Live data from Hacker News

Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

twitter.com

121–130 of 323 posts

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#121

Earlier quoted context omitted.

> the author seems to be well versed in the memes of the US political discourse that's not exactly hard for anyone that payed even a little attention during the very controversial US political season in 2016. Same with Brexit. The terminologies and crux issues have been widely debated on the social web. I would say it has actually been very difficult to escape

Right. However, things like "caucus" and "SCOTUS" are really unlikely to be written by a Russian, on any English knowledge level. We do make mistakes, but our mistakes are different. In this text, there are too few common mistakes, and too many strange things.

> things like "caucus" and "SCOTUS" are really unlikely to be written by a Russian, on any English knowledge level

What a weird thing to say. Even the most native of idioms can be learned, and there are plenty of fully bi-tri lingual people in the world.

Mining the text for cultural clues is a fool's errand.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#122

A good time to remember the official US Intelligence Community statement and policy/lie on 0days, as given post-heartbleed: When Federal agencies discover a new vulnerability in commercial and open source software – a so-called “Zero day” vulnerability because the developers of the vulnerable software have had zero days to fix it – it is in the national interest to responsibly disclose the vulnerability rather than t…

Could this problem be fixed by splitting the NSA into two competing agencies, one handling offensive signals intelligence, and one handling cryptography research and disclosures?

Intuitively it seems when the same agency performs both roles it creates a conflict of interest and bias against disclosure.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#123

Earlier quoted context omitted.

Well, there's no Russian first-language bias in that text for sure. Another argument in favor of the opinion that this was written by an American: the author seems to be well versed in the memes of the US political discourse. Someone from outside the US is unlikely to even know or care about Trump's "movement", or who "Bannon" is, or "drain the swamp", or "white privilege" etc. They're also unlikely to abbreviate "Ne…

Yes, exactly. While those are still somewhat plausible (I am Russian, and I might have occasionally used all of these ironically), it was "POTUS" and "SCOTUS" that made me 99% sure that this text was written by an American (or at least a US insider). You guys love your acronyms.

Yup, I've been living in England for over 20 years and my English language proficiency is well above that of most of the locals, but I still had to look up SCOTUS and POTUS a few years ago (probably when I started reading HN actually). Now that I know them I still would never consider using them in writing (the former is actually reminiscent of something offensive).

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#124

It's pretty fascinating to read the Shadow Broker's posts. They have to write something, since they can't just say "I work for Russia and we're reminding America that they're not invulnerable." So they have to come up with all sorts of contrived reasons about why they're doing this, complete with broken english to fool stylometry detection that walks the fine line between being believable and preposterous. Someone sp…

They went even harder at it in an earlier medium post:

"TheShadowBrokers is having special trick or treat for Amerikanskis tonight."

https://medium.com/@shadowbrokerss/message-5-trick-or-treat-...

I suppose though, that "Amerikanski" might be used outside Russia. Serbia, Bulgaria? Misdirection seems more likely though.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#125

A good time to remember the official US Intelligence Community statement and policy/lie on 0days, as given post-heartbleed: When Federal agencies discover a new vulnerability in commercial and open source software – a so-called “Zero day” vulnerability because the developers of the vulnerable software have had zero days to fix it – it is in the national interest to responsibly disclose the vulnerability rather than t…

I've wondered how "zero day" mutated from its original meaning of "pirated software cracked and released on the day of its commercial release" to "a software vulnerability of which the software's maintainers are not yet aware". There doesn't seem to be any connection aside from illicit cracking.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#126

A good time to remember the official US Intelligence Community statement and policy/lie on 0days, as given post-heartbleed: When Federal agencies discover a new vulnerability in commercial and open source software – a so-called “Zero day” vulnerability because the developers of the vulnerable software have had zero days to fix it – it is in the national interest to responsibly disclose the vulnerability rather than t…

A nice "gotcha" but probably more fair to include this portion:

> Unless there is a clear national security or law enforcement need, this process is biased toward responsibly disclosing such vulnerabilities.

...due to the fact that most of the EQG vulnerabilities appear to be crafted for specific collection targets, not stumbled upon and held onto for fun.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#127

It's pretty fascinating to read the Shadow Broker's posts. They have to write something, since they can't just say "I work for Russia and we're reminding America that they're not invulnerable." So they have to come up with all sorts of contrived reasons about why they're doing this, complete with broken english to fool stylometry detection that walks the fine line between being believable and preposterous. Someone sp…

As a Russian myself, I can tell you with certainty that there are mistakes in that text that a Russian ESL speaker would never make, and verb tenses are a bit too good for an unskilled speaker. Due to the combination of these two factors, I bet this was written by a native English speaker who thinks he/she knows the mistakes a Russian would make. They're wrong.

If you have a copy of the linguistic analysis written by Shlomo Argamon, please post it.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#128
post #86
post #60

Earlier quoted context omitted.

That 13-point tweet series paints a surprisingly plausible picture. I'm looking forward to getting the full story in about 20 years time.

We'll be very lucky if in 20 years, the world is still so free and functional as it is now... and I'm not trying to talk up the state of the world today.

I try to remain optimistic, because allows me to continue being largely complacent with and complicit in the slow decline of free and civil society.

Slightly tongue in cheek, but only slightly.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#129

Earlier quoted context omitted.

To my ear, this obfuscation sounds Middle Eastern, due to the frequent use of "-ing" in verbs whether it belongs there or not. I know an Iranian guy who does this a lot.

The whole point is to feed it through translation services dozens of times until the meaning remains but the actual word selection is super poor and completely unidentifiable. It's weird to me that you're trying to push this to blame another group so quickly, especially with an 8 day old account.

[deleted]

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#130

Earlier quoted context omitted.

To my ear, this obfuscation sounds Middle Eastern, due to the frequent use of "-ing" in verbs whether it belongs there or not. I know an Iranian guy who does this a lot.

The whole point is to feed it through translation services dozens of times until the meaning remains but the actual word selection is super poor and completely unidentifiable. It's weird to me that you're trying to push this to blame another group so quickly, especially with an 8 day old account.

Yes, that's what I do sometimes, using offline apps with local dictionaries.
Post reply on HN