No leak would allow someone to time those trades so precisely. there may have been a leak, but there was also something done to make it possible.
Oh come on. You know what the fed is going to do in advance. (whispers and leaks) You know it will be done precisely on time so as to avoid all appearances of favoritism. You arrange for your trades to appear after the precise time of release, but fail to take into account the time for the announcement to get to Chicago.
Your trades go in after the announcement but before the notice arrived in Chicago.
A leak is the most obvious answer. A leak of several hours notice makes more sense.
There is no silver lining. People running around insisting that SSL is not compromised are delusional, or the NSA's useful idiots. Or both.
A classification guide for NSA employees and contractors on Bullrun outlines in broad terms its goals. Project Bullrun deals with NSA's abilities to defeat the encryption used in specific network communication technologies. Bullrun involves multiple sources, all of which are extremely sensitive." The document reveals that the agency has capabilities against widely used online protocols, such as HTTPS, voice-over-IP and Secure Sockets Layer (SSL), used to protect online shopping and banking.
Get over it. SSL is gone.
And I have no faith in VPNs either:
Documents show that Edgehill's initial aim was to decode the encrypted traffic certified by three major (unnamed) internet companies and 30 types of Virtual Private Network (VPN) – used by businesses to provide secure remote access to their systems. By 2015, GCHQ hoped to have cracked the codes used by 15 major internet companies, and 300 VPNs.
True it never says explicitly that they have cracked all VPNs, but when their initial target was 30 different types of VPNs and their new target for 2015 is 300, that clearly suggests they have made good progress against those 30.
Get over it. VPNs are gone.
You might not like the Guardian or the NY Times. But they are talking to Snowden, and you are not.
Its hardly going to be secret. Neither were Predators.
Look at the variety of weapons you can carry on F16s. You can't get half that on a predator. Can any of then carry HARM Missiles? No. AGM-154 Joint Standoff Weapon? No.
Your numbers are simply wrong:
Predator C: Empty weight: 1,130 lbs (512 kg) Loaded weight: 2,250 lbs (1,020 kg) Max. takeoff weight: 2,250 lbs (1,020 kg)
Now tell me again how you are going to hang 6800 pounds on that airframe?
I said fairly stealthy. It was part of the design, before we went for very stealthy planes.
Reduced radar cross section is the first developed of five facets of stealth design, and it was a key element of the F16.
The F-16 has a smaller radar cross section than an F-18, or F-15. (Although once you hang all the external ordinance it can carry onto it, its no longer all that stealthy). http://www.youtube.com/watch?v=ZFY0VWGGFtM
The C and D block versions had further work done to reduce their radar cross sections.
You'd be surprised how many people don't hang on every single post that/. put up, and read it every other day or maybe once a week. Some of us do work for a living.
NSA has been asking for Certificates, but I am not aware of anyone actually surrendering them, certainly not Google. That goes beyond what the law allows.
I don't discount the possibility of the NSA having enough leverage to force the Certification Authority to cough up anyone's cert, which is probably why Google uses their own.
Well I agree that the modding down is effective, sometimes too effective.
But simply getting rid of the really awful posts allow a multitude of other views to be seen. Some are well written, some arent, some get modded up, but most won't.
The idea isn't to mod every idea up. The idea is to stratify the views and thereby arrive at a spectrum of ideas.
Since far too many moderaters mod troll on anything they disagree with, maybe a disagree mod should exist, but the only way it could be used would be to have the person posting the disagree mod to state their case, and and have their post be modded up to 5 before their disagree is posted at all.
While you will often see an unpopular posts quickly modded into near oblivion, an hour or a day later the situation is totally reversed.
There are entire mod armies out there that run dozens of accounts knowing that a few of them will have mod points on any given day. They pounce on their topics, mod it to hell, and move on.
Later the thinking crowd arrives and the ship is righted. But the mod army has moved on. They never notice that their graffiti and tags have been painted over.
So, read posts a day or two later, and the landscape is much better.
Well running The ORIGINAL author's code isn't that important.
What's important is the analysis that the code was supposed to do.
Describing that in mathematical terms and letting anyone trying to replicate the research is better than handing the original code forward. That's just passing another potential source of error forward.
Most of the (few) research projects I been called to help with coding on are strictly package runners. Only a one had anything approaching custom software, and it was a mess.
Well as one of the first reliable fly by wire planes, I could believe they would start with an old airframe for simplicity, one they can actually afford to lose. They may actually use one or two of these as targets, but not for any of the stated reasons. Training fighter pilots no longer requires actually shooting something down.
Trying new munitions, maybe laser weapons, maybe.
My money is still on heavy ordinance delivery, in highly contested territory.
The full extent of the NSA’s highly classified encryption cracking program Bullrun is only known by top officials in the NSA and its counterpart agencies in Britain, Canada, Australia and New Zealand. Bullrun has successfully foiled several of the world’s standard encryption methods, including SSL (Secure Sockets Layer), VPN (virtual private networks), and the encryption on 4G (fourth generation) smartphones.
Care to refute Snowden?
We are going back to my rules:
Prove your point about it being outright false or STFU.
That is outright false. I challenge you to provide a citation to a reasonably authoritative site saying that - basically anybody who isn't a kook. You can't.
Clearly you phrased it that way so you could reject any site I offered, based on your own myopic view point.
So here are the rules: You don't get to reject any source! You have to invalidate every one of these and all of their claims. After all, extraordinary claims of something being "outright false" require extraordinary proof.
Near obsolete? These are still very capable aircraft, with a wide variety of weapon systems. They exceed the capabilities of all but two or three nations, and we have them in numbers, both on active duty and in reserve.
a noble and iconic and RETIRED aircraft pioneering a new role as one of the highest performance modern weapon systems ever, capable of intricate maneuvers at higher mach and g than any ever before...
Exactly. Anyone thinking this is going to be a target drone is as naive as a 10 year old in a whore house.
the innovation could ultimately be used to help train pilots, providing an adversary they could practice firing on.
did you?
First, this isn't all that innovative, its been done to creating target drones for decades.
Second, this is still a front line aircraft, no matter how many we have in mothballs, because the usual target countries have nothing close. Its also fairly stealthy for its age, and its payload is in excess of 15,000 pounds of munitions even with a full load of fuel. You are not going to be using that quality of plane for a target drone.
Its meant as a delivery platform, piloted from afar, for very dangerous areas.
How many Google Employees can the Federal Prisons hold?
I'd like to see the entire Board of Directors, All corporate officers, and All top and Middle management employees and Directors from each of their world wide offices come out on the steps of their headquarters and issue a statement with published facts, naming explicit government employees and the orders they gave.
Just call the Government's bluff. And do the same for China while they are at it.
Then demand jury trials, and watch how fast they get acquitted.
These trust levels are forced on you. If you use an iPhone, either you trust what Apple trusts, or you don't use the device. Same with Android unless you cook your own ROM. In fact, you don't even know what CAs are on your phone most likely, nor be able to find out.
In my phone, under Settings / Security I find an entry called Trusted Credentials
Its divided into two categories, System and User. (There are no user certs, but you can add them).
There are a boat load of certs in there on the system side. Including Microsoft, every Cert company you've (n)ever heard of.
Who knows what might be lurking. (There is one listed as "Government Root Certificate Authority". Apparently something out of Taiwan, but it has no CN or OU).
Who's to say there aren't a few more hidden from this list. I can disable any of these that I want. I suppose I could disable all of them.
I dont think you understand how SSL works. Its entire purpose is to defeat MITM.
And YOU don't understand what would happen if "the man" in the middle has access to the certificates, either the masters or the actual certificates themselves.
Do you really think "mysecretdomain.com" certificate from shitty ass low cost certificate provider doesn't have a duplicate key on file at Comodo, Network Solutions, GoDaddy or TwoCows or whatever?
They don't have to brute force or hack anything if they have an appliance in the middle that automatically grabs the certificate from the certificate issuer and spoofs both sides of the connection.
If you want your traffic encrypted, you need to generate your own certificates using software you compiled after you reviewed the code.
Was going to post exactly this!.
But to further the point, it is strongly suspected that SSL is already broken by the NSA, and having certificates is no longer necessary.
Google publishes its own certificate. I don't think its signed by anyone but Google, a sign they have totally given up on corrupt certification companies. They also have changed it occasionally. I notice this when my more selective operating systems prompt me to accept new certificates for some Google Services, that they were happy to use yesterday. (These are always sort of scary events that warrant close inspection).
You don't use something that isn't stable to run something as important and life critical as an IV pump. Nor would any hospital do so and any individual that tried would simply be a victim of natural selection.
From your mouth to God's Ears.
But just in case someone was thinking of doing this the FDA is going to step in and set guidelines. Why: Because people are re-purposing cellphones for all sorts of stuff, most of it not well thought out.
You can find examples which contain unvetted information on the Google Play store. Some of this might find its way into actual use in the field, because in all too many cases doctors and computers live in two different worlds, and may come to trust something that looks approximately right, only to find out its horribly wrong in some places:
So yeah you might thing such doesn't exist, and these might be harmess infomation apps, but who's to know when nobody is watching. And with NFC built into every phone these days, who's to say someone won't find another use for it?
Slashdot Mirror
No leak would allow someone to time those trades so precisely. there may have been a leak, but there was also something done to make it possible.
Oh come on.
You know what the fed is going to do in advance. (whispers and leaks)
You know it will be done precisely on time so as to avoid all appearances of favoritism.
You arrange for your trades to appear after the precise time of release, but fail to take into account the time for the announcement to get to Chicago.
Your trades go in after the announcement but before the notice arrived in Chicago.
A leak is the most obvious answer. A leak of several hours notice makes more sense.
Errors in atomic clocks invoke Occam's Razor.
There is no silver lining. People running around insisting that SSL is not compromised are delusional, or the NSA's useful idiots. Or both.
A classification guide for NSA employees and contractors on Bullrun outlines in broad terms its goals.
Project Bullrun deals with NSA's abilities to defeat the encryption used in specific network communication technologies. Bullrun involves multiple sources, all of which are extremely sensitive." The document reveals that the agency has capabilities against widely used online protocols, such as HTTPS, voice-over-IP and Secure Sockets Layer (SSL), used to protect online shopping and banking.
Get over it. SSL is gone.
And I have no faith in VPNs either:
Documents show that Edgehill's initial aim was to decode the encrypted traffic certified by three major (unnamed) internet companies and 30 types of Virtual Private Network (VPN) – used by businesses to provide secure remote access to their systems. By 2015, GCHQ hoped to have cracked the codes used by 15 major internet companies, and 300 VPNs.
True it never says explicitly that they have cracked all VPNs, but when their initial target was 30 different types of VPNs and their new target for 2015 is 300, that clearly suggests they have made good progress against those 30.
Get over it. VPNs are gone.
You might not like the Guardian or the NY Times. But they are talking to Snowden, and you are not.
Its hardly going to be secret. Neither were Predators.
Look at the variety of weapons you can carry on F16s. You can't get half that on a predator.
Can any of then carry HARM Missiles? No.
AGM-154 Joint Standoff Weapon? No.
Your numbers are simply wrong:
Predator C:
Empty weight: 1,130 lbs (512 kg)
Loaded weight: 2,250 lbs (1,020 kg)
Max. takeoff weight: 2,250 lbs (1,020 kg)
Now tell me again how you are going to hang 6800 pounds on that airframe?
I said fairly stealthy. It was part of the design, before we went for very stealthy planes.
Reduced radar cross section is the first developed of five facets of stealth design, and it was a key element of the F16.
The F-16 has a smaller radar cross section than an F-18, or F-15.
(Although once you hang all the external ordinance it can carry onto it, its no longer all that stealthy).
http://www.youtube.com/watch?v=ZFY0VWGGFtM
The C and D block versions had further work done to reduce their radar cross sections.
You'd be surprised how many people don't hang on every single post that /. put up, and read it every other day or maybe once a week.
Some of us do work for a living.
NSA has been asking for Certificates, but I am not aware of anyone actually surrendering them, certainly not Google.
That goes beyond what the law allows.
I don't discount the possibility of the NSA having enough leverage to force the Certification Authority to cough up anyone's cert,
which is probably why Google uses their own.
Well I agree that the modding down is effective, sometimes too effective.
But simply getting rid of the really awful posts allow a multitude of other views to be seen. Some are well written, some arent, some get modded up, but most won't.
The idea isn't to mod every idea up. The idea is to stratify the views and thereby arrive at a spectrum of ideas.
Since far too many moderaters mod troll on anything they disagree with, maybe a disagree mod should exist, but the only way it could be used would be to have the person posting the disagree mod to state their case, and and have their post be modded up to 5 before their disagree is posted at all.
While you will often see an unpopular posts quickly modded into near oblivion, an hour or a day later the situation is totally reversed.
There are entire mod armies out there that run dozens of accounts knowing that a few of them will have mod points on any given day. They pounce on their topics, mod it to hell, and move on.
Later the thinking crowd arrives and the ship is righted. But the mod army has moved on. They never notice that their graffiti and tags have been painted over.
So, read posts a day or two later, and the landscape is much better.
Well running The ORIGINAL author's code isn't that important.
What's important is the analysis that the code was supposed to do.
Describing that in mathematical terms and letting anyone trying to replicate the research is better than handing the original code forward. That's just passing another potential source of error forward.
Most of the (few) research projects I been called to help with coding on are strictly package runners. Only a one had anything approaching custom software, and it was a mess.
Well as one of the first reliable fly by wire planes, I could believe they would start with an old airframe for simplicity, one they can actually afford to lose. They may actually use one or two of these as targets, but not for any of the stated reasons. Training fighter pilots no longer requires actually shooting something down.
Trying new munitions, maybe laser weapons, maybe.
My money is still on heavy ordinance delivery, in highly contested territory.
So, lets set ground rules, then.
You won't take Snowends word, even though he has been 100% right.
Do you require Obama's Testimony, or God's ? What?
Pull you head out of the sand!
Exactly as predicted, you toss out the evidence and strut off snorting.
Here it is direct from Snowden:
http://swampland.time.com/2013/09/05/five-revelations-from-snowdens-newest-leak/
The full extent of the NSA’s highly classified encryption cracking program Bullrun is only known by top officials in the NSA and its counterpart agencies in Britain, Canada, Australia and New Zealand. Bullrun has successfully foiled several of the world’s standard encryption methods, including SSL (Secure Sockets Layer), VPN (virtual private networks), and the encryption on 4G (fourth generation) smartphones.
Care to refute Snowden?
We are going back to my rules:
Prove your point about it being outright false or STFU.
Depending on Which Runway they used, this plane probably never crossed over civilian areas.
That is outright false. I challenge you to provide a citation to a reasonably authoritative site saying that - basically anybody who isn't a kook. You can't.
Clearly you phrased it that way so you could reject any site I offered, based on your own myopic view point.
So here are the rules:
You don't get to reject any source! You have to invalidate every one of these and all of their claims.
After all, extraordinary claims of something being "outright false" require extraordinary proof.
http://www.nytimes.com/2013/09/06/us/nsa-foils-much-internet-encryption.html?pagewanted=2&_r=0
http://nakedsecurity.sophos.com/2013/03/16/has-https-finally-been-cracked/
http://www.theguardian.com/commentisfree/2013/sep/05/government-betrayed-internet-nsa-spying
http://www.theregister.co.uk/2013/09/05/nsa_gchq_ssl_reports/
http://www.zdnet.com/has-the-nsa-broken-ssl-tls-aes-7000020312/
http://www.forbes.com/sites/andygreenberg/2013/06/20/leaked-nsa-doc-says-it-can-collect-and-keep-your-encrypted-data-as-long-as-it-takes-to-crack-it/
If you believe this is to be uses as a target drone, I have a Bridge in San Francisco I'd like to sell you.
The aircraft was useless as a fighter. It cant carry anything and is just a lawn dart.
Some Dart.
Some Lawn.
How many Predator Equivalences is that.
Near obsolete?
These are still very capable aircraft, with a wide variety of weapon systems.
They exceed the capabilities of all but two or three nations, and we have them in numbers, both on active duty and in reserve.
Don't right them off as obsolete yet.
that's nonsense.
a noble and iconic and RETIRED aircraft pioneering a new role as one of the highest performance modern weapon systems ever, capable of intricate maneuvers at higher mach and g than any ever before...
Exactly. Anyone thinking this is going to be a target drone is as naive as a 10 year old in a whore house.
Well, yes, of course.
You didn't actually believe the line about:
the innovation could ultimately be used to help train pilots, providing an adversary they could practice firing on.
did you?
First, this isn't all that innovative, its been done to creating target drones for decades.
Second, this is still a front line aircraft, no matter how many we have in mothballs, because the usual target countries have nothing close. Its also fairly stealthy for its age, and its payload is in excess of 15,000 pounds of munitions even with a full load of fuel. You are not going to be using that quality of plane for a target drone.
Its meant as a delivery platform, piloted from afar, for very dangerous areas.
How many Google Employees can the Federal Prisons hold?
I'd like to see the entire Board of Directors, All corporate officers, and All top and Middle management employees
and Directors from each of their world wide offices come out on the steps of their headquarters and issue a statement
with published facts, naming explicit government employees and the orders they gave.
Just call the Government's bluff. And do the same for China while they are at it.
Then demand jury trials, and watch how fast they get acquitted.
These trust levels are forced on you. If you use an iPhone, either you trust what Apple trusts, or you don't use the device. Same with Android unless you cook your own ROM. In fact, you don't even know what CAs are on your phone most likely, nor be able to find out.
In my phone, under
Settings / Security I find an entry called Trusted Credentials
Its divided into two categories, System and User. (There are no user certs, but you can add them).
There are a boat load of certs in there on the system side. Including Microsoft, every Cert company you've (n)ever heard of.
Who knows what might be lurking. (There is one listed as "Government Root Certificate Authority". Apparently something
out of Taiwan, but it has no CN or OU).
Who's to say there aren't a few more hidden from this list.
I can disable any of these that I want. I suppose I could disable all of them.
I dont think you understand how SSL works. Its entire purpose is to defeat MITM.
And YOU don't understand what would happen if "the man" in the middle has access to the certificates, either the masters or the actual certificates themselves.
Do you really think "mysecretdomain.com" certificate from shitty ass low cost certificate provider doesn't have a duplicate key on file at Comodo, Network Solutions, GoDaddy or TwoCows or whatever?
They don't have to brute force or hack anything if they have an appliance in the middle that automatically grabs the certificate from the certificate issuer and spoofs both sides of the connection.
If you want your traffic encrypted, you need to generate your own certificates using software you compiled after you reviewed the code.
Was going to post exactly this!.
But to further the point, it is strongly suspected that SSL is already broken by the NSA, and having certificates is no longer necessary.
Google publishes its own certificate. I don't think its signed by anyone but Google, a sign they have totally given up on corrupt certification companies.
They also have changed it occasionally. I notice this when my more selective operating systems prompt me to accept new certificates for some Google Services, that they were happy to use yesterday. (These are always sort of scary events that warrant close inspection).
You don't use something that isn't stable to run something as important and life critical as an IV pump. Nor would any hospital do so and any individual that tried would simply be a victim of natural selection.
From your mouth to God's Ears.
But just in case someone was thinking of doing this the FDA is going to step in and set guidelines.
Why: Because people are re-purposing cellphones for all sorts of stuff, most of it not well thought out.
You can find examples which contain unvetted information on the Google Play store. Some of this might find its way into actual use in the field, because in all too many cases doctors and computers live in two different worlds, and may come to trust something that looks approximately right, only to find out its horribly wrong in some places:
Examples (with no allegations of incorrectness or danger, simply to show examples that already exist):
https://play.google.com/store/apps/details?id=com.shahlab.anesthesiologist
https://play.google.com/store/apps/details?id=net.klier.blutdruck
https://play.google.com/store/apps/details?id=com.qxmd.calculate
https://play.google.com/store/apps/details?id=com.mobisystems.msdict.embedded.wireless.mcgrawhill.ivdh
https://play.google.com/store/apps/details?id=com.sekos.dosagecalc
So yeah you might thing such doesn't exist, and these might be harmess infomation apps, but who's to know when nobody is watching.
And with NFC built into every phone these days, who's to say someone won't find another use for it?
Skyking, Skyking, Do no answer. Uniform Gulf Sierra niner seven echo. I say again....
Is this how we have to start communicating just to keep our government out of our business?
That's impressive. I know how much of a pain it was to do just 12 x12 km of Halifax Regional Municipality
Meh.
I'll wait for the legos version.