News for hackers. Stuff that matters.
Re:NSA infected 50,000 computer networks with malicious soft... by pvnick on Saturday November 23, 2013 @12:05PM (#6786560)
>But it is intellectually dishonest to pretend that people are just now discovering that NSA was breaking into computers around the world. That is literally the charter of the NSA. It's why they exist at all.

You're presenting a red herring here, tptacek. Any third grader who played played Splinter Cell would say, "No duh!" But the news isn't that the NSA is breaking into computers. The news is the scope of the intrusions (installing malware on 50k computers), and of the motivations for the behavior. We've been told it's to protect us from the extremist muslims attempting to establish a caliphate here in America [1]. That was a lie. 50k computers with US-planted malware on them is not a defensive maneuver. It's an offensive one. It's not about protecting America. It's about global information dominance.

Now, whether we want that or not is a different question; there are advantages and disadvantages to the issue depending to a large degree on whether or not you believe in American exceptionalism. But this is about an executive power grab, not about "spies spy, let's all go home now," and you're deluding yourself if you believe otherwise.

[1] http://www.nsa.gov/public_info/_files/speeches_testimonies/T...

Re:NSA infected 50,000 computer networks with malicious soft... by malandrew on Saturday November 23, 2013 @12:56PM (#6786758)
Yup. TBH I simply don't understand the logic that makes an offensive act against a non-combatants by an individual illegal, but somehow permits that same act against non-combatants by a nation state.

It it is illegal for an individual to murder someone, then it should be illegal for the government to do so. If it is illegal for a programmer to infect thousands of computers of innocent people with malware, then it should be illegal for the government to do so.

I have no doubt in my mind that among those 50k are many innocent people (foreign and domestic), and that among the domestic infections, I doubt the NSA could produce a warrant or other legal instrument that permits them to have caused that infection.

Under what wacky laws do we actually permit such malware. And are there any provisions in those laws proscribing corrections for any offensive malware programs that cause collateral damage.

Re:NSA infected 50,000 computer networks with malicious soft... by tedunangst on Saturday November 23, 2013 @02:17PM (#6787069)
What does illegal mean in the context of government? The government decides what's illegal. If you want to declare some government's action illegal, you need to find a bigger government to impose their laws on the little government.
Re:NSA infected 50,000 computer networks with malicious soft... by grey-area on Saturday November 23, 2013 @03:12PM (#6787257)
If you live in a nation of laws, i.e. some form of functioning democracy, the people decide what is legal through their representatives, and this can change gradually as attitudes shift. The government is supposed to be an instrument of the people, not the other way around.
Re:NSA infected 50,000 computer networks with malicious soft... by tedunangst on Saturday November 23, 2013 @03:17PM (#6787278)
I assume the parent is talking about the USG spying on or murdering other not-US people, in which case the people of the US have more or less decided that's what they want.
Re:NSA infected 50,000 computer networks with malicious soft... by tptacek on Saturday November 23, 2013 @12:07PM (#6786566)
The NSA was breaking into huge numbers of computers long before we were worried about a "caliphate", and the fact that they were doing it was showing up on people's resumes before 9/11 as well.

And this isn't about "American Exceptionalism". China didn't hack Google because they were upset about NSA hacking; they did it because Google had information they wanted, so they took it.

Re:NSA infected 50,000 computer networks with malicious soft... by pvnick on Saturday November 23, 2013 @12:12PM (#6786593)
Then let's stop deluding ourselves and make it clear that the NSA's charter is about promoting what a small number of powerful unelected beaurocrats believe to be American interests, both politically and economically [1], without significant oversight. Then we can have an honest discussion on whether or not that's a good thing.

[1] http://www.theguardian.com/world/2013/sep/09/nsa-spying-braz...

Re:NSA infected 50,000 computer networks with malicious soft... by malandrew on Saturday November 23, 2013 @01:00PM (#6786768)
And while we're at it, let's stop letting them wave the "but the terrorists" flag every time they justify a program for which the goal is a lot more than terrorism (assuming many programs are about terrorism at all. Personally, I suspect most programs have nothing to do with terrorism, but that there is no better way to push through support than to argue "but the terrorists").
Re:NSA infected 50,000 computer networks with malicious soft... by belzeboss on Saturday November 23, 2013 @02:02PM (#6787004)
Many attacks against USA are motivated because of actions like the ones from NSA. Other countries are starting to consider the USA an enemy to be defeated because bulshit likes this is getting shown. If citizens of other countries start to make an outcry their leaders will make retaliations even if just for show.
Re:NSA infected 50,000 computer networks with malicious soft... by tptacek on Saturday November 23, 2013 @12:13PM (#6786597)
Where do I sign your petition? I'm right there with you.
Re:NSA infected 50,000 computer networks with malicious soft... by DanBC on Saturday November 23, 2013 @12:20PM (#6786624)
> The news is the scope of the intrusions (installing malware on 50k computers), and of the motivations for the behavior.

GCHQ have said for at least 15 years that their mission is to monitor all communications, world wide, at frequencies from DC to light. They've said that they provide intelligence for their customers, who are the Ministry of Defence and other parts of government. (MI5, MI6, etc).

> It's about global information dominance.

GCHQ / NSA have never ever said anything different.

> But this is about an executive power grab,

It's a grab that happened a decade or more ago.

Re:NSA infected 50,000 computer networks with malicious soft... by grey-area on Saturday November 23, 2013 @03:22PM (#6787290)
GCHQ have said for at least 15 years that their mission is to monitor all communications, world wide, at frequencies from DC to light

That's a truly appalling aspiration. If that is indeed their aspiration, which apparently it is (total information awareness, master the internet etc), we'd be safer with them shut down completely. Otherwise as more and more data becomes available online, they'd be in a position of absolute power over the populace (including those who are supposed to control their activities).

That's not keeping us safe, that is endangering the things they purport to defend.

Don't you find this aspiration frightening?

It's a grab that happened a decade or more ago.

Oh, that's ok then. Business as usual. Would you prefer people just didn't bother to discuss this topic, or do you have something to say about where the limits on this behaviour should be?

Re:NSA infected 50,000 computer networks with malicious soft... by DanBC on Saturday November 23, 2013 @04:43PM (#6787569)
> Would you prefer people just didn't bother to discuss this topic,

I would prefer that people stop saying that it's a modern development, or that there was no sign of it until Snowden leaked, or that it's some weird new thing. GCHQ at least has been open about their behaviour for years and years. ECHELON was discussed in EU parliament.

> do you have something to say about where the limits on this behaviour should be?

My view is tricky for me to explain, but I'll try.

1) GCHQ need to be allowed to do stuff. The limits should be clear, and defined by law.

2) GCHQ is a secret organisation, thus their oversight must be by people who keep secrets, but who are accountable to the public. GCHQ oversight failed, hard. I'm not sure what should happen. I hope that, in secret, someone is getting a kicking.

3) I don't care what GCHQ does to people who are not subjects of the UK (or whatever the hell England plus others is called now)

4) For UK subjects I would prefer that GCHQ does not collect meta data. I could be persuaded that they can collect targeted meta data, if they have suitable oversight. EG: They know that Bob is a terrorist-sympathiser. (Beyond just looking at a few YouTube videos - this would be things like sending money, fly-posting, fund raising, associating with other terrorists, etc.) GCHQ would apply for, and get, a warrant, and be allowed to collect meta data for that person. Warrants would require oversight, not just by the courts but by the oversight body.

5) For UK subjects I strongly prefer that GCHQ does not collect content data unless they get a warrant.

6) GCHQ claim to obey the law. I want oversight to be stronger, and I want some of the GCHQ choices to be challenged. I don't want weird interpretations of words to guide their behaviours. (EG: Clinton's "I did not have sexual relations" - well, a blow job is sexual to most people.)

Having said all that, I am a lot less bothered by GCHQ data slurping than I am by other potential privacy invasions.

GCHQ has a many petabyte dump of data but there's no impact on me unless they grep my name. (I'm aware that this is like me saying I'm not so bothered by police stop and search powers; me being white and rarely leaving the house means that I'm never stopped and searched.) Plenty of other organisations have my data, and we have many examples of them breaching confidentiality through corruption, incompetence, maliciousness, and so on. I said a bit more about that in this post. https://news.ycombinator.com/item?id=6767612

Re:NSA infected 50,000 computer networks with malicious soft... by grey-area on Saturday November 23, 2013 @09:29PM (#6788407)
Thanks for commenting. I do think this is a subject worth discussing until it is fixed.

GCHQ has a many petabyte dump of data but there's no impact on me unless they grep my name.

I'd disagree there - if GCHQ is collecting huge dumps of data, it doesn't have to be your data to affect you directly. For example if your MP or prime minister is deposed because of selective leaks of their data, that could easily affect your life in dramatic ways.

Re:NSA infected 50,000 computer networks with malicious soft... by pvnick on Saturday November 23, 2013 @12:54PM (#6786747)
I don't know anything about GCHQ, but I don't want British intelligence to have intimate details about my life stored in some nosql database, and I see it as an offensive maneuver by a foreign government from which my government fails to protect me. See my reply to tptacek's post sibling to yours for a general response to your inquiry.
Re:NSA infected 50,000 computer networks with malicious soft... by tedunangst on Saturday November 23, 2013 @02:13PM (#6787062)
I see it as an offensive maneuver by a foreign government from which my government fails to protect me.

Which is why you should be angry at your government for failing to protect you.

Re:NSA infected 50,000 computer networks with malicious soft... by tptacek on Saturday November 23, 2013 @12:56PM (#6786753)
Well, they do. Just like Russia and China. I agree it's offensive. Now what? Next you'll tell me governments routinely have foreigners killed.
Re:NSA infected 50,000 computer networks with malicious soft... by coldtea on Saturday November 23, 2013 @01:51PM (#6786951)
>Well, they do. Just like Russia and China.

I seriously doubt that. Russia, for example, could not care less about 99.9% of western citizens (whereas for western spying agencies, those are potential dissidents to be kept on check).

And even if they cared, what exactly would they do with that information? It's not like they are particularly powerful, imperialist or try to play global cop (post USSR). It's also not like they arrange puppet politicians and governments in foreign countries, as western powers are known to do.