[tor-talk] Russia actually kind of cracked (?) Tor

[karsten.n at mailbox.org]

Hi,

Andreas Krey <a.krey at gmx.de>:
> Er, no. SINA is to protect the connection from the provider
> to the agency (which is going over the internet), essentially
> hardware VPN boxes. The provider still sets up what to feed
> into that box, based on written orders from the agency

I'm not sure about this. The Utimaco Lawful Inspection Units LIMS (used by
big German email providers)  contain a "X1 admin interface" (or
"Management Server") which can used for administration of affected targets
and LEAs directly from the law enforcement agency like SORM.

See LIMS product description:
https://s3.amazonaws.com/s3.documentcloud.org/documents/804662/1241_utimaco_product-description.pdf
(PDF!)

> The Management Server, the core component of the LIMS 
> system, incorporates the administration system for all system 
> modules, the user interface, as well as security management 
> for the whole system. The server maintains a central data-
> base of all intercept targets and authorized LEAs.

The "Management Server" of the LIMS unit can get all information for
provisioning a lawful interception by "H1 interface" directly from the law
enforcement agency.

I don't know, how X1 and H1 interfaces are used in real use cases, but it
ready to go.

Best regards
Karsten N.