5 ms·

The first thing I did yesterday after seeing Snowden's leaked Powerpoint was search for mentions of XKeyscore in the past and I came across these same job posti

by jonknee 13y ago

The first thing I did yesterday after seeing Snowden's leaked Powerpoint was search for mentions of XKeyscore in the past and I came across these same job postings (and copied them down since I doubted they would last). I started compiling a database of the different programs, what's known about them, what you can do to stay off their radar, etc. Sound interesting to anyone? Programs/tools I came across include: AGILITY, ANCHORY/MAUI, AUTOSOURCE, CONTRAOCTAVE, WISE, INFOSHARE, TREASUREMAP, TUNINGFORK, SCORPIOFORE, TAPERLAY, MAINWAY, PINWALE, Tripwire Analytic Capability, Combating Terrorism Knowledge Base (CTKB), etc. Quite a few and some of those names are Hollywood quality. Tools that HN readers would know about that were mentioned: ArcGIS, Wireshark, IDA Pro, OLLY Dbg, Snort, Analyst Notebook.

fsck--off 13y ago
This article [1] also mentions finding lists of program names from LinkedIn profiles, especially this one [2]. [2] mentions: ANCHORY, AMHS, NUCLEON, TRAFFICTHIEF, ARCMAP, SIGNAV, COASTLINE, DISHFIRE, FASTSCOPE, OCTAVE/CONTRAOCTAVE, PINWALE, UTT, WEBCANDID, MICHIGAN, PLUS, ASSOCIATION, MAINWAY, FASCIA, OCTSKYWARD, INTELINK, METRICS, BANYAN, MARINA The names of the programs aren't classified; if they were they would not show up on LinkedIn. What the programs actually do is classified information. [1] http://front.kinja.com/job-networking-site-linkedin-filled-with-secret-nsa-pro-514057863 http://front.kinja.com/job-networking-site-linkedin-filled-w... [2] http://www.linkedin.com/pub/jason-miller/39/741/a49 http://www.linkedin.com/pub/jason-miller/39/741/a49
- jonknee 13y ago
  Names are the first step though. You can collect a decent amount from them, like when things started, if they are currently in use, which companies deal with which programs, etc.
  - salgernon 13y ago
    Codenames can also be useful when social engineering. "Oh, it's ok, I know all about FOXYROT, what part did you work on?"

by jonknee 13y ago

fsck--off 13y ago

This article [1] also mentions finding lists of program names from LinkedIn profiles, especially this one [2]. [2] mentions: ANCHORY, AMHS, NUCLEON, TRAFFICTHIEF, ARCMAP, SIGNAV, COASTLINE, DISHFIRE, FASTSCOPE, OCTAVE/CONTRAOCTAVE, PINWALE, UTT, WEBCANDID, MICHIGAN, PLUS, ASSOCIATION, MAINWAY, FASCIA, OCTSKYWARD, INTELINK, METRICS, BANYAN, MARINA The names of the programs aren't classified; if they were they would not show up on LinkedIn. What the programs actually do is classified information. [1] http://front.kinja.com/job-networking-site-linkedin-filled-with-secret-nsa-pro-514057863 http://front.kinja.com/job-networking-site-linkedin-filled-w... [2] http://www.linkedin.com/pub/jason-miller/39/741/a49 http://www.linkedin.com/pub/jason-miller/39/741/a49

jonknee 13y ago
Names are the first step though. You can collect a decent amount from them, like when things started, if they are currently in use, which companies deal with which programs, etc.
- salgernon 13y ago
  Codenames can also be useful when social engineering. "Oh, it's ok, I know all about FOXYROT, what part did you work on?"