2 ms·

It might be worth linking this document from the Snowden leaks: https://christopher-parsons.com/wp-content/uploads/2023/01/nsa-network-shaping-101.pdf https://c

It might be worth linking this document from the Snowden leaks: https://christopher-parsons.com/wp-content/uploads/2023/01/nsa-network-shaping-101.pdf https://christopher-parsons.com/wp-content/uploads/2023/01/n... "NSA Network Shaping 101". Big descriptions of ASINs, and layer 3 shaping. Written in 2007.

23434dsf 9mo ago
[flagged]
- embedding-shape 9mo ago
  But what alternatives do we have? Coming across communities where there are people who seemingly at least think a bit is hard to come by, and certainly there doesn't seem to be any non-US resource/community that offers this today.
  - tazjin 9mo ago
    You mean there doesn't seem to be any English non-US resource.
    - lukan 9mo ago
      There is a non english international technical community debating interesting things in a non flame war style? In what language do they communicate? Esperanto? (I suppose some want french to be lingua franca, others spanish, others chinese .. but de facto those ain't international spoken languages, despite having lots of speakers)
    - embedding-shape 9mo ago
      No, I speak three languages fluently, and there is no $LANGUAGE non-US resource/community that has discussions on the same level as HN, particularly then it comes to the width of experience of the users + (sometimes) nuance when the topic is bit divisive.
- deleted 9mo ago
  [deleted]
- immibis 9mo ago
  I'm not sure where the site is hosted but the person who writes the site seems to be Canadian, and if you meant the document, of course the Snowden documents are American documents.
- sophacles 9mo ago
  Then leave instead of posting here.
huflungdung 9mo ago
[dead]
immibis 9mo ago
Funny to see even the NSA makes the mistake of calling a network an ASN (maybe because it's their name backwards), which is like saying I deposited money in my IBAN, or my neighbour lives in the string "123 Main Street", or Hacker News is an interesting DNS name full of great content.
- b00ty4breakfast 9mo ago
  Hi, it's me, The Language Fairy https://en.wikipedia.org/wiki/Metonymy https://en.wikipedia.org/wiki/Metonymy
formerly_proven 9mo ago
I don't see the relation to BGP anomalies, since this "layer 3 shaping" is basically just "if you send traffic to the IP of an AS router, it probably goes over the link of that IP". None of this would help NSA "shape" arbitrary traffic onto links they are able to tap. (I'm really not sure what exactly the point of this is, the slides talk about exfil a lot, it would seem to me like some random device sending traffic to a router is more suspicious, because normal traffic never targets routers, than hitting an actual server somewhere but idk)
- azalemeth 9mo ago
  In en-us education "101" is often used to refer to an introductory course in a particular topic. My inference from the fact that this _educational_ slide is called "101" is that this is a basic example of core knowledge that people in this area of work are expected to have. It therefore stands to reason that there exists a "102" or "103" course that expands upon it, as well as material going far beyond "the syllabus". The NSA and thirteen eyes generally have detailed traffic logging capability at core internet exchanges around the world. It is reasonable to think that a good way of exfiltrating data would be by having something like an ICMP or maybe even TTL based covert channel, such that there is no chance that the sent data is ever received by the recipient. I am just speculating – but that's why I thought this was interesting.

23434dsf 9mo ago

[flagged]

embedding-shape 9mo ago
But what alternatives do we have? Coming across communities where there are people who seemingly at least think a bit is hard to come by, and certainly there doesn't seem to be any non-US resource/community that offers this today.
- tazjin 9mo ago
  You mean there doesn't seem to be any English non-US resource.
  - lukan 9mo ago
    There is a non english international technical community debating interesting things in a non flame war style? In what language do they communicate? Esperanto? (I suppose some want french to be lingua franca, others spanish, others chinese .. but de facto those ain't international spoken languages, despite having lots of speakers)
  - embedding-shape 9mo ago
    No, I speak three languages fluently, and there is no $LANGUAGE non-US resource/community that has discussions on the same level as HN, particularly then it comes to the width of experience of the users + (sometimes) nuance when the topic is bit divisive.
deleted 9mo ago
[deleted]
immibis 9mo ago
I'm not sure where the site is hosted but the person who writes the site seems to be Canadian, and if you meant the document, of course the Snowden documents are American documents.
sophacles 9mo ago
Then leave instead of posting here.

huflungdung 9mo ago

[dead]

immibis 9mo ago

Funny to see even the NSA makes the mistake of calling a network an ASN (maybe because it's their name backwards), which is like saying I deposited money in my IBAN, or my neighbour lives in the string "123 Main Street", or Hacker News is an interesting DNS name full of great content.

b00ty4breakfast 9mo ago
Hi, it's me, The Language Fairy https://en.wikipedia.org/wiki/Metonymy https://en.wikipedia.org/wiki/Metonymy

formerly_proven 9mo ago

I don't see the relation to BGP anomalies, since this "layer 3 shaping" is basically just "if you send traffic to the IP of an AS router, it probably goes over the link of that IP". None of this would help NSA "shape" arbitrary traffic onto links they are able to tap. (I'm really not sure what exactly the point of this is, the slides talk about exfil a lot, it would seem to me like some random device sending traffic to a router is more suspicious, because normal traffic never targets routers, than hitting an actual server somewhere but idk)

azalemeth 9mo ago
In en-us education "101" is often used to refer to an introductory course in a particular topic. My inference from the fact that this _educational_ slide is called "101" is that this is a basic example of core knowledge that people in this area of work are expected to have. It therefore stands to reason that there exists a "102" or "103" course that expands upon it, as well as material going far beyond "the syllabus". The NSA and thirteen eyes generally have detailed traffic logging capability at core internet exchanges around the world. It is reasonable to think that a good way of exfiltrating data would be by having something like an ICMP or maybe even TTL based covert channel, such that there is no chance that the sent data is ever received by the recipient. I am just speculating – but that's why I thought this was interesting.