It's a trap.
CIA’s Latest Layer: An Onion Site
11–20 of 147 posts
Re: CIA’s Latest Layer: An Onion Site
#12I have a question for the HN audience. Many here have gone to top schools and studied crypto, ML, etc with the best. And are probably the best in their field. Do you currently work for any three letter agencies? Did your smartest colleagues go to work at three letter agencies? I am trying to gauge the quality of talent at CIA, NSA, FBI, etc. All of my best colleagues went to the private sector, usually tech or securi…
If you're well credentialed, tech-smart, greedy, and morally bankrupt, it's probably more lucrative to work for Google than the NSA.
> If you're well credentialed, tech-smart, greedy, and morally bankrupt, it's probably more lucrative to work for Google than the NSA.
Can confirm.
Went to MIT for EECS. Lots of us went to Google or trading companies.
Re: CIA’s Latest Layer: An Onion Site
#13It's a trap.
Paging #notacop
Re: CIA’s Latest Layer: An Onion Site
#14I have a question for the HN audience. Many here have gone to top schools and studied crypto, ML, etc with the best. And are probably the best in their field. Do you currently work for any three letter agencies? Did your smartest colleagues go to work at three letter agencies? I am trying to gauge the quality of talent at CIA, NSA, FBI, etc. All of my best colleagues went to the private sector, usually tech or securi…
A bit off topic, but I worked with someone who interviewed with the NSA, got a job offer and declined the job.
The funny part is that he has a 100% chance of getting “randomly” selected for search every time he takes a plane.
Re: CIA’s Latest Layer: An Onion Site
#15I have a question for the HN audience. Many here have gone to top schools and studied crypto, ML, etc with the best. And are probably the best in their field. Do you currently work for any three letter agencies? Did your smartest colleagues go to work at three letter agencies? I am trying to gauge the quality of talent at CIA, NSA, FBI, etc. All of my best colleagues went to the private sector, usually tech or securi…
One of my best friends worked at the NSA, then the CIA. Smart guy. Unfortunately he got charged for Vault7 leaks and is going to spend the rest of his life in jail.
So, in short, don’t work for them. It might seem cool, but it’s not worth it. If they don’t like you, they’ll fuck you.
Re: CIA’s Latest Layer: An Onion Site
#16> ciadotgov4sjwlzihbbgxnqg3xiyrg7so2r2o3lt5wz5ypk4sxyjstad.onion How does one store links like this? You'd need a bookmark file, which would sort of give the game away, I'd have thought. How do you make sure you notice when you visit a URL with the same readable prefix?
This is an unfortunate downside of onion URLs and a restriction imposed by Zooko's triangle (the CAP theorem of naming systems)[1].
One possible solution would be to issue a TLS certificates for both the clear-web and .onion domain (for services which are offering .onion services to provide better anonymity for users not their servers).
Unfortunately, the CAB forum has decided to not allow this -- only EV certificates can be issued for .onion services so you can't use LetsEncrypt for this.
Re: CIA’s Latest Layer: An Onion Site
#17> ciadotgov4sjwlzihbbgxnqg3xiyrg7so2r2o3lt5wz5ypk4sxyjstad.onion How does one store links like this? You'd need a bookmark file, which would sort of give the game away, I'd have thought. How do you make sure you notice when you visit a URL with the same readable prefix?
That's sort of the point, since it's actually generated from a public key that the operator holds [1].
Once you have confirmed a domain is correct, you should save it yourself, and only access that saved link.
Using any forums/wikis/search to find onion links (may) leave you with stolen credentials or a hacked machine.
It's cumbersome for sure, but the beauty is it's self-authenticating. Don't forget to turn off JS. :)
[1] https://trac.torproject.org/projects/tor/wiki/doc/HiddenServ...
Re: CIA’s Latest Layer: An Onion Site
#18I have a question for the HN audience. Many here have gone to top schools and studied crypto, ML, etc with the best. And are probably the best in their field. Do you currently work for any three letter agencies? Did your smartest colleagues go to work at three letter agencies? I am trying to gauge the quality of talent at CIA, NSA, FBI, etc. All of my best colleagues went to the private sector, usually tech or securi…
If you're well credentialed, tech-smart, greedy, and morally bankrupt, it's probably more lucrative to work for Google than the NSA.
Best thing ever said on HN.
Re: CIA’s Latest Layer: An Onion Site
#19I have a question for the HN audience. Many here have gone to top schools and studied crypto, ML, etc with the best. And are probably the best in their field. Do you currently work for any three letter agencies? Did your smartest colleagues go to work at three letter agencies? I am trying to gauge the quality of talent at CIA, NSA, FBI, etc. All of my best colleagues went to the private sector, usually tech or securi…
If you're well credentialed, tech-smart, greedy, and morally bankrupt, it's probably more lucrative to work for Google than the NSA.
Yep. GCHQ was recruiting on our CS course and the starting pay they offered was within £30-35k range. Working for literally any IT company in the region would pay more.
(obviously there are perks working for the government that the private industry cannot match, so for some people lower pay is acceptable)
Re: CIA’s Latest Layer: An Onion Site
#20I have a question for the HN audience. Many here have gone to top schools and studied crypto, ML, etc with the best. And are probably the best in their field. Do you currently work for any three letter agencies? Did your smartest colleagues go to work at three letter agencies? I am trying to gauge the quality of talent at CIA, NSA, FBI, etc. All of my best colleagues went to the private sector, usually tech or securi…
One of my best friends worked at the NSA, then the CIA. Smart guy. Unfortunately he got charged for Vault7 leaks and is going to spend the rest of his life in jail. So, in short, don’t work for them. It might seem cool, but it’s not worth it. If they don’t like you, they’ll fuck you.
How do you get charged for leaks if you weren't the leaker?