TEXTO
Brazil plans secure email service to thwart cyber-spies

Brazil has confirmed plans to create a secure email service, following revelations of cyber-surveillance techniques used by the US and UK.

President Dilma Rousseff posted a series of tweets over the weekend, saying the move was required to “prevent possible espionage”.

She added the country’s Federal Data Processing Service (Serpro) would be charged with developing the system.

One expert said the tech involved was well established but had limitations.

“There’s a good precedent for this with the German provider Gmx.de,” said Prof Ross Anderson, head of the security research group at the University of Cambridge’s computer laboratory.

“They just need to tell a company to keep the servers in Brazil, encrypt all the traffic inside or outside the country, and only give access to Brazilian police and intelligence services.

“Bang, finished, it’s trivial. It’s a well understood and well solved problem.”

He said that the Brazilian system could be designed to interact with Gmx and equivalent encrypted services, in which case the NSA (US National Security Agency) and GCHQ (UK Government Communications Headquarters) would effectively be shut out unless the countries where the relevant servers were based decided to co-operate. But he added that information could still be intercepted if cyber-spies were able to install malware on their target’s computers or if users corresponded with someone using an non-secure email service.

“From the point of view of people writing to each other in Brazil, they have some protection against foreign snooping, however more and more business these days is done internationally,” he said.

“With Gmail having something like a third of all email traffic worldwide, that means the Americans will still be able to read an awful lot of messages.

“If you have an email [copied] to a dozen different people there will be a fair chance one of them will be using Google’s service.”

Fonte:http://www.bbc.co.uk/news/technology-24519969

TEXTO

Brazil plans secure email service to thwart cyber-spies

Brasil planeja serviço de e-mail seguro para frustar cyber-espiões (espiões cibernéticos)

Brazil has confirmed plans to create a secure email service, following revelations of cyber-surveillance techniques used by the US and UK.
O Brasil confirmou planos para criar um serviço de e-mail seguro, seguindo as revelações de técnicas de cyber-vigilância usadas pelos Estados Unidos e Reino Unido.

President Dilma Rousseff posted a series of tweets over the weekend, saying the move was required to “prevent possible espionage”.
A Presidenta Dilma Rousseff postou uma série de “tweets” no final de semana, dizendo que a mudança foi requerida para “prevenir possível espionagem”.

She added the country’s Federal Data Processing Service (Serpro) would be charged with developing the system.
Ela acrescentou que o SERPRO (Serviço Federal de Processamento de Dados) seria incumbido com o desenvolvimento do sistema.

One expert said the tech involved was well established but had limitations.
Um especialista disse que a tecnologia envolvida foi bem estabelecida, mas tinha limitações.

“There’s a good precedent for this with the German provider Gmx.de,” said Prof Ross Anderson, head of the security research group at the University of Cambridge’s computer laboratory.
“Há um bom precedente para isso com o provedor alemão Gmx.de”, disse o Professor Ross Anderson, chefe do grupo de pesquisa em segurança do laboratório de computação da Universidade de Cambridge.

“They just need to tell a company to keep the servers in Brazil, encrypt all the traffic inside or outside the country, and only give access to Brazilian police and intelligence services.
“Eles somente necessitam dizer a companhia para manter os servidores no Brasil, criptografar o tráfego dentro e fora do país, e somente dar acesso para os serviços de inteligência e polícia brasileira”.

“Bang, finished, it’s trivial. It’s a well understood and well solved problem.”
“Bang, finalizado, isso é trivial. Se isso for bem entendido, problema bem resolvido”.

He said that the Brazilian system could be designed to interact with Gmx and equivalent encrypted services, in which case the NSA (US National Security Agency) and GCHQ (UK Government Communications Headquarters) would effectively be shut out unless the countries where the relevant servers were based decided to co-operate. But he added that information could still be intercepted if cyber-spies were able to install malware on their target’s computers or if users corresponded with someone using an non-secure email service.
Ele disse que o sistema brasileiro poderia ser desenhado para interagir com Gmx e serviços de criptografia equivalentes, nos quais se encaixam o NSA (Agência Nacional de Segurança dos Estados Unidos) e GCHQ (Quartel General de Comunicações do Governo do Reino Unido) que poderiam efetivamente ser fechados a menos que os países onde os servidores relevantes estão baseados decidam cooperar. Mas ele acrescentou que a informação poderia ainda ser interceptada se os cyber-espiões fossem habilitados a instalar “malwares” sobre seus computadores-alvo ou se os usuários se corresponderem com alguém usando um serviço de e-mail não seguro.

“From the point of view of people writing to each other in Brazil, they have some protection against foreign snooping, however more and more business these days is done internationally,” he said.
“Do ponto de vista das pessoas escrevendo uns para os outros no Brasil, eles tem alguma proteção contra xeretice estrangeira, contudo mais e mais negócios nesses dias são feitos internacionalmente”, ele disse.

“With Gmail having something like a third of all email traffic worldwide, that means the Americans will still be able to read an awful lot of messages.
“Com o Gmail tendo algo como uma terça parte de todo tráfego de e-mail em todo mundo, isso significa que os americanos ainda estarão habilitados a ler uma espantosa quantidade de mensagens”.

“If you have an email [copied] to a dozen different people there will be a fair chance one of them will be using Google’s service.”
“Se você tem um e-mail (copiado) para uma dúzia de pessoas diferentes haverá uma bela chance de um deles estar usando o serviço Google”.