57
   

WikiLeaks about to hit the fan

 
 
Cycloptichorn
 
  1  
Reply Fri 10 Dec, 2010 05:42 pm
@BillRM,
BillRM wrote:

Quote:
This is still a win-win in the fight against the secrecy state. As you force your opponent to go to ever greater lengths to defend his secrecy, you begin to majorly reduce the effectiveness of their operation - and greatly increase the cost of that operation at the same time. That's hacker 101.


Doing simple things like disabling USB ports and dvd/cd burners have a large overhead?


YES! It is. Because every time that person needs to do something as simple as copy a regular file, or burn a CD, they can't do it. You've just doubled the number of computers they need just to do every-day work; one for 'secret' stuff, and one for, yaknow, the rest of their job.

Besides. As if that would stop me or anyone who has put thought into it for a second Laughing

Quote:
Keeping Monitoring software going to red flag odd behaviors like a clerk accessing and or dumping a few G of secure cables?


YES! Do you think that software writes itself? That it maintains itself? That it doesn't bring back false positives all the time, which must be checked out? That the software can't be subverted by a hacker? C'mon. There is a huge cost associated with this.

Quote:
Encrypting any information that is going to be traveling outside of secure buildings have a large overhead?


Laughing Yes, it does. In terms of time and effort. Do you actually have any experience with any of this?

Quote:
There is something wrong when I have more security on my computers then the government seem to be using.


You don't - but nobody's really trying to get anything off of your box.

Quote:
Good luck in getting information from my computers without my permission by getting pass my encrypted drives or getting malware into my computer pass my sandbox browser and other security programs.


I'm sure that for a typical user, you have good security, so I'm not trying to insult you when I say: a competent hacker wouldn't give two shits about your 'encrypted drives' or your over-the-counter security programs. I can think of more than one way to get around those measures right off the top of my head.

Cycloptichorn
failures art
 
  1  
Reply Fri 10 Dec, 2010 06:17 pm
Cyclo - You're wrong about the costs.

1) Classified systems are "air-gapped." There is no ability to remotely access them.

2) People in these environments already have a computer for one thing and another computer for another thing. Different computers and networks are classified at different levels.

3) Things like USB drives and ROMs are usually already disabled or removed. Very few computers I've seen have them enabled. For that matter, portable media is usually prohibited.

The part of the picture you're missing is that forcing groups away from each other and into seclusion and paranoia has already happened. It didn't bankrupt anything either. In fact, it was a lot easier for the CIA when they didn't have to share anything with the rest of the IC.

You have this backwards.

A
R
T
0 Replies
 
BillRM
 
  1  
Reply Fri 10 Dec, 2010 06:17 pm
@Cycloptichorn,
Quote:
I'm sure that for a typical user, you have good security, so I'm not trying to insult you when I say: a competent hacker wouldn't give two shits about your 'encrypted drives' or your over-the-counter security programs. I can think of more than one way to get around those measures right off the top of my head.


You blowing smoke as my browser sandbox is tight and nothing can get out of it and truecrypt AES can not be broken in the life of the universe.

With security programs that does not allow any program to run unless I had ok it first and every damn time a program is updated or changes in any manner the program will not be allow to run unless I once more ok it.

Oh no auto-run allow with the register key needed change to enforce that correctly and of course layers of protection on top of that.

Oh it you are thinking of doing an evil maid attack on my boot area to get around the first layer of truecrypt good luck as you would need to deal with a hardrive lock beside a bio lock first. That is a good way of dealing with a cold boot attack route also on truecrypt. Layer your defenses at all times my friend.

Oh as far as getting a hardware device in my notebook without my knowing it I know the weight of it to 1/100 of an oz and if I and It get apart for some reason I check that weight.

Hackers go after the people without tight secure and bounce of anyone with tight security.

Note maintaining this level of security is just a hobby for me and if I did have real concerns I would only browser the web with a live Linux DVD with the hard drive lock on and I would never used the hard drive boot loader but boot the truecrypt from a CD also.
spendius
 
  1  
Reply Fri 10 Dec, 2010 06:20 pm
@Setanta,
Quote:
Because there might exist states in which a pernicious devotion to secrecy greater than that of our own nation exists, does not excuse or justify the arrogant and crypto-aristocratic secrecy of this state.


Obviously. But that doesn't mean that the arrogant and crypto-aristocratic secrecy of this state is unjustified either. Setanta lives in an old fashioned hinterland of quasi-intelligence.
0 Replies
 
spendius
 
  1  
Reply Fri 10 Dec, 2010 06:25 pm
@Finn dAbuzz,
Quote:
I don't know that I would call it addiction, but we have reached a point where our reliance on computers is so deep and widespread, that their disappearence over night would result in a global catastrophe.


I would call that a dangerous addiction Finn.

Quote:
The same thing can be said of other technological innovations.

For example:

Automobiles
Mastery of electricity
Pharmacology
Mastery of fire


Which is multiple dangerous addiction. I admit I'm an addict. There are few things worse that an addict in denial.
Cycloptichorn
 
  1  
Reply Fri 10 Dec, 2010 06:27 pm
@BillRM,
Okay, I'm glad you take this stuff seriously.

But ask yourself: how much does it cost, in terms of time and technical expertise, to maintain your box at that level? How much would it cost the US to do this for every terminal with access to this data? Think about that and then think whether or not hackers and leaks like this make the cost of secrecy go WAY up.

Cycloptichorn
BillRM
 
  1  
Reply Fri 10 Dec, 2010 06:43 pm
@Cycloptichorn,
Quote:
But ask yourself: how much does it cost, in terms of time and technical expertise, to maintain your box at that level? How much would it cost the US to do this for every terminal with access to this data? Think about that and then think whether or not hackers and leaks like this make the cost of secrecy go WAY up.


Business less alone the government should maintain at least my level of security on any computer system that come near important data as a matter of course and as a cost of doing business.

The cost to a business to have it customers SS numbers or it trade secrets lost because it had allow an unencrypted laptop out of the building would likely be a few hundred times the cost of maintaining that security.

The cost to the US government in not locking down it computers/networks with those cables on them is already a few millions times the cost of taking a few simple steps to prevent a damn clerk from being able to download that amount of information on a USB stick and just walking out the door with it.

Most home users are not going to be able to maintain a hacker proof box but who care for the most part as the lost will be to that person alone.
0 Replies
 
Ionus
 
  0  
Reply Fri 10 Dec, 2010 07:00 pm
@hingehead,
Quote:
I applaud his commitment
Read psychosis in lieu of commitment.
Quote:
the defensive posture of you, Finn, BillRM, even FA,
perhaps it is an
Quote:
'even the balance' attempt -
or possibly the truth...you are familiar with that word ?
0 Replies
 
Ionus
 
  0  
Reply Fri 10 Dec, 2010 07:03 pm
@JTT,
Quote:
You forgot Ionus, Hinge. But I guess you must have been thinking of people who actually try to make an argument.
I guess you must be thinking of yourself as making an argument. I see it is a relentless mantra chanting. Pass the bong, youve been hogging it.
0 Replies
 
Ionus
 
  0  
Reply Fri 10 Dec, 2010 07:06 pm
@hingehead,
Quote:
Ionus is on my ignore list
Bragging about being a bigot...could someone be more stupid ??

Quote:
he's an arsehole with an overinflated sense of self worth and a loose grip on reality that he resents people shaking further loose.
I read all posts and I have no one on ignore and never will.....unlike you, I dont claim to already have all the answers and are just here to show off....or in your case show on.
0 Replies
 
Ionus
 
  0  
Reply Fri 10 Dec, 2010 07:11 pm
@JTT,
Quote:
You just don't understand propaganda, Art,
From the Master Bitch of propaganda......I bow to your expertise.....
0 Replies
 
Ionus
 
  0  
Reply Fri 10 Dec, 2010 07:13 pm
@JTT,
Quote:
someone who tells the truth
Very Happy FUNNY !!!
0 Replies
 
msolga
 
  1  
Reply Fri 10 Dec, 2010 07:32 pm
@failures art,
Quote:
I'm asking about poor handling because if one completely buys into wikileaks being infallible, then one cannot accept that information could ever be mishandled. I am asking what kinds of things you'd have to see to be convinced of the mishandling of information. Unless you believe there is no way for this information to be mishandled, you do have an answer. I'm asking for your opinion.

Of course Wikileaks is fallible.
Every single organization which supplies information is fallible.
No one here has argued that that Wikileaks is any more perfect in this respect.
What has been said here is that Wikileaks & the newspapers to which were supplied the information made every effort to protect innocent people by removing names & not publishing some of the material.
The Wikileaks we have had access to are only tiny proportion of the material available.
I totally reject your perspective that "unless you believe there is no way for this information to be mishandled, you do have an answer."
Wikileaks supplies the information. It does not proscribe how that information is used or editorialize about the material. That is up to people who receive the information to do for themselves. And what is wrong with that?
The point is, if the there was not so much government secrecy, that would be much less need for the information provided by an organization like Wikileaks.
To say that the possibility of the information being "misused" is to deny the people the right to information that they should have had access to anyway. The real issue is why is there so much secrecy by our governments?

Quote:
Is it okay to have material 30 years later? You're ignoring what I said. I'm saying that real transparency is changing the policies on the proper release of information. Wikileaks: not the problem, not the solution. It's the symptom.

No I'm not ignoring, I'm questioning, Art.
I'm just not clear about what you mean by "real transparency is changing the policies on the proper release of information"
The "proper release" of information is a debatable & subjective notion, anyway. Who decides "properly" what we should & shouldn't know & on what basis?

Quote:
Should states have the ability to speak in secret. Yes. Should they speak more often in the open. Absolutely. I'm fond of public meetings msolga, but too often politics makes for theater and interferes with crafting policy. Certainly, you'd not like to see a televised meeting between your head of State with a foreign official turned into nothing more than a photo-op campaign stop. Sometimes we want the cameras away so people can get to work. We need not subscribe to either extreme. There is area in the middle where a balance of private and public negotiations between states.

".. too often politics makes for theater and interferes with crafting policy."?
What sort of an argument against transparency is this?
Perhaps what you describe as "theatre" could be interpreted as participation, by others with a different view?
"There is area in the middle where a balance of private and public negotiations between states".
What exactly is this "area in the middle" you are advocating?
And who - what body - should be entrusted with deciding how much it is in the public's interest to know & not know?

Quote:
I'm still not sure how you feel the facilities release is in the public's interest. One is a plant that produces most of the world's insulin. That's public on a international level. Would Australia be better off if it publicly announced what foreign sites it found most critical? This information defies the defense of WL simply exposing dirty deeds. They aren't simply interested in devious info. They are interested in any info that has power.

Taking your example of Australia .. I would most certainly welcome more information about what "critical" facilities exist here. The problem in the past is that our government (& the US government) was reluctant to tell us nearly enough .. like about the function of Pine Gap, for example.
Why would it be a "dirty dead" for us to be more fully informed?
From the US information supplied in the Wikileaks we have learned that Australian (precious minerals) mines & pharmaceutical companies are considered to be of critical importance. I doubt there has been any harm caused by us knowing that.
But in any case, do you believe that, as well as Wikleaks, the NYT, the Guardian, De Speigel & the BBC news, should be censured for supplying the information, too? Is it a "dirty deed" for them, too? You don't think that much of this information supplied could already known by "enemies" of the US?

To be continued .. (sorry! Accidental premature post. Wink )

BillW
 
  1  
Reply Fri 10 Dec, 2010 07:44 pm
@msolga,
Quote:
To be continued .. (sorry! Accidental premature post.)


Ouch, hope it didn't hurt to bad Twisted Evil
msolga
 
  1  
Reply Fri 10 Dec, 2010 08:52 pm
@failures art,
... <cont>

Quote:
Think back to before there was a WikiLeaks. If I asked you how to obtain the degree of transparency you desire in our society, are you going to tell me that your answer would have been to wait for a group of hackers to come along and collect sensitive information and then release it as their leader sees fit? I doubt it.

No, of course, not.
I would far have preferred that my government had been far more transparent & honest in the first place.
In other words, act as a government which is far more accountable to the people who elected it. That's how governments are supposed to work in a democracy.
If it had acted in this way then there would be no need for leaks for us to be properly informed. Simple as that.

Quote:
It seems that the stigma grows that all that is secret is shameful, and that's bullshit.

I'd argue that far too much unnecessary secrecy has been the problem.
I have no problem, for example, with sensitive internal security measures to protect the public remaining secret. Why would I?
The "stigma", as you put it, is more that we don't know nearly enough about what our governments are saying & doing.Things that we are entitled to know.
That is why some of the previously secret information is causing those governments such severe embarrassment. In some instances it is now clear that we have been lied to. Governments saying one thing to its citizens, while doing entirely different things. Can you not understand that this might a source of concern, or alarm?

Quote:
... I'm saying that in your lessons-learned great open society, obviously there is no need for any state to ever keep their cables private. So why doesn't some state stand up an be the first to hold up this great torch of the open society and say: "We heard you world! Here's the key to the vault!"

I somehow suspect that the truth is rather that no state will do so. Better to play damage control and suggest that diplomacy is only dirty when the US is involved.

Of course no state will do so. And we will never have access to the whole truth.

The point is, these leaks are about our governments' dealings with the most powerful government in the world today. Which happens to be the US at the moment. In the future, leaks might be about our governments' dealings with China ..

If any of you choose to to see the reactions to the leaks from those of us from other countries as purely "anti-US" then you'd be wrong. Well definitely in my case, anyway. It is not just a convenient opportunity to bash the US. It is about finally finding out about our own have said & done, about (at times) our government's duplicity, about the integrity of our governments & how they have represented our interests with the most powerful & influential government in the world today.

I would argue that our concerns are very valid ones, in the light of what we are learning from official documentation. It shouldn't be all that surprising reactions to the Wikileaks from countries like say, Australia, are often quite different to the reactions from Americans. It's because the issues & concerns are quite different to those raised in the US. What is in the US government's interests, in other words, is not automatically identical to our interests.







msolga
 
  1  
Reply Fri 10 Dec, 2010 08:59 pm
@BillW,
Just a little bit! Wink
0 Replies
 
msolga
 
  1  
Reply Fri 10 Dec, 2010 09:20 pm
@failures art,
Quote:
You post illustrates the public's relationship with the information. Having now the existence of WL, you've come to assume that leaks are the way things could be prevented.


Not at all, Art.
I said (as you quoted)
Quote:
I would have welcomed those leaks, if they had occurred.
They might have made a real difference.


I haven't said that leaks would prevent anything at all.


(I wish you'd read a bit more carefully & stop putting words into my mouth.)
JPB
 
  1  
Reply Fri 10 Dec, 2010 09:46 pm
This is just bizarre...

Quote:
WASHINGTON — In the past few weeks, more than 1,200 internal State Department cables have been made public by WikiLeaks and received worldwide attention, including regular front-page coverage in The New York Times and countless other news organizations, including MSNBC.

But the Obama administration’s attempt to stop people from reading them continues unabated, creating mounting confusion and head-shaking among bewildered federal employees.

In one example, the Department of Homeland Security sent out a strongly worded memo to all employees and contractors telling them that not only may they not “download or attempt to download” any of the classified WikiLeaks memos onto their computers, they also may not “discuss the content” of such “potentially classified” documents “with persons who would not otherwise be authorized access,” according to a copy of a Dec. 3 memo from the department’s Office of Chief Information Officer.

...

“This is driving secrecy policy over a cliff,” said Steven Aftergood, a national security specialist with the Federation of American Scientists and the author of the widely read Secrecy News blog who wrote about the issue on Friday. “It means that government employees are going to be the least informed people on the planet.”

As an example, Aftergood cites an e-mail he got from one DHS employee who had just received the department’s latest missive from Donna Roy, an official in the department’s information office. Strictly read, it appears to suggest that department employees and contractors could be guilty of a security violation if they access WikiLeaks cables from their personal computers, the employee noted.

...

A DHS official, who asked not to be identified by name, acknowledged the department’s memo may have been worded “imprecisely.” The purpose was to prohibit employees from downloading WikiLeaks cables on their government computers, not necessarily their personal computers at home. (A similar memo from the Defense Department’s Threat Reduction Agency banning its employees and contractors from downloading Wiki memos does apply explicitly to “employees’ or contractors’ personally owned computers,” however.)
More
0 Replies
 
Finn dAbuzz
 
  1  
Reply Fri 10 Dec, 2010 10:06 pm
@Setanta,
Setanta wrote:

Finn dAbuzz wrote:
Equally unrealistic is the smug confidence in inevitability of transparency. We are smack dab in the center of the Information Age and still there are numerous states where clouds of secrecy far darker than anything seen in the West prevail.


This an inferential tu quoque fallacy--because someone is worse than a bad man does not excuse or mitigate the badness of that bad man. Because there might exist states in which a pernicious devotion to secrecy greater than that of our own nation exists, does not excuse or justify the arrogant and crypto-aristocratic secrecy of this state.


Of course a bad man is not less so because there are other men who are more so, but that's not been the basis of any of my arguments.

First of all I don't accept that the Western democracies meet the definition of bad in terms of information secrecy, and certainly not to an extent that makes them worthy targets of Truth-Warriors.

As respects the statement of mine that you've quoted, the point is not that Western democracies are excused because of the information policies of police states like China, North Korea, Burma etc, but that the latter are evidence of the impotence of a transparency wave predicted since the advent of the Information Age.

Even if we accept that the Western democracies are bad when it comes to secrecy, their badness doesn't come close to that of the states specified in WikiLeak's original mission statement, and so we can at least say that Assange's aim is off.

Finn dAbuzz
 
  1  
Reply Fri 10 Dec, 2010 10:10 pm
@spendius,
Quote:
I would call that a dangerous addiction Finn.


Then please feel free to do so.

I've tried to figure out why the question of addiction is relevant, but cannot.

Perhaps you will explain it to me.

0 Replies
 
 

Related Topics

 
Copyright © 2024 MadLab, LLC :: Terms of Service :: Privacy Policy :: Page generated in 0.05 seconds on 12/28/2024 at 02:04:02