3 ms·
This was an amusing read. Unsurprisingly, you can learn some basic things about how three letter agencies operate from job postings. There was also an interesti
by knaik94 4y ago
This was an amusing read. Unsurprisingly, you can learn some basic things about how three letter agencies operate from job postings. There was also an interesting issue that happened in 2013, a WaPo article listed some names of various programs and people subsequently were able to find additional names of programs by searching Linkedin profiles [1]. The NSA has a Github full of open-sourced tools, besides Ghrida [2]. And the NSA also has a youtube channel [3]. I came across a short 15 minute film about a cyber training exercise the NSA held in 2018. Seemed like a more involved CTF event, with a bring your own device policy, with most people running windows and using a VM when necessary and some people using linux, at least one person using Ubuntu.
It's funny that the response to a FOIA sounds so general and opaque that it makes the existence of these topics feel like matters of national security. Maybe asking about about this advisory [4] could help hit Ubuntu. Searching the National Cryptologic Museum for IBM related things could help hit some ancient DOS.
1. https://www.techdirt.com/2013/06/18/discovering-names-secret-nsa-surveillance-programs-via-linkedin/ https://www.techdirt.com/2013/06/18/discovering-names-secret...
2. https://github.com/NationalSecurityAgency https://github.com/NationalSecurityAgency
3. https://www.youtube.com/watch?v=KQcAx00RzXQ https://www.youtube.com/watch?v=KQcAx00RzXQ
4. https://www.fbi.gov/news/press-releases/press-releases/nsa-and-fbi-expose-russian-previously-undisclosed-malware-drovorub-in-cybersecurity-advisory https://www.fbi.gov/news/press-releases/press-releases/nsa-a...
5. https://nsa.sfo2.digitaloceanspaces.com/comp3321.pdf https://nsa.sfo2.digitaloceanspaces.com/comp3321.pdf