Feeds

Scariest NSA revelation yet: Spooks are RUBBISH at CIPHERS

'Encrypted' Tweet takes world+dog a moment or two to solve

Choosing a cloud hosting partner with confidence

The NSA (yes, that NSA) has triggered a bit of a Tweet-storm, followed by helpless fits of giggles among geeks, by posting a job-ad-Tweet that used a simple Roman-style substitution cipher.

tpfccdlfdtte pcaccplircdt dklpcfrp?qeiq lhpqlipqeodf gpwafopwprti izxndkiqpkii krirrifcapnc dxkdciqcafmd vkfpcadf. #MissionMonday #NSA #news

— NSA (@NSACareers) May 5, 2014

The Tweet creeped out some people, but has since been revealed as the first of what the agency says will be an ongoing recruitment campaign seeking “the best and brightest” – and this is where the fits of giggles start.

As noted by the Washington Post, the message uses a simple substitution cipher to obfuscate a fairly prosaic message: “want to know what it takes to work at nsa? check back each monday as we explore careers essential to protecting your nation.”

Not only is the code simple, the ciphertext contains very obvious clues. That there's just one question mark in the text suggests strongly there's an actual question in the text, along the way making rather a mess of the format of using 12 characters in each block of text and hinting strongly that the spaces are meaningless.

El Reg will allow this much: while this cipher is lame, a bright spark in the agency's social media team could have a longer-term plan to generate ongoing interest in the game, by using a more modern and sophisticated cipher on each round.

If the NSA follows history, we guess next Monday's challenge will be a polyalphabetic cipher. ®

Remote control for virtualized desktops

More from The Register

next story
Knock Knock tool makes a joke of Mac AV
Yes, we know Macs 'don't get viruses', but when they do this code'll spot 'em
Feds seek potential 'second Snowden' gov doc leaker – report
Hang on, Ed wasn't here when we compiled THIS document
Why weasel words might not work for Whisper
CEO suspends editor but privacy questions remain
DEATH by PowerPoint: Microsoft warns of 0-day attack hidden in slides
Might put out patch in update, might chuck it out sooner
BlackEnergy crimeware coursing through US control systems
US CERT says three flavours of control kit are under attack
prev story

Whitepapers

Cloud and hybrid-cloud data protection for VMware
Learn how quick and easy it is to configure backups and perform restores for VMware environments.
Getting started with customer-focused identity management
Learn why identity is a fundamental requirement to digital growth, and how without it there is no way to identify and engage customers in a meaningful way.
Reg Reader Research: SaaS based Email and Office Productivity Tools
Read this Reg reader report which provides advice and guidance for SMBs towards the use of SaaS based email and Office productivity tools.
New hybrid storage solutions
Tackling data challenges through emerging hybrid storage solutions that enable optimum database performance whilst managing costs and increasingly large data stores.
Website security in corporate America
Find out how you rank among other IT managers testing your website's vulnerabilities.