News for hackers. Stuff that matters.
Re:China Begins Production Of x86 Processors Based On AMD's IP by simonh on Monday July 09, 2018 @04:51AM (#17488823)
Well if the US does it too, that's alright then.

Caveat, I'm a European (well a Brit, so almost European) and I'm appalled by US and yes British violations of privacy and surveillance overreach. Things like the threats to cripple or ban private use of strong encryption are appallingly damaging and misguided.

However nations with an elected government accountable to the people doing this stuff is one thing. We still have the right and mechanisms to protest and these protests have frequently made a real difference. strong encryption of private communications is till legal and threats to it have gone nowhere. The fact that governments from multiple political groups, in multiple countries have looked at this and decided that the benefits to their electorate outweigh the dangers offers at least some comfort. It's at least possible that they are right, although I would prefer much stronger checks and balances.

Pervasive active harvesting, analysis, intervention, censorship and subsequent punishments of 'private' communication by a totalitarian state, with the open goal of enforcing ideological obedience is not the same thing, and it's not ok. At all.

Re:China Begins Production Of x86 Processors Based On AMD's IP by marcosdumay on Monday July 09, 2018 @11:00AM (#17490653)
As democratic as the US is or isn't, its government does not answer to me. China one also doesn't. So, what difference does it make?

If I'm developing some kind on tech, both have been caught using their state agencies to do industrial spying; if I'm active in some push for some non-mainstream activism (like, abolishing copyrights), both have done out of jurisdiction enforcement of their policies, and there isn't much difference on means either.

Personally, I'd imagine China spying on me is a smaller risk than the US, since my country is more under political influence of the US. But whatever you do, you will have to protect or subject yourself to government spying, thus there isn't any big difference.

Re:China Begins Production Of x86 Processors Based On AMD's IP by untog on Monday July 09, 2018 @02:48PM (#17492477)
> As democratic as the US is or isn't, its government does not answer to me. China one also doesn't. So, what difference does it make?

That seems like an absolutely absurd comparison. The US government is elected, if enough of the population cared about the issue (and who knows, as it gets worse, they might) the government can be held accountable at the ballot box. The same is in no way true in China.

Re:China Begins Production Of x86 Processors Based On AMD's IP by sangnoir on Monday July 09, 2018 @03:20PM (#17492717)
Are you assuming that parent is an American voter? Or that the Americans will protect the rest of the world with their votes - even when it's counter to "American Interests"?

Going with the copyright theme: most American voters would have been happy with the copyright provisions of the trans-atlantic treaty since that increased "shareholder value" that would benefit their 401k's.

Re:China Begins Production Of x86 Processors Based On AMD's IP by simonh on Monday July 09, 2018 @02:13PM (#17492206)
The difference is how that surveillance is used. Right now you my not have any personal contact with China, so you might not care what the do to their own citizens. I might have taken the same stance in 2001 before meeting the girl who would later become my wife, who was a Chinese citizen. Since then I’ve travelled to China for work, completely independently of any family connection. A relative, child or grandchild of yours could work in China, marry a Chinese partner. I could go on.

Even aside from that, China is actively exporting their political and economic model all over the world. They are using economic investments and financial grants to companies, institutions and cultural organisations as leverage to stifle criticism, and silence factual reporting of events in China all over the world, and almost certainly in your own country too.

Re:China Begins Production Of x86 Processors Based On AMD's IP by addicted on Tuesday July 10, 2018 @01:29PM (#17500284)
For better or worse (I’d argue worse but that’s irrelevant) China has explicitly stayed out of foreign countries’s politics. That’s one reason why so many dictators and corrupt governments are willing to work with them. China, unlike the US or the EU, has decided the political oppression a country’s leader practices is none of their concerns. They just want to do business.
Re:China Begins Production Of x86 Processors Based On AMD's IP by Synaesthesia on Monday July 09, 2018 @08:59AM (#17489844)
The US government is somewhat accountable to the public. Their spying agencies however are not. They never have been, have always operated in secret. The public certainly wasn’t consulted on the mass surveillance program.
Re:China Begins Production Of x86 Processors Based On AMD's IP by SEJeff on Monday July 09, 2018 @10:08AM (#17490242)
The mass surveillance was a result of the wide sweeping Patriot Act after 9/11. There has never in US history been a single intrusion into our civil liberties more than the Patriot Act. In specific, Section 215 is what allowed the bulk collection of our records.

Luckily, it has now expired and was not renewed. Some reading on this very controversial section:

https://www.csis.org/analysis/fact-sheet-section-215-usa-pat...

https://www.eff.org/cases/section-215-usa-patriot-act

Re:China Begins Production Of x86 Processors Based On AMD's IP by mieseratte on Monday July 09, 2018 @10:16AM (#17490306)
> The mass surveillance was a result of the wide sweeping Patriot Act after 9/11.

As if the three-letter agencies never tried to cripple encryption before September 11th, 2001...

Re:China Begins Production Of x86 Processors Based On AMD's IP by SEJeff on Monday July 09, 2018 @11:01AM (#17490663)
But it got demonstrably worse afterwards. It went from a quiet thing to a well funded effort, all in the name of "defending 'merica from terrorism". GW Bush and his admin enacted the law which Obama just made worse.
Re:China Begins Production Of x86 Processors Based On AMD's IP by b4eEX on Monday July 09, 2018 @11:13AM (#17490799)
While I personally wasn't around in the 90's, I believe we're yet to see anything on the level of the Clipper chip and nineties' crypto wars in general in the 21st century. Or maybe they've learned to hide their activities better, but that's a bit of a Russell's teapot.
Re:China Begins Production Of x86 Processors Based On AMD's IP by nickpsecurity on Monday July 09, 2018 @12:18PM (#17491331)
In the Snowden leaks, BULLRUN said they were secretly weakening every cryptosystem they could even in standards. The Core Secrets leak also said the FBI was "compelling" U.S. companies to "SIGINT-enable" their systems in secret. The groups doing this also operate secretly with effective, criminal immunity. Such a situation is way worse than them pushing an obviously-backdoored chip that we could've all spotted and worked around.
Re:China Begins Production Of x86 Processors Based On AMD's IP by monocasa on Monday July 09, 2018 @11:36AM (#17490999)
Their diffie hellman hack, and router 0 days are everything they wanted out of the clipper chip.
Re:China Begins Production Of x86 Processors Based On AMD's IP by marnett on Monday July 09, 2018 @12:49PM (#17491571)
What diffie-hellman hack are you referring to? I'm curious.
Re:China Begins Production Of x86 Processors Based On AMD's IP by monocasa on Monday July 09, 2018 @01:11PM (#17491750)
https://thehackernews.com/2015/10/nsa-crack-encryption.html

https://weakdh.org/imperfect-forward-secrecy-ccs15.pdf

Basically, for about $100M per prime (probs cheaper now), you can pre compute a big table that you can use to decrypt the diffie hellman exchange. From there you have the negotiated private keys, and you're off to the races for a full, real time decrypt. Since before the Snowden leaks, there wasn't the public thought that the choice of primes for diffie hellman mattered really for it's security, most implementations hardcoded the prime. Something like 92% of the top 1 million https sites were using the same 2 primes, and similar numbers of VPN and SSH implementations were vulnerable too.

So for a one time cost of ~$200m the NSA was able to decrypt the vast majority of internet traffic as long as they caught the diffie hellman exchange at the beginning.

Re:China Begins Production Of x86 Processors Based On AMD's IP by 794CD01 on Monday July 09, 2018 @09:40AM (#17490051)
The spying agencies are as accountable as any other agencies. They do what they do at the behest of the public's elected representatives.
Re:China Begins Production Of x86 Processors Based On AMD's IP by trendia on Monday July 09, 2018 @10:05AM (#17490215)
Did the Senate ask the CIA to spy on them?

"An internal investigation by the C.I.A. has found that its officers penetrated a computer network used by the Senate Intelligence Committee in preparing its damning report on the C.I.A.’s detention and interrogation program. "

https://mobile.nytimes.com/2014/08/01/world/senate-intellige...

Re:China Begins Production Of x86 Processors Based On AMD's IP by simplecomplex on Monday July 09, 2018 @12:46PM (#17491553)
Congress can vote to get rid of the CIA, or stop them from spying. The CIA exists because of an act of Congress and at the pleasure of Congress, which consists of elected representatives .
Re:China Begins Production Of x86 Processors Based On AMD's IP by geezerjay on Monday July 09, 2018 @02:05PM (#17492169)
You just gave a non-answer to try to avoid answering it. Public agencies such as the CIA are politically armoured against any attempt to get rid of it. These organizations aren't accountable nor are they at the service of the US congress.
Re:China Begins Production Of x86 Processors Based On AMD's IP by simplecomplex on Tuesday July 10, 2018 @03:22PM (#17501275)
The CIA was created by an act of congress, and can be disbanded by an act of congress. That is ultimate accountability. Any other level of accountability is at the will of congress. These are basic facts of how the government works.
Re:China Begins Production Of x86 Processors Based On AMD's IP by 794CD01 on Monday July 09, 2018 @04:09PM (#17493046)
Maybe we'll know 50 years after everyone involved is dead. As your own article points out, the senators certainly had the power to hold the CIA accountable. The fact that they did not do so despite making angry noises in public can only be properly responded to with the thinking face emoji.
Re:China Begins Production Of x86 Processors Based On AMD's IP by dsfyu404ed on Monday July 09, 2018 @10:13AM (#17490278)
Exactly. Sure you don't directly elect them but they still face public scrutiny because nobody wants to be the swamp that some senator makes campaign promises to drain. Every few years (not nearly often enough IMO) an agency learns that lesson the hard way.
Re:China Begins Production Of x86 Processors Based On AMD's IP by yardie on Monday July 09, 2018 @11:22AM (#17490883)
ICE is currently that swamp, CIA, NSA, FBI, and the VA are still dealing with the fallout of that loss of face.
Re:China Begins Production Of x86 Processors Based On AMD's IP by robertAngst on Monday July 09, 2018 @11:49AM (#17491122)
>accountable

You do know they have the worst dirt on everyone right?

Re:China Begins Production Of x86 Processors Based On AMD's IP by 794CD01 on Monday July 09, 2018 @04:03PM (#17493007)
A downside of constantly electing dirty politicians.
Re:China Begins Production Of x86 Processors Based On AMD's IP by whatcanthisbee on Monday July 09, 2018 @09:44AM (#17490076)
but in US, the pressure-flow goes like this:

step1. public pressures on the electorate

step2. electorate pressures on spying agencies

... and step1 is impossible in China

Re:China Begins Production Of x86 Processors Based On AMD's IP by _Codemonkeyism on Monday July 09, 2018 @10:03AM (#17490199)
How many people know about driving the cocain economy by the CIA throughout the 70s and 80s? About project Phoenix? MKULTRA? MKULTRA surfaced after 20y in the making. About the torture assistence in the South America? Now? At that time? How is there any eloctorate pressure on the CIA? Until recently not a lot of people even knew about the NSA, I wonder how there could have been electorate pressure. There is only pressure - even if there is - when some small facts surface like Iran–Contra.
Re:China Begins Production Of x86 Processors Based On AMD's IP by gonvaled on Monday July 09, 2018 @10:34AM (#17490416)
No idea why you are being downvoted.

I will add more:

- where is the pressure to close Guantanamo?

- where is the pressure to como clean with the lies leading to the Irak war?

Re:China Begins Production Of x86 Processors Based On AMD's IP by s73v3r_ on Monday July 09, 2018 @12:33PM (#17491457)
"- where is the pressure to close Guantanamo?"

There is a lot of it. However, it's countered by the pressure of, "Where do we send those people? My constituents don't want them in our district."

Re:China Begins Production Of x86 Processors Based On AMD's IP by ghkbrew on Monday July 09, 2018 @10:17AM (#17490313)
I get what you mean, but your word choice is off. The "electorate" means the people represented by the elected official, not he officials themselves. i.e. the electorate is the public
Re:China Begins Production Of x86 Processors Based On AMD's IP by whatcanthisbee on Monday July 09, 2018 @10:33AM (#17490412)
oh thanks for the correction. /s/electorate/gov_officials
Re:China Begins Production Of x86 Processors Based On AMD's IP by gonvaled on Monday July 09, 2018 @10:02AM (#17490198)
step 2 happens behind closed doors. you can not publish what is discussed, you can not even mention that you are dicussing it. there is in fact no guarantee that step2 happens, at all, or that it has ever happened.
Re:China Begins Production Of x86 Processors Based On AMD's IP by ddingus on Monday July 09, 2018 @11:59AM (#17491200)
Which means theatre is as good as real reform is at satisfying step 1.
Re:China Begins Production Of x86 Processors Based On AMD's IP by igravious on Tuesday July 10, 2018 @01:00AM (#17495609)
> I'm a European (well a Brit, so almost European)

Wow, that Brexit is really taking a toll on your collective psyche, isn't it? :)

https://www.prospectmagazine.co.uk/magazine/isbritaineuropea...

Re:China Begins Production Of x86 Processors Based On AMD's IP by AsyncAwait on Monday July 09, 2018 @11:07AM (#17490727)
The difference is, I don't think China has the reach the U.S. has, (if you're outside China).
Re:China Begins Production Of x86 Processors Based On AMD's IP by cdiddy2 on Monday July 09, 2018 @01:30PM (#17491884)
maybe not in software, but in hardware they certainly have a lot of reach
Re:China Begins Production Of x86 Processors Based On AMD's IP by candiodari on Monday July 09, 2018 @06:52AM (#17489317)
The issue with your comment is that it's absurd. You are complaining about US overreach, so presumably your basis for judgement should be the situation in the UK.

Does the UK do mass-surveillance of it's own and foreign citizens, on UK soil and outside ? Yes [1]

Strong encryption of private communications is NOT legal in the UK. You have to give the police access when they request it and you cannot use the rights you have in the US to avoid giving this access [2]. (unless you consider strong encryption stuff where you have to make all keys available to the police, border guard, gchq, foreign intelligence services, and others still strong encryption. I don't)

The other huge difference is that the UK refuses to be accountable for their mass surveillance afterwards. In the US a big demand is that there is a paper trail for spying, to the person being spied upon. Granted, this may be buried in something like a phone contract for mass-targeting. When they target you specifically, however, you will be notified (afterwards, if the judge so decides, but can even be beforehand), and failure to do this makes the spying illegal. Furthermore, this gives private individuals and companies the option to sue to have the police/FBI/NSA/DEA/... explain themselves (and more generally the US state).

In the UK however:

1) No notification is given to the person being spied upon. The state just does it.

2) There is no recourse. If you were spied upon because a police officer wanted to be your boyfriend and needed to know where your actual boyfried was to beat him up, that's legal. [3] (yes, I realize these guys got fired, however, their actions were ruled legal)

3) If anyone in the UK takes the side of the person being spied upon, whether an internet provider, an application provider (ie. outlook.com/fb/gmail/...), they will be vigorously pursued and punished for that. This is highly illegal.

4) The UK has cooperation treaties (ie. EU treaties, and others) that let police officers in ~70 countries spy on British citizens (I heard that these treaties were used to install a phone tap, yes really, on Angela Merkel's phone. Yes, that Angela Merkel. The utter incompetence is baffling in it's scope. And yes, the guy (an officer) did this as a joke and got fired for it)

So to say I don't understand your criticism here massively understates the situation ... Obviously, as a UK citizen you've got some more local problems to sort out before you criticize the US.

In reality, the UK/EU is pushing these news articles and blowing up cooperation for EXACTLY the opposite reason : they don't want increased privacy for people, they want to further reduce it. They want the US to honor spying requests without respecting US law. They don't want Facebook to ask "can you explain why this is really necessary" when a police officer is asking for the exact location of EU citizens. They don't want to give reasons, and they certainly don't want the person to be told afterwards (and potentially sue them). They want full FB and instagram chat logs in every divorce case. They want ever single email a person ever sent in every commercial dispute. They want every police force and secret service in Europe to have access to every Europeans every mail, immediately, with zero oversight or tracking, and especially without any paper trail available to their victims. THAT's what Europe is fighting for.

THAT's what they're calling "US surveillance overreach".

Well, that, and the fact that the US successfully recorded some rather high level conversations between Merkel and Macron and managed to get caught doing it. In other words, they're incompetent, and angry. And of course, that's the US's fault (despite, of course, that Germany was also caught attempting to bug Obama, and caught having successfully bugged several high level officials before getting caught). And of course, they're angry for Trump getting elected (if you don't believe me, watch this [4], and listen to the questions).

That's why there is this campaign of "the US is horrible on privacy". There is "no cooperation". But, sadly, the US is the champion of privacy in this particular fight.

[1] https://en.wikipedia.org/wiki/Mass_surveillance_in_the_Unite...

[2] https://techcrunch.com/2017/09/25/traveler-who-refused-to-gi...

[3] http://www.dailymail.co.uk/news/article-1371833/20-police-of...

[4] https://www.youtube.com/watch?v=Y70LrlzrkNk

Re:China Begins Production Of x86 Processors Based On AMD's IP by knorker on Monday July 09, 2018 @08:18AM (#17489668)
Agreed. The UK is very clearly the least free of all "western" countries. You're only touching on government surveillance. There are other aspects too, like super injunctions.

I say that as someone with a UK passport.

Re:China Begins Production Of x86 Processors Based On AMD's IP by candiodari on Monday July 09, 2018 @08:51AM (#17489807)
Most of the problems are actually EU-wide, even including a few not-quite-EU countries.

I wonder why this is being downvoted so badly.

Re:China Begins Production Of x86 Processors Based On AMD's IP by haeffin on Monday July 09, 2018 @12:17PM (#17491316)
Because it's absurd to throw all EU countries into one pot in this regard, especially if you include (and focus on) the UK?
Re:China Begins Production Of x86 Processors Based On AMD's IP by knorker on Monday July 09, 2018 @09:34AM (#17490009)
Yeah, for freedom of speech you can simply see where Nazi websites are hosted. It's not the EU.

But the UK really stands out within the EU.

Re:China Begins Production Of x86 Processors Based On AMD's IP by SEJeff on Monday July 09, 2018 @10:34AM (#17490424)
I don't think that is related. A lot of the Nazi websites are hosted via HostKey in Russia. In fact, some of these websites were used to start "white power" rallies in the US just to stir up the hornets nest. I'm a fan of free speech, but am generally against Nazis as a concept. We fought a war over this :)
Re:China Begins Production Of x86 Processors Based On AMD's IP by knorker on Monday July 09, 2018 @12:23PM (#17491373)
> I don't think that is related. A lot of the Nazi websites are hosted via HostKey in Russia.

In isolation you're right. To expand it: "If you want to host an anti-{russia,putin,trump,jew,white,black,asian,democracy,kim} 'news' website" (as in against all or some of those) then the US would be the place to do it.

IOW: Good luck with anti-Putin in Russia or Nazi in Germany. The US is your best bet. The US didn't raid news papers forcing journalists to drill holes through their hard drives. The UK did.

> I'm a fan of free speech, but am generally against Nazis as a concept. We fought a war over this :)

We didn't fight a war over someone's right to be a Nazi. They really did start it. And the US didn't really join until it was actually attacked, if you're American. They also didn't fight a war about someone's right to be Japanese (or even their right to believe in the divinity of their emperor).

Chamberlain even thought Nazis could be part of the "peace for our time".

Re:China Begins Production Of x86 Processors Based On AMD's IP by b4eEX on Monday July 09, 2018 @11:07AM (#17490734)
But it is. If people/their government are not prepared to defend what's unpleasant for them, it means they're not entirely dedicated to free speech in Voltaire's sense (“I disagree with what you say, but I will defend to the death your right to say it”). Who knows, what minority opinion will they decide to ban next?
Re:China Begins Production Of x86 Processors Based On AMD's IP by s73v3r_ on Monday July 09, 2018 @12:40PM (#17491507)
I don't think anyone should be dedicated to Voltaire's sense of free speech, as it's a ludicrously absolutist position. I'm fairly certain that in Voltaire's time, they didn't have coordinated harassment/doxxing campaigns on social media.
Re:China Begins Production Of x86 Processors Based On AMD's IP by knorker on Tuesday July 10, 2018 @06:25AM (#17496819)
You don't think (coordinated) harassment existed before social media?

Please.

(and doxxing is not about expressing your thoughts and ideas)

Re:China Begins Production Of x86 Processors Based On AMD's IP by s73v3r_ on Tuesday July 10, 2018 @01:32PM (#17500325)
"You don't think (coordinated) harassment existed before social media?"

Where on earth did I say that? You cannot deny, however, that it is far more prevalent.

And that doesn't stop people from crying "censorship" when people who dox get banned from Twitter.

Re:China Begins Production Of x86 Processors Based On AMD's IP by knorker on Friday July 13, 2018 @06:38AM (#17521807)
Here:

> I'm fairly certain that in Voltaire's time, they didn't have coordinated harassment/doxxing campaigns on social media.

Harassment: Existed.

Doxxing: Off topic. Not thoughts and opinions. (Voltaire said "disagree". You don't agree or disagree about someone's home address or real name)

Social media: We live in a more connected world. In a less connected world the same effects would be had in your local community.

> And that doesn't stop people from crying "censorship" when people who dox get banned from Twitter.

Straw man. Also publishing other people's copyrighted works is not censorship.

You're changing the topic. doxxing (which you have now brought up TWICE) has nothing to do with it.

Re:China Begins Production Of x86 Processors Based On AMD's IP by simonh on Monday July 09, 2018 @02:29PM (#17492329)
Surveillance with out warrant, but which is not actively used for malign purposes, is a matter of concern. If it could be used for malign purposes it’s very concerning.

China routinely imprisons political subversives. It has among the lowest rates of voluntary organ donors in the world, yet it has one of the largest rates of organ transplants. Those organs come from prisoners, many of them political prisoners. They’re using that surveillance system to identify and incarcerate these people right now.

But hey. The NSA has files on people too so who cares? How many people, have been broken up for spare parts by the NSA or due to overreaching US and British Intelligence? In China it’s probably in the tens to hundreds of thousands. This isn’t ‘very concerning’. It’s horrifying.

EDIT: I think I misunderstood your point. In my post I did specifically call out British involvement in mass surveillance right alongside the US. Or maybe you think I should have called it out more? I’m a bit confused.

Re:China Begins Production Of x86 Processors Based On AMD's IP by candiodari on Tuesday July 10, 2018 @06:54AM (#17496958)
> China routinely imprisons political subversives.

And the US and UK, the Netherlands, France and I believe Italy have all been caught protecting police officers that used surveillance powers for that purpose I alluded to (finding boyfriends of a girl a police officer likes and beating them up). Given that list, I feel like we can safely assume that all EU states in fact de-facto allow and protect police officers doing this. Likewise police officers have been caught sporadically using official "legal intercept" tools to "help" in divorce, finding children they abused, finding ex-lovers they had a quarrel with, and the like.

Note: I don't mean just that police officers did that, that's troubling enough by itself that those tools allow that. My main complaint is that the justice system protected those police officers from the consequences of those actions.

The only case where the police seems to find this behavior by their own officers unacceptable is when it's directly used to help a (non-police-officer) criminal. And this is very widespread behavior. It happens in the US (but of course, in the US the victims (eventually) get notified that an officer did that, so you can sue them), it happens in the EU, and in the EU it's completely unchecked and unchallengeable, and "surprisingly" this does not lead to them using it more responsibly.

I find things just baffling. FB/Google/MS/... are all begin vigorously pursued for essentially selling your contact list ... by people who used violence against ISPs/ASPs (like FB/Google/MS/... but not just them) to allow police officers to beat up love rivals and abuse children. And when they got caught doing that ... they immediately rallied behind the criminals (because yes, what those officers did was in fact criminal in almost all cases).

I feel like we've got much bigger problems here than Trump's campaign using contact lists from phones/FB to get more people to vote for him. And I feel like the EU should not be criticizing anyone for being weak on privacy.

Re:China Begins Production Of x86 Processors Based On AMD's IP by alexktz on Monday July 09, 2018 @07:03AM (#17489357)
Thank you. I'm emigrating from the UK soon and this is one of the many reasons why.
Re:China Begins Production Of x86 Processors Based On AMD's IP by mattnewton on Monday July 09, 2018 @09:21AM (#17489953)
You had me until “the US is a champion of privacy in this particular fight” - I think they are just further behind, and not particularly championing anything privacy related.