News for hackers. Stuff that matters.
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by JustUhThought on Monday May 30, 2016 @11:02AM (#11801622)
Do other HN readers find themselves on the receiving end of ridicule by their fam & friends for taking this privacy stuff seriously? I'm constantly being told I'm unreasonably worried, borderline tin-hat wearing paranoid, for being concerned by the surveillance capabilities built into our modern consumer electronics which are available to governments and business alike.

But if someone my parents know have their identity stolen by stealing credit card bills and applications from their mailbox and then find themselves on the hook for $30,000 in fraudulent charges, well then it's all my parents talk about for the next 2 days.

That I understand the technology and they do not, seems to keep them from taking the issue seriously.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by pascalmemories on Monday May 30, 2016 @11:35AM (#11801771)
Yup. I actively work in security consultancy. Everyone outside of tech thinks and treats me like some sort of tinfoil hat salesperson. I get sent all sorts of crazy conspiracy theory links because "that's the stuff you're really into." on a daily basis.

Even when people read about Snowden, they just don't get it. This past weekend, he came up and the response was, yeah, but Snowden was saying the spying is only on terrorists, they don't collect any information on people who are not terrorists because that would be way more information than they want. Trying to explain that is the opposite of what Snowden was saying was pointless and futile because it just made me sound like the crazy one.

The NSA must be rolling around laughing as they listen in to peoples naive conversations about Snowden.

edit: oops, removed link added on the wrong posting. Sorry. And a typo. Sorry again.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by anexprogrammer on Monday May 30, 2016 @02:48PM (#11802512)
I get the same from most, including a couple in tech who really should know better.

I've heard all the variations on "if you have nothing to hide..." through "well we have to catch the terrorists".

Every time a story comes up that some killing or terrorist act happened and one of the perpetrators made a post on twitter, or was already known to security services, the opinion always seems to be along the lines of "well I guess we need to monitor more". Never once have I heard a variation on "if they're known to security already why wasn't something done to arrest or prevent".

Meanwhile there is some belief in chemtrails amongst a few of the younger people I know going on FB group posts I see them share.

I've given up trying to explain either security things or humidity, dew points and the basics of flying.

I don't have the energy to fight a battle that feels like Canute vs the Ocean. I wish I knew something that would make people care.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by TeMPOraL on Monday May 30, 2016 @03:35PM (#11802711)
> Meanwhile there is some belief in chemtrails amongst a few of the younger people I know going on FB group posts I see them share.

Reminds me of a thing I learned here on HN recently. The US was in fact intentionally spraying germs on unsuspecting civilians in San Francisco, among other places, as a part of research related to biological warfare. Turns out there's some grain of truth even in the chemtrails crackpottery.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by giuscri on Tuesday May 31, 2016 @04:05AM (#11805338)
Could you name some reference for the fact please?
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by TeMPOraL on Tuesday May 31, 2016 @04:20AM (#11805379)
https://en.wikipedia.org/wiki/Operation_Sea-Spray

http://www.wsj.com/articles/SB1003703226697496080

http://blogs.discovermagazine.com/bodyhorrors/2015/06/28/san...

There was a story with some discussion here on HN that I can't sadly track down via Algolia now. It told about a person that tracked down information about those tests, motivated by death of some relative who was undergoing surgery at the time, and got infected with a germ that shouldn't even be there.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by chocolatebunny on Monday May 30, 2016 @02:03PM (#11802360)
When the Snowden leaks initially came up, my mom thought that he was spy selling secrets to the Chinese (because he was in Hong Kong at the time). When I tried to explain what it was actually about she rolled her eyes on me.
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by tome on Monday May 30, 2016 @11:46AM (#11801829)
> but Snowden was saying the spying is only on terrorists

Yet another reason Snowden shouldn't have published anything unrelated to domestic spying.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by forgotmysn on Monday May 30, 2016 @01:29PM (#11802244)
Can you explain your thinking? That makes absolutely no sense to me
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by tome on Monday May 30, 2016 @02:00PM (#11802352)
Thanks for asking. I confess my comment was a vent rather than a reasoned argument. I've been annoyed with Snowden's leaks ever since they came out.

I believe leaks about domestic spying on the American people are thoroughly justified (and utterly necessary), and I believe leaks about spying on foreign goverments and foreign nationals are thoroughly unjustified (and frankly, verging on traitorous). pascalmemories seems to be saying that the issue of spying on foreign nationals ("terroists") has completely overshadowed the issue of domestic spying in the popular consciousness to the extent that his associates don't even realise that domestic spying is happening. This is yet another nail in my personal coffin for Snowden.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by pascalmemories on Monday May 30, 2016 @02:57PM (#11802546)
I'll reply since you've specifically referenced me.

I don't think people are distinguishing between 'domestic' or 'foreign' spying. For most people, it's way too complex to have an understanding of domestic US laws on agencies spying powers. Also remember, it's not just the US either. Remember the UK is probably the most prolific gatherer (they have a much more strategic point on internet routing than the US does).

People reduce a complex and difficult to understand story into something they think they understand. In this case, Snowden is 'about spies' and 'spies track[/kill] terrorists' combined with 'I'm not a terrorist, so they won't be interested in tracking me' hence the whole story is irrelevant and only conspiracy nuts think the Government spies on them.

Any attempt to counter this and say, actually it is important because in 5, 10, 20 or more years, an agency can take a dislike to you (or some relative/connection) and then start to revisit things you have long since forgotten, and target you for some throw away comment, just sounds so far fetched as to be lunacy.

But, as the submitted article shows, it's exactly what is happening in other countries and there is no reason why 'our country' [insert name of wherever you live - not just the US] won't do the same. For domestic US readers, imagine a future President Trump issuing an executive order to track down those who insulted him, even in private personal e-mail conversations - it may be a crazy scenario, but the NSA database allows such a thing to happen.

The mass collection and storage of data is a real risk to any democratic society, because of the threat of misuse. Don't fool yourself that some official will say no when asked to carry out some heinous act made possible by access to the stored communications.

Getting tied up in whether Snowden is a traitor or a hero is missing the point. It's also where the NSA has focused on steering the conversation at every opportunity.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by ams6110 on Monday May 30, 2016 @03:29PM (#11802672)
Or imagine a future President Clinton using the collected data agains her eternal enemy, the "vast right-wing conspiracy." I know which scenario I think is more likely....
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by nekopa on Monday May 30, 2016 @02:16PM (#11802400)
I have to kind of disagree. I think that the whole release was necessary to put it all in context. The capabilities to spy on terrorists is what made it all to easy to spy on our own folks.

Where I completely agree with you is presentation of topics. If he had focused only on domestic spying in the beginning, the conversation could have focused on that first and foremost, and then later the other stuff could be brought in without clouding the issues.

But this is only because I think that indiscriminate spying is wrong, no matter what your nationality. And I say this coming from a military spy background where I know that spying is completely necessary.

But shit, choose your targets, and choose them for a reason.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by giuscri on Tuesday May 31, 2016 @04:21AM (#11805382)
If you mind answering, why do you think that passive spying from the gov is wrong?

Asking the government to choose their target for a reason sounds like requiring the gov to follow a longer path to do something wrong -- such that it'll be harder to abuse that power.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by pooper on Monday May 30, 2016 @02:19PM (#11802411)
Alt view:

By engaging in illegal activity, the agency undermined it's legitimate spying of targets outside the country. If there were no illegal activity, there would be no need for whistleblowing. I'd chalk up any damage to the legitimate spying as a collateral damage and put the people who authorized the illegal activity responsible for such damage.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by forgotmysn on Monday May 30, 2016 @02:52PM (#11802528)
Thanks for elaborating a bit. I still have to disagree.

I find the argument that Snowden's actions didnt justify the consequences to our agents or relationships with other nations just short-sighted.

Although it may not feel like it to those of us immersed in tech as a culture and as an industry, we are still in the very early days of the Internet. We're still setting precedents that are going to be in place for lifetimes. That America has to patch some relationships, that a couple events may escape our gov'ts control, are small prices to pay to ensure that future generations are able to freely and safely explore and express themselves on the internet without fear of prosecution or persecution.

Sucks in the short term, but these are important issues to get resolved for the long term.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by wolf550e on Monday May 30, 2016 @02:07PM (#11802372)
Snowden (and the world) would have been much better off if the only thing he took with him was about the illegal domestic spying, but of course he didn't have the time to analyze the data, he just took it all and ran and let journalists publish parts of it. Because some of the data was about legitimate US intelligence work overseas, people could accuse him of harming US interests on top of whistleblowing.

Some people got their information about Snowden from a "news source" that told them "this traitor / Russian spy leaked the details of the US intelligence work overseas", and did not tell them about the warrantless domestic wiretapping.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by ottertown on Monday May 30, 2016 @11:28AM (#11801739)
For my family, definitely yes. Though it may just be that non-technical people are going to take longer to understand the gravity of technical problems, and I think that's compounded by most people's latent contempt for software / IT people.

My family initially decided Edward Snowden was a traitor and coward for 'fleeing' to Russia. They threw every stale argument at me, from "I have nothing to hide" to "everyone is spying on everyone, what's the big deal?"

They've started to backtrack from these positions. I'm not sure why or how, but I suspect they just needed people they trust (e.g. some columnist in the NY Times) to tell them they're wrong.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by apeace on Monday May 30, 2016 @02:28PM (#11802444)
I've come up with a response to this which seems to drive the point home. I simply say something along the lines of:

You think I'm paranoid? You have nothing to hide? How about you give me all your passwords (Gmail, Facebook, your laptop, etc). I'll download everything about you, and I'll post it online for the world to see.

Oh, you wouldn't want that to happen? Well that is the risk I am talking about. Governments can be hacked, too (and have been many times, recently). Hence if they have access to your data, all your data could potentially be leaked on the open internet.

Government surveillance and hacking can affect everybody!

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by nekopa on Monday May 30, 2016 @03:19PM (#11802633)
This reminds me of an old piece of advice I heard along time ago:

Never write down something you don't want to be read aloud in a court of law.

I apply this to what I do online, and so far, it has treated me well.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by whamlastxmas on Monday May 30, 2016 @06:56PM (#11803679)
Never write if you can speak; never speak if you can nod; never nod if you can wink.
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by NEDM64 on Tuesday May 31, 2016 @12:00AM (#11804463)
It's very easy, if that person say he/she doesn't have anything important on their phones, they have a GPS.
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by tdkl on Monday May 30, 2016 @03:57PM (#11802824)
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by slicktux on Monday May 30, 2016 @12:53PM (#11802095)
I feel you; I talk about it quite a bit because it is of interest, and well it affects us all. I even tried to get my sister to read the book "Data and Goliath" by Peter Schneier and she only read about 5 pages book marked it and had it sitting for a month. . .it is futile; Once I got an unusual call about someone being in jail. . .etc etc. I was concerned it may be a friend; anyways the call did not go through and I was running a reverse lookup on the tel-#. Well, two buddies of mine were there with me and one of them remarked "yeah, aren't you like paranoid that the government is spying on you" I looked at him furiously because this person I call my buddy just made a stupid stupid comment. Stupid comment because he obviously misinterpreted my previous conversations about NSA spying into me being personally paranoid about government spying on me; it is not about government spying on me it is about government spying on the people! and most people are plain ignorant and careless! it is unfortunate! they need an 8th grade level NY-Times paper to tell them their news. . .yes that is an ad-hominin. “Government is not reason, it is not eloquence—it is force! Like fire, it is a dangerous servant and a fearful master; never for a moment should it be left to irresponsible action” (Washington 6)
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by zacketysack2 on Monday May 30, 2016 @01:05PM (#11802137)
So I've been thinking about this, and I think the main reason why non-technical people get flustered when talking about privacy and anonymity online is because they might feel guilty about doing nothing about it.
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by astral303 on Monday May 30, 2016 @02:06PM (#11802369)
Computers are incredibly complicated to use and full of stupid bullshit rules.

The average person is barely staying above water trying to use computers and not get fucked (I.e. Losing their work due to a keyboard mispress), that it's very overwhelming to consider security and privacy on top.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by anubisresources on Monday May 30, 2016 @01:50PM (#11802310)
I've always thought it's more a matter of ignorance. Most infosec risks are fairly abstract and difficult to grasp for non-technical folks. Many don't understand why what they are doing is bad.

I really think that the infosec needs to do a much better job educating the public.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by mbreedlove on Monday May 30, 2016 @10:40PM (#11804247)
> Peter Schneier

Bruce Schneier

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by arca_vorago on Monday May 30, 2016 @12:10PM (#11801932)
Sometimes yes, but luckily I have taken the time to understand the arguments so that I can rebut them and counter rebut their rebuttals.

Almost everyone around now makes off the cuff jokes about my paranoia, but in serious discussion they mostly understand now.

For me, as former military, I always try to bring it back to the Constitution and the rule of law, which tends to have more weight with most Americans than you might expect.

Things like this have made me think though, that what I would like to see is a site that takes a controversial topic such as this, and just lays out all the evidence, arguments, counter argument, etc, along with citations and logical analysis to lower the barrier to entry in a way.

Come to think of it, I get more pushback on HN than just about anywhere on these topics, which is extremely dissapointing.

As a sysadmin, it's part of my job description to be paranoid. Hell, does anyone remember the Snowden file with the title, "we hunt sysadmins"!?

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by lukeschlather on Monday May 30, 2016 @12:50PM (#11802080)
Unfortunately, it's not a website, and you can't presently see it, but I saw an exhibit by the Tactical Tech collective in Berlin called Nervous Systems. It was a really accessible discussion of these issues. It was also especially effective because much of it was more artistic and presented with less commentary, allowing the viewer/reader/listener to draw their own conclusions.

If you know a space which can host them, and you can raise the cash, I'd recommend getting them to come to your locale and invite your friends.

https://tacticaltech.org/projects/nervoussystems

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by pdkl95 on Monday May 30, 2016 @01:29PM (#11802240)
> site that takes a controversial topic such as this, and just lays out all the evidence

I would also like that site.

Recently I've been thinking about another way to educate people about these issues: a video game that simulates practical examples of data security and privacy. Interactive games offer different tools[1] to the storyteller, and I like the idea of letting people discover concepts on their own. Unfortunately, a project like this is way outside my area of expertise. /sigh/

[1] https://www.youtube.com/watch?v=IyhrKPLDCyY&list=PLJA_jUddXv...

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by jon_richards on Monday May 30, 2016 @11:17AM (#11801684)
Yup. I told some people about Facebook's silent background audio and the CIA's fake phone shutdowns. I felt like I was telling them about government mind control programs.
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by nyolfen on Monday May 30, 2016 @02:37PM (#11802477)
>CIA's fake phone shutdowns

Can you expand on this?

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by jon_richards on Monday June 06, 2016 @01:20AM (#11844820)
They can send a signal to your phone telling it to fake any attempted shutdowns so that they can still use it as a bug.
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by ccvannorman on Monday May 30, 2016 @12:22PM (#11801978)
It's critical to understand that 9/10 of people simply don't want to believe. It's easier that way.
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by walrus01 on Monday May 30, 2016 @01:08PM (#11802153)
To quote the guy who goes turncloak in the first Matrix movie: "... And you know what I've realized? Ignorance is bliss."
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by nekopa on Monday May 30, 2016 @02:26PM (#11802433)
I've found that recently, I've gotten people to understand the issues more by paraphrasing (what I think was Snowden's) the main point:

The people doing this are not evil, nor do they have evil intentions. But they are setting up a turn-key system - and who knows who the next person in power will be.

And relating it to the current situation vis a vis Donald Trump:

Now, imagine Trump gets into power. He can quickly turn around and say "Find me all the people who do or say X so I can round them up and get them out of here!"

Fill in X for whatever thing is innocuous now, but may not be under a future administration.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by alanwatts on Monday May 30, 2016 @12:32PM (#11802009)
>We've arranged a global civilization in which the most crucial elements — transportation, communications, and all other industries; agriculture, medicine, education, entertainment, protecting the environment; and even the key democratic institution of voting, profoundly depend on science and technology. We have also arranged things so that almost no one understands science and technology. This is a prescription for disaster. We might get away with it for a while, but sooner or later this combustible mixture of ignorance and power is going to blow up in our faces.

-Carl Sagan

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by JustUhThought on Monday May 30, 2016 @12:37PM (#11802026)
Nice quote! Ty
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by pbuzbee on Monday May 30, 2016 @10:47PM (#11804263)
I feel like the problem is that people outside of tech don't have a sense of how much data is collected, and they also don't really see negative consequences of it.

First, there aren't really any negative consequences to government surveillance. People don't regularly disappear in the middle of the night for a comment on a blog post, and there haven't been any major security leaks yet. This could easily change in the future of course, but so far it's easy to ignore.

Second, there's no cool dashboard showing what info the NSA has on you. If individuals could see the scope of info stored on them, they would probably feel differently. For example, many people feel creeped out when they view Google's map of their location history. This is an opt-in choice and the map exists for your benefit, but it still makes people uncomfortable to see their lives so plainly visible on a screen.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by kilroy123 on Monday May 30, 2016 @02:05PM (#11802364)
You're not alone. Everyone thinks I'm crazy and tells me this, "I have nothing to hide, why should I care?" It makes my blood boil.
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by mtgx on Monday May 30, 2016 @11:15AM (#11801672)
In a way, it's for the same reason people don't think EVs or solar power will dominate. They look too much at what is currently happening or has happened in the (recent) past, and think that's how things will always be.

The HN types tend to be more informed about what's currently possible with technology and have a better understanding of where this can lead to in the future. "Normal" people don't have that going for them, so for them it's "strange" that you would say such things.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by rdiddly on Monday May 30, 2016 @12:46PM (#11802061)
Not a good example, because the actual barriers to EVs and solar power are that they depend too _much_ on what's happening now, i.e. existing fossil-fuel-powered industrial infrastructure.
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by mistermann on Monday May 30, 2016 @07:17PM (#11803749)
Just to play devil's advocate, or perhaps help you understand how these people think, consider illegal immigration. Many people, using the exact same logic as you, consider it to be a serious issue, whereas others would say such beliefs are baseless (to put it nicely) as any facts supporting any concern are "outliers".
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by tsmffh on Monday May 30, 2016 @07:28PM (#11803781)
Essentially not thinking beyond stage one. (The self destruction of a welfare state and open borders, to use the immigration example)
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by mistermann on Monday May 30, 2016 @09:01PM (#11804020)
Correct, but how many people in this thread who are shocked and disappointed at the lack of concern regarding privacy, hypocritically do not support increased control of the southern border of the US? It's not a completely analogous comparison, but there are many similarities.
Re:Governments Turn to Commercial Spyware to Intimidate Diss... by sliverstorm on Monday May 30, 2016 @05:04PM (#11803185)
Is it all you talk about?

That's why I see getting people ridiculed about things that are actually real concerns- it's practically all they talk about.

I take privacy & security measures, but you wouldn't really know it, talking with me over a drink.

Also, a fundamental beleif that everyone is out to get you (true or not), will turn most people off.

Re:Governments Turn to Commercial Spyware to Intimidate Diss... by cloudjacker on Monday May 30, 2016 @03:20PM (#11802640)
Actually I can mention the use of TOR in more and more casual conversations now

"Just use TOR"

"don't send an anonymous message to your ex on clearnet"

etc