Slashdot Mirror
Inside NSA's Efforts To Hunt Sysadmins
An anonymous reader writes "The Snowden revelations continue, with The Intercept releasing an NSA document titled 'I hunt sys admins' (PDF on Cryptome). The document details NSA plans to break into systems administrators' computers in order to gain access to the networks they control. The Intercept has a detailed analysis of the leaked document. Quoting: 'The classified posts reveal how the NSA official aspired to create a database that would function as an international hit list of sys admins to potentially target. Yet the document makes clear that the admins are not suspected of any criminal activity – they are targeted only because they control access to networks the agency wants to infiltrate. "Who better to target than the person that already has the ‘keys to the kingdom’?" one of the posts says.'"
This is why I insist that my official job title is "Soup Dispenser Technician, Second Class" on all official documents.
Finally had enough. Come see us over at https://soylentnews.org/
Do not as I do, do as I say: I am the NSA!
It's alright for me to bust into others' systems all day.
What's that you say? I can do that too then, it's ok?
The NSA says nay!
Do not as I do, but as I say!
People need to be arrested for this. The people who ordered it done, wrote the reports, signed off on it, and anyone who did it. Ship some of them to various other countries for trials too, let everyone get into the action and let it be known to governments that this is not to be accepted.
Waiting for an amusing sig.
There once was an NSA operative from Nantuckett
Whose ________ was so _______ he could ________.
He said with a _________ as he wiped off his __________,
"If my __________ was a _________ I would __________ it."
(police show up at house)
"Wait...what are you doing! I was just making a joke online...I didn't mean it...please!"
(shot in face, staged as suicide)
Once you break into a admin's computer, with his credentials, it's a two way street.. One can plant evidence just as well as detect it..
Now that this info is public knowledge, any accused should levy a defense that the NSA planted the evidence, since they have the ability and the court has no way of identifying planted information verses unapproved activity.
Advice to NSA admins, I know it is a cushy job, but find another job NOT in the government, the NSA is on a witch-hunt it's only a matter of time before they turn innocent bystanders into criminals.
Good idea, I'll post a message to the facebook group for assassins for hire, and we'll... hmm... who could be at the door THIS early?
I read through it. What I got was some full of himself mid-level network aware weenie who managed to get a job at NSA and get access to a vast trove of captured packet data trying to impress people with his vast knowledge of intarwebs protocols... I bet the smart people at NSA who are reading his lunatic ravings are wondering "who hired this asshole?"
When a spy agency have to spy its own spy, it's not a spy agency anymore but a paranoiac employer.
And it's also the end of any mccarthyism in the USA
Ceci n'est pas une Signature !
The traditional fate of spies is death, so arrange to catch one and rendition him to Russia.
davecb@spamcop.net
If they are compromising sysadmins without due process, then a sysadmin like Snowden compromising them is just desserts.
This is my signature. There are many like it, but this one is mine.
Sadly the NSA isn't, and creating these back doors is just creating a honey pot for those who are. Stop compromising our networks in the name of "national security".
As bad as such revelations are, what drives me nuts is all the apologists who crawl out of the woodwork every time one of these stories breaks. They have no end of justification for whatever the NSA or CIA does, anything from "I have nothing to hide" to "privacy is dead, stop bitching because the Good Guys are working t protect you".
I predict the kind of practice in TFA is going to keep mushrooming until someone uses it as a political weapon and then gets caught. Only then will the jock-sniffing Congress do something substantive about this mess.
If I were advising Hillary Clinton, I'd tell her to never touch another computer until her political career is over.
It would be nice if we could sick the CFAA on the NSA. Unofrtunately, they are immune from that law.
But you merely adopted the shell. I was born in it, molded by it. I didn't see the GUI until I was already a man, by then it was nothing to me but BLINDING!
The login prompts betray you, because they belong to me.
so give it your best, young man. I and my greybeards are forged in this art. We know that behind your presentation, your boldface scrawlings and your bemused predatory preamble that we have coffee ringed RFC's that have seen more fervent attempts than yours. Save yourself some grief and maybe curry our favour. target our PHB instead.
Good people go to bed earlier.
If you are a sysadmin, and you have a Facebook page, LinkedIn account, social-media-whatever thingmagajig or Slashdot account, the NSA may well come after you.
Remember: this is written in plain sight and the NSA created fake Slashdot account to get into Belgacom.
I am a sysadmin. I have a Slashdot account. Maybe it is time for me to say so long, and thanks for all the fish. What Beta was not able to do, the NSA did.
The right to offend is far more important than the right not to be offended. (Rowan Atkinson)
It has already happened.
While NSA was hunting sysadmins, they were being pwned by...a sysadmin!
Yet another example of how NSA is too focused on offensive network capabilities (breaking into target systems) and doesn't pay enough attention to defense (strong crypto, open security models, etc.)
We are the 198 proof..
So they're basically running through LinkedIn and targeting anyone who says they're a SysAdmin, a VP, or anyone else who looks like they might have elevated privileges?
Competition Good, Monopoly Bad.
Do our bidding or we'll out your posts on /mlp/.
Have gnu, will travel.
Wow they are amateurs now.
Dear NSA, want to do your job right? then start watching top networking companies for job openings and have your Networking expert agents apply for the jobs there. Nothing better than having your agent working on the inside.
a "hit list" is stupid, you waste a LOT of time having to deal with them, but if Agent Davis is a network admin at VERIZON or AT&T then you make a single phone call to own the network.
This tip is free, otherwise I am $4500 an hour minimum of 10 hour charge for any more consulting, als you pay all travel costs and I only fly private or military jet. F16 trainer preferred.
Do not look at laser with remaining good eye.
As the Boston bombing shows, the NSA is really not reading facebook. They're storing all this shit. but it's not used for any actual intelligence work. I can only speculate what it is used for, but chances are that's it's about money. So feel free to post on facebook, that's the last place they'll look.
So many attempted lawsuits against the USG over various spying revelations have been refused because the complainant has no "standing," i.e. legal proof that they have been damaged. I imagine that if the list of targets were to leak, that would give those individuals valid standing to sue. As someone who was the DBA at a US$6-7B/yr corporation for more than 7 years I sort of suspect my name is on their list. I will say one thing, there's no fucking way any NSA ratware got into systems under my control using me as a conduit.
Thanks to the War on Drugs, it's easier to buy meth than it is to buy cold medicine!
> are ROFL-easy [...] And pointing out for the lulz [...]
- seperate normal surfing from your admin job
- encrypt everything
- consider to bounce connections via another server. Bonus if the final connection is via an intranet
- consider using a vpn-service, which routes many people over one ip
- avoid facebook and webmail (are they talking about specific webmails?)
for the selector stuff: install a cookie-killer like self-destructing-cookies (firefox) or tab-cookies (chromium).
As the Boston bombing shows, the NSA is really not reading facebook. They're storing all this shit. but it's not used for any actual intelligence work. I can only speculate what it is used for, but chances are that's it's about money. So feel free to post on facebook, that's the last place they'll look.
More accurately, they're storing it so that once they decide you're the guilty one, they can easily backtrack through everything you've ever said or did to "prove" it. Six lines from an honest man, and all that.
does it; but when the government and it's many contractors do it, it's A-OK.
So now you, the company CIO, go back to work and wonder if your sysadmins might inadvertently infect your servers with a trojan. Or worse, they have already been turned by the NSA. So screw this running your own infrastructure in-house. Pull the plug and put everything in The Cloud. Where they promise you security. Its possible that this document was leaked purposefully, to sew some doubts into decision makers minds with regard to their in-house admins.
In reality, The Cloud makes things easier to crack. A couple of big targets rather than thousands of little ones.
Have gnu, will travel.