News for hackers. Stuff that matters.
Re:Snowden Document Search by bitmapbrother on Friday June 12, 2015 @02:27AM (#9704344)
Some more interesting stuff:

July 31, 2012

Microsoft (MS) began encrypting web-based chat with the introduction of the new outlook.com service. This new Secure Socket Layer (SSL) encryption effectively cut off collection of the new service for FAA 702 and likely 12333 (to some degree) for the Intelligence Community (IC). MS, working with the FBI, developed a surveillance capability to deal with the new SSL. These solutions were successfully tested and went live 12 Dec 2012.

March 7, 2014

PRISM now collects Microsoft Skydrive data as part of PRISM'S standard Stored Communications collection package for a tasked FISA Amendments Act Section 702 (FAA702) selector. This means that analysts will no longer have to make a special request to SSO for this - a process step that many analysts may not have known about. This new capability will result in a much more complete and timely collection response from SSO for our Enterprise customers. This success is the result of the FBI working for many months with Microsoft to get this tasking and collection solution established. "SkyDrive is a cloud service that allows users to store and access their files on a variety of devices.

March 15, 2013

SSO's PRISM program began tasking all Microsoft PRISM selectors to Skype because Skype allows users to log in using account identifiers in addition to Skype usernames. Until now, PRISM would not collect any Skype data when a user logged in using anything other than the Skype username which resulted in missing collection; this action will mitigate that. In fact, a user can create a Skype account using any e-mail address with any domain in the world. UTT does not currently allow analysts to task these non-Microsoft e-mail addresses to PRISM, however,

Re:Snowden Document Search by ionised on Friday June 12, 2015 @04:50AM (#9704703)
> MS, working with the FBI, developed a surveillance capability to deal with the new SSL. These solutions were successfully tested and went live 12 Dec 2012.

And there it is. They claim ignorance to NSA data tapping of their servers but are in fact entirely complicit as we suspected.

Re:Snowden Document Search by mcintyre1994 on Friday June 12, 2015 @07:11AM (#9705127)
> This success is the result of the FBI working for many months with Microsoft to get this tasking and collection solution established.

And there's the direct link to complicity in PRISM - is that new?

Re:Snowden Document Search by Nadya on Friday June 12, 2015 @12:53PM (#9707072)
They worked with the FBI not the NSA. Plausible denial and all that.

They can help implement PRISM for the government without being told what PRISM is. When asked if they are participating in PRISM, they can deny knowledge of it existing. Because it's technically true.

Re:Snowden Document Search by josefresco on Friday June 12, 2015 @07:48AM (#9705275)
"They claim ignorance to NSA data tapping"

They did? Interested in the link/reference if you have it.

Re:Snowden Document Search by mcintyre1994 on Friday June 12, 2015 @08:35AM (#9705434)
http://news.microsoft.com/2013/07/11/statement-from-microsof...

>our compliance team examines all demands very closely

> To be clear, Microsoft does not provide any government with blanket or direct access to SkyDrive, Outlook.com, Skype or any Microsoft product.

Not hugely direct but seems to be contradicted by the document.

Re:Snowden Document Search by rayiner on Friday June 12, 2015 @10:46AM (#9706191)
It's not at all contradicted by the document. The document references Section 702 of the FISA Amendment Act, and the Stored Communications Act. Section 702 allows targeted access to non-U.S. persons and Section 2703 of the Stored Communications Act allows the government to compel disclosure of stored communications with a warrant, or notice to the customer plus a subpoena or court order. 18 U.S.C. 2703(b)(1).

Nothing about the document suggests blanket or direct access.

Re:Snowden Document Search by josefresco on Friday June 12, 2015 @08:43AM (#9705467)
Wording is probably important: "blanket or direct access" Seems it would lack foresight if MS denied something that they new would be uncovered in the leaked documents.
Re:Snowden Document Search by junto on Friday June 12, 2015 @03:31AM (#9704492)
Woah. Can anyone shed anybkight on this extract?

  This new capability will result in a much more complete and
  timely collection response from SSO for our Enterprise 
  customers.
Who are the NSA's "enterprise customers". Is this corporate espionage?
Re:Snowden Document Search by XorNot on Friday June 12, 2015 @04:00AM (#9704568)
No. Companies use the term "customer" for internal requests a lot. "Enterprise" would probably be large divisions within the NSA - i.e. groups working Middle Eastern intelligence, for example.
Re:Snowden Document Search by jacquesm on Friday June 12, 2015 @04:30AM (#9704658)
I don't think you can say that with 100% certainty. There is some smoke - but so far no fire - that NSA collected data ended up with corporations.

https://www.google.com/search?q=NSA+industrial+espionage

Re:Snowden Document Search by necrodawg on Friday June 12, 2015 @03:36AM (#9704507)
What do you think the whole point of all of this is?
Re:Snowden Document Search by errtnsd on Friday June 12, 2015 @02:39AM (#9704372)
Effectively what they are doing is just making me want to buy/use US software less and less.

How long until Windows OS is going to be monitored?

Re:Snowden Document Search by themeekforgotpw on Friday June 12, 2015 @02:45AM (#9704385)
Windows now broadcasts and collects information about what you type in when you search for programs (in charm/modern shell).

That doesn't mean it goes 'upstream'. But it is startling how far we've come. I remember the days when nobody trusted the internet - not even with their credit card.

Now its hard to trust your Operating System to run a program.

Re:Snowden Document Search by madez on Friday June 12, 2015 @03:45AM (#9704536)

    Now its hard to trust your Operating System to run a program.
If you use Windows, yes. I live in a Microsoft-free household, using floss systems makes your life in some ways easier.
Re:Snowden Document Search by Cakez0r on Friday June 12, 2015 @04:58AM (#9704729)
TS//SI//REL) Currently CASTLECRASHER is the only production quality Windows execution technique that Payload Persistence techniques have. Another mechanism to execute DNT payloads is needed. Most pre-boot Persistence techniques only have the ability to influence an OS through modifications to the target file system. Work needs to be done to investigate other ways to get execution inside of Windows
Re:Snowden Document Search by ionised on Friday June 12, 2015 @04:54AM (#9704717)
I run Windows solely for playing games. If I could run games without issue on Linux I would drop Windows in a heartbeat.

That said, I do use Debian or Slackware on other machines and my laptop.

Re:Snowden Document Search by madez on Friday June 12, 2015 @04:57AM (#9704722)
I'm gaming on Debian, and it's working quite well, and I'm even using the radeonsi drivers.
Re:Snowden Document Search by ionised on Friday June 12, 2015 @09:16AM (#9705630)
There are so many games in my Steam library that don't work on Linux at all though.

I could use Wine I suppose but it's not ideal.

Re:Snowden Document Search by jhallenworld on Friday June 12, 2015 @08:04AM (#9705324)
Well there is Zeitgeist in Ubuntu..
Re:Snowden Document Search by linkregister on Friday June 12, 2015 @12:36PM (#9706963)
> March 7, 2014

What was the name of this doc? There is some date incongruity here, unless Ed got his old job back.

Re:Snowden Document Search by rqebmm on Friday June 12, 2015 @03:12PM (#9707946)
There's evidence[0] of other, possibly currently active, whistleblowers leaking documents from inside NSA. This database includes those leaked documents as well, as it mentions XKEYSCORE, which Snowden has said he did not leak.

[0]https://www.schneier.com/blog/archives/2014/08/the_us_intell...

Re:Snowden Document Search by Pent on Friday June 12, 2015 @03:04PM (#9707911)
He had access to the NSA servers even after he fled using credentials from other employees. Sorry I can't find a citation but I read about it about 6 months after the initial leak.