6 ms·
NSA classifies Linux Journal readers as extremists
- esbonsa 12y agosince their goal doesn't appear to be to stop "terrorists", is their goal to stop unwanted politicians?
- mariusz79 12y agoI guess the first issue of LJ I have on the bookshelf just doubled in value..
- userbinator 12y ago"the agency is targeting anyone who is interested in online privacy" - not so surprising, is it. I wonder what other similar criteria there are for being considered an "extremist"? No Facebook or other social networking accounts? Uses Linux? Makes certain types of comments online that support privacy (like this one)? ... It's really unsettling. On the other hand, now that this is out, I think the NSA will suddenly have a ton more "extremists" to look at.
- Zigurd 12y ago> NSA will suddenly have a ton more "extremists" to look at. Let's say that in NSA's dictionary, extremist means "Anyone with even a small potential to alter the course of society, the economy, or technology." Those people, plus a comfortable margin, might be 5% of the population. The NSA probably has the resources to examine all the electronic communications and do high-quality transcription of verbal communications of that 5%. Even trying to make that targeting more selective would be, in the NSA's worldview "counterproductive."
- moron4hire 12y agoI'm always curious to hear people talk about "alter the course of society" or "change culture" or whatever, what they think that means. What does the NSA think is the "course" of things? Because ultimately, I see it as a tautology: the course is whatever it is, it is whatever the aggregate of its constituents make it. So please, tell us NSA, what prescience do you have to know what it should and shouldn't be?
- userbinator 12y agoTo the NSA, the course of society is what the government wants.
- bostik 12y agoConsider this. NSA are the ones who are providing intelligence reports to the different parts of the government. They very likely employ a number of psychologist and sociologists. (I can not verify this, it's just a morbid hunch.) What is there to prevent them from biasing (or slanting) the intelligence so that they continously keep nudging the perceptions of those reading the reports? The names for this are numerous; thought influence, advertising, even brain washing in extreme cases. Or in other words - for the NSA, the course of society may well be what they can make the government want.
- gaius 12y agoMore likely it means, anyone who isn't an employee of the NSA.
- danielharan 12y agoThey don't need to transcribe. So-called "metadata" is what you'd be analyzing even if you had transcripts.
- Excavator 12y agoSo now they can legally do targeted investigations of even more people, or was that the FBI who needed their victims to fulfil one of a set of specific criteria? (Such as being n social steps from another victim.)
- jl6 12y agoThe NSA's problem is that new threats are a form of innovation, but that it's hard to predict innovation, and harder to target surveillance towards people planning a dangerous activity if nobody has seen that activity before. New ideas are a threat. So perhaps their method is to define Normal, and then monitor everybody Abnormal, on the basis that dangerous innovation is more likely to come from the Abnormal. Enthusiasm for Linux isn't as abnormal as it used to be, but it definitely puts you in the "dangerous 1%".
- throwwit 12y agoYou made sense until the "...definitely puts you in..." part
- frankydp 12y agoI could see a group of analyst deducting that people interested in traffic privacy fall into two groups. Technology intent and nefarious intent. If you were looking for people with nefarious intent, then that would lead you to monitor the tools that those in the nefarious group would use. This article feels very much like link bait for the technology activist. You don't put a DUI checkpoint outside the library you put it outside the pub. My point being that they tasked intelligent people with finding "terrorist" and this search pattern is a natural evolution of that task. Policy aside.
- EthanHeilman 12y agoBut what if they view the technologists as "incidentally" aiding the group with "nefarious intent". Remember a US president in our lifetime said: "Either you are with us, or you are with the terrorists."[1] The treatment of Jacob Appelbaum[2] and David Miranda[3] suggests that members of US/UK Government may believe that if one provides "incidental help" to the current ideological enemies of the US you are a terrorist/extremist or at the very least targetable under terrorism laws (Miranda was detained under schedule 7 of the Terrorism Act). [1]: http://georgewbush-whitehouse.archives.gov/news/releases/2001/09/20010920-8.html http://georgewbush-whitehouse.archives.gov/news/releases/200... [2]: http://en.wikipedia.org/wiki/Jacob_Appelbaum#Detention_and_investigation http://en.wikipedia.org/wiki/Jacob_Appelbaum#Detention_and_i... [3]: http://en.wikipedia.org/wiki/Glenn_Greenwald#Detention_of_David_Miranda http://en.wikipedia.org/wiki/Glenn_Greenwald#Detention_of_Da...
- noir_lord 12y agoThe depressing part for me is that I've started to consider what I search for on a daily basis and how that might look...essentially they are starting to make me paranoid. Over the last few months I've googled Numerous Weapon Systems (I have a fascination with WW1, WWII and Cold War history - stuff like Black Arrow etc). Insurgencies during the British Empire Electronics (want to get back into and saw a fun project to make on reddit the other day) - http://www.youtube.com/watch?v=movVFYWheGM http://www.youtube.com/watch?v=movVFYWheGM Linux stuff (settings, security, the usual stuff a developer/system administrator would look at). Programming stuff (relating to security, encryption etc) NSA related material (following the story closely). Setting up a VPN (so I can access Netflix US because Netflix UK is basically crap). The US constitution and some case law. NSA Report: "User noir_lord has an interest in privacy, weapons, insurgencies and excellent technical skills, user noir_lord should be monitored" Where in reality I'm a 34 year old web developer from the North of England who enjoys history, techy stuff and playing with my cats.
- pling 12y agoWell you're in the same club as most of us. Reminds me of: http://youtu.be/-PSeAfSKQe4 http://youtu.be/-PSeAfSKQe4
- noir_lord 12y agoThat video is amazing, I've always liked Pink Floyd's "The Wall" so I'm a bit ashamed I've never seen the full video version. The imagery is chill inducingly powerful.
- drdaeman 12y agoWell, a good side of it - the more false positives they have, the worse for them.
- noir_lord 12y agoIf you assume their goal is to do what they claim it is. If not then false positives are largely irrelevant.
- javert 12y ago> While there is no word about how the source code was obtained, security experts aren't sure whether it was leaked by Snowden. So we don't really know if it's genuine. (Though it doesn't really matter because it's not surprising at all.)
- srean 12y agoWhat I am really keen to know is whether revelations like these have any impact on the "would love to work for the NSA fanboy". Do they continue to be just as keen and rationalize these things away, or does it make them ponder a bit. Things have indeed been getting scarier by the minute. Interest in Linux is not treason, yet, but I cannot/dont rule out that it could be, for some value of 'Linux'. Several trends in political/informatic/economic structures does seem to be headed towards the medieval side.
- Double_Cast 12y agoI briefly met a guy who worked for US intelligence (can't remember specifics). I asked him about the NSA. First, he told me he couldn't say much. Then he said "Well I don't wanna brag, but the NSA really has caught a lot of terrorists, and is way more competent than the media makes them out to be." This leads me to believe that either: all these press articles paint a distorted picture; or the level of rationalization is pretty high.
- ollysb 12y agoIt also makes you wonder what those "terrorists" had actually done to warrant being captured.
- srean 12y agoBeing stupid suckers for set up set pieces, or searching for pressure cooker based recipes for quinoa (not enough to be arrested, sorry, gitmo'ized, but enough to be questioned)[0]. [0] HN comments on "Pressure cookers, backpacks, and quinoa, oh my" https://news.ycombinator.com/item?id=6140545 https://news.ycombinator.com/item?id=6140545 EDIT: @csandreasen I did not mean to imply that the quinoa incident was NSA related, but to give an example of what could happen as we veer deeper and deeper into a culture of surveillance and assumption of bad faith. Criminalization of sarcasm is another thing that will happen / has happened.
- csandreasen 12y ago
- IgorPartola 12y agoOh shit. I had two articles published in it last year. What does that make me?! On a LUG mailing list I belong to we started using the term "command line extremist". I rather like it.
- ossreality 12y agoCan we go back to exactly 365 days ago? I feel like this is just when this shit was heating up. I want to go back and read all the people on the Top 100 list who were bending over backward to defend the government and tech companies. Actually, the engineer from Google, I'd love to see him. He stuck his neck out so far, so funny.
- esbonsa 12y agoif I was the NSA I probably would target my own employees first as they have the most power to take me down
- contingencies 12y agoYour employees have probably already been screened as risk averse nerds without a social life outside of the near area. Sure, you'd monitor their movements and those of their family members, but statistically it'd be unlikely they'd move too far from a pretty boring norm. After all, they're prohibited from visiting interesting countries and are probably watched or flagged if they visit even other US states. Is it unlikely that their movements are not routinely monitored by cellular site presence and/or numberplate recognition? I think you would target high ranking politicians... because the option to blackmail them ensures you an uninterrupted and growing black budget. You would target communications businesses... because compromising a properly placed employee grants you access to the sum total of customer and peer communications through their networks. You would target media... because a jump on a popular change in public sentiment is very actionable intelligence, both to multiply funding (through investments prior to predictable market response), and to further control politics. You would target diplomats... both for tradition's sake, and because borders are the most easily grasped us-and-them (divisive) tool in the post 20th century semantic playground, giving you options for powerful public sentiment manipulation through selective media generation. However, realistically for most embassies worth their salt you'd know these groups are largely not going to do anything remotely surprising that you can pin to them through pervasive communications intelligence gathering. Probably also, you would target multinationals, because almost all of them are doing something dodgy, somewhere, and that gives you tremendous leeway for behavioral modification. But in reality, the majority of these can be monitored very effectively on an automated basis with near zero effort once you have full visibility of various domestic financial networks, the SWIFT international financial network, credit and debit card networks, electronic information on intended travel (passenger name records) and border crossing (whoops! I-lost-my ... new passport number, anyone?), and the public switched telephone network. Email, social network and general web use are cute extras, and probably greatly useful just for delving in to people's character and actions, communicative profiling (grammar, typing style, languages known), interest profiling, waking hour and social network profiling (beyond just phones), etc. But I don't think it's necessary to go to that point most of the time ... the broad metrics are already available and probably extremely reliable unless people are making a concerted effort to bypass dragnet surveillance activity. (eg. By avoiding all of the above networks... damn hard these days, it would seem, for any length of time)
- GHFigs 12y agoNowhere in the evidence is there any indication that the NSA classifies Linux Journal as an extremist forum, or that it considers the readers extremists.
- mhurron 12y agoYou're right, they just monitor and log everything and everyone on Linux Journals forums. We really should stop saying the NSA's targets are considered extremists. They watch everyone.
- GHFigs 12y agoYou're right, they just monitor and log everything and everyone on Linux Journals forums. That's a contradiction. If you believe the latter, you don't think I'm right.
- kps 12y agoAnother repeat of https://news.ycombinator.com/item?id=7983124 https://news.ycombinator.com/item?id=7983124 And to repeat: the config file available from http://daserste.ndr.de/panorama/xkeyscorerules100.txt http://daserste.ndr.de/panorama/xkeyscorerules100.txt says: /* These variables define terms and websites relating to the TAILs (The Amnesic Incognito Live System) software program, a comsec mechanism advocated by extremists on extremist forums. */ Linux Journal is listed there, as a ‘website relating to TAILS’, not as an ‘extremist forum’.
- krapp 12y agospecifically: // START_DEFINITION /* These variables define terms and websites relating to the TAILs (The Amnesic Incognito Live System) software program, a comsec mechanism advocated by extremists on extremist forums. */ $TAILS_terms=word('tails' or 'Amnesiac Incognito Live System') and word('linux' or ' USB ' or ' CD ' or 'secure desktop' or ' IRC ' or 'truecrypt' or ' tor '); $TAILS_websites=('tails.boum.org/') or ('linuxjournal.com/content/linux*'); // END_DEFINITION ... assuming this file is even what it purports to be. I understand Hacker News users aren't likely to think critically when it comes to stories about the NSA but you would expect more of them could actually read code.
- kps 12y agoReally that should be TAILS_terms=(word('tails') and word('linux' or ' USB ' or ' CD' or 'secure desktop' or ' IRC ' or 'truecrypt' or ' tor ')) or word('Amnesiac Incognito Live System'); because (1) you need to disambiguate the common word 'tails' but surely not the specific name 'Amnesiac Incognito Live System', and (2) you don't want to miss [tails CDROM]. See how important code review is?
- deleted 12y ago[deleted]
- dm2 12y agoI didn't realize that he had actually leaked any code: http://daserste.ndr.de/panorama/xkeyscorerules100.txt http://daserste.ndr.de/panorama/xkeyscorerules100.txt Is there a list of other code or rules files that were released? Is this information legal to search for, store, or link to since it's now public?
- wyck 12y agoWhat about SELinux http://en.wikipedia.org/wiki/Security-Enhanced_Linux http://en.wikipedia.org/wiki/Security-Enhanced_Linux "The SELinux project was merged into the Linux Kernel back in 2003" It's still listed on the NSA website in several areas: http://www.nsa.gov/research/_files/selinux/papers/x/x.shtml http://www.nsa.gov/research/_files/selinux/papers/x/x.shtml To be honest though, if someone was downloading tails from region of know terrorist activity and such systems are actively promoted amongst terrorist sites then it obviously makes for a good target. But the Linux Journal ..comon.