Earlier quoted context omitted.
It's kind of what I like about them. Now quiz time. Who's heard of JTF2?
JTF2 are dope. https://beta.theglobeandmail.com/news/politics/canadian-elit...
Yes, killing people in fabricated wars is so dope.
Canada's 'secret spy agency' is releasing a malware-fighting tool to the public
71–80 of 83 posts
Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public
#72The main repo seems to be here: https://bitbucket.org/cse-assemblyline/assemblyline/src Released under the MIT license with crown copyright. Looks like a plain ol' Flask application. I don't know what I was expecting from the government. Maybe more Microsoft and more Oracle, more "enterprise". And the git history goes back ten months with an initial commit of December 21, 2016. I'm actually surprised to learn that CS…
CSE is comparable to America's NSA in general function and scope. While CSIS does intelligence work with computers and hires a lot of programmers and analysts, CSE is traditionally the more technologically-focused of the two. You also hear significantly less about it than even CSIS. They're good at their jobs. edit: Spelling. They changed it from CSEC to CSE
CSE recruits fairly heavily at student-focused CS events in Montreal. Never seen or heard a peep about CSIS.
Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public
#73The main repo seems to be here: https://bitbucket.org/cse-assemblyline/assemblyline/src Released under the MIT license with crown copyright. Looks like a plain ol' Flask application. I don't know what I was expecting from the government. Maybe more Microsoft and more Oracle, more "enterprise". And the git history goes back ten months with an initial commit of December 21, 2016. I'm actually surprised to learn that CS…
> not have to wait for NSA leak
soon we'll learn this whole project a plant by NSA, complete with 10 months spent fabricating the commit history.
Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public
#74Earlier quoted context omitted.
Its a Canadian government rule that even URLs have to be bilingual. eg You can't have http://host.ca/news (with bilingual text on the page) it has to be http://host.ca/news_nouvelles This is only for fed government sites.
I'm surprised there isn't a separate copy of all the code in French, or at least the code comments
Ah, the Omelette de fromage effect.
Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public
#75Earlier quoted context omitted.
I had a colleague that applied, and was subsequently interviewed for a position with CSIS. He said he was instructed to go to a large office tower in Toronto, go to x floor and ask for a particular person. Nothing was labelled as CSIS.
I had a friend in Israel who, for part of her induction into her mandatory 18mo IDF service, was scheduled for an interview with the Israeli intelligence service. In preparation for the interview, they sent her the address, a map showing the building, and marked three separate entrances and how to get to their office from them: the main entrance, a side entrance, and one off the alley behind the building (which I ass…
Three potential routes means a grab team attempting to snatch someone have to have three plans.
Security by obscurity works better in the physical world.
Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public
#76First OpenBSD and then this, Canada is like the promised land for security minded people!
Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public
#77Earlier quoted context omitted.
Suspect the Citation needed was referring to "They're good at their jobs."
Well we do know they successfully hacked the Brazilian government in the interests of private oil companies? That's something isn't it? > CSEC had been meeting with the heads of our country’s largest energy companies and debriefing them on all the secrets they’ve stolen from Brazil’s mining and energy ministries. https://www.vice.com/en_ca/article/5gqkwq/the-canadian-gover...
Have you ever done well on a group project without doing much work yourself?
I just doubt the hacking group is the same group that chose riak, solr, etc.
Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public
#78Is it just me, or is it amazing that they're releasing this for free? Even Canadian SPY organizations are friendly!
A cynic, and, perhaps, a realist could consider their motivation to be fairly similar to that of a private blackhat attempting to purge foreign malware on hosts that they own, or may want to own. Exclusive control being always preferable to competing control. I'd be far more impressed and grateful if these state services released disclosures and actual patches for complex zero-day vulns, particularly in unmaintained,…
I don't think I trust foreign intelligence agencies enough to install their software on my devices.
Sure, they probably also release stuff not under their name and not open, but still.
Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public
#79Earlier quoted context omitted.
CSE is comparable to America's NSA in general function and scope. While CSIS does intelligence work with computers and hires a lot of programmers and analysts, CSE is traditionally the more technologically-focused of the two. You also hear significantly less about it than even CSIS. They're good at their jobs. edit: Spelling. They changed it from CSEC to CSE
CSE recruits fairly heavily at student-focused CS events in Montreal. Never seen or heard a peep about CSIS.
Interesting - I remember seeing CSIS at CS student events in Vancouver, but I don't think I saw CSE.
Re: Canada's 'secret spy agency' is releasing a malware-fighting tool to the public
#80Earlier quoted context omitted.
Well we do know they successfully hacked the Brazilian government in the interests of private oil companies? That's something isn't it? > CSEC had been meeting with the heads of our country’s largest energy companies and debriefing them on all the secrets they’ve stolen from Brazil’s mining and energy ministries. https://www.vice.com/en_ca/article/5gqkwq/the-canadian-gover...
Have you ever done well on a group project without doing much work yourself? I just doubt the hacking group is the same group that chose riak, solr, etc.
I'm sorry but I don't understand your question here. Unless you didn't catch the sarcasm of my original comment?