Slashdot Mirror
How To Stop the Next WikiLeaks
Hugh Pickens writes "Eli Lake reports that the U.S.'s 16 intelligence agencies are using a program called SureView that makes it easier to spy on the spies and catch whistleblowers early in the act. SureView is a type of auditing software that specializes in 'behavior-based internal monitoring' that monitors the intelligence officer's computer activity. If the officer acts like a potential leaker, sending an encrypted email or using an unregistered thumb drive, the analyst might push a button and watch a screen video of the officer's last hour of work. Once a case is made that a leak might be imminent, it is checkmate: the agent is thwarted. 'Had SureView been on Bradley Manning's machine, no one would know who Bradley Manning is today,' says Ryan Szedelo, manager for Raytheon's SureView software. The intelligence community has had auditing software for years. SureView came on the market in 2002. But the programs were buggy and often prone to false positives, alerting a network administrator too often to routine behavior. 'The technology has gotten substantially better in the last year,' says Jeffrey Harris, a former head of the National Reconnaissance Office. 'The problem with audit files was it took an army of people to understand them. Now we have rule-driven systems and expert systems that help us reason through the data.'"
What if I send only encrypted mail, and use only encrypted drives? Are they going to watch my screen the whole time?
'Had SureView been on Bradley Manning's machine, no one would know who Bradley Manning is today,'
They say that like it's a good thing...
The problem is that the system is only as good as the ruleset and detection; it's the same theory behind antivirus. If you have a zero-day exploit that acts differently it's going to get through, and if you have someone that figures out a different way to capture data then the leak will happen. Can the software detect someone taking a picture of a document on the screen with their camera? Can it detect getting booted from an OS CD? Can it stop a person from telling someone what they read? This is just more window-dressing to make the people in charge feel a little safer.
If a spy spies a spy who spies, who spies the spy who spies the spy?
In italian is funnier because both "spy" and "spies" translate into "spia".
Se una spia spia una spia che spia, chi spia la spia che spia la spia?
'Had SureView been on Bradley Manning's machine, no one would know who Bradley Manning is today,' says Ryan Szedelo, manager for Raytheon's SureView software.
And nobody would have evidence of the serious crimes he told the world about. That's what they're really worried about.
I am officially gone from
Why are we just making it easier for skynet to take over?
Don't give millions of government employees access to confidential documents. The Manning documents were likely already in the possession of all major powers.
They can stop all the leaks they want, but whatever happens in the World, I'm beginning to think my Government instigated some how - so I don't need to see any leaks: we're at fault.
It has some to the point that when I see aggressive action taken against the US by some group or country, aside from North Korea, I just wonder WTF did our Government do to them to instigate it - or who did we support that did the deed *cough*Israel*cough*.
And more than likely that whatever our Government did was to support oil or banking interests or some other multinational corporate (read billionaire's) interests.
We the US don't stand for Truth, Justice, and Freedom.
Or, you could stop committing and covering up crimes and routinely classify any and all information regardless if it's needed or not. Then nobody would feel the need to leak the things that are rightfully secret.
Just a thought.
May we live long and die out
"Had SureView been on Bradley Manning's machine, no one would know who Bradley Manning is today,"
This quote sends shivers down my spine.
Imagine if King George III had had this kind of technology. Then no one would know who George Washington is today. Why would anybody think this is a bad thing?
"A week in the lab saves an hour in the library"
Another fly-by-night software developer conned some tech-ignorant government institute into buying their shit-software under the guise that it would stop their latest .
Go America! I'm sure this will work out just fine for everyone.
If the officer acts like a potential leaker, sending an encrypted email or using an unregistered thumb drive, the analyst might push a button and watch a screen video of the officer's last hour of work.
...of course, this system is totally secure and cannot be abused in any way...
Oh, the jobs people work at!
Out west, near Hawtch-Hawtch,
there's a Hawtch-Hawtcher Bee-Watcher.
His job is to watch...
is to keep both his eyes on the lazy town bee.
A bee that is watched will work harder, you see.
Well... he watched and he watched.
But, in spite of his watch,
that bee didn't work any harder. Not Mawtch.
So somebody said,
"Our old-bee-watching man
just isn't bee-watching as hard as he can.
He ought to be watched by another Hawtch-Hawtcher!
The thing that we need
is a Bee-Watcher-Watcher!"
WELL...
The Bee-Watcher-Watcher watched the Bee-Watcher.
He didn't watch well. So another Hawtch-Hawtcher
had to come in as a Watch-Watcher-Watcher!
And today all the Hawtchers who live in Hawtch-Hawtch
are watching on Watch-Watcher-Watchering-Watch,
Watch-Watching the Watcher who's watching the bee.
You're not a Hawtch-Watcher. You're lucky, you see!
If you were blocking sigs, you wouldn't have to read this.
Lemmiwinks
Coming soon to a corporate network near you : SureView Enterprise.
If a worker acts like a potential human, sending a personal email, visiting an unregistered website or trying to conduct union activities on site, the analyst might push a button and watch a screen video of the officer's last hour of work. Once a case is made that something might be imminent, it is checkmate: the worker is thwarted.
I have not read most of it, but I closely followed for a while the WL releases for the countries I am familiar with. The "leaks" were basically the reports of the embassy intelligence figurehead, and consisted exclusively of two things -- translations of rumors and newspaper articles, dutifully translated to English by hired locals, and some general political commentary, which usually closely echoed the pro-American media on the ground. Actually, considering the report dates, it seems the other way around -- the pro-US media on the ground closely echoed the points of the reports. Not a single instance of really secret, juicy information has been leaked so far, for a total of four countries, two of which are rather important.
At the beginning, there was a lot of brouhaha about Assange and what not, so I entertained the idea that this was a real leak. But as it turned out that WL was mostly regurgitation of local news and political commentary, I am starting to seriously consider the possibility it was a controlled operation. I think that Assange and Mannings believed they were leaking important stuff, but is that all the story?
The timing of the leaks, the amazing and sudden "galvanizing" effect they allegedly had in Africa and the Middle East, the timings of the spyops that raised the "revolutions" and the subsequent NATO military operations, etc. all seem too smooth for coincidences. I doubt WL will be the last leak of this kind we see.
...that you are a murderer, stop murdering.
Minimize access to sensitive docs, keep those with access happy, and most importantly, always be ethical.
Big Brother is watching you!
I wonder when they make this compulsory for civilians as well?
Nae king! Nae laird! Nae yurrupiean pressedent! We willna be fooled again!
You know, all that war, killing and hiding the truth could just end. Nah.
couldn't get thru the books, couldn't get thru ur post
A new counter-counter-counter intelligence method is devised
set your wallpaper to goatse people
Just act like a decent moral human being. If you do "because" someone is going to blow the whistle on you.
If Google really cared they would fix Android Chrome to reflow text, instead of discriminating
If the officer acts like a potential leaker, sending an encrypted email or using an unregistered thumb drive, the analyst might push a button and watch a screen video of the officer's last hour of work.
So, then, the analyst becomes the leaker. (Or the spy that a 3rd party hires)
A more likely senario, is that the "officer" (who is an analyst himself), plays it safe, and doesn't gather enough intel together to actually figure out what the real bad guys are doing.
All ideas^H^H^H^H^Hprocesses in this post are Patent Pending. (as well as the process of patenting all postings)
The gov has proven themselves incapable of properly deploying large scale software projects similar to this.
Mediocrity rules the military, some officer will quickly get annoyed with any smart folks you put on the project, and they will be quickly replaced by some yes-man lackey with little experience or creativity.
You sic Lemmiwinks on it.
Summary is actually about stopping leaks and the latter existed long before Assange's website. Inasmuch I am glad Manning's load became public, but for a security agency any leak-preventing policy seems a reasonable and logical step.
The risk an insider takes to publicize the data that is prohibited from publicizing by law should be compensated for the society in case the activity he is publicizing is criminal (that is breaking other laws).
Now, there are probably internal rules on how to fight crime inside the walls of security agency, but I am pretty sure they are not covering a lot of real situations that are not only real but actually already happened in the past.
I do not believe in karma. "Funny"=-6. Do good and forbid evil. Yours, Oft-Offtopic Flamebaiting Troll.
And there you have it: the North Koreans represent such a definitive immenent high level threat that we must be prepared to destroy the earth to stop them!!! By the way, where is this 'North Korea' that you speak of?
At the age when US president openly murders US citizens on a hunch and starts whatever war he wants, like a Boss (like a King) and the rest of the government doesn't stop him in his tracks.
At the age when US Supreme Court doesn't see anything wrong with the federal government going way beyond its authority on pretty much every issue, every law, every regulation, every tax.
At the age when Congress and Senate bail out banks and companies and vote to increase debt limit without ever considering the consequences.
At the age when Federal Reserve is counterfeiting currency left right and center.
At the age of fascism/corporatism on the top and Marxism/communism on the bottom.
What do you need wikileaks for? Are you blind?
--
Of-course they want the specifics of their secrets to remain secrets, they are now your rulers, not your servants.
You can't handle the truth.
Have they considered sending Lemmiwinks into epic battle against Wikileaks?
You know you've hopelessly fucked up, when the one guy who sends an encrypted email is suspected of being the leak.
As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
South park has the answer -- just bring back Lemmiwinks for a fight to the death!
Most of their leaks could probably be stopped with a very small script or service that sends out a very bright warning whenever a large file or amount of files are copied or generated.
Wiki-huh? Oh, that thing trumped up to sell books by that loser, Asslang or whatever.
Absolutely not true in the modern age of computers.
Given a juicy chunk of data, a smart guy with a few software tricks will dig that info out. The power of the internet is it only takes ONE smart guy, (or gal!) and then the results are rebroadcast in sound bite form.
My first Journal Entry ever, in 8 years! http://slashdot.org/journal/365947/aphelion-scifi-fantasy-horror-poetry-webzine
With Halloween coming, I should expect scary things but this, "'Had SureView been on Bradley Manning's machine, no one would know who Bradley Manning is today,' says Ryan Szedelo,..." is probably the scariest thing I'll read all month.
Don't stop where the ink does.
Does SureView have a plug-in for that?
I'm trying to teach myself to set people on fire with my mind... Is it hot in here?
We are becoming The Borg. Machines are increasing controlling us via high level puppetmasters. Is there any difference between this and slavery?
At the age of fascism/corporatism on the top and Marxism/communism on the bottom.
The first points were on the mark, but you lost me there. Are you trying to say things were better when the free market was in effect and Communism was an actual competitor to our semi-democracy?
Or are you one of those loons who think Communism is actually a good idea? Pretty sure Poland, for example, didn't work so damned hard to drive out the Reds because it was all shits and well-stocked grocery stores.
Read my journal.
You can't handle the truth.
The most embarassing thing about the cablegate scandal was how the US Government reacted to it. To this day there is still a guy in solitary confinement without a trial. He's on anti-psychotic meds so that he doesn't kill himself, and likely will never be the same again... maybe not even sane again.
The worst part, why did a disallusioned army private have access to the most privaledged communiqué from embassies around the world?
Instead of using software that has already been acknowledged as giving massive amounts of false positives and a massive breach of personal privacy, they could, I don't know, stop letting people so low in the chain have access to all of the diplomatic material. The US Government certainly isn't making up for the embarassment of how they have already handled this case.
A team of cats would also do the trick.
I though WikiLeaks was awesome. Big brother, fuck you.
Three Swedish girls next time.
And two guys willing to throw everything away from the Bank of America leak.
http://en.wikipedia.org/wiki/Analog_hole
Just get Lemmiwinks .
We must get Lemmiwinks to stop his evil brother!
>> well then how in the hell did it become common knowledge?
>> These days leakers are the only way we find out about the shenanigans our agencies pull.
More seriously, the USA look every year less like a democraty, and more like the former Eastern Germany, with the difference of modern technology for data mining.
If a leak occurs do the same test for every employee with access to the document, and discard the half for whom the correct character was visible. Keep repeating for every subsequent leak, halving the group each time. It wouldn't take many documents on average to identify who the culprit was.
This is sad to hear. The government reserves the right to spy on literally everybody, but will not permit itself to be observed. Who does watch the watchers, anyway?
Like all institutions, the government is concerned mainly with perpetuating its own existence. And since the general public equates the government's existence with their security and their own existence, they tolerate all kinds of wrong deeds and imbalances of power like this.
Secession is the right of all sentient beings.
...stop doing terrible things that are worth leaking?
What do I know, I'm just an idiot, right?
Lemiwinks can stop Wikileaks.
Lemmiwinks.
Go lemmiwinks, stop wikileaks.
Easy - kill everyone having anything to do with supporting the current Wikileaks, starting with the traitor Bradley Manning.
They hadn't disabled CD burning and no one at the exits was checking writable media, if they couldn't be bothered with this most basic stuff then nothing is going to work.
At the age when Congress and Senate bail out banks and companies and vote to increase debt limit without ever considering the consequences.
That was about a month before the elections. The incumbents could have felt the voters' wrath, but noooooo, they got reelected. America got the corrupt bastards they deserve.
Isn't Raytheon the people who had the Patriot missile software bug? Since this software was written by a defense contractor you can rest assured that the motivation was purely profit not delivering an effective product. And all the programmers were probably laid off as soon as the project was finished (but not necessarily done).
I can only imagine the bushel-baskets of false positives this cash-grab fiasco will generate. But they'll just make even more lucre trying to fix it.
There are some chillingly anti-human corporations out there; ADM is one; Raytheon is another.
Eli Lake is an anagram for "leak lie". Is it his real name? Too funny.
For all intensive purposes, "whom" is no longer a word. That begs the question, "who cares"?
Does this ring as wrong for anyone else here? I mean, it wasn't that long ago that there was a big deal about passing laws protecting whistleblowers, and now they want to catch them earlier in the act. So I guess it all boils down to whose whistle you're blowing eh?
Sometimes there just ain't enough work to keep all the bees busy and out of trouble, so might as well create another layer of bureaucracy, it's either that or build more prisons, the U.S. has the highest incarceration rate per capita in the world. Also, wonder if they have any serious mole problems in the intelligence agencies, for instance Israel has a good deal of interest in what the U.S. military does, getting more data on employees might help with mole problems, not just whistle-blowers. Definitely would be better if there was much less secrecy in the U.S. gov in general, help with fraud.
Yeah, I know, its an oxymoron. Sadly never more than today. Our government has too many secrets. Too many bodies buried. Too many skeletons in the closet. The secrets its keeping are not in your best interest, or they'd share them with you. No, the only way to keep government in check is with transparency. When an employee of the government see's gross negligence, naked aggression, illegal activities, or profound betrayals of the Constitution or the American People, they are honor bound to make that information public, and any attempt to stop them is itself a crime against the nation. More, they should be treated as heroes, not black listed and hung out to dry or worse prosecuted.
Time after time we hear of some government atrocity, a person of impeccable integrity looks to get redress for the perceived wrong, and is basically told its none of his business not once but time after time. Finally he has nobody left in government to speak to so he tell the media. At which point they either remains anonymous, or they get crucified.
Now they tell us we can all be proud that our government has so wisely spent hundreds of millions of our tax dollars to plug up those nasty leaks and keep those rotten secrets, secret. Isn't that wonderful, now we can all enjoy the benefits of plausible deniability, while our rogue government bombs brown people for oil on behalf of Exxon-Mobil.
Folks, this might be a fine time to howl at your representatives... you know, the folks who are supposed to represent us? Let them know how we feel about government transparency. We're all in this together, and if what Government is doing is obscene, immoral or just plain illegal, there's a good reason why we all should know, and that's because you shouldn't be doing it! God Bless the Whistle Blowers!!!
Its high time we remind our Government its they who are here to serve us, and not the other way around!
Hi America... SureView... its like DEPENDS for the government. It prevents embarrassing leaks!
This is what J. L. Austin analyzed as a performative: the truth lies in the fact that you said it, such as stating "I christen thee the Titanic" then smashing a bottle.
If people fear this technology, the outcome it exists to promote automatically improves. Interesting.
In the service of this handy performative, it's not necessary to divulge any correct information about the true workings of the program. That would be counterproduct, in fact. Best to cast your dart into the red herring suburb of vaguely truthful.
Nice to know that our intelligence agencies actually got the Dr Strangelove memo: deterrents are more effective when you boast in public. What the horny Dr failed to mention is that your boasts need to be merely plausible--and not necessarily truthful--to have roughly the same effect.
Maybe the program sucks at picking up the first order behaviours, but is pretty good at picking up dodges a nervous person might make concerned the program is looking over his shoulder. Wheels within wheels. You game such as system at your own peril.
We might not have heard of Manning, but we've certainly heard of the guest facilities where the people we've never heard of are sure to end up.
just another way big brother can watch us all.
http://www.youtube.com/watch?v=x1I3uiqeG-g
Exposing military misconduct is obviously moral behavior. A system that punishes moral behavior is immoral. It does't matter whether he knew there would be consequences. It's the consequences that are the problem.
Behavior that I disagree with, which makes me uncomfortable, or that I don't like is not necessarily (or even probably) misconduct. But even if it was...
Doing 'whatever I want' with information that I do not own after agreeing not to do so is not a moral act. Stealing information is not a moral act. Imposing my discomfort or dislikes on you; making you conform to my personal likes; is not a moral act. Trying to avoid responsibility for committing an immoral act... is not a moral act. Committing immoral acts in the hope of exposing other immoral acts seems like hypocrisy at best.
Mr. Manning appears not to be a moral actor in this case. Any system that seeks to prevent immoral actors from acting immorally is...?
I will read the article the next time I see a "How to Encourage the next wikileaks" topic!
We need wikileaks because the things that you see are only the tip of what is going on behind closed doors.
All the world's a CPU, and all the men and women merely AI agents
Wikileaks has let out some important and secret information over the last few years. If you don't know what wikileaks is, this article gives an explanation on it.
http://explainlikeakid.blogspot.com/2011/10/wiki-leaks.html
Does all this not just amount to counter-intelligence against your own people? I mean, if the people you serve want to know, let them know! I'm not naive enough to think that everything should be available, but a lot of the stuff that has leaked has been really quite important, and evidence enough that if you think you can hide it, people will commit the most attrocious acts in the name of "serving the greater good". We're living in a time that is a horrible cross between 1984 and V for Vendetta, yet the western world seems perfectly happy to bend over and take it!
I'd say that in a hundred years, people are going to look back on this decade as the dark ages of the information age, but we already know that now. Wikileaks was only the start.
They're still out there trying stop Wikileaks (obviously), these intelligence firms. Their aims?
Feed the fuel between the feuding groups. Disinformation. Create messages around actions of sabotage or discredit the opposing organizations. Submit fake documents and then call out the error.
Create concern over the security of the infrastructure. Create exposure stories. If the process is believed not to be secure they are done.
Cyber attacks against the infrastructure to get data on document submitters. This would kill the project. Since the servers are now in Sweden and France putting a team together to get access is more straightforward.
Media campaign to push the radial and reckless nature of WikiLeaks activities. Sustain pressure. Does nothing for the fanatics, but creates concern and doubt among moderates.
Search for leaks. Use social media to profile and identify risky behavior of employees.
They might stop one employee, but if we all do it they won't have enough manpower to keep going. It's disobedience, and it works when enough people say,"I won't be part of this anymore."
-
oh, and one more thing about all this wikileaks BS.
I've known a few fed employees who hold the line on this insanity. You know what they're afraid of losing? They don't have kids, they're aren't living in squalor or anything... they're worried about losing their FUCKING PINBALL MACHINES and their LORD OF THE RINGS COLLECTION!!!!!!
People are shredding YOUR rights so they can have a bunch of STUPID toys! It's OBSCENE!
I am sorry for the rant, but I feel quite strongly about this subject, and knowing some of the people who perpetrate it first hand, it makes me even sicker to see our democratic republic die for a fucking movie series. We ALL deserve better.
-
(I have no mod points today.)
Computer memory is just fancy paper, CPUs just fancy pens with fancy erasers; the 'net is just a fancy backyard fence.
"Had SureView been on Bradley Manning's machine, no one would know who Bradley Manning is today,"
Who is their right mind keeps such material and how can we trust to monitor such a system.
The guy in Germany who left to set up his own "better" version of Wikileaks took all the leaked copies of the BOA documents with him but destroyed them instead of releasing them, and the "better" leak site never actually released anything and has gone. Unless the original leaker has copies and sends them onto somebody else we (and interested governments and law enforcement) are not going to see them.