Datamining the NSA
elmartinos writes "With official permission from the data protection committee in the Austrian Office of the Federal Chancellor, quintessence (an association for the re-establishment of information civil rights) has data mined an extensive mailing list related to the Biometric Consortium, which is part of the NSA. Heise (Google translation) writes that a quintessenz activist was able to get access to the mailing list through social engineering, and used a PHP script to extract 1GB worth of data. Quintessenz is using the open source tool Weka for data mining, and Kea for text mining. The first chapter of the gathered information is available online."
Now we're going to end up with a hundred thousand troops in Austria. Thanks!
But, your honor, I'm not a Con Artist, I'm a professional Social Engineer!
http://216.239.59.104/search?q=cache:qosbTf6Ca3gJ: www.quintessenz.org/cgi-bin/index%3Fid%3D000100003 172+&hl=en Google cache.. site's down
If anyone can hear me, slap some sense into me But you turn your head, and I end up talking to myself
Don't give anybody any ideas.
1) The Biometric Consortium is not "part of the NSA"
2) Somebody lied a bit to get onto a relatively open mailing list
3) This whole thing is on par with kids grabbing some telephone switch manuals out of a dumpster and bringing them to a 2600 meeting to show off to other losers.
What I'm listening to now on Pandora...
Austria's not a member of NATO.
m l
Secondly this mailing list was/is an open list. The magical "hack" here was writing a script to get some historical postings that weren't easily accessed.
Also Quintessenz apparently notified the list that it was going to be analyzed and nobody complained (probably because it's an open list anyway).
This, like many other Slashdot stories lately (or is it just me?) is unbelievably overhyped bullshit.
Or, if prefer another viewpoint, and you too would like to join the ranks of NSA hackers - follow this secret link to the mailing list!
http://www.biometrics.org/html/listserv.ht
(but don't tell anyone I posted this link. I don't have a tinfoil hat... yet)
I've conducted extensive analysis of a top-secret message board called "Slashdot". Slashdot is known to be regularly visited by employees of many government agencies, including military and espionage organizations.
Based on my expert analysis of the message traffic, I have determined:
1998-2000 - Using supercomputing VA-Linux beowulf clusters and drawing upon the grit-making skills of Natalie Portman, the NSA was doing bad things.
2000-2003 - Mr. Goatse and Tubgirl complete the VA-Linux transition to OSDN and formulate the Slashdot/NSA/CIA business plan:
1. Take distgusting pictures
2. Utilize legacy hot grits(tm) technology
3. ???
4. Profit!
2004-present - RIAA sues everyone. The universe is safe.
Conformity is the jailer of freedom and enemy of growth. -JFK
This slashdot blurb is the most dense collection of buzzwords I think I've seen in months. I try to make sense of it and all I can see is "Linux crypto hackers open sourced the BSD Microsoft monopoly!"
I think it has its own gravitational field
Irritable, left-wing and possibly humorous bumper stickers and t-shirts
As a non-US citizen, I'm slightly happy to see that someone cares about keeping tabs on US activities. Especially military activities.
Contrary to popular belief most (or at least a lot) of what the NSA does isn't all that secret. They're mostly just concerned with improving I.T. security in general, both for the gub'mint and private corporations. The do research. They publish papers. The typical boring CompSci stuff. This mailing list was probably a bunch of people involved in this sort of low-level work.
The secret stuff is done by Central Security Services and the Information Assurance Directorate. They're the guys that "certify" trusted networks and systems. They basically do for networks what the FBI does for people when they investigate them for clearance. Of course, as part of their job, they "audit" the security of our critical systems remotely and covertly (i.e. Red Teaming).
The really secret stuff is done by the SIGINT folks. They're tasked with intercepting and analyzing any "interesting" communications while at the same time keeping our communications secure. They're the codemakers and the codebreakers. Even in this über-secretive area, they're pretty much just a bunch of crypto-geeks who never get their hands dirty (they leave HUMINT to the CIA).
Heck, the only guys at NSA HQ who even carry guns are the security guards. Well.. them and the several thousand soldiers surrounding them (they are in the middle of an Army base after all).
That all having been said, whoever "harvested" this information is asking for trouble. They can expect a visit from some counter-intelligence officers who will want to know exactly why these persons are so interested in who's on the NSA's payroll.
You are attempting to read sigs. Cancel or Allow?
1. Sign up for "secret NSA mailing list" at http://www.biometrics.org/html/listserv.html
2. Read archives
3. Super haxxor!
Yes, that's the joke. It's dismally common among north american* english speakers to [hear|read] "Australia" when someone [says|writes] "Austria", mostly because they've never heard of Austria. My father is from Austria and has a shirt he got there that has:
-An outline of Austria
-A kangaroo silhouette inside the outline
-A "red circle with diagonal line through it" over the kangaroo
-A caption which reads "There are no kangaroos in AUSTRIA"
*The English are close enough to europe to know where Austria is, and Australians know the name of their own country well enough to tell the difference; but like 20% of US and Canadian english speakers he meets get it wrong, according to my dad.
If a job's not worth doing, it's not worth doing right.
The story isn't that they got onto the mailing list.
/. and it's an entirely different thing to analyse thousands of postings to prove that and how they influence whom and when.
The story is that they have sifted through huge amounts of data to extract the interesting parts, and essentially made an analysis of the history of biometric standards, and the respective attempts of NSA people to push it this way or that.
It's one thing to post "I think the NSA is influencing biometric companies" to
Assorted stuff I do sometimes: Lemuria.org