Hacker News Reader

HNHacker News

Top New Best Ask Show Jobs

Comment by cm3 | Hacker News Reader

Full thread

cm3·

Wait, the GCHQ has a GitHub profile where they share a Graph Database engine. Interesting.

View on HN

"Gaffer's Accumulo Store is optimised for: Ingesting large amounts of data efficiently."

For some reason that made me feel slightly nervous.

Well it's not a secret anymore why GCHQ/NSA need large graph databases.

When was it?

http://accumulo.apache.org/

https://nifi.apache.org/

I mean when was it a secret that and why GCHQ needed large graph databases?

It's kinda obvious.

Think it was announced a few months ago - https://news.ycombinator.com/item?id=10732609

NSA has a linux distro https://en.wikipedia.org/wiki/Security-Enhanced_Linux

Qubes is exponetially superior to this distro. Open that PDF in a disposable Fedora sandbox, and physically disable the network plz

Because sandbox escapes aren't a thing GCHQ would have any knowledge of yeah?

yes qubes is

SELinux is not a distro. It's an Linux Security Module (Mandatory Access Control thing) that comes with the upstream kernel that sysadmins need to STOP TURNING OFF: http://stopdisablingselinux.com

There are alternatives though. SELinux was designed for big machines with multiple physical users. You can use it with pretty much any scenario (and Android uses it for sandboxing apps), but AppArmor is much easier for common personal desktops and web servers.

On FreeBSD and Darwin, the similar thing is TrustedBSD: http://www.trustedbsd.org/mac.html

The sad thing is that they seem to be developing Gaffer on Windows. At least most files in the repo have the +x bit set...

Reply on news.ycombinator.com