The Emails Snowden Sent to First Introduce His NSA Leaks
wired.com
wired.com
Jesus, one trillion passphrase checks a second.
Well I know what I'm changing this afternoon.
> My personal desire is that you paint the target directly on my back. No one, not even my most trusted confidant, is aware of my intentions and it would not be fair for them to fall under suspicion for my actions.
Snowden has always had my respect but the more I read the more he has my admiration as a person.
I personally don't really care if the NSA gets to look at my private documents, communications and photo's (for example), but if you're privacy-conscious, it's something to keep in mind.
http://www.pgp.net/pgpnet/pgp-faq/pgp-faq-security-questions...
> I personally don't really care if the NSA gets to look at my private documents, communications and photo's (for example), but if you're privacy-conscious, it's something to keep in mind.
Might I recommend reading this:
https://www.techdirt.com/articles/20141006/17572528748/dea-i...
this hypothetical me would probably do a lot more research on you beforhand
This isn't about you. Do you have a preference of living in a society where the people in power have nearly total thought-level-control over the population? Allowing the state into your privacy may not bother you as an individual, that's fine - but you have to understand that your attitude allows them into all of our thoughts and minds, not just yours if you extrapolate this out into the decades you're talking about.
The total surveillance society is much worse when discussed at a real scale, a societal scale. Not caring about your own privacy means you don't care about others, and that's a dangerous line of thinking.
We form our society and laws around privacy - we're creating new standards and new expectations of rules for the next generations, and I'd rather not create rules that set baseline population control as normal.
Thought-control? That's a bit much. Mind-reading might be a better analogy
Facebook is already experienced in controlling the emotions and moods of large populations: http://www.theguardian.com/technology/2014/jun/30/facebook-e...
And that study we know about because they published it. There are many ways for this to happen without us knowing, and clearly the technology and the science is knocking on the door.
The surveillance state, coupled with the Justice Machine (which has no empathy or accountability, it sometimes seems), makes me very fearful to post anything political. We've seen how J. Edgar Hoover persecuted people __because he could__. Imagine if the keepers of secrets were not just patriotic, but actively villainous? There's no way we would know, or be able to hold them accountable for it.
... that we know of. Remember J. Edgar Hoover's FBI? He controlled the most powerful politicians in the country, because he knew intimate details about their lives. And that was based mostly on tapping phones. Who knows what kind of control these government agencies are able to exert on representatives with the surveillance apparatus they command today.
Would you accept this challenge?
http://www.vox.com/xpress/2014/10/13/6963621/edward-snowden-...
"I have nothing to hide" is a perfectly valid and reasonable response to privacy concerns. A lot of people feel that way, because the a lot of people live very boring lives. They legitimately do not believe that they have any secrets that will warrant the attention of the most powerful intelligence apparatus to ever exist. 99% of Americans will never do anything in their lives that holds the attention of any federal agency of any kind. We're all unique, like snowflakes, but very few of us will ever matter at the national level. The numbers just don't work out.
There's very little evidence that the intelligence community has done anything to harm the average citizen with information gained through any kind of surveillance. Some people are going to feel that they have nothing to hide until the government's actions make them feel otherwise. It's a practical and pragmatic point of view for people who aren't interested in the philosophical or the hypothetical.
Commenters who use the phrase aren't saying anything about what level of privacy is right for you, but stating what they feel is right for them. There's nothing wrong or offensive about that, it's a matter of preference not a matter of fact. There are two sides to this issue, and a one sided discussion isn't going to do anyone any good.
No, it really isn't, because we're discussing government policy, something that impacts "we", not "I".
Saying that "you have nothing to hide" is at the very least tremendously selfish, because it carries the implication that policy should be made based on that stance. We're talking about what the NSA is doing to everyone, in contravention of the supreme law of the land. What one person does or does not want is a red herring and not part of the discussion.
Fuck if I know if I committed breaking laws. I don't murder or steal, or any of the common law obvious stuff. But how do I know the age of the girl in that Internet advert that was in a sexual pose: that's a felony under the letter of the law. Or I was given a laptop by a family member. Whoops it was stolen. Misdemeanor.
I'm not a lawyer, and I cannot navigate what is legal or not. And I have to keep track of county, city, state, and federal laws, along with jurisdictional changes ( how dare I go on vacation...).
When something as mundane as breaking a EULA turns into a federal hacking case, you DAMN straight I want my privacy.
http://chronicle.com/article/Why-Privacy-Matters-Even-if/127...
Accepting full-scale information collection on every individual also means accepting that any future use of that information may be used to harm you. Things that you do now may not be illegal, problematic or even embarrassing, but if they become any of that in 10 years' time, you now have to face a cache of (originally benign) evidence that can be retroactively applied against you.
When I hear that sort of argument/opinion, I like to reformulate it as follow:
"I personally don't really care if the NSA gets to look at/record my thoughts"
I have a hard time believing anybody would find this acceptable, and yet this is essentially the same as and a logical consequence of the original statement.
Wanna bet the NSA gets volume discounts from nVidia/AMD?
1 trillion was TWO years ago. Assume they doubled that by now.
To date the development and missions are estimated to be around $1 trillion. You think that is visible to the public anywhere?
(and yes my previous 1 trillion reference was to the calculations, not cost)
It is in the Air Force budget. It may or may not be a line item. If it is, it uses an unclassified code name. The revenue for the contractors works the same way; the exact revenues for the program are hidden in totals.
Seems like they could easily set up investment companies anywhere in the world, trading on all sorts of information and funnel those proceeds back to fund more NSA activities.
There's the classic movie plot of the person who devices a virus to skim fractions of a penny off many transactions, which in aggregate is significant. Now take an organization, whose mandate is to collect as much information as they can, has operated for 60 years, and has had the benefit of being attached to the country with the greatest global and political reach ever seen. The possibility to embed themselves in the economic fabric of every country and market in the world is well in the realm of possible.
It's not like funding humint and sigint activities from capitalistic activities is without precedent. Air America was one example [0]. That one mechanism only blew up and became know because it was beyond egregious. Too many average people had knowledge to keep such activities a secret.
Now imagine you have the largest surveillance apparatus in the World and it's the late 1980s. Do you not think that the NSA and CIA took some notice of the incredible amount of money that could be made on money in those days. Pretty much all the activities we have learned the NSA and CIA have been involved with are harder to justify (surveillance, torture, propping up bad governments, etc.) from the perspective of American ideology than making money from capitalistic activities based on information asymmetries.
These are the types of activities that we will only see a whistleblower for if they are finance focused (accountant/auditor/investor) and have broad access to information. Unfortunately, people with intimate awareness of the financial operations of the NSA are far more rare than a security and surveillance analyst like Edward Snowden (since that is the core business of the NSA)
At Enron, a massive multinational organization, the number of people who were truly aware of the shenanigans going only were a tiny fraction of a fraction of the employees. It's safe to assume that when ever any organization gets large enough they invest in financial professionals of great capacity and task them with being creative. Why would would we expect any different from the NSA or CIA?
It would be especially interesting if Laura Poitras and Glenn Greenwald were to connect with and involve freedom-loving financial forensic professionals who have the skills to comb through their trove and uncover questionable financial operations practices (assuming the archives that Snowden had access to were broad enough to include financial details, especially those that concern revenue and not just expenditures.
So you think they're actually using off-the-shelf GPUs for their password breaking? I would assume any operation with a budget like theirs would create their own ASIC chips specifically targeting the algorithms they need to run. We've seen this happen for Bitcoin hashing, so I'm sure the NSA is way ahead of them.
Rumors:
* Intel prints chips for them.
* Sun Microsystems put special instruction into their CPUs to aid in faster decryption efforts.
If I was designing such a system I'd stick a bunch of GOST, AES, SHA256, Blowfish ... brute forcing cores embedded in a small reconfigurable mesh. It would make a very effective multipurpose brute forcing device.
Antminer S2-b4 can do 2 trillion hashes a second and costs 1200 USD[0]. Imagine you are the NSA with tens of billions of dollars to spend on rigs, access to major fabs and you've been attacking crypto for the last 60 years.
[0]: https://bitmaintech.com/productDetail.htm?pid=00020140926075...
NTLM - 1.2 billion/sec
MD5(Wordpress)- 600 million/sec
bcrypt - 1,000/sec
I've heard rumors of storage technology that can store thousands of petabytes in a home appliance form factor. With that can kind of storage it would make sense to just start making salted rainbow tables. Even without fabled hardware, the Bluffdale NSA facility might have the capacity for it. I haven't even done napkin-based calculations yet to see if this is possible, so if anyone has some idea please speak up :-)
edit: formatting
Now I'm curious of the methods of decrypting data in transit. Does the NSA have the tools to break PKI based encryption at 1 trillion guesses/sec? I have some wild guesses, but if anyone knows I'd love to hear it.
[1]http://lists.gnupg.org/pipermail/gnupg-users/2010-October/03...
How easy do you think it would be to scrape a little cream off the top of the HFT latte when/if you could see everyones source code and/or tap the ingress points on the exchanges?
Even precluding outright "cheats" like above, I can't imagine it'd be hard to beat wall street at it's own games. Prop firms like to buy satellite images of Walmart parking lots and count cars to extrapolate earnings, sounds like a technique the NSA would be in a position to improve upon.
http://www.newsweek.com/most-americans-think-snowden-did-rig...
Pew Research Center & USA Today did a study in January that paints a more nuanced picture: http://www.pewresearch.org/fact-tank/2014/01/22/most-young-a... For example, he's got a lot of support among young people, but a wide majority of Americans believe he should return to the US and face trial.
More than 80% of Americans thought that the invasion of Iraq was the right thing to do, when questioned back in May 2003, and that Saddam had access to WMD. My point is that it doesn't matter what the majority thinks, it matters what's the right thing to do. And speaking about "facing trial" and the US justice system in general, all I can see is that Keith Alexander has not had to answer for his fault of perjury (I've never been to the States, if it matters).
Democracy naturally conflates the two and assumes that what the majority thinks, as expressed through their elected representatives and filtered through some of the Republican checks on raw democratic power, is synonymous with the right thing, or at least the legal thing. It does matter what the majority thinks in the US, because our system is predicated on the belief that majority thought should become law.
Maybe it's worth the risk that the majority will choose something wrong, as long as the majority is allowed to self-govern. After all, it's still government for, by, and of the people if the people codify a law that violates absolute moral expectations, but is widely believed to be the appropriate solution intrinsically.
Well, sustained majority thought over sufficient time.
s/trial/torture
Too late, they already have a guess in place.
For example, luks when creating encrypted partions, checks the cpu in order to stretch the time it takes to decrypt the master key. The faster the CPU, the stronger the key becomes against brute force attacks.
(and of course Manning who will be left to rot for the next 35 years by each president)
Which is why when he refuses to give the name in January after there are no more elections or opinions to matter, he will be put in prison as an example.
After all these years you really think they aren't going to do that to him?
The press will cover it for a week and then something else will come up and he will never be mentioned again.
A group of news agencies should create a scoreboard of unresolved or forgotten stories of great importance. This scoreboard should be mirrored in different places, and have competing scoreboards hosted by different groups, to prevent ninja editing of its contents. The scoreboard history could be tracked and shared in Git with signatures on every change.
This way, even if the front page forgets and the headlines change, there is an ongoing reminder of everything we should still be concerned about.
I think that kinda ignores the fact that the guy in question is star reporter at the NY Times. There are many media big shots who know this guy personally and aren't going to just let it go.
It's both discrediting and insulting to compare the two of them.
The person's gender doesn't matter at all in this case.
It's probably best to avoid this argument altogether by never using first names or pronouns to refer to Pvt. Manning.
I am all for transparent dealings and in principle i agree with both of their actions, but snowden was inarguably more meticulous and conscious of his actions.
In Manning's case those journalists removed the names before publication.
Snowden released a lot of sensitive information to the exact same organisation who decided what to publish. It was essentially just an internal Wiki dump. He didn't personally curate it.
You'll have to cite cases where Manning published the names of people directly which put them at risk. Last I heard everything went through third parties before publication.
Secondly, Manning dumped a lot of info without knowing what he dumped. Snowden knew what was in the docs he leaked, and he made sure to protect human lives.
That's what I've heard, at least. It seems to make sense to me, but I'm open to having my mind changed if you have a different perspective.
The diplomatic embarrassment is what made the news, but whose fault is it that -- and who stands to gain from it? People like a good embarrassing story. And I'm sure governments prefer you think of them as having their diary exposed to the public as opposed to the guys paying thugs to torture people.
[0] http://www.aljazeera.com/programmes/insidestory/2013/08/2013...
Manning specifically released that among other information. It was incredibly important.
This is smart because Snowden can't have access to the archive because it isn't safe for him to have a copy whilst in Russia. It is also smart of Greenwald because the USG are looking for any tiny chink in the armour to be able to descredit Greenwald and by association, Snowden. That's why Greenwald has still only released and estimated 1% of the archive. Each release needs to be analysed, reviewed and judged for release before carefully timing the release for maximum impact. Any damage to the safety of US personel on the ground is going to become a propaganda coup for the USG. Greenwald only has his integrity. Once he loses that it is very hard to get it back, which is why I hope he hasn't made a mistake choosing his FirstLook backers.
There was a reason that Snowden chose Poitras and Greenwald over Assange. Firstly he did his research well. He hoped that these two in particular were noble enough for the task. He knew that both were somewhat ostracised from the US and certainly targets for sigint, and both were living outside the US.
Snowden also let slip his opinion of Assange in the NZ-Dotcom presentation. He said:
"I think its wrong of any politician to
take away the public seat at the table
of government and say you'll simply have
to trust us and you know what, its not
in the public interest to know about
these programmes, unless it threatens my
reputation, in which case I'm going to
throw documents in the air like I'm
Julian Assange. No offence there Julian"
They don't throw documents in the air like Julian Assange (for personal reasons). The documents should transcend personal issues.
What Obama's administration is doing to Risen is horrible, but let's make sure context is clear. Risen is not a good person.
EDIT: I should note there is really no evidence that the improper handling charge was "true." He merely pled guilty to it as part of a plea bargain, probably to appease the prosecutor.
"The Fourth Amendment (Amendment IV) to the United States Constitution is the part of the Bill of Rights that prohibits unreasonable searches and seizures and requires any warrant to be judicially sanctioned and supported by probable cause."
I don't see the connection, though.