Live data from Hacker News

XKeyscore: NSA program collects 'nearly everything a user does on the internet'

theguardian.com

271–280 of 641 posts

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#271
I wrote an e-mail to Congressman Mike Rogers about his misleading quote in this article. I encourage others to reuse my template and also ask him to justify his misleading remarks about Snowden's statement: https://news.ycombinator.com/item?id=6134672

We should start hold our public servant to task for lying to the American people about these programs.

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#272
post #51

Earlier quoted context omitted.

> how are they getting all Facebook private messages and Gmail? Perhaps you missed the news about PRISM? :)

This presentation is from 2008. According to the presentation on PRISM Facebook joined the program on 3 June 2009. That would indicate that the searches here are based, most likely, not on participation by Facebook but by passive sniffing of HTTP traffic and then session reconstruction.

Around about the time when people started rolling out SSL as standard. That'd make sense, as they'd need to move their beam-splitters (prisms!) to behind the SSL endpoints.

I think PRISM is just the public-private partnership aspect of this, where they have to go to service providers and install kit, as they can't tap SSL traffic.

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#273

Earlier quoted context omitted.

Yes and no. Remember, it's not a silver bullet or a secret security sauce.

That's true, but I believe, we need all the bullets we can get and use them in parallel. It's never about either-or.

I agree, and defense in depth is a core tenet of security after all!

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#275
post #222

Earlier quoted context omitted.

> How can they feel good about what they are doing? You'd be amazed. https://twitter.com/_nothingtohide

Seems to me that people aren't too concerned of nameless, faceless people looking through their stuff so long as people they know (parents, spouse, friends..) don't see it.

You know, probably one of the best things that could happen is for someone to pour out nsa data indiscriminately and en masse in order to just outright humiliate hundreds of millions of people.

THAT certainly wouldn't risk an apathetic response.

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#276
post #102

Earlier quoted context omitted.

The main thing that this new release reveals is not the scope of the data collection, but confirmation that analysts are given free reign to perform queries. Until this, there was an outside chance that the system required all database queries to be signed by a Judge prior to execution. This is not the case though; all queries are processed immediately, with essentially nothing more than a repo commit message as just…

Exactly. There were a lot of people from the government that came out in the past few months and said there are checks and balances and a lot of oversight in these processes. That clearly isn't true. It will be interesting to go back through all of those statements with this new information/evidence on hand. Greenwald has timed this well. He put out enough information early on to give Snowden opponents enough rope wi…

Devils advocate here: If in fact all of this is being collected, is it actually illegal to search without a warrant? If all of the above items are being siphoned off the internet via taps in concentrated NAPs around the USA and the world, and everything is in plaintext, this doesn't seem to be technically against the law.

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#277
post #157

Is this information the NSA could've attained left to their own devices, or is this sort of stuff only accessible with help from service providers, eg Facebook and Google? What I'm trying to ask is: with all the hullabaloo Google, Facebook, Yahoo, Microsoft, etc have made about individual, manual reviews of information requests, are we still being lied to? I suspect that we obviously haven't been told the whole story…

> are we still being lied to?

The answer will always be "yes".

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#278
post #51

Earlier quoted context omitted.

> how are they getting all Facebook private messages and Gmail? Perhaps you missed the news about PRISM? :)

This presentation is from 2008. According to the presentation on PRISM Facebook joined the program on 3 June 2009. That would indicate that the searches here are based, most likely, not on participation by Facebook but by passive sniffing of HTTP traffic and then session reconstruction.

From the screenshots it's obvious that the captured data is an HTTP form submission in facebook.

So they didn't have access to private messages, they just intercepted internet traffic and relied on it being unencrypted. Facebook didn't always enforce https by default like it does now

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#279

>How do I find a strong-selector for a known target? >How do I find a cell of terrorists that has no known connection to strong-selectors? >Answer: Look for anomalous events >E.g. Someone whose language is out of place for the region they are in >Someone who is using encryption >Someone searching the web for suspicious stuff Lovely. Suspicious stuff and encryption. But wait! There's more! >Show me all the VPN startup…

I'd like to know where they are keeping these "over 300 terrorists" that have been captured due to this program. How is one labeled a terrorist by this program I wonder?

By captured, I'm sure they mean captured via droning.

Re: XKeyscore: NSA program collects 'nearly everything a user does on the internet'

#280
post #218

Earlier quoted context omitted.

>This is overwhelming. Even when you always hear the claims about we knew this was going on, somehow it is still shocking when you see it all laid out infront of you with screenshots and the capabilities described. It has become a bit of a pet peeve of mine recently to see self-aggrandizing comments from users around the net about how "we should have known" and "none of this is new." I'm a practically addicted news j…

You're both right. If you read the PATRIOT Act, it's easy to look backwards and see that the things we're becoming aware of now are logical extensions of what was being asked for way back then. It is, however, VERY easy not to have been able to have that foresight, and I think that the insights people were expecting the government to have been constrained by the fact that all the information of value is collected by…

If Richard Stallman is quietly berating us somewhere, he can go fuck himself. Part of educating the masses is being a person who people want to listen to. If he failed at that, he's no better than anyone else, and perhaps far worse, because of all the lost potential.
Post reply on HN