Slashdot Mirror
Glenn Greenwald: How the NSA Tampers With US Made Internet Routers
Bob9113 (14996) writes "According to Glenn Greenwald, reporting in The Guardian: 'A June 2010 report from the head of the NSA's Access and Target Development department is shockingly explicit. The NSA routinely receives – or intercepts – routers, servers, and other computer network devices being exported from the US before they are delivered to the international customers. The agency then implants backdoor surveillance tools, repackages the devices with a factory seal, and sends them on. The NSA thus gains access to entire networks and all their users. The document gleefully observes that some "SIGINT tradecraft is very hands-on (literally!)".'"
Surely the NSA can touch anything that Customs does.
we were innocent and naive. Now you can only trust open source.
nosig today
Working for a defense contractor, I can say that someone is going to have fun talking with the FBI and/or the CIA and/or the NSA soon.
Happy butt raping!
Enough said
and, of course, China would never, ever consider doing that....
Had Snowden only leaked the unconstitutional domestic spying, he would be a hero. It should be very clear now that those leaks were just a cover for treason. His goal seems to be nothing less than the dismantling of our entire intelligence apparatus.
Just wait till the markets open tomorrow. NASDAQ down 600-800 points (at least). Nobody sane is going to purchase US-made networking gear for a very long time.
yeah baby
FNORD! why weren't we told of this? the NSA actually eavesdrops on communications outside the U.S.? with aplomb, acting all like it's in the NSA's charter or something?
I say, arrest this asshat without the BS of a trial and send this traitoress informant of NSA secrets to Gitmo! I say!
You just single-handedly killed the entire US tech industry. You murdered trust. No one will ever trust US hardware again.
What a travesty.
Shit. It's almost as if they're out to sabotage the US tech industry all together.
How can we sell gear abroad knowing it can and will be tampered with by a dark budget US agency that has an unknown agenda and doesn't feel the need to report to the Congress or the President?
Modern IT products depend on security. Security is about trust chains. NSA has broken all of the trust chains. US IT products are now useless abroad.
This is to be expected.... what is the real scope of this?
I believe that a router on the way to a German auto maker is not targeted. OK I want to believe.
I believe that a well managed site will audit and reload software. I believe that additional system admin audits behind and in front of the
hardware are justified.
For the NSA (Never Say Anything) to snoop does not bother me but they are not the only TLA in the game today.
The internet has not been friendly for a gosh long time nothing has changed.
Truth is stranger than fiction, but it is because Fiction is obliged to stick to possibilities; Truth isn't. Mark Twain.
Security researcher and Tor developer, Andrea Shepherd, found something fishy:
http://www.techdirt.com/articl...
These are my friends, See how they glisten. See this one shine, how he smiles in the light.
This is about exports, to spy on foreigners.
More importantly, how does the release of this information benefit Americans privacy rights? This is about foreigners, not Americans. But I guess traitors aren't really concerned about Americans..
We PAY the NSA to spy on foreigners, because they're foreigners, fuck em. That's the NSA's job.
This is another example of traitors being traitors. Edward Snowden has done NOTHING to help actual American civili liberties.
In fact, all the disclosures released so far have shown government ACTIVELY protecting civil liberties of Americans. For example, why do you think they have actual filters to filter out data on Americans? If the NSA was about violating Americans rights, then they wouldn't have those filters in the first place. They would collect actual data, instead of metadata, because no one has the right to metadata privacy, as courts have decided already 35 years ago.
Remember, the goal is to expand the powers of government. We form a government to give it powers over other entities, like corporations (via laws and regulations) and foreigners (via trade rules and military).
All Americans are guests living in this country. Your role as a citizen is to make sure government continues to function and do its job, because that's what we as citizens have decided.
And we as citizens have decided, fuck foreigners - we're going to spy on them. And it's their governments job to protect their citizens privacy, not ours. Too bad traitors like Edward Snowden and their narcissistic precious snowflake high-school dropout libertarian supporters haven't figured this out yet.
Sorry that won't be able to reply to this, since you "libertarians" don't want us big-government jack-booted socialists thugs like me posting here and prefer to limit my posts because they has sad when we do. lol. Good job, idiots.
Decided now if you want to be a traitor or not. The rest of the country will deal with whatever you decide.
If the NSA had restricted its spying efforts to foreign countries, would Snowden have felt morally obligated to disclose this?
The NSA spied on Americans in violation of the law. So Snowden blew the whistle. If the NSA had not spied on Americans in violation of the law....maybe Snowden would have kept his mouth shut, and this amazing foreign intelligence network would have continued to function unabated.
I am not saying that it is OK for the NSA to spy on foreign governments to this degree...I am just saying that it would not have broken the (American) law and may not have pushed Snowden to blow the whistle.
The NSA got greedy. It's as simple as that.
Ah yes because the NSA says me so. You know what i think ? I think NSA told us to distrust other vendor because they have no back door in them.
C. Sagan : A demon haunted world:
http://www.amazon.com/gp/product/0345409469/
visit randi.org
This just goes to show what happens when you let a bunch of fucking niggers run your security departments.
This is far beyond espionage and about the common man. Espionage is some fake shit hollywood wants you to believe is real, the glamorization of getting ass fucked by surveillance and other perceived "cool" stuff the federal government makes to justify the fake terror organizations they set up in each in every country. Currently it's Ukraine.
Ever hear about this? http://swampland.time.com/2013/09/27/whos-watching-the-watchmen-nsa-employees-caught-spying-on-partners/
I suggest you slowly and calmly turn off CNN, Fox news, and wherever else you have justified your attitude and realize the complete betrayal of trust the NSA has been engaged in for over 50 years now.
People are waking up to the fact that the entire system is rigged. Every war, conflict, thing that happens on a global perception scale has been carefully scripted to gain more control over money and resources, and the media is there to keep people like you still believing that we should be good little slaves because we need "Espionage".
When 13 families run the world "Espionage" doesn't mean shit.
NSA's message:
Beware: we're doing it to them so they could be doing it to us.
Of course they could not go public with part one to they only publicized part two.
That doesn't matter. We now know that the NSA has backdoors in them. We highly suspect that the Chinese also have backdoors in them.
The question is how long it will take the other nations to start their own chip fabrication plants and build their own routers / switches / etc.
Since nothing from us can be trusted (even by us) then they should be building their own stuff which they can trust more than our stuff.
Now they've been found out it's going to hurt USA's export market.
they are fiddling with the firmware/bios (absolute.com). almost impossible to detect.
Bollocks
Hapless *BSD Or a public club, and enjoy all the Real problems that disappearing up its long term survival EFNet, and aaply *BSD is dying Yet decentralized OPENBSD, AS THE by BSDI who sell
You need to be one to understand one. US, especially the international cyber security related ranks of government, were worried about the security of networks, operating on Chinese made Huawei brand routing equipment. Has anyone give it a thought "why" ? Because, they were doing the same thing to the US manufactured equipment and up until Huawei undercut Cisco prices and made inroads to the US networks, they didn't say anything. I am just laughing why people are getting so upset at this point in game. Your privacy and mine as well, is no more than a joke.
__________
The more I know people, the more I love animals
Sorry, I've given up on all this Spy vs. Spy nonsense. Frankly I'm surprised that there hasn't been a story where the NSA employes pixies who spread magic fairy dust on the Internet Tubes and the secret encryption keys float magically in the air. Sure, a lot of what Snowden took possession of and released was most likely based in fact but a lot of it is starting to sound a bit more ridiculous. If this article has even 1% of credibility I would have thought that any security firm outside the US would have been able to confirm it. Once it's confirmed then I'll worry. If it's not confirmed then it's another red herring.
Harrison's Postulate - "For every action there is an equal and opposite criticism"
I have no problem with the NSA spying on the rest of the planet.
That's what they are paid to do.
I'm even fine with them intercepting my inbound stuff with a warrant or FISA order if I was connected via phone or other means to known enemies overseas.
Outright spying on me in my day to day life tho, that is right out.
I got a -1 for flamebait, with people telling me I was full of crap...just a few days ago when I explained how the NSA is standing in the way of critical needed upgrades in infrastructure because there software and hardware do not work with 10GigE or IPv6 among other things.
Got Geometrodynamics? Awe, too hard to figure out? Too bad.
So, as a business I ness US made routers so the chinese slave labor me out of the market, but in my home I need chineese made routers so the NSA isn't hacking my local computer.
Or I just get both, and put them back to back, and hope the US NSA never cooperates with the chineese NSA [equivalent]
1) Anti-Establishment candidates are often marginalized by the establishment, by civil methods and later by authoritarian ones depending on the threat and how authoritarian. Example: Ghandi. MLK. The extreme repression was their strength; the wise establishment doesn't empower their enemies.
2) If you can elect somebody, they are a minority and unless it is a dictatorship they can't do anything on their own. Continued marginalization and undermining them with their base as they are forced to compromise to get anything done at all. Example: Paul Wellstone, Bernie Sanders, Ron Paul (a rare case of no compromise and doing nothing.)
3) Use the system against the elected officials. As the 2006 NSA leaker stated, Obama was observed before he was a senator. Officials have things to hide; even honest ones must make tough decisions that can look horrible if made public. Catch-22, such as the intelligence committee members who can't even tell other's in office what they know. Remember, Wyden said when Snowden leaks came out that it was just the tip of the iceberg and he couldn't talk about any of it. Remember, the 1st Snowden leak was they were spying on everybody. that was the tip of the iceberg?!
Example: possibly everybody who did a 360 after getting in office.
4) Politicians can only address a few issues at a time; much of their time is spent eating shit from their predecessors and trying to convince people it will taste good after they add their seasoning and most their time is spent raising money.
5) Press has been captured. You have to go foreign to get anything and they are being terrorized. (Funny how much "treason" is applied to foreigners.) When it's a big issue the press backs the government position; without even the need to be asked. Self censorship is the norm and patriotism is supporting the gov PR. Remember, the press didn't back the pentagon papers until it was already published and that was back during better days.
Franken is my senator. he is just OK. He is also at risk of being replaced by a complete sellout.
Democracy Now! - uncensored, anti-establishment news
I work for a company that ships laptops, desktops, and routers to customers overseas and I'm going to say that there are some really weird things going on in transit that I can't explain. Particularly with international shipments, but not necessarily exclusively. I've personally heard from numerous customers who've had there systems seemingly opened in transit. Not just the packages, but the actual cases. They don't even always do a good job of re-connecting and re-sealing everything. Its obviously the cases that have been opened too as snap-style pieces are left disconnected (hard drives). No amount of vibration or force will cause a disconnect.
While I've suspected something like this I've never attempted to have a customer take a hash of the disk image and compare it to a before-shipment hash. Given this is a problem I think I might just go ahead and start doing this. The problem now is actually finding a customer who is going to be able to repeat the process on the other end.
You can bet the Chinese government are spying. Ditto for some European countries.(etc).. That said, any foreign government or corporation that buys US tech -- and thinks at this juncture that they aren't being spied on by the US government - would be dumber than a rock. (tinfoiler hatters were right after all)
America is digging a hole for itself in the technology sector. Foreign governments (and corporations) everywhere are scrambling to ween themselves off US technology. Because of use dominance it's a slow process but once that transformation happens, they won't ever be going back. The tech industry in the US will become much like the once dominant US auto industry, A has been that destroyed itself. (in this case by not standing up to government spy agencies clearly going too far).
The *only* way to change this inevitable decline is to change not only US laws but to create international agreements. It should be illegal to put back-doors into software/hardware that allow for wholesale spying on the citizens of any nation. And even in cases where spying of individuals is necessary, it is done with due process (i.e. ala the right to privacy in enshrined in the US constitution -- which the government officials that supported the NSA decided to ignore). Don't expect this to happen though. Politicians say one thing publicly to get voters but often do another once in power. They'll continue to put in their back doors as well as not disclosing vulnerabilities (ironically weakening security not only for other countries but America as well)
The way towards security in the future will thus come from the private sector. There is going to be big growth in companies that produce security hardware/software that explicitly have a mandate to distance themselves from any particular government and use open source designs, firmware, and software (which doesn't necessarily mean free). In an odd twist, total disclosure is the only way to build real security and privacy.
http://en.wikipedia.org/wiki/Narus_%28company%29
That was the network gear in the splitter room in San Fransisco ATT.
That's the NSA router supplier.
Not too long ago, I had two identical servers shipped from the US. Upon unboxing them and running them up -- I didn't pay too much attention to their physical appearance -- one of them had different CPUs, different HDDs and a different amount of RAM. I went back and double checked the shipping notice, packing slip and packaging. The packaging was correct and listed all of the components in the quantities that I expected, it's just that the server in the box had a different configuration and serial number. This happened pretty much the day after I read about about NSA allegedly intercepting and fiddling with shipments.
Now, I don't think we do anything interesting enough to warrant spying on our operations, but I can't help but think there is now some despot somewhere who got a clean server (ours) when the shipments were mixed up.
The vendor concerned was very interested in how this mix up might have happened.
"just people applying 20th century ideas to 21st century conflicts."
All too true. Although the results may be far worse than becoming a "quaint has-been". To expand on your point: ... There is a fundamental mismatch between 21st century reality and 20th century security thinking. Those "security" agencies are using those tools of abundance, cooperation, and sharing mainly from a mindset of scarcity, competition, and secrecy. Given the power of 21st century technology as an amplifier (including as weapons of mass destruction), a scarcity-based approach to using such technology ultimately is just making us all insecure. Such powerful technologies of abundance, designed, organized, and used from a mindset of scarcity could well ironically doom us all whether through military robots, nukes, plagues, propaganda, or whatever else... Or alternatively, as Bucky Fuller and others have suggested, we could use such technologies to build a world that is abundant and secure for all."
http://www.pdfernhout.net/reco...
"Likewise, even United States three-letter agencies like the NSA and the CIA, as well as their foreign counterparts, are becoming ironic institutions in many ways. Despite probably having more computing power per square foot than any other place in the world, they seem not to have thought much about the implications of all that computer power and organized information to transform the world into a place of abundance for all. Cheap computing makes possible just about cheap everything else, as does the ability to make better designs through shared computing.
And also on intelligence specifically:
http://www.phibetaiota.net/201...
"A failure to realize this irony will produce ever greater problems down the road as we develop ever greater technologies that can become ever greater amplifiers of destructive impulses (including self-replicating nanotech and biotech) or ever greater inhibitors of constructive impulses (like pervasive surveillance to enforce arbitrary unhealthy norms as a "war on the unexpected"" [see Schneier]). So, how can we have an intelligence community in the 21st century that is truly worthy of the name? How can we have an intelligence community that truly helps prevent misadventures that waste trillions of US dollars while millions of US children grow up in poverty and tens of millions of US citizens lack access to health care or even adequate nutritious food?"
And:
http://pcast.ideascale.com/a/d...
"As with that notion of "mutual security", the US intelligence community needs to look beyond seeing an intelligence tool as just something proprietary that gives a "friendly" analyst some advantage over an "unfriendly" analyst. Instead, the intelligence community could begin to see the potential for a free and open source intelligence tool as a way to promote "friendship" across the planet by dispelling some of the gloom of "want and ignorance" (see the scene in "A Christmas Carol" with Scrooge and a Christmas Spirit) that we still have all too much of around the planet. So, beyond supporting legitimate US intelligence needs (useful with their own closed sources of data), supporting a free and open source intelligence tool (and related open datasets) could become a strategic part of US (or other nation's) "diplomacy" and constructive outreach."
"Good will" is an important resource. Slowly the USA has been squandering what goodwill it including from WWII. Fortunately, good will can be a renewable resource depending on the political choices the USA makes going forward.
For example, imagine how much goodwill the USA would have right now if we had given the people of Iraq US$6 trillion dollars (US$300
A 21st century issue: the irony of technologies of abundance in the hands of those still thinking in terms of scarcity.
... I just can't imagine how anyone would be offended or in the least bit concerned over this.
I have no issue with three letter agencies doing the job they were tasked to do - provide the USG with foreign intelligence gathered offshore. The problem is when they turn those same techniques inward.
And lest the foreigners cry - your governments are spying on the US too, often on behalf of your nationally domiciled corporations.
"Your hosts file app is SPYWARE, dude." - by Zontar The Mindless (9002) on Wednesday April 09, 2014 @02:43AM (#46702387) FROM -> http://slashdot.org/comments.p...
You said MY program's a spyware?
Ok: CONTRARY PROOF from a REPUTABLE security community source http://slashdot.org/comments.p... who hosts my app (malwarebytes hpHosts) which you are FREE TO VERIFY by email if you like as MY proof!
Now: Is YOUR SOURCE Computer Associates REPUTABLE? See here http://www.bing.com/search?q=c...
---
"for a crapware host files app that nobody in his right mind wants to allow anywhere close to his system" - by Zontar The Mindless (9002) on Wednesday April 16, 2014 @12:24PM (#46769393) FROM -> http://slashdot.org/comments.p...
You say my program's crapware?
Disprove 17 points here showing hosts give uses more speed, security, reliability, & anonymity then since YOu say my program's "crapware" http://start64.com/index.php?o...
---
"You barge into discussions with your off-topic hosts file nonsense" - by Zontar The Mindless (9002) on Friday April 11, 2014 @09:51PM (#46731153) FROM -> http://slashdot.org/comments.p...
Show us a post where I put up material on hosts where it doesn't apply.
You can't, can you? Nope - That makes YOU a liar.
APK
P.S.=> You FAIL, sockpuppeteer troll...
... apk
They would need millions of people to do all this...
Oh wait, all this stuff is made in China, since when does the US *export* any of this equipment?
Some of our allies don't mind that we spy on them, especially if they are not allowed to spy on themselves. Then we can spy on them and share the intel with them. They still get mad if we spy on their high level politicians and business secrets, and of course they have to denounce our spying if their people find out about it.
Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
"It seems to me the only rational approach is to assume that nothing can be trusted and and act accordingly. Assume that whatever you are doing online is being observed by someone or anyone ..."
I've been saying to make the best of this since at least 2008 (chain of citations): :-) :-) :-)"
http://www.pdfernhout.net/on-d...
https://groups.google.com/foru...
https://groups.google.com/foru...
https://groups.google.com/foru...
"Our biggest advantage is that no one takes us seriously.
And our second biggest advantage is that our communications are monitored, which provides a channel by which we can turn enemies into friends.
And our third biggest advantage is we have no assets, and so are not a profitable target and have nothing serious to fight over amongst ourselves.
Or more recently:
"A way forward through openness? (Score:5, Informative)"
http://slashdot.org/comments.p...
Of course, growing up in a Christian ideological environment, the idea is nothing new that all my actions are under constant surveillance 100% 24X7 by an omniscient entity who can even read my thoughts and decides my ultimate fate day by day... Just got to make the best of it... :-)
Not saying that means it will end well if humans are entrusted with that kind of surveillance power... Although "The Light of Other Days" and "The Transparent Society" are both books to think about...
http://en.wikipedia.org/wiki/T...
http://en.wikipedia.org/wiki/T...
It's probably only a matter of time anyway until the halls of all governments are saturated with nanotech "smart dust" by all sorts of actors (see Vinge's "A Deepness in the Sky" or some other stories for examples). Governments might want to get their houses in order before then... In that sense, Manning and Snowden might both just be the tip of the iceberg -- even if smart dust like that is still probably ten or twenty years off...
Or also from me in 2008:
http://www.pdfernhout.net/post...
"Wikipedia. GNU/Linux. WordNet. Google. These things were not on the visible horizon to most of us even as little as twenty years ago. Now they have remade huge aspects of how we live. Are these free-to-the-user informational products and services all there is to be on the internet or are they the tip of a metaphorical iceberg of free stuff and free services that is heading our way? Or even, via projects like the RepRap 3D printer under development, are free physical objects someday heading into our homes? If a "post-scarcity" iceberg is coming, are our older scarcity-oriented social institutions prepared to survive it? Or like the Titanic, will these social institutions sink once the full force of the iceberg contacts them? And will they start taking on water even if just dinged by little chunks of sea ice like the cheap $100 laptops that are ahead of the main iceberg?"
Or in this case, will 20th-century-mindset security institutions start sinking when their procedures are dinged by revelations moved via small cheap USB sticks apparently carried around by Manning and Snowden? Really, how "secure" or wise is a plan in the 21st century when it depends on 100% secrecy forever? Shouldn't so-called security experts employed at great expense by governments know better by now? Security by obscurity is problematical, especially over the
A 21st century issue: the irony of technologies of abundance in the hands of those still thinking in terms of scarcity.
Isn't it still possible to have a trustworthy firewall as separate hardware, that can inform you if there are any inappropriate data transfers? It would seem like an important tool to have if only for virus/malware analysis.
Don't waste your vote! Vote for whoever you want, unless you live in a swing state it won't matter anyways
Disk image might be the same. The Snowden docs include things like hardware replacement of Ethernet jacks and firmware backdoors. Nasty stuff, and completely undetectable without destructive teardown or an X-ray machine and a ridiculous amount of time.
So lets pretend that we've just completed writing this code, as opposed to having just completed sabotaging it -Altera
You are assuming the source you are looking at is the same one loaded on the device. If you change out the software on the device you may as well assume its no different than a binary blob.
And if the change is to the hardware that the open source software runs on? same idea as a hyper-visor rootkit, the software could be as fancy and open source as you want its still compromised since the hardware could easily send a copy of everything and react to a signal without the software ever knowing about it.
That the internal watchdog is looking and did catch violations is a good sign of ACTIVE protection.
You have zero rights because your internet packet addresses might be sniffed? Zero? Really? You're good at math.
When you realize how shitty the world is (I read the president's daily intelligence summary), you'll quickly realize that Fox News is center-left and that predators and hellfires are probably the best answer, since genocide is out.
Addressing both your comment and the grandparent comment: this distinction of allowing non-free software is part of what distinguishes the older free software movement from the younger open source movement. RMS has been talking and writing about this critical distinction for years.
Consider the following from "Why Open Source misses the point of Free Software":
In other words, open source won't endorse software freedom for its own sake. That movement was designed to never raise the issue of software freedom in order to promote a developmental methodology thought to lead to more reliable, more powerful programs. That methodology is fine as far as it goes (everyone likes powerful robust programs) but as we're seeing with the Snowden revelations, that methodology doesn't go far enough. RMS realized this very early on and has been providing ethical counterarguments since the open source movement began (older essay, newer essay).
This difference explains what we're seeing in the very different approaches taken in Linus Torvalds' fork of the Linux kernel versus the GNU Linux-libre fork of the Linux kernel. Linux-libre's distinction is that this fork removes the blobs that come with the Torvalds fork of the Linux kernel. Torvalds includes nonfree code meant to make the kernel run on more hardware which places a high value on convenience at the cost of software freedom. Linux-libre values software freedom instead. As a result, Linux-libre doesn't run on as much hardware and might not take advantage of everything modern hardware can do, but one gains a system they are allowed to fully inspect, share, and modify—software freedom. Linux-libre lets users make sure the software does only what that user wants that program to do. RMS, as recently as his recent responses to /. questions, encouraged readers to reverse engineer hardware in order to fully document hardware ("The parts of Linux we need to replace are the nonfree parts, the "binary blobs". [...] The main work necessary to replace the blobs is reverse engineering to determine the specs of the peripherals those blobs are used in. That's a tremendously important job -- please join in if you can."). This work leads to increased support for fully free operating systems, including fully free support in Linux-libre.
Increased security is one of the things you get with the pursuit of software freedom for its own sake. I think RMS very much recognizes the security enhancements that come along with Linux-libre and why his org
Digital Citizen
All those protests about HUAWEI - the real reason we scared everyone about them is for precisely the opposite reason than was claimed. HUAWEI is not in the pocket of the NSA, which makes them useless from an espionage standpoint. The problem isn't that their equipment has spyware, it's that it doesn't (as far as the NSA is concerned.)
--- Generation X: The first generation to have SIG lines inferior to their parents... ---
The servers, routers, etc are NOT coming from America. They are being shipped via China. For example, Cisco does not import the routers and then re-export them to say china, or Venezuela, etc. They are shipped direct.
What I find funny is that so many miss the fact that many backdoors have been found on equipment that was shipped directly from China and not touched by ANY AMERICANS. And yet, we have greenwald and snowden ignoring what is going on with Russia, AQ, China, etc.
I prefer the "u" in honour as it seems to be missing these days.
BS. Why do you think that India banned them? Because they found it on their routers that were sent directly from China to India.
Ppl like you are beyond foolish, or are simply Chinese trolls.
I prefer the "u" in honour as it seems to be missing these days.
News at eleven :/
We're effectively killing off our chances at a global market. Seriously. Would you buy ANY network gear from ANY US based company at this point ? Hell, for that matter would any US based company even trust it ?
The bigger question is how does the NSA know about the shipment unless the companies are giving them a heads up about it before it leaves the country ? It's unlikely the NSA just gets " lucky " and just so happens to find them.
Spying on a war time foe is way different than spying on everyone. (without due process I would add). Not only is it spititng in the faces of allies its also violating the US constitution.
If I'm a foreign buyer for this stuff... say a bank in Germany that wants to build a data center... I can't buy American stuff anymore. That's a huge blow to US tech.
Look... I'm okay with pulling this crap against brutal dictatorships. But I suspect they're just doing it to anyone they're even vaguely interested in... I have to assume that because there's so much double talk and evasion on the issue along with apparently no oversight or auditing.
If this sort of crap continues then the companies are at they very least going to have to use protected shipping methods that guarantee no tampering. A guard going with the shipment 24 hours a day from the factory to the delivery location would be an example.
And of course, any organization or customer that is responsible to data security is going to have increasing trouble trusting US businesses with anything.
This is incredibly damaging. The NSA needs to do their job without destroying the US tech industry in the process.
I've decided to stop wasting my time responding to AC trolls/sockpuppets... so if you want a response from me... login.
The seller simply sent her the wrong tracking number. NSA had nothing to do with it. Yay paranoia.
https://privacysos.org/node/1311
https://twitter.com/puellavulnerata/status/427849719633571840
Outstanding write up!!
Tell a few of their customers to ship back items which appear to have been tampered with, and compare them at your end. That's appropriate tech support. You have no idea who's doing the tampering or why, and it's worth finding out.
I hope customers can replace those crypto bits themselves?
I was promised a flying car. Where is my flying car?
To an authoritarian, all other crimes pale in comparison to that of exposing wrongdoing by authorities.
"Your hosts file app is SPYWARE, dude." - by Zontar The Mindless (9002) on Wednesday April 09, 2014 @02:43AM (#46702387) FROM -> http://slashdot.org/comments.p...
You said MY program's a spyware?
Ok: CONTRARY PROOF from a REPUTABLE security community source http://slashdot.org/comments.p... who hosts my app (malwarebytes hpHosts) which you are FREE TO VERIFY by email if you like as MY proof!
Now: Is YOUR SOURCE Computer Associates REPUTABLE? See here http://www.bing.com/search?q=c...
---
"for a crapware host files app that nobody in his right mind wants to allow anywhere close to his system" - by Zontar The Mindless (9002) on Wednesday April 16, 2014 @12:24PM (#46769393) FROM -> http://slashdot.org/comments.p...
You say my program's crapware?
Disprove 17 points here showing hosts give uses more speed, security, reliability, & anonymity then since YOu say my program's "crapware" http://start64.com/index.php?o...
---
"You barge into discussions with your off-topic hosts file nonsense" - by Zontar The Mindless (9002) on Friday April 11, 2014 @09:51PM (#46731153) FROM -> http://slashdot.org/comments.p...
Show us a post where I put up material on hosts where it doesn't apply.
You can't, can you? Nope - That makes YOU a liar.
APK
P.S.=> You FAIL, sockpuppeteer troll...
... apk
"Your hosts file app is SPYWARE, dude." - by Zontar The Mindless (9002) on Wednesday April 09, 2014 @02:43AM (#46702387) FROM -> http://slashdot.org/comments.p...
You said MY program's a spyware?
Ok: CONTRARY PROOF from a REPUTABLE security community source http://slashdot.org/comments.p... who hosts my app (malwarebytes hpHosts) which you are FREE TO VERIFY by email if you like as MY proof!
Now: Is YOUR SOURCE Computer Associates REPUTABLE? See here http://www.bing.com/search?q=c...
---
"for a crapware host files app that nobody in his right mind wants to allow anywhere close to his system" - by Zontar The Mindless (9002) on Wednesday April 16, 2014 @12:24PM (#46769393) FROM -> http://slashdot.org/comments.p...
You say my program's crapware?
Disprove 17 points here showing hosts give uses more speed, security, reliability, & anonymity then since YOu say my program's "crapware" http://start64.com/index.php?o...
---
"You barge into discussions with your off-topic hosts file nonsense" - by Zontar The Mindless (9002) on Friday April 11, 2014 @09:51PM (#46731153) FROM -> http://slashdot.org/comments.p...
Show us a post where I put up material on hosts where it doesn't apply.
You can't, can you? Nope - That makes YOU a liar.
APK
P.S.=> You FAIL, sockpuppeteer troll...
... apk
no one would really care if it was really used to catch big bad terrorists but we all know its all far from that.
Hope that soon firmware dumps of desoldered BIOS of will be compared inside and outside the USA to fund the gap ...
is much more common than people supposed.
The dystopic future in the series Continuum doesn't look so very far-fetched to me.
We're already a third of the way there !
you should definitely do this
I may be a little off-base but there used to be a time in the U.S. that our legal system was premised upon actual "misdeeds" not "thought crime". We now appear to live in an age in which crimes are "manufactured" out of obscure, fragmented and ambiguous data elements that could "potentially" lead to a criminal act. Then the purported perpetrator[s] are accused of "plotting" destruction even before the act is committed. I think people should be able to think anything they want. Even engage in ambiguously and potentially criminal acts for freedom's sake. What makes the difference is whether or not the act is actually carried out. Actual destructive actions should be the punishable offense, not thinking about it. Sure, this may place a heavy burden on law enforcement but I'm willing to accept that in exchange for personal freedom[s]. Besides, we are ALL ultimately responsible for our own self-protection. That requires that we be aware of our surroundings. To live with a certain degree of "precaution". To hone our personal skills in detecting potentially dangerous situations and utilizing a considerable degree of "street smarts". There are way too many people who have abandoned their personal responsibility for their own safety. They live as innocent children, expecting the world to be a "peaceful and enjoyable" trip to an amusement park where life is happy all the time and just kick back and wait for the guys in the white coats [or blue, or grey or whatever] to come and save them. We all like to think of ourselves as "adults" but we don't what the personal responsibility of acting seriously as adults. Rather, children wanting all the privileges of rank but little responsibility. One of the things we are ALL personally responsible for is our own safety. But most people think that responsibility falls upon someone else. Those who complain about safety but are unwilling to accept personal responsibility for it are creating a burden upon society. It's time everyone stopped whining about "safety" and started acting like adults.
"Those who can make you believe absurdities can make you commit atrocities." - Voltaire
And everyone was paranoid about Chinese stuff.
"Your hosts file app is SPYWARE, dude." - by Zontar The Mindless (9002) on Wednesday April 09, 2014 @02:43AM (#46702387) FROM -> http://slashdot.org/comments.p...
You said MY program's a spyware?
Ok: CONTRARY PROOF from a REPUTABLE security community source http://slashdot.org/comments.p... who hosts my app (malwarebytes hpHosts) which you are FREE TO VERIFY by email if you like as MY proof!
Now: Is YOUR SOURCE Computer Associates REPUTABLE? See here http://www.bing.com/search?q=c...
---
"for a crapware host files app that nobody in his right mind wants to allow anywhere close to his system" - by Zontar The Mindless (9002) on Wednesday April 16, 2014 @12:24PM (#46769393) FROM -> http://slashdot.org/comments.p...
You say my program's crapware?
Disprove 17 points here showing hosts give uses more speed, security, reliability, & anonymity then since YOU say my program's "crapware" http://start64.com/index.php?o...
---
"You barge into discussions with your off-topic hosts file nonsense" - by Zontar The Mindless (9002) on Friday April 11, 2014 @09:51PM (#46731153) FROM -> http://slashdot.org/comments.p...
Show us a post where I put up material on hosts where it doesn't apply.
You can't, can you? Nope - That makes YOU a liar.
APK
P.S.=> You FAIL, sockpuppeteer troll...
... apkDisprove 17 points here showing hosts give uses more speed, security, reliability,
"Your hosts file app is SPYWARE, dude." - by Zontar The Mindless (9002) on Wednesday April 09, 2014 @02:43AM (#46702387) FROM -> http://slashdot.org/comments.p...
You said MY program's a spyware?
Ok: CONTRARY PROOF from a REPUTABLE security community source http://slashdot.org/comments.p... who hosts my app (malwarebytes hpHosts) which you are FREE TO VERIFY by email if you like as MY proof!
Now: Is YOUR SOURCE Computer Associates REPUTABLE? See here http://www.bing.com/search?q=c...
---
"for a crapware host files app that nobody in his right mind wants to allow anywhere close to his system" - by Zontar The Mindless (9002) on Wednesday April 16, 2014 @12:24PM (#46769393) FROM -> http://slashdot.org/comments.p...
You say my program's crapware?
Disprove 17 points here showing hosts give uses more speed, security, reliability, & anonymity then since YOU say my program's "crapware" http://start64.com/index.php?o...
---
"You barge into discussions with your off-topic hosts file nonsense" - by Zontar The Mindless (9002) on Friday April 11, 2014 @09:51PM (#46731153) FROM -> http://slashdot.org/comments.p...
Show us a post where I put up material on hosts where it doesn't apply.
You can't, can you? Nope - That makes YOU a liar.
APK
P.S.=> You FAIL, sockpuppeteer troll...
... apkb
I want to know what the feasibility of just "prying out the offending component and soldiering a new one in" is.
I like that BUSINESSES are being touched by this. No one gives a s**t that your and my privacy rights are null and void. Congress won't do zip to fix that. But when foreign CUSTOMERS, who SPEND MONEY, decide they DON'T WANT compromised Amerikan hardware, and take their business elsewhere, congress might start to listen. (Stupid me) or maybe not.
Thank you Edward Snowdon! Thank you Glenn Greenwald. Obama, you are a disappointment (in SO many ways).
Do you really think the power hungry politicians are going to stop
spying on each other and the people to get dirt on them for there elections.
So I'm sure they will definitely continue spying on us.
Remember transparency by this US Government, so it will never stop
They will tell us that you sheep, we ill stop watching you, but the fact is as long as tax
dollars are collected it will continue I have been using http://Lookseek.com for about a
year the non tracking private search engine to protect my privacy.
We have to start somewhere
Famous quote by the head of us intelligence regarding spying on Kaiser et all
gentlemen do not read other gentlemen mail