Live data from Hacker News

‘Fix My Computer’ Cry Echos on Social Media; Air Force CIO Responds

airforcemag.com

231–240 of 264 posts

Re: ‘Fix My Computer’ Cry Echos on Social Media; Air Force CIO Responds

#231
post #176

It's not the hardware, it's the crap that runs on it. You want a system which is secure and usable? Time for the DoD to commission their own OS. "Nobody will know how to use it!" is an objection which can be overcome by training, which is a thing that the armed forces understand. "It won't be compatible with the COTS!" is an advantage, not a disadvantage. "It will take too long and cost too much!" means that they are…

My god, I cannot second this enough.

We talk craptons about "innovation" and torrents of words on "cybersecurity" yet underpin daily life on recursive kludges on 1980s operating system and software technology. It's quite Kafkaesque!

This isn't just a matter of "spending more on IT" - they likely already spend too much. It's just spending on the wrong things.

No amount of layering crap on top will overcome the rotten, slapdash foundations of systems like windows, nor the diverging motivations between MS and and their customers. Especially customers like the U.S. Government. The amount of vendor lock-in to the shitty MS ecosystem, begetting atrocities like critical data living on godforsaken Sharepoint, is profoundly saddening. It's remarkable how everyone just uses hardware that's orders of magnitude faster than 1990s computers, yet interactions are far slower.

I once tried (reluctantly) connecting my USG-issued laptop onto my fairly locked-down home network. The amount of spew it continually issued onto the network was disgusting and I just disconnected it and drove in to complete whatever mandatory update they demanded.

Instead of creating yet another goddamn "cybersecurity czar", how about we try to take what we've learned in the past 40-50 years in computer science and try to properly engineer the software foundations for the next 30 years? This is absolutely something the USG could instigate and accomplish, if the initiative was run by the right people. I know some of them!

Re: ‘Fix My Computer’ Cry Echos on Social Media; Air Force CIO Responds

#232

> Knausenberger said the ACC team would “streamline [existing programs] into one endpoint solution that meets our security, operations, and UX needs.” I've read sci-fi books that are more realistic than this. Only the wildest cyber-crime novels portray the military network systems and administration ops as competent. When watching "Alias" a long time ago, I had to laugh every time I saw an instantly responding laptop…

> Knausenberger said the ACC team would “streamline [existing programs] into one endpoint solution that meets our security, operations, and UX needs.” Sounds like they're going to get the F-35 of antivirus software. Having multiple programs might not be the problem, but consolidating to just one is an easy sell for a lucrative non-solution.

Security should be practiced in depth. Having only one program that hackers / crackers can write uber-specialized scripts to target seems like an awful idea.

I mean, what if they just bought their people budget laptops with 8-12GB RAM and an SSD, lol. Will be much cheaper over a course of 3-5 years.

Or have good network ops and not allow viruses inside in the first place. A lot of corps have super paranoid (and actually good) teams doing that.

Re: ‘Fix My Computer’ Cry Echos on Social Media; Air Force CIO Responds

#233
post #7

> Currently the service uses both McAfee and Tanium software packages to scan and protect service-issued endpoints like laptops. The problem isn't hardware, it's that they're using the worst antivirus known to mankind. It's not throwing money at the problem, it's about what can be removed.

I've decided that anti-virus and other security software slowing down the computer is a feature. If the software was super-efficient, people would think it wasn't doing anything. The slowness provides the appearance of work being done.

Re: ‘Fix My Computer’ Cry Echos on Social Media; Air Force CIO Responds

#234
post #139

Earlier quoted context omitted.

It's doing al sorts of interesting things. They subscribe to event feeds supplied by the operating system to keep track of security related events: modules that are loaded, processes that start, connections that open and close, users that log in and log off. Then they also inject themselves into processes and 'hook' into operating system routines to check things the feeds to not provide: which files are being accesse…

And they're rarely tested with other competing software, and once they start both hooking on the same thing (and each other) you can get a death spiral.

Yea, certain routines in windows actually check if the OS is hooked. The PE loader implemented in ntdll verifies that NtOpenSection() (or NtOpenFile, not sure right now) has not been hooked. When I was looking into that it looked like it disabled concurrent module loading if detected a hook(so it became slower), probably as a bug fix for whatever software inserts itself in that place (Stuxnet did too!).

Re: ‘Fix My Computer’ Cry Echos on Social Media; Air Force CIO Responds

#235
post #34

Earlier quoted context omitted.

I think that's a very rosy view of US intervention. In particular, the US has helped overthrow numerous democratic governments because they were not ideologically aligned with the kind of free trade maximalism the US favours. Indonesia and Chile are particularly notable examples here. It's unclear if US actions have created a more stable world, but they have certainly created one more aligned with the US ideologicall…

Yea, I generally am a bigger fan of what the US does just by being there than I am of our actual interventions in places which can frequently be seen as short sighted, bloody, and against our own principles at times. But from a world composed of far more people that those in Chile, Indonesia, Iran, Iraq, and South America. I think we've done a decent job overall from a historical perspective of promoting a fairly sta…

In a vacuum, someone will step in, and that someone as of now is China and/or Russia.

The US is certainly no saint, but I think someone(s)? have said that considering the alternatives *, you could do a lot worse.

* Realistic alternatives that is. I too would love to see us achieve world peace and ditch all weapons. But that's probably never going to happen as long as humans are not extinct.

Re: ‘Fix My Computer’ Cry Echos on Social Media; Air Force CIO Responds

#236
Federal government needs to do something about the technical debt of their lifers. Many federal IT departments simply lie low and hope that their project/department gets folded into something bigger with a team who actually knows modern tech.

The problem is they all are in the same boat and there is no actual "wonder team" that could ever possibly save them.

Re: ‘Fix My Computer’ Cry Echos on Social Media; Air Force CIO Responds

#237
Hackers - is there a good way to diagnose or fix this without a USAF comm admin account? Ie find out specifically what services are doing it?

Some context:

  - It takes 20-30 minutes to go from login to having excel or outlook up
  - Opening a program like Outlook, Chrome etc takes on the order of minutes once booted up/settled
  - Regular problems regarding permissions, popups that take minutes to close, licenses for things like Adobe etc
  - If you call comm, they blame it on Sq leadership not buying faster computers
  - Substantial latency on every action
  - Each computer is often shared by a rotation of ~30 people, which may contribute to the issue
  - I harbor suspicions DoD comm leadership has been compromised by a foreign power
I've worked around our scheduling and training software being useful by deploying a webapp used in an unofficial context. The AF dumped an updated to the official software recently that made it go from bad to unusable, and now I get new account requests every week.

One approach - not ideal: Non-DoD computers on squadron Wi-Fi. Can't connect to network drives etc, but is a lifesaver for one off mission planning products. Or get whatever queep you can at home before coming in.

Re: ‘Fix My Computer’ Cry Echos on Social Media; Air Force CIO Responds

#238

Earlier quoted context omitted.

Wasn’t the military which overthrew democratic governments though. It was the CIA.

This is a pretty important delineation.

They dont also fall under the DOD? (I am not a US citizen, genuine question)

Also want to echo sentiments about roaming profiles and how annoying they can be.

Re: ‘Fix My Computer’ Cry Echos on Social Media; Air Force CIO Responds

#239
This is a windows issue. I have had a lot of public sector clients, and rules have prevented me from doing a forensic analysis on the machines they provision, either MSFT's products are so egregious and unusable that we just pretend to use them, or the more plausible idea that corporate IT groups are using enterprise laptop fleets to run bitcoin mining.

Re: ‘Fix My Computer’ Cry Echos on Social Media; Air Force CIO Responds

#240
post #163

Earlier quoted context omitted.

Yes, they're running Windows, and Windows is also software, contributing to the bloat. My point is that the resource overhead of just running an idle OS doesn't need to be humongous compared to the actual workload.

Seriously, they could be running on thin clients like a chromebook. No need to give everyone top-end machines to run MS Office and some webapps. It's mind boggling this is even a debate on HN.

But then they wouldn't be able to install the corporate spyware that keeps the evil hackers away.
Post reply on HN