Live data from Hacker News

Google Security Team Member on NSA: "Fuck These Guys"

plus.google.com

31–40 of 420 posts

Re: Google Security Team Member on NSA: "Fuck These Guys"

#31

I can understand using unencrypted network within a data center (unless you are doubly paranoid), but why wouldn't they encrypt data between data centers?

Apparently these data centers were linked via dedicated lines -- there was no traffic or outside access to these fiber lines. They were used solely for communication between the two data centers (so technically still an isolated network).

Re: Google Security Team Member on NSA: "Fuck These Guys"

#32
post #21
post #6

This has been asked before, but I'd love to hear from a dev (anonymously of course) who actually helped build this NSA madness. Is it like The Cube, where no one really knew what each piece was for? Is it that they are morally pro the NSA's attitude toward personal and corporate privacy, or do they just not care either way?

In The Shadow Factory (written after the Klein leaks but before Snowden), Bamford notes that a lot of surveillance equipment comes from Israel. I don't know much about Israeli culture but it may be significantly different from the US.

I am at the openstack conference right now. My colleague was talking in hebrew to a lot of folks the past few days. I said to him jokingly "Where did all these Israeli's come from that are here"

His reply: "Dude, all this shit comes out of Israel! its the whole tech/NSA bullshit used against the palestinians!"

It was a casual comment - but very interesting in that its a foregone conclusion that the surveillance state is just a function of the culture of Israeli tech development.

Re: Google Security Team Member on NSA: "Fuck These Guys"

#33
post #13
post #12

Earlier quoted context omitted.

Why do people assume the Chinese government is not able to use similar techniques?

I would assume they use similar techniques within China and perhaps allied countries like North Korea and Cuba, but the US is performing wiretapping in at least the UK, Canada, Australia, and New Zealand. Also, how much non-Chinese Internet traffic passes through China?

> and perhaps allied countries like North Korea and Cuba

Nobody is more distrusting of each other than two communist countries.

Re: Google Security Team Member on NSA: "Fuck These Guys"

#34
post #16

The NSA must have somebody working on the inside at google. Otherwise it would be extremely difficult to reverse engineer the RPC protocol that was used by google's servers to communicate between each other. Even on an unencrypted network I can image it would be very difficult to reverse engineer the protocol without any help.

Or, they could have just hired an ex-Googler familiar with the protocol. No need for someone working for the NSA "on the inside" at Google, and no need for reverse engineering.

Just "being familiar" would probably slow them down too much, considering how much different protocols they attacked "1622 Google authorization protocols" are listed on one NSA slide here:

http://www.washingtonpost.com/blogs/the-switch/wp/2013/11/04...

I know how hard it would be, I implement low level protocols (not Google's or of men in black).

Re: Google Security Team Member on NSA: "Fuck These Guys"

#35
My feeling is that the NSA/GCHQ hack was arguably an unfortunate thing for them to do, although somewhat predictable, once one knows of the existence of the network topology vulnerability that was exploited. But presumably somewhere in Google someone knew about this possibility sometime back. I wonder whether there was an assumption that nobody would be clever enough to figure things out, or whether security engineers were working 24/7 to fill in the gap and just didn't get there in time.

Either way, this is a good stimulus for rolling out deeper encryption.

Re: Google Security Team Member on NSA: "Fuck These Guys"

#37
post #14

Earlier quoted context omitted.

More importantly, whats the difference between Chinese and American government when it comes to privacy?

The terrible things the Chinese government does aren't being done to you.

Those things aren't being done to most Chinese people, either. And they are being done to some Americans now, and increasingly so.

Re: Google Security Team Member on NSA: "Fuck These Guys"

#39
post #16

The NSA must have somebody working on the inside at google. Otherwise it would be extremely difficult to reverse engineer the RPC protocol that was used by google's servers to communicate between each other. Even on an unencrypted network I can image it would be very difficult to reverse engineer the protocol without any help.

The RPC protocol is stated to be based on protocol buffers so the encoding is known. What you would need to do to reverse engineer it is coming up with matching message descriptions. But, even without that piece of the puzzle, reverse engineering a protocol that doesn't use encryption wouldn't be "extremely difficult". This is not an indication of an inside man. https://developers.google.com/protocol-buffers/docs/ove…

The only published information is how the values are encoded, not what is encoded (the specifications aren't transported together with the data) so to crack 1622 different protocols only involved in authorization according to the NSA slide is not such a small task, at least if they are interested in more than just recognizing e-mail addresses which can be found using regexps. And just counting the protocols proves that they were indeed interested in more.

Re: Google Security Team Member on NSA: "Fuck These Guys"

#40
post #21
post #6

This has been asked before, but I'd love to hear from a dev (anonymously of course) who actually helped build this NSA madness. Is it like The Cube, where no one really knew what each piece was for? Is it that they are morally pro the NSA's attitude toward personal and corporate privacy, or do they just not care either way?

In The Shadow Factory (written after the Klein leaks but before Snowden), Bamford notes that a lot of surveillance equipment comes from Israel. I don't know much about Israeli culture but it may be significantly different from the US.

As an (ex-) Israeli with no inside information I'd say the NSA is probably way ahead of Israel on this and wouldn't need or use any Israeli knowledge or equipment. I'd also say traditionally Israel relies on human intelligence while the US on signal intelligence. In terms of commercial surveillance equipment I'm sure there's a lot on the market from lots of countries.
Post reply on HN