Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

cbc.ca

Post reply on HN
Print view View original

11–20 of 83 posts

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#11

Post by canistr »

52-6F-62 wrote: post #5
jordigh wrote: post #3

The main repo seems to be here: https://bitbucket.org/cse-assemblyline/assemblyline/src Released under the MIT license with crown copyright. Looks like a plain ol' Flask application. I don't know what I was expecting from the government. Maybe more Microsoft and more Oracle, more "enterprise". And the git history goes back ten months with an initial commit of December 21, 2016. I'm actually surprised to learn that CS…

CSE is comparable to America's NSA in general function and scope. While CSIS does intelligence work with computers and hires a lot of programmers and analysts, CSE is traditionally the more technologically-focused of the two. You also hear significantly less about it than even CSIS. They're good at their jobs. edit: Spelling. They changed it from CSEC to CSE

More like they changed it "back" to CSE. :)

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#12

Post by EGreg »

Interesting, Kaspersky is constantly maligned for simply being USED by Russian spy agencies, or "having associations with" them. Russia and China now demand audits of security software from the USA. Countries build their own national Linuxes now that Windows phones home all your passwords, for the CIA and NSA to easily backdoor or get via an order.

So, why would anyone trust a spy agency's software? Only if it's all open source.

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#13

Post by [deleted] »

canistr wrote: post #11
52-6F-62 wrote: post #5

Earlier quoted context omitted.

CSE is comparable to America's NSA in general function and scope. While CSIS does intelligence work with computers and hires a lot of programmers and analysts, CSE is traditionally the more technologically-focused of the two. You also hear significantly less about it than even CSIS. They're good at their jobs. edit: Spelling. They changed it from CSEC to CSE

More like they changed it "back" to CSE. :)

[deleted]

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#14

Post by douglas_k »

jordigh wrote: post #3

The main repo seems to be here: https://bitbucket.org/cse-assemblyline/assemblyline/src Released under the MIT license with crown copyright. Looks like a plain ol' Flask application. I don't know what I was expecting from the government. Maybe more Microsoft and more Oracle, more "enterprise". And the git history goes back ten months with an initial commit of December 21, 2016. I'm actually surprised to learn that CS…

CSIS likes very much to not be in the news. They seem to actively work to stay unknown. I've heard, but cannot verify, that they are the only government agency that is not required to have a "Government of Canada dept X" sign outside their buildings. They do have them outside some buildings, but not all buildings.

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#17

Post by e1ven »

EGreg wrote: post #12

Interesting, Kaspersky is constantly maligned for simply being USED by Russian spy agencies, or "having associations with" them. Russia and China now demand audits of security software from the USA. Countries build their own national Linuxes now that Windows phones home all your passwords, for the CIA and NSA to easily backdoor or get via an order. So, why would anyone trust a spy agency's software? Only if it's all…

It's MIT license, and the repo seems to have full history.
Post reply on HN