<!DOCTYPE html>
<html><head>
<meta charset="UTF-8">
</head><body><p><span style="color: #333333; font-family: helvetica, arial, sans-serif; font-size: 12pt; background-color: transparent;">From Sophos Security:</span></p><h2>NSA posts tools on GitHub</h2><p>We’re all more familiar with the NSA’s software than we might want to be, thanks to the<a href="https://nakedsecurity.sophos.com/?s=wannacry">WannaCry outbreak</a>in May that built on<a href="https://nakedsecurity.sophos.com/?s=eternalblue">EternalBlue</a>, a tool developed by the NSA as part of its armoury of weaponised exploits and unleashed on the world<a href="https://nakedsecurity.sophos.com/?s=shadow+brokers">via the Shadow Brokers’ dump</a>.</p><p>Now the Shadow Brokers – and anyone else interested in the tools the NSA has developed – can go to the agency’s newly created<a href="https://nationalsecurityagency.github.io/">GitHub page</a>, where it’s sharing some of its open-source tools. These include one to identify prohibited or unexpected security certificates on Windows machines, a portable VPN built with Linux and a Raspberry Pi, and an architecture for processing streaming sources.</p><p>The GitHub page is part of the agency’s slow move to being more open:<a href="https://twitter.com/NSAGov">it joined Twitter in 2013</a>– the same year its former employee<a href="https://nakedsecurity.sophos.com/?s=edward+snowden">Edward Snowden</a>revealed the documents he’d stolen from them – and now boasts nearly 357,000 followers.</p><p>The aim of joining GitHub is to “work with agency innovators who wish to use this collaborative model for transferring their technology to the commercial marketplace”, says the agency.</p></body></html>