6 ms·
FOIA the PRISM tech stack
- 8ig8 13y agoI'm not sure what this is all about, but even though it is _my_ government, I feel like submitting this form would add me to some monitoring list.
- ianstormtaylor 13y agoSo, sadly true. I was sending a friend an email today about this entire thing and for the first time ever I questioned whether my email would be eavesdropped on by my own government. It was a horrible feeling.
- 8ig8 13y agoExactly. This loss of trust and credibility is a big deal. Once it's lost, I'm not sure what the government does to get it back.
- IThoughtYouGNU 13y agoI think they have to get replaced to get that credibility back.
- deleted 13y ago[deleted]
- sitkack 13y agoThey don't need credibility, the chilling effects of knowing you are being watched are enough. You prevented yourself from actualizing your thought crime.
- natrius 13y agoDon't worry about it. Everyone's on the monitoring list.
- sitkack 13y agoThe nice thing about exposing what was already "known" is now so many people are talking about it openly. It is hard for the wolves to attack so many moving targets. What we need is for hundreds to file very narrowly focused FOIA requests that do not probe too deeply. They need to be fulfillable.
- merinid 13y agoGood chances they are using http://en.wikipedia.org/wiki/Apache_Accumulo http://en.wikipedia.org/wiki/Apache_Accumulo
- JoachimSchipper 13y agoDo you have any specific reason to believe that?
- adkatrit 13y agoWhy would they have a form to ask for records on yourself when they don't publish which records they have. This is like a game of Go Fish but with personal data.
- merinid 13y agoOoooh - http://www.pdl.cmu.edu/SDI/2013/slides/big_graph_nsa_rd_2013_56002v1.pdf http://www.pdl.cmu.edu/SDI/2013/slides/big_graph_nsa_rd_2013...
- angersock 13y agoNice find. This paper seems to suggest that a possible counter attack is to create bogus edges and adjacencies--thus fucking with the utility of a (sparse) adjacency matrix or attempts at having useful window sizes for BFS or the like. I suspect, though, that any sort of attempt at that would somehow be thwarted and just cause more pain on the attempting party.
- timClicks 13y agoI find this especially interesting coupled with Cray's YarcData graph analytics hardware called Urika, which has 512 terabytes in memory. http://www.yarcdata.com/Products/ http://www.yarcdata.com/Products/
- deleted 13y ago[deleted]
- DigitalSea 13y agoNice try, NSA. You're not getting any more of my information.
- cboppert 13y agoHmm, also this says if you would like personal information to file a PA act, which would you actually file? Either way. Ridiculous. More than a little bit scary.
- downandout 13y agoUnfortunately, despite the disturbing fact that we are reading about PRISM (disturbing both that it exists and that our government can't keep highly sensitive secrets), it is classified Top Secret until September 1, 2036. I could be wrong but I believe that FOIA requests regarding it will fail until then.
- dlitz 13y ago> disturbing both that it exists and that our government can't keep highly sensitive secrets Why could it be disturbing that a government's officials can't keep secrets about cases where they abuse their power or act against the public interest? Isn't that how democratic institutions are supposed to be designed?
- downandout 13y agoIt's disturbing because if things as sensitive as this are leaking, it means other things will leak that could cost lives.
- dlitz 13y agoYou're assuming that all sensitive information has the same probability of leaking. Anecdotally, that's not really true. Most of these systems depend on honest citizens to keep the information secret, and honest citizens are more likely to leak "secret" evidence of abuse than information that will cost innocent people their lives.
- sitkack 13y agoOr it was leaked on purpose to let everyone know that they should, "shut the fuck up." Or be watched?
- monkmartinez 13y agohttp://www.youtube.com/watch?v=TuET0kpHoyM http://www.youtube.com/watch?v=TuET0kpHoyM
- deleted 13y ago[deleted]
- Sami_Lehtinen 13y agoNo SSL/TLS, great job. Well, I assume AES crypto wouldn't bother them anyway. ;) Because it wouldn't be smart to make standard crypto which would blind them.
- damianball 13y agoIf I remember correctly, Verisign has indicated they would be willing to create a trusted root level certificate for the government to spoof the ssl of any domain... so I don't know if SSL is enough, unless you only allow CAs you've created or you trust.
- JoachimSchipper 13y agoFor all you PGP fanatics, consider (from http://33bits.org/2011/03/09/link-prediction-by-de-anonymization-how-we-won-the-kaggle-social-network-challenge/ http://33bits.org/2011/03/09/link-prediction-by-de-anonymiza..., a blog which I highly recommend) the sentence "During (...) 2007-2009, Shmatikov and I (...) showed how to take two graphs representing social networks and map the nodes to each other based on the graph structure alone—no usernames, no nothing." Tinfoil won't save you this time.
- csears 13y agoI just submitted the form and got the following error. Might be time to upgrade that ColdFusion formmail script, guys. http://www.nsa.gov/applications/forms/foiaemail.cfm http://www.nsa.gov/applications/forms/foiaemail.cfm Internal Server Error - Read The server encountered an internal error or misconfiguration and was unable to complete your request. Reference #3.a447da3f.1370606557.3a7abfb
- csears 13y agoAlso, they appear to be redirecting all HTTPS requests to HTTP. Try it: https://www.nsa.gov/public_info/foia/submit_foia_request/foia_request_form.shtml https://www.nsa.gov/public_info/foia/submit_foia_request/foi... Configuration mistake or force of habit?