@averlice @briankrebs Obviously centralization is an issue and I'd consider state-sponsored attackers criminally incompetent if they didn't compromize #IXP|s and #IX|es.

• In fact, we all know that there's #Glimmerglass hardware spliced into the @decix 's PoP in NYC since before #PRISM so yeah, OFC all the major providers will have their #Govware - Infrastructure for "#LawfulInterception" broken into.
  • Espechally since these boxes usually have hardcoded credentials and allow anyone with access to use them for stuff.

I can't go into further details, but basically there is #logging, #recording / packet #capture & redirection infra that is transparent at every #ISP that isn't like exempt due to being less than say 10k subscribers / users …

@Fr333k @FritzAdalis it's a #fiberoptic splitter cabinet sporting some fancy hardware from #Glimmerglass that allows realtime packet extraction and DPI at line speeds...

• Don't believe me? Ask #Snowden!

@lispi314 @lauren @pixelschubsi yes, but we canbagree that very #centralized servers like those of @signalapp are way more susceptible to that compared to any halfassed #OniomService because it's trivialbto hust shove some #GlimmerGlass box on the fiber between a datacenter and their #upsream(sl and just "#bullrun" the selectively captured traffic...

With @torproject / #Tor it's much cheaper to actually attack and take down a #Server / #Service.

For an organization like #Signalcthat that gets their fans to #FUD about "#Metadata" it's shocking to see they didn't do an #OnionService to this day!