Live data from Hacker News

Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

twitter.com

211–220 of 323 posts

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#211

remember that 1000s of paid russians were used to interrupt our election on sites like reddit. wouldn't be surprised if a few leaked to this site. especially with green accounts.

>remember that 1000s of paid russians were used to interrupt our election on sites like reddit.

Or so a 2017 version of the "red scare" goes, so that the military industrial complex can sell more weapons and more "safety", and the fingers can keep being pointed at some enemy or another. That way their budgets get approved, some poor countries pay the toll (who cares anyway), and they might even be able to plunder them afterwards. Worked wonders the last 30+ years.

Not to mention that the US sponsors tons of NGOs, magazines, organizations, events, political parties, etc, with favorable views to its interest all over the world, and has done that none stop since at least WWII, meddling with elections, paying journalists, etc -- and when nothing else works.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#212

Earlier quoted context omitted.

Are you able to elaborate on how this case is related to the DNC hacks? ShadowBrokers was never accused of being the same as Guccifer2, as far as I understand.

I'm not saying he/she was. But do consider that in one case the most cursory circumstantial evidence is enough to convict, but in this case the same level of "evidence" is not enough to exonerate. Double standard, anyone?

> the same level of evidence

Whatever's written in that blog post, and how it's written, is neither enough to convict nor exonerate.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#213
post #124

It's pretty fascinating to read the Shadow Broker's posts. They have to write something, since they can't just say "I work for Russia and we're reminding America that they're not invulnerable." So they have to come up with all sorts of contrived reasons about why they're doing this, complete with broken english to fool stylometry detection that walks the fine line between being believable and preposterous. Someone sp…

They went even harder at it in an earlier medium post: "TheShadowBrokers is having special trick or treat for Amerikanskis tonight." https://medium.com/@shadowbrokerss/message-5-trick-or-treat-... I suppose though, that "Amerikanski" might be used outside Russia. Serbia, Bulgaria? Misdirection seems more likely though.

This is actually a tell-tale sign that whoever wrote this doesn't speak Russian. Let me explain why.

In English, the noun describing the nationality is also an adjective describing belonging to, or affiliation with, that nationality. E.g. "An American is driving an American car".

In Russian, this is not the case - they are different words, sharing the same root. Some examples (noun - adjective):

US: Amerikanets - Amerikanskiy EN: Anglichanin - Angliyskiy DE: Nemets - Nemetskiy AR: Arab - Arabskiy CN: Kitaets - Kitayskiy

There's one and only one exception, and that, ironically, is the word for "Russian": "russkiy". It's the same for both the noun and the adjective, and, as you can see by comparing it with the list above, morphologically it looks like an adjective. The historic explanation for that is that it originated from the time of the Varangian conquest of Eastern Slavic lands, when the population was referred as "the people of [belonging to] Rus" - "Russkie lyudi" - where Rus was the name of the Varangian tribe in question.

Anyway, what this means is that no native Russian speaker would use the word "Amerikanskiy" to refer to Americans. It only makes sense as an adjective in "American something". However, the addition of "-s" at the end to indicate plural unambiguously tells us that whoever wrote this, treated it as a noun. Which would make perfect sense for a native English speaker, for whom the two are naturally conflated.

And the most obvious explanation for that is that if you put the word "American" by itself into Google Translate, for example, it can't decide whether it's a noun or an adjective without context, so it has to assume one or the other. And it seems to be assuming adjective by default, so you get "Amerikanskiy" back.

Oh, and by the way, writing at as "Amerikanski", without the final "y", is also something that hints strongly that it's not a native speaker. A native speaker would likely transliterate it letter by letter, starting from Russian "Американский", yielding "Amerikanskiy". However, that final "y" is really short when spoken, which is why native English speakers often miss it entirely when transcribing.

On top of that, Polish uses "-ski" for the same words: "polski", "rosyjski", "angielski", "arabski" etc. In Polish, it's also a very common (and ethymologically related - think "of ...") ending for last names - e.g. Piłsudski. There are a lot more Poles, or at least families with Polish ancestry, in US in particular than there are Russians. As a result, Polish last names are pretty common and well-known, as is their spelling. So, that spelling is often applied to vaguely similarly looking and sounding Russian loanwords and transliterations, which also leads to dropping of that final "-y" in "-skiy".

So, definitely not Russian, and overall slightly more probable to be a native English speaker from US.

That's, of course, assuming that the wording wasn't deliberately mangled to look like fake Russian, in a double misdirection...

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#214
post #45
post #39

Obviously, Perl is the NSA top language choice due to it's built in support for obfuscation and job security.

Sure. It couldn't be because perl is installed by default on all of the target platforms. Practicality trumps conference talks when there's work to be done, even in the government.

I can assure you, practicality and job security have no place in the same sentence when discussing government work.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#215
post #92

Earlier quoted context omitted.

While I get your wider point, I find the different types of mistakes that ESL'ers with different mother tongues make absolutely fascinating. I've noticed, say, that in Poland, where the native tongue lacks articles, people regularly mess up "the" and "a," or miss them altogether. I've never met a French person with the same issue, for obvious reasons. When I started looking into people's mistakes with tenses in Engli…

> I like cars red Interestingly, that word order is also valid English, though it has a slightly different meaning than "I like red cars". Example: "I like [my] soup warm". "I like soup warm, but you can eat it cold and left over if you want." "I like having soup warm" "I like my cookies freshly baked" "I like men muscular and toned" "I like my women blonde, so you can go for the brunette" "I like cars red" doesn't q…

I think this form puts the emphasis on "how?" instead of "what?".

What do you want? - I want tea. How do you want your tea? - I want my tea hot with sugar.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#216
post #204
post #195

Earlier quoted context omitted.

Eh, new account, and a throwaway, don't get offended at people not taking you seriously. You could just as easily be a 14 year old in North Dakota.

Probably from Alaska. I know you can "See Russia from there"...

You can actually, barely see it.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#217
post #85

Given the latest world events, I've personally come to realise that security agencies play an important role in keeping us safe, from external entities or from ourselves. This is disaster in my (current) opinion. We tend to dismiss the work the likes of NSA do, not thinking much about what would happen if they didn't do it. Snowden categorically dismissing anything that NSA does, just means he's a deluded idealist, m…

This implies, without evidence, that all of the work that NSA does is directly related to keeping us safe. I wouldn't be so quick to lump it all together like that.

Then, of course, there's also the objection that "keeping us safe" is not an absolute. There are many ways to keep people safe, but they're so extremely onerous that we don't practice them. Totalitarian societies with pervasive open surveillance (think 1984) are very safe, for example, but at what cost? So clearly there's a balance, and one can't just dismiss any concerns about the cost of that safety by saying that it's necessary - it has to be demonstrated that it is (i.e. that the gains from that increased safety justify the losses from intrusiveness).

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#218
post #167

Nicholas Weaver‏: "Overall, though, it looks like the auction file from Shadow Brokers is mostly a bust, better stuff in the free file." https://twitter.com/ncweaver/status/850797548717481984 the grugq: "Calling it now: the first ShadowBrokers dump was an expensive signal. This latest one was not (expensive, that is.)" https://twitter.com/thegrugq/status/850825305845399552

What does "expensive signal" mean in this context?

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#219

It's pretty fascinating to read the Shadow Broker's posts. They have to write something, since they can't just say "I work for Russia and we're reminding America that they're not invulnerable." So they have to come up with all sorts of contrived reasons about why they're doing this, complete with broken english to fool stylometry detection that walks the fine line between being believable and preposterous. Someone sp…

Trying to figure out who they are by analyzing the content of these posts is like trying to figure out if a child is lying by asking them repeatedly. Other sources of evidence are necessary.

Anyway, while their nationality isn't obvious, their childishness is. I think that's the only detail that can really be gleaned from the text itself.

Re: Snowden: NSA just lost control of its Top Secret arsenal of digital weapons

#220

A good time to remember the official US Intelligence Community statement and policy/lie on 0days, as given post-heartbleed: When Federal agencies discover a new vulnerability in commercial and open source software – a so-called “Zero day” vulnerability because the developers of the vulnerable software have had zero days to fix it – it is in the national interest to responsibly disclose the vulnerability rather than t…

I've wondered how "zero day" mutated from its original meaning of "pirated software cracked and released on the day of its commercial release" to "a software vulnerability of which the software's maintainers are not yet aware". There doesn't seem to be any connection aside from illicit cracking.

Zero day has been used in this context for at least 15 years and means that the vulnerability has been publicly known for zero days, or rather it is an undisclosed vulnerability.
Post reply on HN