Risk
6/24/2013
11:07 AM
Connect Directly
RSS
E-Mail
50%
50%

NSA Leaker Snowden On The Run

U.S. files charges against former National Security Agency contractor Edward Snowden, who is seeking asylum in Ecuador. To date, Hong Kong and Moscow have declined to detain him.

Snowden's Sunday travel from Hong Kong to Moscow followed the State Department issuing a request to "Western Hemisphere" countries through which Snowden might travel, the BBC reported. "The U.S. is advising these governments that Snowden is wanted on felony charges, and as such should not be allowed to proceed in any further international travel, other than is necessary to return him to the United States," a U.S. state department official reportedly said.

Why wasn't Snowden detained in Hong Kong? Notably, the territory of China has a "surrender" agreement with the United States, which is different than extradition, which involves agreements between sovereign states. Furthermore, Hong Kong was informed that on June 15 the U.S issued a provisional arrest warrant for Snowden. On June 17, the government of Hong Kong acknowledged receipt of the U.S. government's request to detain Snowden, and two days later said the matter was under review.

Sunday, however, Hong Kong officials said Snowden departed "on his own accord for a third country through a lawful and normal channel." They declined to prevent him from traveling, saying that Washington's request to detain him was incomplete, and that there was no legal basis for doing so. According to the U.S. State Department, Snowden's U.S. passport was revoked Saturday, although authorities in Hong Kong may have been unaware of that revocation.

U.S. officials reacted with incredulity that Snowden hadn't been detained by Hong Kong authorities. "I had actually thought that China would see this as an opportunity to improve relations and extradite him to the United States," said Senate Intelligence committee chairwoman Dianne Feinstein on CBS television. "China clearly had a role in this, in my view. I don't think this was just Hong Kong without Chinese acquiescence."

Then again, China may have been making a political statement: Snowden Sunday revealed that the NSA had been hacking into Chinese telecommunications carriers to intercept millions of subscribers' text messages.

Previous
2 of 2
Next
Comment  | 
Print  | 
More Insights
Register for Dark Reading Newsletters
White Papers
Cartoon
Current Issue
Dark Reading Must Reads - September 25, 2014
Dark Reading's new Must Reads is a compendium of our best recent coverage of identity and access management. Learn about access control in the age of HTML5, how to improve authentication, why Active Directory is dead, and more.
Flash Poll
Video
Slideshows
Twitter Feed
Dark Reading - Bug Report
Bug Report
Enterprise Vulnerabilities
From DHS/US-CERT's National Vulnerability Database
CVE-2012-5485
Published: 2014-09-30
registerConfiglet.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via unspecified vectors, related to the admin interface.

CVE-2012-5486
Published: 2014-09-30
ZPublisher.HTTPRequest._scrubHeader in Zope 2 before 2.13.19, as used in Plone before 4.3 beta 1, allows remote attackers to inject arbitrary HTTP headers via a linefeed (LF) character.

CVE-2012-5487
Published: 2014-09-30
The sandbox whitelisting function (allowmodule.py) in Plone before 4.2.3 and 4.3 before beta 1 allows remote authenticated users with certain privileges to bypass the Python sandbox restriction and execute arbitrary Python code via vectors related to importing.

CVE-2012-5488
Published: 2014-09-30
python_scripts.py in Plone before 4.2.3 and 4.3 before beta 1 allows remote attackers to execute Python code via a crafted URL, related to createObject.

CVE-2012-5489
Published: 2014-09-30
The App.Undo.UndoSupport.get_request_var_or_attr function in Zope before 2.12.21 and 3.13.x before 2.13.11, as used in Plone before 4.2.3 and 4.3 before beta 1, allows remote authenticated users to gain access to restricted attributes via unspecified vectors.

Best of the Web
Dark Reading Radio
Archived Dark Reading Radio
In our next Dark Reading Radio broadcast, we’ll take a close look at some of the latest research and practices in application security.