311–320 of 323 posts
Earlier quoted context omitted.
Then we'd need a fourth agency to coordinate between them, and don't forget the fifth agency in charge of oversight.
And don't forget to give all the money and power to the offensive agency, while keeping the oversight agency to an intern in a broom closet somewhere.
That government is best which governs least.
Earlier quoted context omitted.
Although you're joking, Perl was invented to make an NSA project easier to develop. That project was first, high-assurance VPN: BLACKER. It was also NSA's attempt to do something secure for once since they lost the argument to INFOSEC co-founder, Roger Schell, where they thought only communications security, not computer security, mattered. They contracted it to TRW who made a lot of secure stuff & government systems…
The second paper mentions BLACKER and MLS, but nothing about perl. The closest perl comes to MLS is "taint" mode, but that seems a stretch. The first paper is pay-walled. Are you sure you're not thinking of SELinux?
It's pretty fascinating to read the Shadow Broker's posts. They have to write something, since they can't just say "I work for Russia and we're reminding America that they're not invulnerable." So they have to come up with all sorts of contrived reasons about why they're doing this, complete with broken english to fool stylometry detection that walks the fine line between being believable and preposterous. Someone sp…
As a Russian myself, I can tell you with certainty that there are mistakes in that text that a Russian ESL speaker would never make, and verb tenses are a bit too good for an unskilled speaker. Due to the combination of these two factors, I bet this was written by a native English speaker who thinks he/she knows the mistakes a Russian would make. They're wrong.
It's pretty fascinating to read the Shadow Broker's posts. They have to write something, since they can't just say "I work for Russia and we're reminding America that they're not invulnerable." So they have to come up with all sorts of contrived reasons about why they're doing this, complete with broken english to fool stylometry detection that walks the fine line between being believable and preposterous. Someone sp…
As a Russian myself, I can tell you with certainty that there are mistakes in that text that a Russian ESL speaker would never make, and verb tenses are a bit too good for an unskilled speaker. Due to the combination of these two factors, I bet this was written by a native English speaker who thinks he/she knows the mistakes a Russian would make. They're wrong.
Earlier quoted context omitted.
Wish "1day" would somehow make a comeback. "0day" sounds cooler, of course, but it was a lot easier to find 1day FTP warez sites in the wild than 0day sites.
Around the time of the end of my swapping of floppies back in the day, it was getting frustrating as none of the "cool" swappers accepted anything but 0day, and most would be annoyed if you couldn't regularly supply -7 to -14 day releases so they had a week or two to spread things to their downstream contacts before it'd be too stale. In other words a lot of them depended to a large extent on internal leaks... I reme…
Earlier quoted context omitted.
'doktrin perhaps you have confused this subthread with a different one; it would be understandable since you've seen fit to post on this page sixteen times already. (Bonus points: you've used the phrase "paid shills" twice!) Unless you're willing to admit now that you are the DNC staffer who leaked all their dirty laundry to Wikileaks, you've got to admit that this tawdry hermeneutical argument no longer suffices to…
> perhaps you have confused this subthread with a different one No, but since you're obviously confused let me explain which thread we're in. The common topic, stretching back to the top comment, is armchair linguistic "analysis" : >> (throwaway71958) Well, there's no Russian first-language bias in that text for sure. Another argument in favor of the opinion that this was written by an American: the author seems to b…
Earlier quoted context omitted.
The second paper mentions BLACKER and MLS, but nothing about perl. The closest perl comes to MLS is "taint" mode, but that seems a stretch. The first paper is pay-walled. Are you sure you're not thinking of SELinux?
See: http://cahighways.org/wordpress/?p=5460
Earlier quoted context omitted.
Although you're joking, Perl was invented to make an NSA project easier to develop. That project was first, high-assurance VPN: BLACKER. It was also NSA's attempt to do something secure for once since they lost the argument to INFOSEC co-founder, Roger Schell, where they thought only communications security, not computer security, mattered. They contracted it to TRW who made a lot of secure stuff & government systems…
Neither article makes any mention of Perl, which isn't terribly surprising, since BLACKER is still highly classified, with very little is publicly known about its design and operation. You'll find some discussion of BLACKER in my recent article: http://ieeexplore.ieee.org/document/7763734/ (Open access/free pre-print version: http://iqdupont.com/assets/documents/DUPONT_FIDLER-2016-Prep... ) A few points of note: it's…
http://cahighways.org/wordpress/?p=5460
Yeah, BLACKER did quite a bit. It was a network MLS component like many others that came after it. GEMSOS, Boeing SNS Server, and DiamondTek LAN are examples. Modern variant would be an Octeon 2 or 3 PCI card with similarly secure software.
Too much to explain, though. BLACKER's main purpose was securing the connection between dumb terminals and things they connected to. It used crypto, MLS, and TEMPEST-style hardware. It was a network device as well. A VPN is closest term for modern audience to convey its main goals.
ALLL RIIIIGHT!!
Not because I'm especially interested in the tools (although, granted, I have not had a look at any of them yet), but because I always wished this could be given to everyone.
Also, for a moment there, I was concerned 7z was insecure and that the passphrase had been bruteforced. Apparently not! Very nice.
Earlier quoted context omitted.
Around the time of the end of my swapping of floppies back in the day, it was getting frustrating as none of the "cool" swappers accepted anything but 0day, and most would be annoyed if you couldn't regularly supply -7 to -14 day releases so they had a week or two to spread things to their downstream contacts before it'd be too stale. In other words a lot of them depended to a large extent on internal leaks... I reme…
That's pretty hilarious that they were doing that even before widespread internet. I think a lot of crackers got so caught up in building and maintaining face in their tiny community that they forgot the actual reason they were doing it, i.e. "people want to play video games without paying for them".