4 ms·

1. You have a lot more confidence in our government's ability to accurately compile lists than I do, particularly in light of the failures of the no-fly list:

by jnbiche 13y ago

1. You have a lot more confidence in our government's ability to accurately compile lists than I do, particularly in light of the failures of the no-fly list: https://en.wikipedia.org/wiki/No_Fly_List#False_positives https://en.wikipedia.org/wiki/No_Fly_List#False_positives 2. Based on commentary from native Persian speakers on this thread, it would appear that no one is claiming that the drone was remotely piloted by Iranians into US Airspace, but rather the one that was shot down in Iran several months ago (confirmed by the US Government) had these photos on it. 3. See above, there are at least 2 Persian speakers on this thread. HN is a LOT more diverse than you realize. https://en.wikipedia.org/wiki/Iran–U.S._RQ-170_incident‎ https://en.wikipedia.org/wiki/Iran–U.S._RQ-170_incident‎

s_q_b 13y ago
"2. Based on commentary from native Persian speakers on this thread, it would appear that no one is claiming that the drone was remotely piloted by Iranians into US Airspace, but rather the one that was shot down in Iran several months ago (confirmed by the US Government) had these photos on it." If this is true it means the Iranians compromised the encryption on the UAV's drive, which would be seriously not good.
- javert 13y ago
  The Iranians outsmarting NSA encryption? Not likely. Possible in theory and a huge deal, but not likely. If they decrpyted something from a military aircraft, it's much more likely that shoddy engineering work was done on that aspect of said aircraft because it was decided that security wasn't a top concern. (And, indeed, having pictures of JFK _isn't_ a big deal.)
  - s_q_b 13y ago
    Totally possible the imaging equipment retains data in an insecure fashion. However, milspec != NSA, and its highly likely the Russians would help the Iranians in such an endeavor in exchange for intelligence sharing.
    - javert 13y ago
      > milspec != NSA What exactly is "milspec"? I was under the impression that military security standards in the US _are_ produced by the NSA. > highly likely the Russians would help the Iranians in such an endeavor in exchange for intelligence sharing. I must be missing something... yes, but what do Russians have to do with it? I thought this was a US drone captured by Iranians. Genuine question here.
      - s_q_b 13y ago
        MIL-SPEC means encryption built to military specifications. It includes, but does not equate to, NSA Suite B cryptography. As you can imagine, using crypto designed by a paranoid spook agency would not be appropriate for all military applications, for example a near-real-time flight application. As a result, there are a variety of encryption standards used by the military, some of which would be approved by the NSA, others which wouldn't. It's a good question about the Russians. The ties between Russia and Iran are much tighter than most in the US realize, especially when it comes to national security, and particularly with regard to US-related issues. If we used industrial grade crypto on a system, it would be in line with past behaviors for the Russians to help the Iranians with it.
        javert 13y ago
        Thanks. Regarding the Russians: Oh, I see, now. Yes, you're right that if country X cracks our encryption, we can't assume that they didn't get help from <insert China or Russia here>. > for example a near-real-time flight application. Wait, why do you say such a system wouldn't use NSA-grade encryption?
        s_q_b 13y ago
        > for example a near-real-time flight application. Primarily latency. Now, ideally you'd like the entire subsystem moved off disk into volatile memory, but for some things you're going to have to read from disk. I can imagine cases where that wouldn't be easily feasible if the drive had NSA crypto. "Regarding the Russians: Oh, I see, now. Yes, you're right that if country X cracks our encryption, we can't assume that they didn't get help from <insert China or Russia here>." Right, but its more than that in the case of the Iranians. The Russians have a long and documented history of assistance to the Iranians and the Syrians.

by jnbiche 13y ago

s_q_b 13y ago

"2. Based on commentary from native Persian speakers on this thread, it would appear that no one is claiming that the drone was remotely piloted by Iranians into US Airspace, but rather the one that was shot down in Iran several months ago (confirmed by the US Government) had these photos on it." If this is true it means the Iranians compromised the encryption on the UAV's drive, which would be seriously not good.

javert 13y ago
The Iranians outsmarting NSA encryption? Not likely. Possible in theory and a huge deal, but not likely. If they decrpyted something from a military aircraft, it's much more likely that shoddy engineering work was done on that aspect of said aircraft because it was decided that security wasn't a top concern. (And, indeed, having pictures of JFK _isn't_ a big deal.)
- s_q_b 13y ago
  Totally possible the imaging equipment retains data in an insecure fashion. However, milspec != NSA, and its highly likely the Russians would help the Iranians in such an endeavor in exchange for intelligence sharing.
  - javert 13y ago
    > milspec != NSA What exactly is "milspec"? I was under the impression that military security standards in the US _are_ produced by the NSA. > highly likely the Russians would help the Iranians in such an endeavor in exchange for intelligence sharing. I must be missing something... yes, but what do Russians have to do with it? I thought this was a US drone captured by Iranians. Genuine question here.
    - s_q_b 13y ago
      MIL-SPEC means encryption built to military specifications. It includes, but does not equate to, NSA Suite B cryptography. As you can imagine, using crypto designed by a paranoid spook agency would not be appropriate for all military applications, for example a near-real-time flight application. As a result, there are a variety of encryption standards used by the military, some of which would be approved by the NSA, others which wouldn't. It's a good question about the Russians. The ties between Russia and Iran are much tighter than most in the US realize, especially when it comes to national security, and particularly with regard to US-related issues. If we used industrial grade crypto on a system, it would be in line with past behaviors for the Russians to help the Iranians with it.
      - javert 13y ago
        Thanks. Regarding the Russians: Oh, I see, now. Yes, you're right that if country X cracks our encryption, we can't assume that they didn't get help from <insert China or Russia here>. > for example a near-real-time flight application. Wait, why do you say such a system wouldn't use NSA-grade encryption?
        s_q_b 13y ago
        > for example a near-real-time flight application. Primarily latency. Now, ideally you'd like the entire subsystem moved off disk into volatile memory, but for some things you're going to have to read from disk. I can imagine cases where that wouldn't be easily feasible if the drive had NSA crypto. "Regarding the Russians: Oh, I see, now. Yes, you're right that if country X cracks our encryption, we can't assume that they didn't get help from <insert China or Russia here>." Right, but its more than that in the case of the Iranians. The Russians have a long and documented history of assistance to the Iranians and the Syrians.