for interesting chunks of traffic that theycouldtap (or electronically copy) into their own network, which Ill take awild

guess was probably ATM over OC-3, which would make sense for severalreasons,including reach, which is critical in that environment.

In this case, though, I dont think its us JbTs, just because therestoomuch business at stake.

I suspect we have some new mode of fiber optic mujahadeen that aretrying tohurt or seriously fuck up money flows into the middle east, but dontquote meon that. How did they do it? Dont know, but remember they were

resourceful

Page 2: Cryptome Cable Cuts Worldwide

7/27/2019 Cryptome Cable Cuts Worldwide

http://slidepdf.com/reader/full/cryptome-cable-cuts-worldwide 2/7

enough to figure out how to turn a 727 into a very effective smartmissile.

Date: Sat, 9 Feb 2008 12:04:33 -0500To: [email protected]: Re: undersea cable cuts

The Economist did little research, it seems, or it was fed disinfo, orwas induced to defuse speculation.

This list's archive, if no where else, would defuse most of theEconomist'sdefusing. That's not to say the cpunks archives exists in full, or noteasilylocated. [Selections below.]

For several years, if not from day one, transoceanic cables are pre-riggedfor tapping, aguably for repair and maintenance by firms like GlobalMarine,but easily siphoned for less benign purposes. Moreover it is flatwrong thatfiber optic cable is hard to tap. It takes sophisticated equipment butnonethat is beyond the spies and telecomms regular capability. Disinfoaboundsabout this as with most classified-at-birth communications technology.

The spies regularly spout that fiber has made eavesdropping moredifficult,along with encryption, the out of control Internet, the ease oftransborderevasion of global laws on privacy and national security.

Top US spy McConnell is on automatic about these fairy tales.

Lying about interception capability is as old as communications. TheEconomist is full of shit and shallowness, the silly quotes fromdiscussionlists, with only a small chance that the story was not planted byofficials.

It sure reads like the usual DNI-MI-speak when an op is discovered ordeliberately leaked to divert attention from more covert derringdo.

Say, why tap when worldwide ISPs are jumping through hoops to getnatsecsnooping business.

I'd say global spies are desperate to keep surveillance budgets out ofthisworld. Almost as desperate as news outlets whipsawing readers.

Nothing like that would ever happen here.

Page 3: Cryptome Cable Cuts Worldwide

7/27/2019 Cryptome Cable Cuts Worldwide

http://slidepdf.com/reader/full/cryptome-cable-cuts-worldwide 3/7

 Selections from the Cypherpunks mail-list archives:

http://www.cypherpunks.to/faq/cyphernomicron/chapter18.html  

Cyphernomicon by Tim May

18.13 - Physical Security

18.13.1. "Can fiber optical cables be tapped?"+ Yes. Light can escape from the fiber in bends, and "near-

field" tapping is theoretically possible, at least underlab conditions. Active measures for puncturing cableshields and tapping fibers are also possible.- "The Fed's want a cost effective F/O tap. My company was

approached to develop such a system, can be done but notcheap like copper wire tapping." [domonkos[at]access.digex.net (andy domonkos),comp.org.eff.talk, 1994-06-29]

http://cryptome.org/conus-sigint.htm  

6 June 2003

Modern cable companies use fiber optics to transmit the signalsfrom the headend where the satellite dishes and antennas are toa neighborhood where they are converted from optical to rf oncopper and distributed locally.

And optical fiber does not radiate at all at radio frequencies.The only source of rf radiation in fiber optic systems is theelectronics at either end which convert the light into electricalsignals for local use.

One problem that most naive paranoid types completely fail tograsp is the titanic volume of modern communications. The flowis so overwhelming that only a powerful God could possibly processit all to find interesting material. The entire federal budgetcould not pay enough humans to screen and analyze ALL theelectonic communications of even a medium size city in 2003.

So communications intercepts are necessarily targeted very narrowly,even drag net fishing is likely done only in places where there isa real likelihood that something important will turn up with finiteeffort.

The notion that an all powerful big brother is listening toeverything and capturing everything just is not realistic, anda very very high percentage of what does get captured is neverlooked at or listened to or even stored for very long.

Which of course is why traffic analysis and transaction analysisand social network discovery is far more important than flyingairplanes around trying to collect incidental radiation fromlocal copper T1 lines. Knowing who calls or emails who makesit possible to find the needles which you want to monitor inthe vast haystacks. Thus there is a much greater probabilitythat records of your calls and IP traffic addresses are lookedat for patterns and association with known bad guys than that

someone is actually listening to or reading your trafficlooking for the word bomb.

Page 4: Cryptome Cable Cuts Worldwide

7/27/2019 Cryptome Cable Cuts Worldwide

http://slidepdf.com/reader/full/cryptome-cable-cuts-worldwide 4/7

 http://jya.com/echelon-go.htm  

07 Oct 1998

During the 1970s and 1980s, almost all Britain's long-distance

telephone calls were carried on the microwave network of whichHunters Stones is part. The existence of the cables connectingthe network to [NSA's] Menwith Hill has been known since 1980,but the authorities have always refused to comment. BT nowclaims that the cables were connected directly to the UnitedStates via undersea cable, and did not link to other parts ofthe British system.

The system was upgraded in 1992, says BT, when a new high capacityoptical fibre cable was installed. This linked to a different partof the BT network, but was also carried directly to the UnitedStates via undersea cable. Since then, BT revealed, the capacityof the system has been trebled by adding two more optical fibre

links. These could carry more than 100,000 simultaneous telephonecalls.

http://jya.com/rusigint.htm 

16 Feb 1997

Even international communications from the US are less and lessrouted via satellite as high capacity fiber trans-ocean cables areinstalled. I have seen numbers on the order of less than 10%satellite transmission of international traffic and as new opticalamplifier cables are installed (which one can assume the UK/USApartners such as the US NSA get the entire bitstream from) thisnumber is also plunging. And most international satellitecommunications can be monitored from the other end and do nothave to be monitored from near the US.

As a point of fact I would be more concerned that Russian submarineshave tapped the trans-Atlantic and trans-Pacific cables somewherethan that the Russians pick up satellite communications. One hopesthat the bitstreams on those cables are really securely linkencrypted - doing so would seem to be a no-brainer - but I havenever seen any reference to this being the practice.

Of course all sigint yields information such as passwords andencryption keys and spectral signatures of speakers and calladdressing and routing information (traffic analysis) that can

be used to good advantage in later active man-in-the-middleattacks. And one can certainly assume that the Russians and manyother governments including the US have spent considerable effortdeveloping active penetration and disruption capability. It haseven been reported that the US has been using this to forcenetwork traffic to be routed in Europe via facilities the UScan monitor.

http://cypherpunks.venona.com/date/1996/11/msg02285.html  

28 Nov 1996

Doug Barnes writes:

PS -- DO read Neal Stephenson's article in the same Wired; it's

Page 5: Cryptome Cable Cuts Worldwide

7/27/2019 Cryptome Cable Cuts Worldwide

http://slidepdf.com/reader/full/cryptome-cable-cuts-worldwide 5/7

a bit boosterish, but it's the funniest tract on fiberoptic cable you'll ever read. It gives a good idea ofwhere things are headed (deregulation, disintermediationof cable laying services, cable as speculative investmentas opposed to guaranteed utility, etc.). I'd argue thingsaren't headed that way as quickly as Neal indicates, but

certainly where FLAG is landing, it's acting as a catalystfor change of this sort.

Wired, December 1996

Neal Stephenson

There is also the obvious threat of sabotage by a hostile government,but, surprisingly, this almost never happens. When cypherpunk DougBarnes was researching his Caribbean project, he spent some timelooking into this, because it was exactly the kind of threat hewas worried about in the case of a data haven. Somewhat to hisown surprise and relief, he concluded that it simply wasn't going

to happen. "Cutting a submarine cable," Barnes says, "is likestarting a nuclear war. It's easy to do, the results are devastating,and as soon as one country does it, all of the others will retaliate.

More of Stephenson's article:

http://www.wired.com/wired/archive/4.12/ffglass.html  

Date: Sat, 9 Feb 2008 11:14:55 -0500To: [email protected]: Re: undersea cable cuts

I have read several posts on this both here and on other lists, thenewsseems not to be reporting much about this and the conspiracy theoriesabound. Today however, I read a rather interesting piece on TheEconomist which I found interesting enough to post here for comment...

According to them, this is just a well publicized string ofcoincidencesand in one case, one cable was taken down by the operators themselves.The assertion that these cables fail relatively often, yet gounreportedis also interesting to me. The other interesting statement is that

thisdid not have a massive impact on Iran's internet infrastructure. Thelatter would have the impact of nullifying many theories, if true.Whatdo folks here think? --

http://www.economist.com/world/international/displaystory.cfm?story_id=10653963 

WHEN two undersea cables were damaged, apparently by ships' anchors,five miles north of Alexandria on January 30th, it seemed like areminder of the fragility of the internet. The cablesbone owned byFLAG

Telecom, a subsidiary of India's Reliance Group, the other (SEA-ME-WE4)

Page 6: Cryptome Cable Cuts Worldwide

7/27/2019 Cryptome Cable Cuts Worldwide

http://slidepdf.com/reader/full/cryptome-cable-cuts-worldwide 6/7

by a consortium of 16 telecoms firmsbcarry almost 90% of the datatraffic that goes through the Suez canal. When the connections failed,they took with them almost all internet links between Europe and theGulf and South Asia.

Egypt lost 70% of its internet connectivity immediately. More than

halfof western India's outbound capacity crashed, messing up the country'soutsourcing industry. Over the next few days, as cable operatorssoughtnew routes, 75m people from Algeria to Bangladesh saw internet linksdisrupted or cut off.

But when, on February 1st, another of FLAG Telecom's cables wasdamaged, this time on the other side of the Arabian peninsula, west ofDubai, the story started to change. As an internet user known asspyd3rweb wrote on digg.com, b1 cable = an accident; 2 cables = apossible accident; 3 cables = deliberately sabotaged.b The conspiracytheories started to take wing.

bWe need to ponder the possibilityb, declared a posting ondefensetech.org, bthat these cable cuts were intentional maliciousacts. And even if the first incident was just an innocent butimportantaccident, the second could well be a terrorist copycat event.b OrAmerican villainy, said others. A user called Blakey Rat reported thatbthe US navy was at one point technically able to tap into underseafibre-optic cables using a special chamber mounted on a supportsubmarine.b A website called the Galloping Beaver asked, bwhere is theUSS Jimmy Carter?bba nuclear attack submarine which had apparentlyvanished.

The notion that something spookier than ships' anchors was to blamegained ground when Egypt's transport ministry said it had studiedvideofootage of the sea lanes where the cables had been, and no ships hadcrossed the line of the breakage for 12 hours before and after theaccident (the area is, in fact, off limits to shipping). Suspicionspread when yet another cable -- between Qatar and the United ArabEmirates -- went down on February 3rd. "Beyond the realm ofcoincidence!"said a user of ArabianBusiness.com.

In fact, the fourth break was unsuspicious: the network was taken downby its operator because of a power failure. But by that time theconspiracists were in overdrive. Slashdot.org, a discussion board,

saidIran had lost all internet access on February 1st. "A communicationsdisruption can mean only one thingbinvasion," said bigdavex, quoting aline from a "Star Wars" film. Bloggers in Pakistan, having recoveredfrom their disruption, returned with a vengeance. The broken cables,they said, forced a delay in the opening of an oil bourse in Tehran;this would have led, claimed pkpolitics.com, to the mass selling ofdollars "which would have instantly crashed [the American] economy".Marcus Salek of New World Order 101.com (nwo101.com) added that"President Putin ordered the Russian air force to take immediateactionto protect the Russian nation's vital undersea cables."

There is just one small problem: Iran's internet connectivity wasnever

Page 7: Cryptome Cable Cuts Worldwide

7/27/2019 Cryptome Cable Cuts Worldwide

http://slidepdf.com/reader/full/cryptome-cable-cuts-worldwide 7/7

lost. Todd Underwood and Earl Zmijewski of Renesys, aninternet-monitoring firm, reported that four-fifths of the 695networkswith connections in Iran were unaffected. Most of the other theoriesdissolve under analysis, too. Perhaps the American navy can bugfibre-optic cables but it's not clear how. A report for the European

Parliament found in 2000 that "optical-fibre cables do not leak radiofrequency signals and cannot be tapped using inductive loops.[Intelligence agencies] have spent a great deal of money on researchinto tapping optical fibres, reportedly with little success."

It may be rare for several cables to go down in a week, but it canhappen. Global Marine Systems, a firm that repairs marine cables, saysmore than 50 cables were cut or damaged in the Atlantic last year; bigoceans are criss-crossed by so many cables that a single break haslittle impact. What was unusual about the damage in the Suez canal wasthat it took place at a point where two continents' traffic is bornealong only three cables. More are being laid. For the moment, there isonly one fair conclusion: the internet is vulnerable, in places, but

getting more robust