Live data from Hacker News

Bruce Schneier: China and Russia Almost Definitely Have the Snowden Docs

wired.com

1–10 of 55 posts

Re: Bruce Schneier: China and Russia Almost Definitely Have the Snowden Docs

#5
Bruce Schneier is falling into the trap of saying since computer security is hard, the NSA has certainly been compromised and we can assume these docs have been out there for a while.

Yes, securing the endpoint is hard, especially given the non-hardened OS and applications we mostly use. However, you can't extrapolate from that to say with certainty what has and hasn't been exposed via security flaws.

The USSR was much more successful at espionage than the US was, and they took a low-tech approach to it. For decades, they developed contacts within the govt, gave them money, and had documents handed to them by authorized insiders.

Let's not assume computer exploitation is the only culprit. History has shown a variety of techniques, even very low-tech ones, have been employed for espionage and it's impossible as an outsider to determine how much has been taken, by whom, and by what means.

Re: Bruce Schneier: China and Russia Almost Definitely Have the Snowden Docs

#6
post #3

(had to read this article via a proxy, because of a redirect loop - anyone else seeing this? I'm in the UK.) EDIT: and it was worth it, excellent article.

I got a partially rendered page before, but it is not working anymore.

Same here. Here's the Google cache copy:

http://webcache.googleusercontent.com/search?q=cache:Sx7GYBF...

Re: Bruce Schneier: China and Russia Almost Definitely Have the Snowden Docs

#7
The original link may redirect, but a permanent copy of the article is now available at https://archive.is/zwPVW , also cached at http://webcache.googleusercontent.com/search?q=cache:Sx7GYBF...

His points are: * China and Russia probably ALREADY had access to that material BEFORE Snowden, based on the NSA's poor internal security. * Now that journalists have the remaining unpublished Snowden documents, any nation-state can hack the journalists.

Re: Bruce Schneier: China and Russia Almost Definitely Have the Snowden Docs

#9

Bruce Schneier is falling into the trap of saying since computer security is hard, the NSA has certainly been compromised and we can assume these docs have been out there for a while. Yes, securing the endpoint is hard, especially given the non-hardened OS and applications we mostly use. However, you can't extrapolate from that to say with certainty what has and hasn't been exposed via security flaws. The USSR was mu…

We will know some parts of truth but probably in one or two decades from now (like for the Cambridge Five).

https://en.wikipedia.org/wiki/Cambridge_Five

Re: Bruce Schneier: China and Russia Almost Definitely Have the Snowden Docs

#10

Bruce Schneier is falling into the trap of saying since computer security is hard, the NSA has certainly been compromised and we can assume these docs have been out there for a while. Yes, securing the endpoint is hard, especially given the non-hardened OS and applications we mostly use. However, you can't extrapolate from that to say with certainty what has and hasn't been exposed via security flaws. The USSR was mu…

> > The vulnerability is not Snowden; it’s everyone who has access to the files.

> > First, the journalists working with the documents.

> Bruce Schneier is falling into the trap of saying since computer security is hard, the NSA has certainly been compromised and we can assume these docs have been out there for a while.

The NSA has been compromised. By Snowden. There's no assumption there, that's fact. Now, access to the documents not longer just means having NSA access (or a complicit person with access) or hacking the NSA, it includes access to any system or person who has access to all the files, which are no longer restricted to NSA servers. It's no longer about what the NSA's security practices are.

Post reply on HN