I once challenged Glenn Greenwald as to how he could be confident his copy of the documents hadn't been hacked. His answer wasn't terribly convincing. That said, it's also possible he got lucky. He lives in a fairly isolated farmhouse with a lot of dogs, so maybe it really is hard to do a black bag operation on him. And I'm not sure how even a nation state could do a purely internet-based attack on an air-gapped comp…
Bruce Schneier: China and Russia Almost Definitely Have the Snowden Docs
51–55 of 55 posts
Re: Bruce Schneier: China and Russia Almost Definitely Have the Snowden Docs
#52Earlier quoted context omitted.
"%50 of former employees admit to stealing confidential company data" [1] Even with oaths and allegiences, the probability that Snowden is the only one to take advantage of the lax security in the NSA is 0. [1] http://www.symantec.com/about/news/release/article.jsp?prid=...
The NSA is not a corporation. They put exponentially more care in vetting before trusting with top secret intelligence access.
In my experience, the NSA performs its own security clearance checking and does not use the OPM for this function, but, in any case where OPM did perform a background check, that background check provided China with far more compromising information than China otherwise would have had.
That people place such faith in vetting in the first place is a huge problem. Furthermore, background checking performed by most of the rest of the US government has actually been a huge source of actionable intelligence for our enemies.
In my opinion, it is not possible for an organization the size of the NSA to keep its secrets. It's, what, 1000x larger than the Manhattan project? And, would you say that James Clapper's intellect was in the same ballpark as those of Leslie Groves and Robert Oppenheimer?
In fact, when confronted with opportunities to avoid mistakes, the US government's reflexive response is compulsion toward secrecy so as to avoid reform. IE, so much of this secrecy is motivated by desire to escape oversight, rather than to provide our nation actual advantage over rivals. If the latter were our goal, oversight and strictly limiting classification to the most sensitive subset of weapons research and ongoing military operations would be a road to it. Instead, such approaches are termed dangerous and even intellectual property normalization treaty negotiations are treated as military secrets in order to protect the power of entrenched political influences.
When secrecy is so rampant that it makes it impossible for us to keep secrets, you might ask why we have so much fucking secrecy.
Re: Bruce Schneier: China and Russia Almost Definitely Have the Snowden Docs
#53Earlier quoted context omitted.
Even then, targeting spies is counterproductive. The spy you know about is much less dangerous than spy that you don't know about.
If they hacked the NSA, I'd suspect most spies are known rather than unknown. There's a curious event where Russia expelled 30 UK diplomats from Moscow - and none of them were intelligence operatives (and this was no coincidence as 1/3rd of the staff were intelligence operatives) - it was just to send a message: "we know who your spies are"[1]. Edit: corrected number of diplomats & added citation 1. http://www.global…
Those people are administrators. Your actual covert operatives will never interact with the embassy in a detectable/obvious way.
Re: Bruce Schneier: China and Russia Almost Definitely Have the Snowden Docs
#54Earlier quoted context omitted.
The NSA is not a corporation. They put exponentially more care in vetting before trusting with top secret intelligence access.
And much good it did for preventing the Snowden leak. The false sense of security instilled by confidence like yours likely hindered implementation of common-sense safeguards, such as the two man rule and more generally any functional oversight of any kind. In my experience, the NSA performs its own security clearance checking and does not use the OPM for this function, but, in any case where OPM did perform a backgr…
Of course no one can say foreign spies inside the NSA or access to their top secret files is impossible, I'm simply suggesting it's safer to assume this is not likely, and comparing the NSA to civilian corporations in this regard is unreasonable.
Re: Bruce Schneier: China and Russia Almost Definitely Have the Snowden Docs
#55Earlier quoted context omitted.
Wait... you believe that the NSA is easier to compromise than the computers of reporters from multiple international news agencies with various levels of computer security policies and knowledge?
I'll let Schneier answer that, in case you didn't read the article: > The open question is which countries have sophisticated enough cyberespionage operations to mount a successful attack against one of the journalists or against the intelligence agencies themselves. And while I have my own mental list, the truth is that I don’t know. But certainly Russia and China are on the list, and it’s just as certain they didn’…