51–60 of 240 posts
>8) Circumstantial evidence and conventional wisdom indicates Russian responsibility. Here's why that is significant: Interesting that he's not afraid to point the finger at Russia while still relying on them for protection. My respect for him just went up.
His complete post (just in case) original 4:40 AM - 16 Aug 2016 from @Snowden: The hack of an NSA malware staging server is not unprecedented, but the publication of the take is. Here's what you need to know: (1/x) 1) NSA traces and targets malware C2 servers in a practice called Counter Computer Network Exploitation, or CCNE. So do our rivals. 2) NSA is often lurking undetected for years on the C2 and ORBs (proxy ho…
> 5) Knowing this, NSA's hackers (TAO) are told not to leave their hack tools ("binaries") on the server after an op. But people get lazy. I know enough to say that this sentence reveals a lot about what snowden knows, and what he doesn't. Mostly the latter. He doesn't seem to understand the context and meaning of acronyms he uses.
You say acronyms as a plural.
Can you please identify two or more specific usages (hopefully with citation!) of Snowden using acronyms incorrectly?
It also highlights the risks of NSA exploiting zero-days and creating malware to conduct offensive operations, rather than reporting vulnerabilities to the vendor to make everyone safer. Now these tools have been stolen by one of their adversaries, and may make it out into the public for anyone to take advantage of. I just watched an excellent documentary called "Zero Days" ( https://weshare.me/823adb83b8e98628 ) thi…
Question: Does the NSA have an obligation to be ethical?
https://www.law.cornell.edu/uscode/text/5/3331
They even reaffirmed it late last year.
(sorry for the google cache link; www.nsa.gov (AkamaiGHost?) is currently returning 503 Service Unavailable)
https://webcache.googleusercontent.com/search?q=cache:-yz7S-...
His complete post (just in case) original 4:40 AM - 16 Aug 2016 from @Snowden: The hack of an NSA malware staging server is not unprecedented, but the publication of the take is. Here's what you need to know: (1/x) 1) NSA traces and targets malware C2 servers in a practice called Counter Computer Network Exploitation, or CCNE. So do our rivals. 2) NSA is often lurking undetected for years on the C2 and ORBs (proxy ho…
So this seems to be the "Dr Strangelove" scenario playing out, but with (fortunately) exploits rather than nuclear weapons. It sounds like many countries have other significant exploits into other countries, but this isn't "admitted"; it's not an unignorable public fact (+). The Russian destabilisation plan is to get Western countries to see NSA attacks on them and lose trust in the US - plus an attack on the concept…
Ed was a Booz Allen Hamilton employee only for a couple of months. He wasn't even out of his probation period as an employee. It's really amazing that in such a short time he was able to siphon all this information out of the NSA. I wonder what more information could he have collected if he had spent a longer time contracting for the NSA. I wonder how much more about the NSA we could know if people who have dedicated…
If you want to put on your tinfoil hat for a second, consider the fact that Snowden started his career in the military, then moved to CIA, then moved to Booz Allen. It's entirely possible that Snowden is an ongoing CIA op to discredit their rival NSA as part of a turf war.
IMHO Twitter is the worst media for this kind of discussion : I would have loved to read something more substantial but being limited to 140 char forces you to omit a lot of details. Why use something like 10 tweets where a blog post lets you have as many words as necessary. You can still be concise but 140 char is too short, it's just for people that have uninteresting things to say and Snowden is certainly not one…
I'm fond of tweeting a screenshot of longer text, e.g. from the notes app.
It also highlights the risks of NSA exploiting zero-days and creating malware to conduct offensive operations, rather than reporting vulnerabilities to the vendor to make everyone safer. Now these tools have been stolen by one of their adversaries, and may make it out into the public for anyone to take advantage of. I just watched an excellent documentary called "Zero Days" ( https://weshare.me/823adb83b8e98628 ) thi…
Why would they do that? Its more likely they'll be kept for other attacks or sold to nation states for vast profits.
I also suspect there's nothing magical going on at the NSA. Whatever zero days they have are probably had by other intelligence agencies and hacking groups. Whether to report them publicly is a political decision that these groups have zero incentive to make. Ethical researchers and white hats, from my understanding, are a very small part of the scene, or at least the part of the scene that gets real results.
Earlier quoted context omitted.
If you want to put on your tinfoil hat for a second, consider the fact that Snowden started his career in the military, then moved to CIA, then moved to Booz Allen. It's entirely possible that Snowden is an ongoing CIA op to discredit their rival NSA as part of a turf war.
It's also entirely possible that unicorns are real.
Earlier quoted context omitted.
I'm fond of tweeting a screenshot of longer text, e.g. from the notes app.
I hate when people do that. Much like I hate when people looking for support send me screenshots - it's SO MUCH harder to transcribe ID#s, for example, or to record the details of the issue for future search.
The URL: http://because.a.tweet.doesnt.fit.lucb1e.com/?text=From%3A+h...
Example tweet: https://twitter.com/lucb1e/status/765544321747718144
This uses a third party site to display, but the data is all in the URL. Anyone could verify that the site (my site in this case) is not tampering with the content.