Slashdot Mirror


User: AHuxley

AHuxley's activity in the archive.

Stories
0
Comments
11,974
First seen
Last seen
Profile
(view on slashdot.org)

Comments · 11,974

  1. Re:Network Security 101 on NSA Prepares For Future Techno-Battles By Plotting Network Takedowns · · Score: 2

    The rest of the world can just have staff and teams drive out to the more remote sites and watch systems as was done years ago.
    If a dedicated hardened network requests random fault inducing commands real staff on site can make calls at 4am.
    Just as other nations can revert to the typewriter and one time pad staff can revert to systems that worked over generations.
    Networks are great for tracking vast systems but local vetted staff can be trusted with the more vital network wide vital commands.
    That would keep the lights on, heating, water, public transport systems working. Expensive equipment can be protected from new networks.
    The main use for this kind of networking would be during a color revolution https://en.wikipedia.org/wiki/....
    A government fails to deliver basic services and then all services are quickly restored by a new regime.
    The equipment manufacturers are caught between offering decades and generations of quality service as a brand and having their own networking products used by different clandestine services. Not the best marketing or optics for a next bid or new infrastructure project.

  2. Re:Haystack Creation on Feds Operated Yet Another Secret Metadata Database Until 2013 · · Score: 1

    Best just to log it all and then sort for any reason later.
    The other aspect to massive domestic log creation is to help track undercover staff, staff, informants, whistleblowers, the press and wider legal system.
    That haystack can work in both directions. Fully understanding the US telco network and all US social media can ensure a good background story for undercover work and help track all interest in that created persona or court case.
    Is a law firm or member of the press too interested in methods that where hidden from a court? Who are they communicating with? What private sector social media databases have they searched? What did they find?
    Did facial recognition find a photo on old or new social media that any private investigator or member of the press could find given the vast private sector collections of social media?

  3. Re:Totally a Problem on Obama: Gov't Shouldn't Be Hampered By Encrypted Communications · · Score: 1

    Re But with strong crypto it's secure enough that the 3rd party can see (or alter) your communications.
    With international crypto standards set by tame groups that failed in the past and offered junk crypto?
    All a nation has to do is work out who is connecting and with what software products. Encryption can be removed by ensuring the wide use of junk encryption.
    Low costs, free, tame academics, NGO's, foundations, front companies can all push a message of testing, security and options around tame crypto.
    Any good quality encryption is lost to the flood of well funded weak products offered for free or the need to use a tame international standard.
    The producers of good quality encryption can also be found, their product can be weakened or sold to a more tame brand.
    If good encryption exists for free then the users are tracked and tame operating systems or hardware might allow the plain text to be recovered.

  4. Re:Precedence? on Obama: Gov't Shouldn't Be Hampered By Encrypted Communications · · Score: 1

    There are two ideas on that topic. The past idea was the vital importance of keeping all public spying topics limited to the Soviet Union, Russia and China. That kept the domestic press happy and the simple domestic message that the internet was too big and fast to "collect it all".
    The other idea was to make all collection legal and use the results in secure or open courts.
    Tempora https://en.wikipedia.org/wiki/... shows that it is possible to reconcile a vast usage database removing all anonymity and privacy.
    The security services worked out decades ago that telling people that crypto was broken or that all communications was been logged changes how people use networks and telecommunications services.
    Sock puppets and propaganda could still contain whistleblowers and their material in the press.
    Now nations are talking of decryption and collecting it all openly. The past 90 years of well hidden surveillance is now out in public and legal.
    A digital Berlin Wall is now legal and public.

  5. Re:Why not promote the Enlightenment instead on European Countries Seek Sweeping New Powers To Curb Terrorism · · Score: 1

    Wouldn't it make much more sense to devote some effort and expense to promoting the values of the enlightenment?
    The CIA did that with modern art.
    Modern art was CIA 'weapon' ( 22 October 1995) http://www.independent.co.uk/n...
    "the CIA fostered and promoted American Abstract Expressionist painting around the world for more than 20 years."

  6. Re:Why are they punishing the law abiding citizens on European Countries Seek Sweeping New Powers To Curb Terrorism · · Score: 1

    Why?
    Part of collect it all. Bring it out for use in open courts. Everything collected is now more legal. No more parallel construction needed.
    All that new data can then be shared with other EU, UK and US beyond the "The Ring of Five" Germany, the Netherlands, France, Belgium and Denmark.
    The part most nations dont seem to have fully understood is what the GCHQ understood decades ago. Never mention the collection part and people keep on trusting their phones and computer networks.
    Now that nations admit they have full mastery of all their internal phones and computer networks interesting people can just revert to more traditional methods of communications.

  7. Re:I do the opposite on To Avoid Detection, Terrorists Made Messages Seem Like Spam · · Score: 1

    False positives are an equal problem.
    Three prisoners in a detention camp get to talking about why they are there.
    "I am here because I always sent too much spam, and they charged me with been a numbers station," says the first.
    "I am here because I sent direct marketing messages, and they charged me with helping sleeper agents," says the second.
    "I am here because I sent an email every day," says the third, "and they charged me with been a sleeper agent."

  8. Re:Stupid on To Avoid Detection, Terrorists Made Messages Seem Like Spam · · Score: 2

    Re " Like every letter sent" was under consideration from some types of communications.
    Project SHAMROCK https://en.wikipedia.org/wiki/...
    "started in August 1945 that involved the accumulation of all telegraphic data entering into or exiting from the United States. The Armed Forces Security Agency (AFSA) and its successor NSA were given direct access to daily microfilm copies of all incoming, outgoing, and transiting telegrams via the Western Union and its associates RCA and ITT."
    Just the early days of collect it all.
    The UK had Defence of the Realm Act 1914 (DORA) https://en.wikipedia.org/wiki/... to help with letters.

  9. Re:how to avoid the NSA by using a product they op on Washington DC's Public Library Will Teach People How To Avoid the NSA · · Score: 1

    A VPS could be given an offer by security services in its host country. Become a honey pot for all foreign networking traffic that expects privacy and anonymity.
    With tame international standards and all ip's been logged a person is left with the security and privacy of an application. As both ends of the encrypted chat are uncovered the only task is to get the plain text, voice before encryption by an app. Most open and consumer grade OS seem to be very useful to offer access to plain text as entered or a voice stream before encryption is used.

  10. Re:must be bust... on Washington DC's Public Library Will Teach People How To Avoid the NSA · · Score: 1

    Consider the interesting parts of the internet to be Tempora ready https://en.wikipedia.org/wiki/... .
    Every message in is reconciled with every message out. Finding the end and entry ip is then easy at a county, state or federal level.
    People may expect privacy and anonymity from networks that are collecting it all.
    If Bob and Sally are under constant constant surveillance privacy would be an issue.
    If Bob is under active surveillance and Sally as a journalist is, then anonymity for any whistleblower is interesting.
    Or every browser could be requested to leak the real ip. Tails or Whonix could offer more but users have to be aware of privacy and anonymity.
    Entering Tor as a totally different person every time is task that has to be understood every session.
    With every line of text linguistic analysis hopes for a bit more insight.

  11. Re:the thing i never understood was on US Government Lurked On Silk Road For Over a Year · · Score: 1

    The other question is a Tails https://en.wikipedia.org/wiki/... or Whonix (Tor anonymity network, Debian GNU/Linux and security by isolation) https://www.whonix.org/
    That would in theory contain any more direct ip requests sent from any site or network.
    Re "how would anyone with a basic understanding of networking not see?"
    funded by the US government (16, 2014)
    http://pando.com/2014/07/16/to...
    The parallel construction that still seems to hold up is the sending of a page or code to show the real ip that always seems to leak out.

  12. Re:Interesting wording on NSA Official: Supporting Backdoored Random Number Generator Was "Regrettable" · · Score: 3, Insightful

    It was regrettable security researchers, brands, firms, academics and other experts failed to find, did not look, did not ask, did not consider, did not want to understand, where not interested or collaborated in placing so many trap doors and backdoors in international crypto standards over the years.
    Just getting weak crypto created and set as a standard is the first part. Keeping it as a standard for some time was the real trick. At lot of smart people and top brands had to stay tame and look the other way on that aspect over the years.
    The good news is people can just move back to number stations and only use one time pads once.
    The intentionally create algorithms seemed to go back to the 1950's as the Martin and Mitchell defection hinted in the early 1960's
    https://en.wikipedia.org/wiki/...
    "Our main dissatisfaction concerned some of the practices the United States uses in gathering intelligence information ... deliberately violating the airspace of other nations ... intercepting and deciphering the secret communications of its own allies ..."

  13. Re: Idiots at work on UK Prime Minister Says Gov't Should Be Capable of Reading Any Communications · · Score: 1

    Now that the UK wants to see every web page and understand all communications :)
    Very interesting idea re the much junk data.
    Create daily web pages with note blocks with one time code ready Cyrillic script.
    One open to public bots searching the net. Another with a tag to tell robots not to index. Wait a few months and enjoy the logs :)
    Print some and enter into any local UK art competition :) Encourage the random viewing public to copy down the 'art' work as they view it :)

  14. Re:Mmm... on Authors Alarmed As Oxford Junior Dictionary Drops Nature Words · · Score: 2

    Re "All of these are things a kid should come across while growing up in a few parts of the world. "
    "Acorn is an especially disappointing word to lose--suddenly all these things falling from the sky don't have a word"
    Acorn Computers?
    https://en.wikipedia.org/wiki/...

  15. Re:Enormous debt? on China's Engineering Mega-Projects Dwarf the Great Wall · · Score: 3, Interesting

    Re: " and have decided to decouple and give Africa (for example) their time and especially their money directly, some of which would ultimately come from us as repayment on debt to China with China becoming Africa's direct partner in infrastructure instead. This does not make sense on so many levels."
    China can now offer a project as a bid against other traditional US, UK or EU consortium offers. China can offer a project as a loan, soft loan or as an aid project.
    Once the project using parts, equipment, planning and staff from China is completed the long term maintenance is also included.
    The next local mining, gas, oil land release can then see a China bid in play. Direct aid flows in and cheaper geographically bound raw materials flow back to China.
    China can then value add on any exported consumer or high end product with lower raw material costs.
    China wins from the branding and humanitarian side and then gets direct prices for much needed raw materials to build its own manufacturing brands.
    The only way for the West and old colonial powers to counter this is a huge propaganda campaign to try and secure the Wests role in telco, aid, engineering and raw material contracts.
    China now has several generations of trust and project completion around the world going back decades.

  16. Re:Enormous debt? on China's Engineering Mega-Projects Dwarf the Great Wall · · Score: 5, Insightful

    Re "Get while the getting is good."
    China learns how to use the tech over decades. Then China leans how to build the tech. China can then export their version of the same heavy civil engineering services.
    China can now bid for huge projects. China can now offer aid packages to other nations with large scale nation building civil engineering projects at a lower cost.
    Thats great news for China and the optics of project branding around the world. A quality project or aid package is delivered on budget and on time by China.
    China has understood the value of aid projects around the world since the 1960's.

  17. Re: Idiots at work on UK Prime Minister Says Gov't Should Be Capable of Reading Any Communications · · Score: 1

    AC :) Become a number station and just pump out a daily stream of Russian material.

  18. Re:Idiots at work on UK Prime Minister Says Gov't Should Be Capable of Reading Any Communications · · Score: 2

    People could go and find a book on the one time pad idea. Or become a number station and just pump out a daily stream of random material.
    The UK wants to be able to reconcile every message into and out of the UK.
    Tempora gave the UK that ability https://en.wikipedia.org/wiki/...
    The first hop will be seen and then the destination ip within the UK after a connection within the UK or after global networking with Tor.
    The idea about that system is to ensure the world still thinks a Tempora system is too complex, expensive and would not be legal.
    The whole point of a national telco tracking database is lost, if you dont keep it a secret! Why tell the world?
    All the people of interest can revert to couriers, number stations, faith, cults, holidays, sabbaticals and just meet in person.
    Does the UK hope to see a set of people not making the usual calls and going for an unexpected holiday? The traveling and off the network watch list?
    The other hope would be to make parallel construction legal in the UK in open courts. All the people of interest can just revert to older safe methods of communications.

  19. Re:What if I have no likes? on Using Facebook Data, Algorithm Predicts Personality Better Than Friends · · Score: 2

    Re " .... tell about me?"
    Its a bit like the people who use cryptography or have an interest privacy services?
    People Lacking Facebook Accounts Viewed As Suspicious (August 8, 2012)
    http://www.dailytech.com/Peopl...
    Beware, Tech Abandoners. People Without Facebook Accounts Are 'Suspicious.' (8/06/2012)
    http://www.forbes.com/sites/ka...
    It really depends on who is doing the tracking and the number of hops to friends and shared likes?

  20. Re:Scope creep ... on FBI Access To NSA Surveillance Data Expands In Recent Years · · Score: 1

    The people of East Germany faced the same tracking if they had ideas about getting to the West or protesting.
    In the end all the files did was link the 2nd and third hops connecting informants in groups to each other.
    The other aspect is a rapid expansion in the numbers of informants and the security officials needed to handle them and their flow of information.
    A huge boondoggle for contractors and government employees trying to keep the data useful, filter existing data set and add more data.
    The other aspect is people now know that all the equipment was not for the Soviet Union or Russia. People now understand collect it all, the tame brands, junk encryption and data kept for generations in a searchable NSA "lock box".
    The time spent trying to shield or having to discover and then undo the tracking of informant and undercover staff becomes a huge task.
    In the past paper work at a regional and local level could ensure the perfect cover for an informant or staff deep undercover .
    Now with local records been networked all data is open to all investigators at a State and federal level. Will that name and date of birth linked to a web 2.0 account hold up at a State level? Who is that person? A good fake identity? Undercover for ten years? A spy? Cult member? A rich foreigner who paid cash 20 years ago for a very good set of documents? Sooner of later entire teams have to protect entire sections of the wider population from unrelated State and federal database searches that find life story inconsistencies.
    Facial recognition from a city or private CCTV network?
    The "papers please" and scope creep will find a lot of interesting paperwork :) The UK is facing just that issue.
    Half of all undercover police officers in UK are ‘off the books’ and not on national database (Tuesday 14 October 2014)
    http://www.independent.co.uk/n...

  21. Re:hmmm on FBI Access To NSA Surveillance Data Expands In Recent Years · · Score: 1

    Re "What happened in 2008 that allowed them to change their policies?" Foreign Intelligence Surveillance Act of 1978 Amendments Act of 2008
    https://en.wikipedia.org/wiki/...
    How the NSA Almost Killed the Internet (01.07.14)
    http://www.wired.com/2014/01/h...
    "The FISA Amendments Act of 2008 carved out a new section of the law, 702, which gave legal cover to the warrantless surveillance programs operated in total secrecy under President Bush; queries are often called 702s.
    The NSA cites the FISA Amendments Act as the specific legal basis for Prism."

  22. Re:Why aren't these networks air gapped? on Forget Stuxnet: Banking Trojans Attacking Power Plants · · Score: 1

    Support and a lack of on site skilled staff? Some companies, countries, mil and govs are just buying up dual use heavy equipment globally for local prototyping and limited mil grade production runs.
    A company sends out staff to help install a system and then offers ongoing help for educational engineering courses. As soon as the expert company staff are gone its back to a secret mil or gov project.
    Networking might allow work on some very exotic materials :)
    The vendors staff know that are not at a new educational institution but everybody plays along and the cash flows.
    Everybody wins, experts are up, jobs are secure, a nation gets to build its mil up and and issues can be fixed.
    The only problem is the same kit also gets installed in very open factory sites and its seems anyone networked can have a go.
    The vendors know who they have to look after and its not just some local manufacturing industry.

  23. Re:Attention all (potential) subversives on MI5 Chief Seeks New Powers After Paris Magazine Attack · · Score: 1

    The number stations will keep working as they always did.

  24. Re:Vague article on MI5 Chief Seeks New Powers After Paris Magazine Attack · · Score: 1

    Back to the 1920-50's paperwork? Home Office Warrants (HOW), opening all mail not just saving the to and from parts. More funding, more staff, more real super computers and internal MI5 control over the entire UK telco network. A fully funded MI5 version of Tempora https://en.wikipedia.org/wiki/... to reconcile every message into and out of the UK.
    A watch list of subversive academics who could be teaching real crypto courses. More staff with Russian skills to find Russian plots to request more funding to find other Russian plots.
    Total freedom to access all UK web 2.0 servers to create undercover online personas going back years.
    Access to all UK telecommunications equipment without needing the GCHQ or mil.
    A request for surveillance powers without all the sharing, requests, foreign considerations of the CIA or MI6.
    The UK would be turned into a version Ireland in the 1980's - 1990's with a total internal surveillance system.
    The ability to put surveillance on legal teams, the press, NGO's within 4 hops of anyone of interest.
    The ability to track legal teams and access to all their files at anytime for any reason. That was very useful in Ireland.
    Every method used in Ireland would be legal within the UK. MI5 trapdoors and backdoors in all UK produced or sold crypto on any device or telco systems sold in the UK.
    The main requests would be for more powers, more technology, more staff, linguists.
    Foreign security services are going to flood with perfect UK applicants hoping some will be accepted. Mass recruitment is always a risk.

  25. Re:Once we start there's no stopping. on How Close Are We To Engineering the Climate? · · Score: 1

    Re "We'll be chasing it back and forth like crazy, every time a storm pops up."
    That has been done with Operation Popeye https://en.wikipedia.org/wiki/... by the US during the Vietnam war.
    "The cloud seeding operation during the Vietnam war ran from March 20, 1967 until July 5, 1972 in an attempt to extend the monsoon season, specifically over areas of the Ho Chi Minh Trail."
    "Starting on March 20, 1967, and continuing through every rainy season (March to November) in Southeast Asia until 1972, operational cloud seeding missions were flown."