4 ms·

National Geospatial Intelligence Agency Open Source Software

89 points by atemerev 8y ago

tectonic 8y ago
Opensphere (https://github.com/ngageoint/opensphere https://github.com/ngageoint/opensphere) looks interesting and uses the Apache License. Anyone used it?
maximente 8y ago
if we assume that committers to these projects are government employees or contractors (possibly with access to juicy systems or info), it'd be interesting to use this commit data as well as a 1 hop followers/following graph of authors to build a dataset that may shed light into communities of gov't contractors that could then be spear phished/targeted in other manners by say other intel agencies. i wonder if this is being done currently.
- atemerev 8y ago
  Contractors are not secret, nor are employees. You can go to LinkedIn and easily look up people who work for NSA, or Booz Allen Hamilton, and learn a great deal of who does what (again, not a secret). Counterintelligence measures are employed elsewhere.
  - maximente 8y ago
    where'd i claim it was secret? part of spear phishing is building up credibility, so it's a value add to have this information in addition to whatever other OSINT is out there. if you're committing in tandem with another user that's a huge opportunity to impersonate and phish, vis-a-vis "your buddy at Lockheed".
    - itronitron 8y ago
      If you are that interested, you should probably just apply for a job there.
- afpx 8y ago
  Or, you could just use LinkedIn
  - geomark 8y ago
    I used to work at an aerospace company that did a lot of spook projects. Many of the company's senior management were on LinkedIn but all they had in their profiles were first name, last initial and title at the company. Didn't seem a very rich source of information. Maybe that was just a company policy thing and not common with other spook contractors?
- kevin_thibedeau 8y ago
  They've already been exposed by the OPM breach.
  - deleted 8y ago
    [deleted]
etmhpe 8y ago
Is this because of the latest JRE podcast?
- atemerev 8y ago
  No, haven't heard of it.
- porpoisely 8y ago
  I just listened to it during lunch and that was my first thought. What are the odds?
- mharsch 8y ago
  https://youtu.be/WNlqsuTJu2Q?t=739 https://youtu.be/WNlqsuTJu2Q?t=739

89 points by atemerev 8y ago

Opensphere (https://github.com/ngageoint/opensphere https://github.com/ngageoint/opensphere) looks interesting and uses the Apache License. Anyone used it?

maximente 8y ago

if we assume that committers to these projects are government employees or contractors (possibly with access to juicy systems or info), it'd be interesting to use this commit data as well as a 1 hop followers/following graph of authors to build a dataset that may shed light into communities of gov't contractors that could then be spear phished/targeted in other manners by say other intel agencies. i wonder if this is being done currently.

atemerev 8y ago
Contractors are not secret, nor are employees. You can go to LinkedIn and easily look up people who work for NSA, or Booz Allen Hamilton, and learn a great deal of who does what (again, not a secret). Counterintelligence measures are employed elsewhere.
- maximente 8y ago
  where'd i claim it was secret? part of spear phishing is building up credibility, so it's a value add to have this information in addition to whatever other OSINT is out there. if you're committing in tandem with another user that's a huge opportunity to impersonate and phish, vis-a-vis "your buddy at Lockheed".
  - itronitron 8y ago
    If you are that interested, you should probably just apply for a job there.
afpx 8y ago
Or, you could just use LinkedIn
- geomark 8y ago
  I used to work at an aerospace company that did a lot of spook projects. Many of the company's senior management were on LinkedIn but all they had in their profiles were first name, last initial and title at the company. Didn't seem a very rich source of information. Maybe that was just a company policy thing and not common with other spook contractors?
kevin_thibedeau 8y ago
They've already been exposed by the OPM breach.
- deleted 8y ago
  [deleted]

etmhpe 8y ago

Is this because of the latest JRE podcast?

atemerev 8y ago
No, haven't heard of it.
porpoisely 8y ago
I just listened to it during lunch and that was my first thought. What are the odds?
mharsch 8y ago
https://youtu.be/WNlqsuTJu2Q?t=739 https://youtu.be/WNlqsuTJu2Q?t=739