omnibus PRISM/NSA/free Edward Snowden/encryption tutorial thread

Message Bookmarked
Bookmark Removed
Not all messages are displayed: show all messages (1979 of them)
one month passes...

so someone explain to me how catastrophic of a disaster this wifi protocol being cracked is

officer sonny bonds, lytton pd (mayor jingleberries), Monday, 16 October 2017 18:01 (six years ago) link

Ehh, patch all your stuff, especially your android phone. Always be patching.

If you have auto updates for Mac or Windows you’re already protected, I believe. Microsoft’s release last Tuesday definitely had the fix.

If you run a big corporate network that allows guest WiFi access you’ll be testing and protecting against this for probably years, though.

Here’s a decent blog on it

http://blog.erratasec.com/2017/10/some-notes-on-krack-attack.html?m=1

El Tomboto, Monday, 16 October 2017 22:36 (six years ago) link

this is a good backgrounder on the institutional missed opportunities that lead to this problem

https://blog.cryptographyengineering.com/2017/10/16/falling-through-the-kracks/

(that whole blog, on the mathsy/theory/CS side of infosec, is all around great btw)

𝔠𝔞𝔢𝔨 (caek), Tuesday, 17 October 2017 02:58 (six years ago) link

two months pass...

Pelosi and Ryan, champions of FISA 702

https://theintercept.com/2018/01/11/nsa-pelosi-democrats-spy-american-section-702/

ice cream social justice (Dr Morbius), Thursday, 11 January 2018 22:33 (six years ago) link

four months pass...

not nsa but surveillance/close enough

https://www.theguardian.com/world/2018/may/14/is-your-boss-secretly-or-not-so-secretly-watching-you

James Bloodworth spent a month working as a “picker” – the person who locates the products ordered – for Amazon in March 2016 for his book Hired: Six Months Undercover in Low-Wage Britain. “We carried this handheld device at all times and it tracks your productivity,” he says. It would direct workers to the items they need to find on the shelves in one of Amazon’s vast warehouses. “Each time you picked up an item, there would be this countdown timer [to get to the next item] which would measure your productivity.” Bloodworth says supervisors would tell people how productive they were being; he was warned he was in the bottom 10%. “You were also sent admonishments through the device saying you need to get your productivity up. You’re constantly tracked and rated. I found you couldn’t keep up with the productivity targets without running – yet you were also told you weren’t allowed to run, and if you did, you’d get a disciplinary. But if you fell behind in productivity, you’d get a disciplinary for that as well.” It didn’t feel, he says, “that you were really treated as a human being”. Workers had to go through airport-style security scanners at the beginning and end of their shifts, or to get to the break areas. He says going to the loo was described as “idle time” and once found a bottle of urine on one of the shelves.

Amazon says its scanning devices “are common across the warehouse and logistics sector as well as in supermarkets, department stores and other businesses, and are designed to assist our people in performing their roles”, while the company “ensures all of its associates have easy access to toilet facilities, which are just a short walk from where they are working”. It adds: “Associates are allowed to use the toilet whenever needed. We do not monitor toilet breaks.”

...

Surveillance can have positive applications. It’s necessary (and legally required) in the financial industry to prevent insider trading. It could be used to prevent harassment and bullying, and to root out bias and discrimination. One interesting study last year monitored emails and productivity, and used sensors to track behaviour and interaction with management, and found that men and women behaved almost identically at work. The findings challenged the belief that the reason women are not promoted to senior levels is that they are less proactive or have fewer interactions with leaders, and simply need to “lean in”.

Still, says, Woodcock, “we need to have a conversation in society about whether work should be somewhere that you’re surveilled”. That need is perhaps most urgent where low-paid, insecure jobs are concerned. “If you work in the gig economy, you have a smartphone,” Woodcock points out, and that smartphone can be used to track you. “I think because many of these workplaces don’t have traditional forms of organisation or trade unions, management are able to introduce these things with relatively little collective resistance.”

The Independent Workers Union of Great Britain is well aware of the issues of monitoring and data collection. James Farrar is the chair of its United Private Hire Drivers branch, and the Uber driver who won a legal battle against the company last year for drivers’ rights. “They do collect an awful lot of information,” he says. “One of the things they will report to you on a daily basis is how good your acceleration and braking has been. You get a rating. The question is: why are they collecting that information?” Uber also monitors “unusual movements” of the phone when someone is driving (implying it knows if someone is using their phone while at the wheel) and, of course, tracks cars and drivers by GPS.

“My concern with it is this information is being fed into a dispatch algorithm,” he says. “We should have access to the data and understand how it’s being used. If some kind of quality score on my driving capability [is put into an algorithm], I may be offered less valuable work, kept away from the most valuable clients – who knows?” It’s not an unreasonable fear – the food delivery company Deliveroo already does something similar, monitoring its riders’ and drivers’ performance, and has started offering “priority access” when booking shifts to those who “provide the most consistent, quality service”. Uber, however, says its monitoring is intended only to deliver “a smoother, safer ride … This data is used to inform drivers of their driving habits and is not used to affect future trip requests.”

Not all surveillance is bad, says Farrar. In some ways, he would like more. He was assaulted by a passenger and is calling for CCTV in all vehicles, partly for the safety of drivers. “There is a role for surveillance technology,” he says. Ironically, when Farrar went for a meeting with Uber to discuss the assault, the company made him turn his phone off to prove he wasn’t recording it.

also lots two people with interesting surnames

bloodworth and woodcock

F# A# (∞), Monday, 14 May 2018 18:09 (five years ago) link

one year passes...

Snowden memoir is out, getting some good reviews

a Mets fan who gave up on everything in the mid '80s (Dr Morbius), Friday, 13 September 2019 18:41 (four years ago) link

The United States today filed a lawsuit against Edward Snowden, a former employee of the Central Intelligence Agency (CIA) and contractor for the National Security Agency (NSA), who published a book entitled Permanent Record in violation of the non-disclosure agreements he signed with both CIA and NSA.

The lawsuit alleges that Snowden published his book without submitting it to the agencies for pre-publication review, in violation of his express obligations under the agreements he signed. Additionally, the lawsuit alleges that Snowden has given public speeches on intelligence-related matters, also in violation of his non-disclosure agreements.

The United States’ lawsuit does not seek to stop or restrict the publication or distribution of Permanent Record. Rather, under well-established Supreme Court precedent, Snepp v. United States, the government seeks to recover all proceeds earned by Snowden because of his failure to submit his publication for pre-publication review in violation of his alleged contractual and fiduciary obligations.

https://www.justice.gov/opa/pr/united-states-files-civil-lawsuit-against-edward-snowden-publishing-book-violation-cia-and

a Mets fan who gave up on everything in the mid '80s (Dr Morbius), Tuesday, 17 September 2019 19:14 (four years ago) link

three weeks pass...

Some of the Federal Bureau of Investigation’s warrantless searches through the National Security Agency’s enormous troves of communications data violated the law and the Constitution, according to secret surveillance court rulings partially declassified on Tuesday.

The bureau’s so-called backdoor searches, long regarded by civil libertarians as a government end-run around warrant requirements, were overly broad, the court found. They appear to have affected what a judge on the court called “a large number of individuals, including U.S. persons.” On one day in December 2017 alone, the court found, the FBI conducted 6,800 queries of the NSA databases using Social Security numbers. The government, in secret, conceded that there were “fundamental misunderstandings” among some FBI personnel over the standards necessary for the searches....

As early as March 2018, the FISA Court identified to the government that the FBI was not sufficiently documenting which of its queries were tied to people inside the United States, despite a statutory obligation to do so. Nor were the searches “reasonably designed” to find evidence of crimes or foreign spying.

https://www.thedailybeast.com/secret-court-fbi-warrantless-searches-were-illegal

a Mets fan who gave up on everything in the mid '80s (Dr Morbius), Thursday, 10 October 2019 17:59 (four years ago) link

I'm shocked! Shocked!

Elvis Telecom, Thursday, 10 October 2019 19:13 (four years ago) link

anyone read his book yet?

(The Other) J.D. (J.D.), Thursday, 10 October 2019 20:14 (four years ago) link

I went control-f'ing for my name to see if I had participated in this thread much. Landed on this post and didn't know what to make of it: omnibus PRISM/NSA/free Edward Snowden/encryption tutorial thread

So I reverse image searched it and here was what Google was able to come up with.

https://i.imgur.com/LWrsVC9.png

Fun indeed, Google.

☮ (peace, man), Friday, 11 October 2019 11:30 (four years ago) link

ten months pass...

President Trump said on Saturday that he would consider pardoning Edward J. Snowden, the former National Security Agency contractor who faced criminal charges after leaking classified documents about vast government surveillance.

“There are many, many people — it seems to be a split decision — many people think that he should be somehow be treated differently and other people think he did very bad things,” Mr. Trump said during a news conference at his golf club in Bedminster, N.J. “I’m going to take a very good look at it.”

https://www.nytimes.com/2020/08/15/us/politics/trump-snowden-esper.html

(The Other) J.D. (J.D.), Monday, 17 August 2020 21:52 (three years ago) link

I. Just. Can’t.

Congratulations GOP. This is who you are now. https://t.co/CAE98A7qjV

— Susan Rice (@AmbassadorRice) August 16, 2020

𝔠𝔞𝔢𝔨 (caek), Monday, 17 August 2020 23:08 (three years ago) link

two months pass...

Who?

all cats are beautiful (silby), Tuesday, 27 October 2020 06:19 (three years ago) link

four months pass...

https://www.vice.com/en/article/y3g8wb/hacker-got-my-texts-16-dollars-sakari-netnumber

It costs around $16 to steal anyone's SMS account, which can then be used to hijack their other accounts.

wasdnuos (abanana), Tuesday, 16 March 2021 02:41 (three years ago) link

one year passes...

In utterly non-shocking news:

Edward Snowden swears allegiance to Russia and receives passport, lawyer says

Edward Snowden, a former National Security Agency contractor who leaked information about U.S. surveillance programs, swore an oath of allegiance to Russia and has collected his Russian passport, his lawyer told state media on Friday.

“Edward received a Russian passport yesterday and took the oath in accordance with the law,” lawyer Anatoly Kucherena said, according to Russia’s Interfax news agency. “He is, of course, happy, thanking the Russian Federation for the fact that he received citizenship,” he continued. “And most importantly, under the Constitution of Russia, he can no longer be extradited to a foreign state.”

Elvis Telecom, Saturday, 3 December 2022 03:30 (one year ago) link


You must be logged in to post. Please either login here, or if you are not registered, you may register here.