Hacker News Reader

Comment by j-wags | Hacker News Reader

It's interesting to see how quickly the norms around cybersecurity changed. In 1999 the NSA was worried about avoiding ridicule for banning simple electronics in secure areas. In 2010 Stuxnet was introduced via simple electronics into a secure area and set back the Iranian nuclear program by several years.

Some of the people receiving these furby emails were probably already conceiving of (or actively working on) Stuxnet-like capabilities. Maybe a future FOIA request will reveal several teams quietly emailing up the org chart to absolutely not relax the rule for furbies.

View on HN

NSA dealt with cases of espionage via the introduction of simple electronics into secure areas decades before [1] [2], so awareness of the risk was likely widespread.

The issue here seems to have been that in 1999, it was a relative novelty for random consumer devices to have a recording functionality. Hard to imagine now, but there we are.

[1] https://en.wikipedia.org/wiki/The_Thing_(listening_device)

[2] https://www.cryptomuseum.com/covert/bugs/selectric/index.htm

>in 1999, it was a relative novelty for random consumer devices to have a recording functionality. Hard to imagine now, but there we are.

For added context, the plot of the movie Charlie's Angels from the year 2000, was about stopping an evil guy from using some evil software he developed to ... track people using their cellphones. (ㆆ _ ㆆ)

> For added context, the plot of the movie Charlie's Angels from the year 2000, was about stopping an evil guy from using some evil software he developed to ... track people using their cellphones.

This makes me think we should have a big revival for that movie.

On the other hand, essentially the same functionality in a more grandiose presentation was prominently featured in Batman Begins (2005) and the explicit message was "not even Batman should be able to do this".

I believe you’re thinking of the sequel, the dark knight, 2008

You appear to be correct.

Enemy of the State came out in 1998. It was only post Snowden leaks that some of the tin-foil hat conspiracy stuff was confirmed.

Welp I’m still waiting for my 360-degree camera tech…

Just bought a dash cam that does this for my Camaro - works wonders!

That wasn't a 360 camera, that was the computer assuming what the other angles could look like, and you could do that now with ML.

Which is, of course, completely ridiculous for us in the year 2024 where random consumer devices feed every bit of data they can conceive about their surroundings into semi legal data aggregators 24/7

The IR transmit capability of the Furby was a legitimate threat. PalmPilots of the era were permitted inside a SCIF providing they had their IR ports covered by an opaque sticker and weren't a model with a radio.

Wikipedia claims the nsa's active cyber mission (anachronistic terminology ) was up and running from as early as 1997, so there were definitely people having those thoughts and working those capabilities. And we're totally ignoring people like Markus Hess in the 80s. Thank you for taking the time to add perspective to the knee jerk reactions.

NSA is a military agency; their norm has always been to protect US assets and attack others.

The NSA is not a military agency. It is within the dod, it provides combat support. But it is emphatically not a military agency.

Emphatically? The director of the NSA is required to be a four star general and concurrently serves as commander of US Cyber Command. Ostensibly non-military, perhaps.

The director is required to be a commissioned officer (and upon taking the role gets the O-10 grade) because they also head Cyber Command and the CSS (Central Security Service) but they don't really "run" the NSA like you'd expect say the director of the FBI or CIA to. Their role instead is mostly to coordinate the interaction between the NSA, CSS, and CYBERCOM on top of running CYBERCOM itself.

When it comes to actual day to day operations however the deputy director (who is required to be a technically experienced civilian) actually runs things and reports directly to the president. The director isn't actually in the deputy director's chain of command however one of their job roles is to provide advisory support to the director when needed.

The assistant Secretary of Health is also a commissioned 4 star admiral but they have never seen been the inside of a Navy ship. The last one was a pediatrician before joining. There's a lot of symbolic and tradition based commissions like that through the US gov.

Commissioned in the US Public Health Service, not the US Navy. Their ranks are the same as the Navy's, but they have no connection to the Navy.

The NSA literally performs cyber attacks on foreign countries.

You are incorrect. There are two categories of intelligence agencies in the US as a matter of law, with significantly different legal authority and structure.

Intelligence agencies like the CIA, FBI, et al are non-military. NSA is explicitly a military agency and operates under military authority. The easiest way to tell the difference is that the Director of military agencies is always an active military flag officer. It isn't just a superficial distinction, they operate quite differently.

It’s important to remember that “DOD” is a pathetic rebranding attempt of what it was originally founded as and continues to operate as: the Department of War.

How are you defining "military"?

Subscribed.

It is no more a military agency than NASA or the USGS. Having military customers doesn't make an agency or company part of that military.

NSA is in the Department of Defense, commanded by a uniformed officer, employing many (how many?) members of the military.

Reply on news.ycombinator.com