Live data from Hacker News

The NSA Furby Documents

404media.co

81–90 of 129 posts

Re: The NSA Furby Documents

#81

Earlier quoted context omitted.

NSA is a military agency; their norm has always been to protect US assets and attack others.

The NSA is not a military agency. It is within the dod, it provides combat support. But it is emphatically not a military agency.

Emphatically? The director of the NSA is required to be a four star general and concurrently serves as commander of US Cyber Command. Ostensibly non-military, perhaps.

Re: The NSA Furby Documents

#82

Earlier quoted context omitted.

In any SCIF or SCIF-like office space, they're all prohibited. You leave your cell phone at the front door of the secured area. Internet access is via SIPRNet (for classified) or NIPRNet (non-classified, but secured). Phones are through dedicated secure switchboards. The above is common in the DC area (lots of DoD contractors).

A relative of mine used to work in this space 20 years ago. Seems policies haven’t changed at all. Tangental story about how serious the Gov takes OpSec. When I was in Iraq, a Marine in my unit found a roll of red Classified tape. He thought it would be cool to put a strip on his personal laptop, which was confiscated almost immediately. It was very clearly a personal machine, but policy is policy, and he never got t…

> Tangental story about how serious the Gov takes OpSec.

...and yet, Chelsea Manning walked in with nothing more than a CD player and a self labeled CD-RW and exfiltrated tons of data from a secured facility.

> and he never got that laptop back.

There are several morals to this story.

Re: The NSA Furby Documents

#83

these are the caliber of the American praetorian guard who owns our politicians.

Eh, I don't see anything inappropriate in these documents. If they seem overly paranoid, it's because some major security breaches have historically involved silly things like this. Where do you draw the line between a Furby and a Casio SK-1 and a Teddy Ruxpin and a Minidisc recorder and any number of other stateful gadgets of the day, especially when the Furby is brand new and nobody really knows what's inside it?

The NSA is an intelligence agency. The NSA doesn't want people bringing things in that might have the ability to exfiltrate voices or other signals, and in any event the NSA doesn't want random employees talking about it to the press. Where's the element of surprise here? I don't understand why it was even newsworthy in the first place.

As for the intelligence agencies "owning our politicians," LOL. If there were the slightest truth to that, Trump's headstone would read "1946-2016."

Re: The NSA Furby Documents

#84
Note that this was several years after performance artists (not even state-level actors) had demonstrated compromising toys retail supply chain with hacked firmware. https://www.mentalfloss.com/article/547659/barbie-liberation...

So, look of concern at whomever thought it was a good idea to bring an effectively blackbox electronic device with a microphone into a secure area where those were prohibited. Kudos to whomever raised the issue.

Someone should've done a proof of concept mod (firmware or hardware) of a Trojan Furby to appear (to visual and X-ray inspection) to have the stock hardware, but do something nefarious. Or shown how, say, the stock Furby hardware and firmware turned sound into RF leakage.

Re: The NSA Furby Documents

#85
post #52

The FOIA documents are up on archive.org now: https://archive.org/details/nsa-furby-memo/ I'm amused at page 8 of the listserve doc, in which someone points out that the ongoing discussion may at some point be released to the public under FOIA and to consider how it might look after showing up on the front page of a news site

Yep. Who would have guessed 25 years later I'd be bored and then a year later this packet showed up at my doorstep? It's oddly perfect timing, around all the AI discourse. :)

I need to redo my FOIA request [0]. I was investigated by the Secret Service in 1996 as they thought I intended to assassinate President Clinton. This was down to me selling a selling a shell account on a Linux server to someone, who in retrospect, might have had fundamentalist ideals and that person sending a detailed email to the White House outlining their plot, from my domain.

I always wanted to see the chain of events that led to the Special Branch turning up on my door step in England.

[0] I FOIA'd this a couple of years back, but I changed address and never got the documents, only a letter to say it was being worked on.

Re: The NSA Furby Documents

#86
post #58
post #55

Earlier quoted context omitted.

I'm surprised it only took them a year. Would you care to share more about your experience on filing FOIA? The circles I run in seem to view it as a clunky, bloated process, but I feel like it has gotten better than when it was introduced. I have zero first-hand experience, though.

No problem to help, but bad news: Every government agency has different processes. You'll have to go through their own FOIA office. The NSA FOIA form is actually really easy: https://www.nsa.gov/about/contact-us/Submit-a-FOIA-Request/ I simply asked for what I wanted (information about policy memos about 'Furby Alerts' and recording devices at the NSA from late 1998 to early 1999) and submitted the form. About a mont…

And to piggyback on your comment. State FOIA is a different beast to federal FOIA. Lots of states have much tighter timelines. Illinois requires the government body to respond with the records within 5 business days.

Re: The NSA Furby Documents

#87

Earlier quoted context omitted.

In any SCIF or SCIF-like office space, they're all prohibited. You leave your cell phone at the front door of the secured area. Internet access is via SIPRNet (for classified) or NIPRNet (non-classified, but secured). Phones are through dedicated secure switchboards. The above is common in the DC area (lots of DoD contractors).

How strictly are SCIF policies enforced? I'm just a civilian who's never had exposure to that world, but based on my experience with other parts of the government, I'd expect SCIF compliance to fall on a broad spectrum from "sloppy or non-existent" to "overly strict and paranoid." Is my intuition accurate? Who's accountable for the compliance of a given SCIF - can anyone with clearance "setup a SCIF" or does it need…

I always remember the posters inside RAF secure spaces that say "IN EVENT OF EMERGENCY, SECURE ALL HARD DRIVES, THEN EXIT THE BUILDING."

Re: The NSA Furby Documents

#88
post #21

Context: Furbys were the toy for a year or two, and were actively marketed as learning from speech, had an active mic, and did adjust their speech based on what they heard, "learning" to speak English from Furbish. [^1] It's not so different from the fundamental fear of Alexa/Assistant/microphones that's fairly well diffused now. Except the Furby actively claimed to learn how to speak based on your speech, and had a…

Of course some people really wanted to teach it to say new things, and figured out how to swap out the audio files (among other modifications): https://github.com/Jeija/bluefluff Fun fact: If you mess up and need to reset the furby, the procedure is to turn it upside down and hold down the tongue while pulling the tail for ten seconds.

Note that this works for Furby Connect, original Furby had IrDA only.

Re: The NSA Furby Documents

#89
post #58
post #55

Earlier quoted context omitted.

I'm surprised it only took them a year. Would you care to share more about your experience on filing FOIA? The circles I run in seem to view it as a clunky, bloated process, but I feel like it has gotten better than when it was introduced. I have zero first-hand experience, though.

No problem to help, but bad news: Every government agency has different processes. You'll have to go through their own FOIA office. The NSA FOIA form is actually really easy: https://www.nsa.gov/about/contact-us/Submit-a-FOIA-Request/ I simply asked for what I wanted (information about policy memos about 'Furby Alerts' and recording devices at the NSA from late 1998 to early 1999) and submitted the form. About a mont…

https://www.muckrock.com/ seems to have a lot of good information on this too, and fun-to-look-through archives of requests and responses.

Re: The NSA Furby Documents

#90

Earlier quoted context omitted.

NSA is a military agency; their norm has always been to protect US assets and attack others.

The NSA is not a military agency. It is within the dod, it provides combat support. But it is emphatically not a military agency.

The NSA literally performs cyber attacks on foreign countries.
Post reply on HN