Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

NASA Has Been Hacked

forbes.com

Post reply on HN
Print view View original

71–80 of 114 posts

Re: NASA Has Been Hacked

#71

Post by neuralzen »

ryandrake wrote: post #53
neuralzen wrote: post #48

Earlier quoted context omitted.

Unfortunately there already is. When I interviewed for a job in Antarctica we had discussed methods of saving on bandwidth usage and I suggested the use of a PiHole to strip out ads to save precious KB and was told that the Raspberry Pi was frowned upon due to previous issues, and it would likely never happen. :(

Good news then: you don’t need an actual Raspberry Pi or to run “pihole” software in order to filter ads via DNS. Just a beige Linux box running dnsmasq is enough!

Right, the software does the job not the hardware. I was just trying to point out that the Raspberry Pi was blankedly verboten.

Re: NASA Has Been Hacked

#72

Post by bennofs »

packet_nerd wrote: post #59
olliej wrote: post #22

IT security people need to stop thinking in terms of disallowing “unauthorized” devices on physical (wired and WiFi) and recognize start designing for human nature. Assume that the physical networks are compromised, and have all privileged resources only accept connections over VPN. Is it perfect? No, but it makes further compromise harder. The assumption of no trust also means acknowledging that you need gate incomi…

Meanwhile DNS, which is a precursor to almost every connection ever, is rarely encrypted or authenticated in practice. Standards like DNSSEC and DNS over TLS exist but seem to have lots of vocal opposition without any serious proposals for improvement. A Microsoft certificate training I took recently literally put emphasis on randomizing source port numbers as a way to mitigate attacks.... let that sink in.

What does encrypted/authenticated DNS gain you? If the application protocol is encrypted and authenticated like https then faking DNS responses just results in a connection that is closed immediately because authentication fails. Encrypting is also useless unless you use a proxy/VPN because otherwise the connection target leaks via the IP header anyway when you open the connection.

Re: NASA Has Been Hacked

#73

Post by soulofmischief »

pdpi wrote: post #67
Rooster61 wrote: post #65

Earlier quoted context omitted.

I apply Hanlon's razor to individuals, not collective entities such as a company or agency. The behavior in recent history of such entities I think warrants the exception to the rule.

It’s a heuristic that gives you a good starting point, not some sort of law. As it stands, it’s a starting point that’s easy to back with data suggesting it is indeed the case. If you can point me towards evidence that malice is indeed the case here, I’ll willingly change my mind.

What kind of evidence are you looking for?

Modern shady advertising practices and dark UI patterns which punish users who care about privacy are publicly known and well-documented.

At some point the burden of proof lands on the denier and not the privacy advocate. Hanlan's Razor is not evidence towards anything.

Re: NASA Has Been Hacked

#74

Post by unethical_ban »

riffic wrote: post #52
unethical_ban wrote: post #43

Earlier quoted context omitted.

Making every device connect over VPN is infeasible. There are, however, varying models of governing port-level access exist. dot1x, ISE, and yes, on some networks forcing VPN is doable.

BeyondCorp would be an alternative to consider: https://thenewstack.io/beyondcorp-google-ditched-virtual-pri...

There should be a law about citing what Google does vs. what the rest of the world does.

The Giants are in a class of their own. Lessons are often worth learning, but that doesn't mean most organizations can do what Google can do.

>(The model benefited the fact that all of Google’s internal applications are already on the Web).

Well then.

Re: NASA Has Been Hacked

#75

Post by dvfjsdhgfv »

enriquto wrote: post #12
chacha2 wrote: post #4

Wow. Try to opt out of their data tracking, an option they're required to add. "This may take up to a few minutes to process" They make you wait at this long ass loading screen while they "process" your request not to have cookies. Here's the outline for people who don't want to wait minutes to read an article. https://outline.com/TZSBv4

If you disable javascript you can read it easily (and much faster, and without ads).

This is the best way to browse most of the so-called news sites.

Re: NASA Has Been Hacked

#76

Post by coolspot »

SolarNet wrote: post #50
neuralzen wrote: post #48

Earlier quoted context omitted.

Unfortunately there already is. When I interviewed for a job in Antarctica we had discussed methods of saving on bandwidth usage and I suggested the use of a PiHole to strip out ads to save precious KB and was told that the Raspberry Pi was frowned upon due to previous issues, and it would likely never happen. :(

Then just use a server that does the same thing. If the issue is the buzzword then work around the buzzword.

Yes. Small ARM-powered server. Preferably not expensive, around $35.

Re: NASA Has Been Hacked

#77

Post by vinay_ys »

SamuelAdams wrote: post #14

I highly recommend reading the actual audit[1]. There's a lot of good details in there, similar to the Senate report on the Equifax breach a few days ago. There were several problems: the inventory tracking issue was particularly enlightening: >system administrators did not consistently update the inventory system when they added devices to the network. Specifically, we found that 8 of 11 system administrators respon…

Most corp IT teams I have encountered used some sort of proprietary system for tracking inventory or other management activities. I wish there were robust open-source software stacks available to manage corp IT stuff. Also, I find it weird to let 3rd-party closed source network appliances (security scanners etc) to be simply plugged into your network and wait for them to produce reports.

Re: NASA Has Been Hacked

#78

Post by riffic »

unethical_ban wrote: post #74
riffic wrote: post #52

Earlier quoted context omitted.

BeyondCorp would be an alternative to consider: https://thenewstack.io/beyondcorp-google-ditched-virtual-pri...

There should be a law about citing what Google does vs. what the rest of the world does. The Giants are in a class of their own. Lessons are often worth learning, but that doesn't mean most organizations can do what Google can do. >(The model benefited the fact that all of Google’s internal applications are already on the Web). Well then.

It could be argued that NASA was the original Google.

Re: NASA Has Been Hacked

#79

Post by eggy »

I remember back in the late 80s telnetting out of the NYU Bobst library on their VAX 11(?) system to some pretty interesting systems. The Johnson Space Center in Houston (running VAX 11/785s was one I particularly remember. Of course, back then things were not battened down as much as they are now; the spirit was an open network. A sysadmin would interrupt your session with quesitons like "Who is this? You are unauthorized to access this system, etc."

Re: NASA Has Been Hacked

#80

Post by JudgeWapner »

giarc wrote: post #10
chacha2 wrote: post #4

Wow. Try to opt out of their data tracking, an option they're required to add. "This may take up to a few minutes to process" They make you wait at this long ass loading screen while they "process" your request not to have cookies. Here's the outline for people who don't want to wait minutes to read an article. https://outline.com/TZSBv4

I was going to screenshot that page. A small auto play video in bottom left corner, a top bar pop up to get the "latest updates from Forbes", an email sign up for the Forbes Daily Dozen and in the background, blurred out is the article.

I envision a distributed system that simply renders pages, clicks "agree" or whatever, and uploads just the content to "archive" servers automatically. After a critical mass is reached, then instead of going to the URL, you plug the URL into archive server to see if it already has a copy and render that version. From there, you could go even further and daily download 100mb or so of pre-sanitized internet from the most likely pages you currently visit. Not only would you elide ads, but your page render times would drop to milliseconds and save money on mobile bandwith.

This system could be powered by kind volunteers who manually click away the ads and publish their renderings either as images or HTML-1.0 with all shit-ware removed. They could also be paid through micropayments to workers in developing nations. If everyone "tipped" a buck or two per month into a pool that paid work-at-home scavengers to curtail content for us, we would be supporting a real business model while not being harassed and tracked.

Alternatively, you could have AI-powered crawlers that are trained to close videos, identify article text and relevant pictures, and ignore ad banners.

Post reply on HN