News for hackers. Stuff that matters.
Re:Edward Snowden: The Internet Is Broken by partycoder on Friday April 22, 2016 @03:29PM (#11551961)
The EFF warned long ago something was going on when AT&T was putting beam splitters on Internet backbones to feed the NSA. Then Snowden revealed how everything is tapped. Then, be sure all mainstream encryption is "NOBUS". Nothing is truly random. Someone somewhere has the master key: elliptic curve cryptography using magic numbers from NIST? "Secure boot" by Intel? OpenSSL? Microsoft software? All backdoored. Trust no one.
Re:Edward Snowden: The Internet Is Broken by chongli on Friday April 22, 2016 @06:34PM (#11553011)
For as long as technologically minded folks insist on technological solutions to political problems, we will be stuck in this quagmire. The answer is a political solution to a political problem. Admittedly, that's a hard one for some folks. It requires talking to people and building relationships. It takes a long time and change can be frustratingly slow to present itself. But that's how it is.

Trust no one

With this sort of attitude you might as well give up on life. Society doesn't work without trust between people.

Re:Edward Snowden: The Internet Is Broken by themartorana on Friday April 22, 2016 @08:18PM (#11553460)
There has never, in my life, been a time that the government and the people they work for/represent/are have ever been more adversarial. When you realize government has stopped working for you and are actively treating you like a criminal, you ask who they are working for. It's hard not to land on banks, corporations, and Bernie's "Billionaire Class" - whether that's true or not isn't part of my point.

So it's hard to "trust" in a single direction when the actions that cause distrust are so, so bald-faced. Every conspiracy-sounding theory surrounding surveillance has turned out to be true. And all that worry about being caught has had a net-zero effect. Maybe Let's Encrypt was at least partially a result, but that's about it. So why worry now? Turns out secret courts are just about guaranteed to green-light whatever the hell the NSA wants, so people finding out didn't really turn out as badly as they were worried about.

So "trust us" is about impossible anymore. I don't know if the relationship can be healed, to be honest. Obama was the ideal of our best shot, but that ship sailed like, day 2.

Re:Edward Snowden: The Internet Is Broken by chongli on Friday April 22, 2016 @10:02PM (#11553771)
I didn't say "trust government", I said "trust people". Do you trust your neighbours? Do you attend meetings or organizations with like-minded people? The surveillance state is most powerful when everybody sits at home afraid to go out. If you get out in public and organize with people and talk about these issues, you'll find strength and courage in your neighbours.

The #1 goal of the Neoliberal elite class is to crush the will of people like you. If you've already given up then you might as well be dead to them; they don't even need to spy on you at that point! If, on the other hand, you're out in public and organizing in large numbers then what can they do? You can force them to engage with the issues on your terms.

Re:Edward Snowden: The Internet Is Broken by specialist on Saturday April 23, 2016 @03:03AM (#11554513)
I'd like every person to attend a few public council meetings per year. In person. So much criticism about The System is so wide of the mark, its not even wrong.

If people are upset, enough to effect change, they only have to start showing up. Find the game, learn the game, play the game.

Re:Edward Snowden: The Internet Is Broken by komali2 on Friday April 22, 2016 @10:54PM (#11553906)
You must not have been alive long. There was a time people in the States were being jailed and having their rights rescinded for possibly, maybe, being communists.
Re:Edward Snowden: The Internet Is Broken by maccard on Friday April 22, 2016 @09:01PM (#11553607)
Trust isn't a binary thing. I trust different people; different organisations, with different data, information and details about my life and other peoples lives.
Re:Edward Snowden: The Internet Is Broken by marssaxman on Saturday April 23, 2016 @03:48AM (#11554609)
"Frustratingly slow" as in "not happening at all, and in fact getting steadily worse"? I'll take the gamble of a technological solution which might actually work over the certainty of a political solution which will happily consume more time and energy than I can afford to waste on it without showing any results whatsoever.
Re:Edward Snowden: The Internet Is Broken by sievebrain on Saturday April 23, 2016 @10:12AM (#11555583)
You need both.

Technology alone cannot solve political problems. The technology can be banned.

Technology can, however, raise the difficulty for sub-components of a government that are wanting to push the limits and do things outside the boundaries of the politically agreed upon systems. Encryption can't stop the NSA if it has widespread political support because the encryption can be banned. But right now intelligence agencies are absolutely hurting, because what they're doing is highly controversial and blocking them with encryption is not at illegal. If the political debate is won, even if it's just a partial win, then they're forced back inside their box for a long time to come.

Re:Edward Snowden: The Internet Is Broken by marssaxman on Saturday April 23, 2016 @02:22PM (#11556688)
Governments can ban anything they like but the ban doesn't mean much if they cannot feasibly enforce it. Such is the lesson of the War on Drugs: the government comes in and makes trouble for people from time to time, but otherwise they simply haven't got a clue, and for the most part people just live their lives as they please and ignore the laws they don't agree with.

I'm glad there are people fighting the political fights too, though I can't imagine where they get the patience. I certainly have nothing to offer in that arena.

I take your point about the NSA, but it doesn't appear that political action will stop them either, because they are happy to ignore political constraints (and lie to Congress about it, for example) and simply do whatever their technological capabilities allow them to.

Re:Edward Snowden: The Internet Is Broken by sievebrain on Sunday April 24, 2016 @05:53AM (#11559133)
Yes, but that's why strong encryption is such a strong force to stop them. They operate outside the political sphere at the moment. It's questionable how long that can last.

A war on encryption would be much easier to enforce than a war on drugs because there are such fewer sources, and there's not a big market for its use.

Re:Edward Snowden: The Internet Is Broken by abandonliberty on Friday April 22, 2016 @03:37PM (#11552035)
Just possibly old versions of truecrypt.

This author's conclusions seem quite sound to me. They collapsed it in a way to comply with a gag order while silently sounding an alarm.

https://forum.truecrypt.ch/t/my-analysis-of-what-really-happ...

Anyone operating in this space is eventually going to get the same option as Lavabit's founder: compromise or collapse.

Re:Edward Snowden: The Internet Is Broken by depingus on Friday April 22, 2016 @04:03PM (#11552194)
If you're super paranoid you shouldn't trust any version of truecrypt. Read the fascinating story of Paul Le Roux...

https://mastermind.atavist.com/

He created E4M (which truecrypt was based on) and is rumored to have been one of the creators of truecrypt. Apparently he's also been a US government asset for a while.

Re:Edward Snowden: The Internet Is Broken by nickpsecurity on Friday April 22, 2016 @05:01PM (#11552538)
If you're superparanoid, you should trust that because a superparanoid seemed to build it for himself and open-source it to stick it to the man in his mind. And then built a criminal empire that, if he was still financing it, depended on it for his survival. That's the kind of incentives that get results.
Re:Edward Snowden: The Internet Is Broken by dublinben on Friday April 22, 2016 @05:44PM (#11552755)
TrueCrypt has been subjected to an independent security audit. As have successors like VeraCrypt. Any alternatives likely haven't.
Re:Edward Snowden: The Internet Is Broken by ekianjo on Friday April 22, 2016 @09:40PM (#11553702)
So what? Snowden even said that Truecrypt was one of the only tools that currently the NSA could not defeat. I'd rather trust him on that than your opinion on the matter.
Re:Edward Snowden: The Internet Is Broken by nickpsecurity on Saturday April 23, 2016 @01:01AM (#11554231)
Same shit I said to Moxie about GPG. There's only a few things consistently stopping them. Best endorsement ever if you ask me. I still push for even greater levels of security and assurance but what stops NSA at the moment is one hell of a starting place.
Re:Edward Snowden: The Internet Is Broken by oridecon on Friday April 22, 2016 @09:20PM (#11553664)
I wish there was some kind of map showing where each area (hardware, software/firmware, network, yada yada) is compromised and by which initiatives and companies. With solid info (avoid speculation). Just curious if would make any impact if the regular user see how their data and everything else is treated by the companies they think they "know" and "trust".
Re:Edward Snowden: The Internet Is Broken by djsumdog on Friday April 22, 2016 @05:32PM (#11552690)
I heard about those taps in 2008/2009 I think. Snowden hasn't really given us anything truly new. It's also bizarre how quickly everything he presented was/is accepted as fact immediately without question.

I think it's way more likely Snowden was intentional. He's still working for the Federal government and the leaks are intentional so that the Federal Government could announce to the world that they are spying on all their own citizens...and nothing happen. No real revolution, and no real end to the surveillance.

I mean yea, we have better security practices, more people use encryption, more people are aware about security ... but overall the landscape hasn't changed except in one crucial aspect: people are talking less publicly. People are afraid that what they say is monitored. There has been a chilling effect.

The Snowden narrative needs to be questioned. Since when does an NSA contractor working from home in Hawaii get VPN access to all the government secretes? Like...people actually believe that?

Re:Edward Snowden: The Internet Is Broken by codeulike on Friday April 22, 2016 @06:34PM (#11553013)
The Snowden narrative needs to be questioned.

Oh for goodness sake. Reality is too boring for you? You could engage with the real campaign that EFF and Snowden and others are trying to get going, or you could wander off and make up some other story that protects you from having to do anything.

Since when does an NSA contractor working from home in Hawaii get VPN access to all the government secretes?

Since the NSA got reliant on huge networks that aren't understood by their own management and they needed to hire in techies to keep it running.

Essentially: big organisations have to choose between (a) crippling levels of security that prevent them from getting anything done or (b) getting things done with a small risk of leaks.

(a) is pointless so everything is heading for (b) and thats why every major news story of the last few years and the next few decades is going to be based around leaks.

Re:Edward Snowden: The Internet Is Broken by chillwaves on Friday April 22, 2016 @06:34PM (#11553008)
I have to question how much experience you have dealing with the Fed gov't. There are hundreds of thousands of contractors cleared at the level Snowden was at. It is all very mundane, actually. The government is not composed of superspies, though they do have some. But for day to day operations they do not run a tight ship. It's not unbelievable that Snowden had the access. More unbelievable that he gave up his freedom to let the world know.
Re:Edward Snowden: The Internet Is Broken by kevin_thibedeau on Friday April 22, 2016 @06:19PM (#11552933)
> I heard about those taps in 2008/2009

Back then the excuse was that they were only being used to collect foreign traffic. Snowden revealed their loose interpretation of "foreign" and many more domestic activities happening outside of AT&T NOCs.

Foreigners' rights aren't protected by the constitution. Citizens' are and now we have legal standing to force the government to respect the law which we didn't have before knowing that the panopticon was pointed at us.

Re:Edward Snowden: The Internet Is Broken by walrus01 on Friday April 22, 2016 @06:33PM (#11553006)
It was fairly widely known in the network engineering community in 2003/2004 that the "Echelon" system collected an extensive amount of domestic data for each of the five eyes, using legal dodges where a foreign agency (like GCHQ) would siphon american/canadian data and feed it to the NSA and CSE, and vice versa.

Those who knew how much the system had changed from satellite-intelligence gathering (from the era prior to transatlantic/transpacific submarine fiber, where most phone calls and international data were satellite based), to tapping fiber at submarine cable landing stations and "partnering" with major telcos, were totally unsurprised.

Re:Edward Snowden: The Internet Is Broken by kevin_thibedeau on Friday April 22, 2016 @06:49PM (#11553071)
Echelon was never publicly acknowledged. Carnivore was explained as only targeted at suspected criminals under investigation. Snowden's revelations were the first hard , undeniable facts in the matter showing the true scope of the unconstitutional activity.
Re:Edward Snowden: The Internet Is Broken by nickpsecurity on Friday April 22, 2016 @07:15PM (#11553202)
You're right that they never admittee it directly. Their defense was funny and an indirect admission:

https://fcw.com/articles/1999/06/02/congress-nsa-butt-heads-...

Anyway, it was all over US media from 1999-2001 plus European Parliament with plenty testimony and recommendations. And again, the link encryption recommendation was in US security requirements anyway.

Re:Edward Snowden: The Internet Is Broken by codeulike on Friday April 22, 2016 @06:52PM (#11553091)
Of course people knew it was going on but Snowden has put it beyond deniability and that is very very important. We now have (for example) the CEOs of the biggest tech companies in the world able to talk about this stuff. That could never have happened before Snowden.
Re:Edward Snowden: The Internet Is Broken by nickpsecurity on Friday April 22, 2016 @07:18PM (#11553218)
Yes it was. Evdn mass audience heard with the reporting in Guardian, USA Today, and so on starting in late 90's. Not to mention awareness that Enemy of the State created which NSA considered one of worst events to ever happen haha.
Re:Edward Snowden: The Internet Is Broken by snowwrestler on Friday April 22, 2016 @06:25PM (#11552964)
I hope you're being satirical. This is such a classic formulation of a conspiracy theory that I hope it's intentional. If so, bravo!

If not, then like all conspiracy theories you need to account for everyone who would need to be in on the secret, how they're all keeping the secret, and why--what's in it for them.

Re:Edward Snowden: The Internet Is Broken by themartorana on Friday April 22, 2016 @08:36PM (#11553515)
Just to be clear, a big chunk of what Snowden's leak revealed actualized a bunch of conspiracy theories. Do you see the disturbing irony of dismissing another conspiracy theory so flippantly? I don't believe it's true, but if it turned out to be, I'd hardly be surprised.
Re:Edward Snowden: The Internet Is Broken by snowwrestler on Friday April 22, 2016 @11:21PM (#11554000)
The difference is evidence vs no evidence.
Re:Edward Snowden: The Internet Is Broken by nickpsecurity on Friday April 22, 2016 @07:23PM (#11553238)
I was guessing trolling, conspiracy nut, or underhanded humor.
Re:Edward Snowden: The Internet Is Broken by nickpsecurity on Friday April 22, 2016 @07:22PM (#11553232)
Questioning the narrative is fine. I for one think he's a combo of whistleblower and traitir, hero and coward depending on what leaks and actions we're talking about. Yet, to think NSA or US did it intdntionally is beyond all reason. Snowden set back so many goal posts for US intelligence, LEO's, and industry that it's impossible thaf it was intentional by USG.
Re:Edward Snowden: The Internet Is Broken by _AllisonMobley on Friday April 22, 2016 @07:33PM (#11553291)
One thing is for sure. The CIA could have killed him, could kill him now, if he truly posed a threat to national security. The fact that they don't indicates they don't feel he is a threat. I'm confident that whatever goal posts you claim Snowden set back, I can explain as ultimatley serving US interests. That's the barometer. Has he hurt US Interests? Seems US interests are doing fine to me. Would things be better if he has revealed nothing? Probably not. His revelations are great distractions.
Re:Edward Snowden: The Internet Is Broken by nickpsecurity on Friday April 22, 2016 @07:49PM (#11553354)
No, they can't kill him now. They're not allowed to by one of only players on Earth they try not to push too hard: Putin, head of Superpower No 2. They weigh the risk against the fact that damage is already done and all they'd protect is further image problems. They're countering that seperately.

Re damage. Tens of billions to economy that military-industrial complex worked hard to get. Push-back against police state legislation. NSA ops and methods blown. Large uptake in products that reduce SIGINT. Businesses moving overseas. All with no benefits on the table for intelligence agencies.

Far as distractions, that's the media's job focing on mass shooters, North Korea, ISIS, etc instead of pending legislation and schemes by government.

Re:Edward Snowden: The Internet Is Broken by MikeHolman on Friday April 22, 2016 @09:54PM (#11553741)
They can't kill him now. Assassination would risk public backlash way beyond anything he could say.
Re:Edward Snowden: The Internet Is Broken by partycoder on Friday April 22, 2016 @06:12PM (#11552906)
"Super secret information leak! Oh no, please don't read it" = "Sale! 50% off! We are losing so much money!"