Live data from Hacker News

NSA Owns Everything (2015)

blog.thinkst.com

71–80 of 265 posts

Re: NSA Owns Everything (2015)

#71

One thing I'm curious is what's the source of energy behind all this. NSA failed to stop many important accidents (9/11, covid) .. Is it a survival bias and they're still keeping people safe without saying it or is it some finance/intelligence blackhole spinning due to some political quicksand ?

Both 9/11 and covid are a case of human error (the latter more incompetence and inaction though); at 9/11 they HAD all the information they needed, where the terrorists had been, their communications, etc (see https://en.wikipedia.org/wiki/September_11_attacks#FBI), but they apparently didn't connect the dots, failed to act, failed to not grant them entry into the country, etc.

Mind you, a lot of these projects are post-9/11 so I'm confident a lot of it has been a result of it and the massive financial injections that the US government put into counter-terrorism since then.

Finally, I like to think that the NSA and co don't want to advertise how much attempts they thwart; if they, for example, stop an attack every day, the people will become afraid of terrorists because incidents happen so often. But I'm not sure if they are being kept silent.

Re: NSA Owns Everything (2015)

#72

One thing I'm curious is what's the source of energy behind all this. NSA failed to stop many important accidents (9/11, covid) .. Is it a survival bias and they're still keeping people safe without saying it or is it some finance/intelligence blackhole spinning due to some political quicksand ?

Both 9/11 and covid are a case of human error (the latter more incompetence and inaction though); at 9/11 they HAD all the information they needed, where the terrorists had been, their communications, etc (see https://en.wikipedia.org/wiki/September_11_attacks#FBI ), but they apparently didn't connect the dots, failed to act, failed to not grant them entry into the country, etc. Mind you, a lot of these projects are…

yes indeed it's a touchy system that can't be disclosed..

Re: NSA Owns Everything (2015)

#74
post #40

An observation: The exfiltration protocol described in the "misdirection" section has "Dated: 24 Feb 98" in the bottom right corner. That it's being regarded as reasonably novel is a good measure of just how broken the collective security discussion is. Just as broken as the PGP situation, thinking about it; in which case everything is operating as intended... moving on...

It clearly shows how much effort the US govt went to undermine it's citizen's security. I mean 1998....

Re: NSA Owns Everything (2015)

#76
The Snowden stuff was the event that shook me to my core. I was a happy technologist till then, thinking that such was the nature of life and progress simply was unfolding in front of me.

However, the way the event was covered by the media - told a different story. The media focussed on the man rather than the info he provided, so the conversation was 'where was he?', 'where was his girlfriend?', etc - that told me everything. They hardly touched on what was provided and what that meant (that we were being spied on 24/7). And what was provided took years to come out...... So, the media are complicit - just another arm of the governance structure we find. The intercept, the MSM, all are just playing a role in mis-informing the people.

Since then, I have even come to change my views on the Snowden event itself. I think this was an intentional release of data, an orchestrated event. Snowden is probably a character created by some agency. He may not be a real person - things like bits of his glasses disappearing indicate that he could be CGI. Perhaps this sounds crazy - but if you are in the business of governance, you want to manage everything, even the opposition. (Think 1984 and the way that the opposition is created and controlled in that book).

Why would "they" create Snowden and the release of apparently top secret files?

Well, if you know what is coming you do not respond with shock, you do not reject it out of hand. You acclimatise to the new reality. There was little we could do with the Snowden event, except watch it play out. We were put on notice and informed of what was/is coming. And what's coming is a technocratic system with very fine grained control in the hands of the technocrats.

Re: NSA Owns Everything (2015)

#77

One thing I'm curious is what's the source of energy behind all this. NSA failed to stop many important accidents (9/11, covid) .. Is it a survival bias and they're still keeping people safe without saying it or is it some finance/intelligence blackhole spinning due to some political quicksand ?

How would the NSA do anything about COVID or any illness for that matter?

Re: NSA Owns Everything (2015)

#78
I knew about this prior to 2000

Within my hacking community it was well know. We used to do that thing were you send out massive amounts of email with trigger words to cause problems. I think it created 0 problems.

It was an open secret. Well I guess at the time a conspiracy theory. One that has been proven true and it was much worse than we thought

Re: NSA Owns Everything (2015)

#79
post #62
post #44

Earlier quoted context omitted.

All modern ARMs have ROM block containing undocumented booting sequence.

You're wrong, but with such confidence! Here is a documented ARM booting sequence with fully free firmware, https://stikonas.eu/wordpress/2019/09/15/blobless-boot-with-...

That 32k BootROM isn't free in your example.

SoCs will also have "pre-boot" code that runs before that:

> However, even one of their most ardent open-source advocates pushed back quite hard when I suggested they should share their pre-boot code. By pre-boot code, I’m not talking about the little ROM blob that gets run after reset to set up your peripherals so you can pull your bootloader from SD card or SSD. That part was a no-brainer to share. I’m talking about the code that gets run before the architecturally guaranteed “reset vector”. A number of software developers (and alarmingly, some security experts) believe that the life of a CPU begins at the reset vector. In fact, there’s often a significant body of code that gets executed on a CPU to set things up to meet the architectural guarantees of a hard reset – bringing all the registers to their reset state, tuning clock generators, gating peripherals, and so forth. Critically, chip makers heavily rely upon this pre-boot code to also patch all kinds of embarrassing silicon bugs, and to enforce binning rules.

https://www.bunniestudios.com/blog/?p=5127

Re: NSA Owns Everything (2015)

#80

Earlier quoted context omitted.

They don't need 0days when they can just easily corrupt the standards process. They've been doing it everywhere. The Wifi Alliance has made some heinously bad choices that if you attributed to incompetence simply make no sense, they treat anyone who questions them with disdain and shoots down attempts to fix the mess they make. WPA3 was hilariously broken a month after getting rolled out.

TIL, any recommended reading on this?

Here's a good overview https://arstechnica.com/information-technology/2019/04/serio...
Post reply on HN