Live data from Hacker News

Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

cbc.ca

61–70 of 83 posts

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#61
post #50

Earlier quoted context omitted.

I'm surprised there isn't a separate copy of all the code in French, or at least the code comments

// En français, s'il vous plaît fonction commencer(état) { si (état !== nonDéfini) { laisser nouveauChaîne = `Bonjour, ${état}`; faire { console.journal(nouveauChaîne); piraterTousLesSystèmes(); } tandisQue (systèmesSontDébloqués()) } autre { merde(`partout`); } } // Commencer! commencer(`L'état du Brésil`); // Bon.

> merde(`partout`);

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#62
post #50

Earlier quoted context omitted.

I'm surprised there isn't a separate copy of all the code in French, or at least the code comments

// En français, s'il vous plaît fonction commencer(état) { si (état !== nonDéfini) { laisser nouveauChaîne = `Bonjour, ${état}`; faire { console.journal(nouveauChaîne); piraterTousLesSystèmes(); } tandisQue (systèmesSontDébloqués()) } autre { merde(`partout`); } } // Commencer! commencer(`L'état du Brésil`); // Bon.

I'd like to see the code for `piraterTousLesSystèmes`

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#63

Earlier quoted context omitted.

CSIS likes very much to not be in the news. They seem to actively work to stay unknown. I've heard, but cannot verify, that they are the only government agency that is not required to have a "Government of Canada dept X" sign outside their buildings. They do have them outside some buildings, but not all buildings.

It's kind of what I like about them. Now quiz time. Who's heard of JTF2?

JTF2 are dope.

https://beta.theglobeandmail.com/news/politics/canadian-elit...

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#65
post #59

I don't find my answer, I just have one question: does it send any "usage stats" or "unknown files" back to them? If your computer establishes any kind of connection with their center it wouldn't be only something for the public, they'd also benefit. That isn't necessarily a bad thing but seems important enough to be discussed.

Doubt it. That'd be too obvious.

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#66
post #40

Earlier quoted context omitted.

CSIS likes very much to not be in the news. They seem to actively work to stay unknown. I've heard, but cannot verify, that they are the only government agency that is not required to have a "Government of Canada dept X" sign outside their buildings. They do have them outside some buildings, but not all buildings.

I had a colleague that applied, and was subsequently interviewed for a position with CSIS. He said he was instructed to go to a large office tower in Toronto, go to x floor and ask for a particular person. Nothing was labelled as CSIS.

I had a friend in Israel who, for part of her induction into her mandatory 18mo IDF service, was scheduled for an interview with the Israeli intelligence service.

In preparation for the interview, they sent her the address, a map showing the building, and marked three separate entrances and how to get to their office from them: the main entrance, a side entrance, and one off the alley behind the building (which I assume is closer to parking? maybe?).

It was very weird. I think she decided just to go in through the lobby.

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#67

> Assemblyline is described by CSE as akin to a conveyor belt: files go in, and a handful of small helper applications automatically comb through each one in search of malicious clues. On the way out, every file is given a score... This sounds like it could sit nicely between Github and CI (Jenkins/Travis/Circle/etc), and be a pre-integration security scan. Can we name it Sherlock?

Ya, looking at npm repos.

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#69
post #41

Earlier quoted context omitted.

Their "secret" base was a short drive from where I grew up. Every local knew what it was. But they are still the most badass dudes.

My brother's (not JTF2) told me stories about their training/graduation exercises. Intense is a little too mild a word.

I take it you can't expand on that a bit?

Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public

#70
post #3

The main repo seems to be here: https://bitbucket.org/cse-assemblyline/assemblyline/src Released under the MIT license with crown copyright. Looks like a plain ol' Flask application. I don't know what I was expecting from the government. Maybe more Microsoft and more Oracle, more "enterprise". And the git history goes back ten months with an initial commit of December 21, 2016. I'm actually surprised to learn that CS…

CSIS likes very much to not be in the news. They seem to actively work to stay unknown. I've heard, but cannot verify, that they are the only government agency that is not required to have a "Government of Canada dept X" sign outside their buildings. They do have them outside some buildings, but not all buildings.

Yup. I also can't verify much, but I know a person who performed electrical work in one of their buildings and you wouldn't even know that building belonged to CSIS.
Post reply on HN