Live data from Hacker News

Google Security Team Member on NSA: "Fuck These Guys"

plus.google.com

151–160 of 420 posts

Re: Google Security Team Member on NSA: "Fuck These Guys"

#151
post #6

This has been asked before, but I'd love to hear from a dev (anonymously of course) who actually helped build this NSA madness. Is it like The Cube, where no one really knew what each piece was for? Is it that they are morally pro the NSA's attitude toward personal and corporate privacy, or do they just not care either way?

Maybe there are some good programmers and engineers who agree with the NSA's goals and methods?

There are some politicians, judges and journalists who agree with what they do - why should any other field be different?

Plenty of good engineers work on weapons systems, despite the use those systems are put to. The fact the systems are also used for national defence is often used as self-justification.

More directly: many good programmers build viruses and/or sell exploits for systems (and don't try and claim "they aren't from the US" - plenty are). Being a good programmer does not mean a persons moral code is the same as yours or mine.

Re: Google Security Team Member on NSA: "Fuck These Guys"

#152
post #71
post #52

Lets start from the beginning: the NSA "hack" became possible because Google (and its security team) made bad assumptions about the security of the connection between Google's data centers and did not encrypt the traffic. Basically, this is security 101: protect data at rest and protect data in flight. So, sorry but I think the better subject for discussion would be how badly Google screwed up, not how evil is NSA. M…

I can't agree with that, this was on Google's on fiber connections between their own data centers, right? And no other company with multiple data centers encrypts all traffic between them, right? (maybe you'll find a small counterexample but no big one.) So I don't think this is "security 101".

Amazon does that.

Re: Google Security Team Member on NSA: "Fuck These Guys"

#153
post #146

Earlier quoted context omitted.

Are you sure they were? As far as I can tell the US has done more damage in Latin America than any USSR meddling. Stalin was really bad but the USSR was not ruled by Stalin for that long.

The US in Central America weren't angels, for sure, but I doubt if the USSR funding of left-wing groups was any better. Stalin was a mad man on a par with Hitler, but even under later leaders it was still a repressive regime with Gulags.

>I doubt if the USSR funding of left-wing groups was any better.

When you say that you doubt it, is that code for having no idea of the impact of Soviet funding in South America, but not being willing to say that you don't know? Or is it just that you know that everything bad that the US did was to counter something even worse that the evil USSR was doing?

Missile gap?

Re: Google Security Team Member on NSA: "Fuck These Guys"

#154
post #89

I think it's pretty clear that we need both technical and legislative fixes to NSA surveillance. Just one of the two isn't enough: to get be even vaguely confident that surveillance ends, we need both. The technical fixes I can't speak to, but the legislative ones I've been thinking about for a while. In the last week, there have been two prominent bills announced to deal with surveillance: - Bill 1: The FISA Improve…

Try to find a fix for the ridiculously broken system that is the US government?

Yes. It's fixable the moment the public realizes that it is within their power to fix.

Re: Google Security Team Member on NSA: "Fuck These Guys"

#155
post #55

Earlier quoted context omitted.

The problem is that it's not the NSA doing it. It's GCHQ, in the UK.

What was the physical location of this fiber? The UK?

Yes, according to the Washington Post, the interception took place in the UK.

Re: Google Security Team Member on NSA: "Fuck These Guys"

#156

Oh, the hypocrisy.... > "Bypassing that system is illegal for a good reason." Yes, so is invasion of privacy. Yet Google has no problem breaking the law and violating civil rights for profit. > "Unfortunately we live in a world where all too often, laws are for the little people." Yeah, like tax laws and privacy laws... If you want to get on this high horse, you shouldn't be working for Google.

How can Google become a more well behaved company if everyone working for them follows that rule?

Re: Google Security Team Member on NSA: "Fuck These Guys"

#157

Earlier quoted context omitted.

The US in Central America weren't angels, for sure, but I doubt if the USSR funding of left-wing groups was any better. Stalin was a mad man on a par with Hitler, but even under later leaders it was still a repressive regime with Gulags.

>I doubt if the USSR funding of left-wing groups was any better. When you say that you doubt it, is that code for having no idea of the impact of Soviet funding in South America, but not being willing to say that you don't know? Or is it just that you know that everything bad that the US did was to counter something even worse that the evil USSR was doing? Missile gap?

It's code for the funding of Right Wing Groups by the US having been publicised more widely than the funding of Left Wing Groups by the USSR.

However, Cuba is a repressive dictatorship which will was funded by the USSR for many years.

Re: Google Security Team Member on NSA: "Fuck These Guys"

#158
Keep in mind when considering reform by our legislature that any serious efforts on that front will likely be undermined with blackmail made possible by the very surveillance apparatus they are attempting to curtail [1]. I sincerely hope that Snowden's revelations prove or at least strongly hint towards such an assertion because until they do it's still "conspiracy theory." Free society is in deep shit, and for the life of me, even though I've thought about it obsessively for the past couple months now, I have no idea what can be done about it.

[1] http://www.boilingfrogspost.com/tag/russ-tice/

Re: Google Security Team Member on NSA: "Fuck These Guys"

#159
post #151
post #6

This has been asked before, but I'd love to hear from a dev (anonymously of course) who actually helped build this NSA madness. Is it like The Cube, where no one really knew what each piece was for? Is it that they are morally pro the NSA's attitude toward personal and corporate privacy, or do they just not care either way?

Maybe there are some good programmers and engineers who agree with the NSA's goals and methods? There are some politicians, judges and journalists who agree with what they do - why should any other field be different? Plenty of good engineers work on weapons systems, despite the use those systems are put to. The fact the systems are also used for national defence is often used as self-justification. More directly: ma…

A few of my school friends worked for GCHQ and I questioned their reasons for doing so around ten years or so ago (a lot has changed in the world since then, but a lot hasn't). Back then there were three reasons beyond 'I need an income':

1) terrorists - someone has got to stop them blowing up innocent babies and children

2) kiddie porn - someone has got to take the war on paedophiles seriously

3) organised crime - who knows? Selling arms to the terrorists? Laundering money. That's it. Laundering money and drugs. I remember now.

These 'reasons' can be trotted out like a mantra and working for them is a bit like being a soldier fighting a noble cause that everyone else has to respect.

As per other comment on 'The Cube', people at GCHQ are kept in little boxes and not made aware of what the big plan is. It is a system that works really well. So, even if someone's job has nothing to do with the war on kiddie porn, the war on drugs or The War Against Terror, they know that without their organisation's effort then we would be flooded with the evil stuff and democracy would be doomed.

The 'I cannot talk about my work' thing works really well. Although I am not convinced by it. I think that it is all too convenient to hide behind that rather than be honest about how dull/wrong a given job is.

I think you also place too much thought into the idea that NSA/GCHQ build these systems. Actually it is the guys at the contractors - Lockheed Martin - that build these things, the NSA/GCHQ guys are no more involved in things than the checkout staff at a supermarket are involved in all the evil things Walmart/Monsanto/whoever do. That is the saddest part of it. We uphold NSA/GCHQ to be omnipotent and omniscient, but they are not. The main contractor - Lockheed Martin - are upstream of what the NSA/GCHQ does and they are experts at getting government contracts. Since they can listen in to what all of the other contractors bid they can bid competitively if they really want the work. Since they also own most of the politicians and can promise so many jobs in so many states, they can own the entire government. NSA are not the enemy, Lockheed Martin and their rivals are. And, to answer your question, the dark side programmers work for them.

Re: Google Security Team Member on NSA: "Fuck These Guys"

#160
post #138

Earlier quoted context omitted.

China doesn't have agreements with BT, AT&T etc which allow it to tap fibre in our countries at will. I'm sure they try some tapping, but they can't do it on the scale that GCHQ and the NSA have been outside China.

The Chinese do not need any agreements to tap undersea cables and are more than capable of doing just that.

Sure, but they don't have the "home field advantage" that the NSA does, whereby much of the core internet infrastructure is housed in the US. I forget the exact number, but something like 70% of the world's internet traffic transits the US. (they mention this constantly in NSA-related articles)
Post reply on HN