Live data from Hacker News

NSA veterans speak out on whistle-blower [video]

usatoday.com

81–85 of 85 posts

Re: NSA veterans speak out on whistle-blower [video]

#82

Earlier quoted context omitted.

Securing data against a systems administrator however is difficult on the best of days. I have done some of this for Efficito ( http://www.efficito.com ). Even with the best of care there are ways an administrator can get the info no matter what you do. All you really can do is restrict it to ensure that casual access is not an issue. For example, we store virtual machine root passwords in an encrypted database for l…

Just a spur of the moment thought, but can you encrypt the master password such that you need passwords from three of four (or any N of M) people to decrypt it?

Yes. See http://en.wikipedia.org/wiki/Secret_sharing; if you know a bit of mathematics, Shamir's method is particularly elegant.

Re: NSA veterans speak out on whistle-blower [video]

#83
post #79
post #28

I feel bad for Drake, he was facing federal charges and nobody seemed to notice. 89% of federal cases are plead before trial and of those that go to trial 90%+ are found guilty, that is how much the odds were stacked against him. He got nowhere near the attention that he deserves[1[] William Binney is an absolute hero. I have absorbed everything this guy has ever said or done[2]. He was not only employed at the NSA,…

This was a great talk by Binney, Drake and Jesselyn Radack, on whistleblowing and surveillance: https://www.youtube.com/watch?v=XDM3MqHln8U

A few seconds where he talks about the metadata: http://youtu.be/XDM3MqHln8U?t=1h18m52s

Re: NSA veterans speak out on whistle-blower [video]

#84

Earlier quoted context omitted.

It's an ad hominem which falls short of hypocrisy or contradiction because the soldiers and contractors sent to Iraq were not conscripted. Surely there are more substantive arguments to be made.

The comparison between Drake and Cheney should be based on the metric of credibility to speak on these matters. Drake has military experience and has put his career and freedom on the line for public disclosure. Cheney actively avoided putting himself in harm's way, then sent people to their deaths, directly profited from it, and will continue to profit off any future militaristic endeavors the US pursues. Cheney is…

> sent people to their deaths, directly profited from it, and will continue to profit off any future militaristic endeavors the US pursues.

This would remain a valid example of moral hazard even if Cheney had been drafted and experienced combat in Vietnam. The draft was one of the reasons the Vietnam War was so unpopular, avoiding it could be construed as an act of civil disobedience. It's not an essential part of the argument.

Re: NSA veterans speak out on whistle-blower [video]

#85

Earlier quoted context omitted.

Securing data against a systems administrator however is difficult on the best of days. I have done some of this for Efficito ( http://www.efficito.com ). Even with the best of care there are ways an administrator can get the info no matter what you do. All you really can do is restrict it to ensure that casual access is not an issue. For example, we store virtual machine root passwords in an encrypted database for l…

Just a spur of the moment thought, but can you encrypt the master password such that you need passwords from three of four (or any N of M) people to decrypt it?

You can, but then key management is a bitch.....
Post reply on HN