Want to read Slashdot from your mobile device? Point it at m.slashdot.org and keep reading!

 



Forgot your password?
typodupeerror
×

Submission + - XKEYSCORE: NSA'S Google for the World's Private Communications (firstlook.org)

Advocatus Diaboli writes: "The NSA’s ability to piggyback off of private companies’ tracking of their own users is a vital instrument that allows the agency to trace the data it collects to individual users. It makes no difference if visitors switch to public Wi-Fi networks or connect to VPNs to change their IP addresses: the tracking cookie will follow them around as long as they are using the same web browser and fail to clear their cookies. Apps that run on tablets and smartphones also use analytics services that uniquely track users. Almost every time a user sees an advertisement (in an app or in a web browser), the ad network is tracking users in the same way. A secret GCHQ and CSE program called BADASS, which is similar to XKEYSCORE but with a much narrower scope, mines as much valuable information from leaky smartphone apps as possible, including unique tracking identifiers that app developers use to track their own users."

also

"Other information gained via XKEYSCORE facilitates the remote exploitation of target computers. By extracting browser fingerprint and operating system versions from Internet traffic, the system allows analysts to quickly assess the exploitability of a target. Brossard, the security researcher, said that “NSA has built an impressively complete set of automated hacking tools for their analysts to use.” Given the breadth of information collected by XKEYSCORE, accessing and exploiting a target’s online activity is a matter of a few mouse clicks. Brossard explains: “The amount of work an analyst has to perform to actually break into remote computers over the Internet seems ridiculously reduced — we are talking minutes, if not seconds. Simple. As easy as typing a few words in Google.”

Comment key based auth (Score 1) 23

Why not use key based auth instead of password based?

Probably for the same reasons that crypto email never worked out, but I wish it were an option on things like banking websites.

I'm now using a password manager, so I can use pretty hard passwords without having to try to remember them. But using signed certs would be much much stronger still.

Comment Re:Rule Engine? [Re:Security team] (Score 0) 517

When modern computers are on but idle, they consume a tiny amount of power. Remember the "Energy Star" campaign of the 90s? Yeah, we've had 20 years of advancements in that arena.

We all appreciate your yearning for a dark, cold, miserable life for the rest of us, though. Certainly, tax the fuck out of us some more, God knows we all have plenty of financial cushion for this kind of thing.

Comment Re: Depends (Score -1) 517

Really? Do you actually know Microsoft's track record and what they did? They singlehandedly held back the progress of computers, year after year, with disgusting, unethical tactics. That kind of reputation doesn't wear off easily. Are you one of the pro-MS consultants paid to post on sites like these? If so, good move posting anonymously so it can't be tracked back to you. If not, why are you writing about a mega-billion dollar corporation that can defend itself quite well?

Comment Re:diluting the market (Score 0) 249

The Atari was the best seller of an entire generation of consoles. It was enjoyed by millions and envied by millions more. Where'd you get the idea that people back then thought video games were dumb? This is backwards thinking, isn't it? Applying the standards of today to a time when different standards were in force.

Comment Re:unworkable (Score 1) 163

Can confirm this. I've been with Chinese people who went to have artifacts verified, and they've got the whole mass spectrometer (or whatever it is they use for solids) set up. There are tons of companies involved in verifying pricey things, because Chinese of all people are well aware the market is full of fakes.

Comment I have a quote for this situation (Score 0) 152

"The use of anthropomorphic terminology when dealing with computing systems is a symptom of professional immaturity."
-- Edsger Dijkstra

Who wants to bet the person who posted this has never heard of Dijkstra? He invented the shortest path algorithm, structured programming, and was the first person to label GOTO as harmful. Professionally immature, indeed. I'd go farther and say incompetent.

Comment Re:extremely common fraud protection (Score -1, Troll) 130

Oh, you're the asshole who did that? I love how you totally ignored the fact that you made it not work for the large number of people who use VPNs. Somehow Google can keep a list of VPNs when it comes to spam, but that same list disappears suddenly when it's time to verify EMAIL LOGINS. And to make it all go away, I only have to give my phone number...which I don't care to reveal to Google as they are only going to abuse the information, either today or in the future. I appreciate the link to the support page that apparently only you knew.

I'd like to thank you for all the times I had my account disabled despite repeatedly clicking on "that was me". I'd like to especially endorse the "you will change your password, NOW!" screens that made me repeatedly change passwords, making me forget how to enter my password by memory and leading to that one time at the airport where I couldn't log in for the life of me. But hey, the information was just hanging out there, why not use it? amirite?

I've worked in anti-fraud before and one thing we always had was a "this user is not normal, do not disable the account for strange activity" flag. Too bad this blatantly obvious feature was not included (or publicized).

Comment Re:Liberal Arts - still a skill. (Score 0) 306

Yes, that was once true. 50 years ago, a liberal arts education was just that. Today, no.

Now liberal arts majors graduate knowing only that Plato and Aristotle were not worth listening to because of their skin color. It is a huge disservice not only to the worthless grads but to all of Western culture. I don't see it getting any better anytime soon.

Comment Re:Eating Filters (Score 0) 110

Yeah, weird people eat that shit. There's a reason that you don't find liver and kidney on the menus at major restaurants. Let's completely ignore the fact that eating organ meats like chitterlings is a Southern (and therefore racist) thing. Try this: "Chitterlings must be soaked and rinsed thoroughly in several different cycles of cool water, and repeatedly picked clean by hand, removing extra fat and specks of faecal matter." MMM-mmm! Hungry yet?

Beyond the obvious ugly connotation of peasant food, we won't even go in to oysters or other filter feeders. Yuck...they concentrate heavy metals and other pollutants. Let's just not go there.

Slashdot Top Deals

It is better to live rich than to die rich. -- Samuel Johnson

Working...