6 ms·
Some more interesting stuff: July 31, 2012 Microsoft (MS) began encrypting web-based chat with the introduction of the new outlook.com service. This new Secur
by bitmapbrother 11y ago
Some more interesting stuff:
July 31, 2012
Microsoft (MS) began encrypting web-based chat with the introduction of the new outlook.com service. This new Secure Socket Layer (SSL) encryption effectively cut off collection of the new
service for FAA 702 and likely 12333 (to some degree) for the Intelligence Community (IC). MS, working with the FBI, developed a surveillance capability to deal with the new SSL. These solutions were successfully tested and went live 12 Dec 2012.
March 7, 2014
PRISM now collects Microsoft Skydrive data as part of PRISM'S standard Stored Communications collection package for a tasked FISA Amendments Act Section 702 (FAA702) selector. This means that analysts will no longer have to make a special request to SSO for this - a process step that many analysts may not have known about. This new capability will result in a much more complete and timely collection response from SSO for our Enterprise customers. This success is
the result of the FBI working for many months with Microsoft to get this tasking and collection solution established. "SkyDrive is a cloud service that allows users to store and access their files on a variety of devices.
March 15, 2013
SSO's PRISM program began tasking all Microsoft PRISM selectors to Skype because Skype allows users to log in using account identifiers in addition to Skype usernames. Until now, PRISM would not collect any Skype data when a user logged in using anything other than the Skype username which resulted in missing collection; this action will mitigate that. In fact, a user can create a Skype account using any e-mail address with any domain in the world. UTT does not currently allow analysts to task these non-Microsoft e-mail addresses to PRISM, however,
- errtnsd 11y agoEffectively what they are doing is just making me want to buy/use US software less and less. How long until Windows OS is going to be monitored?
- themeekforgotpw 11y agoWindows now broadcasts and collects information about what you type in when you search for programs (in charm/modern shell). That doesn't mean it goes 'upstream'. But it is startling how far we've come. I remember the days when nobody trusted the internet - not even with their credit card. Now its hard to trust your Operating System to run a program.
- madez 11y agoNow its hard to trust your Operating System to run a program. If you use Windows, yes. I live in a Microsoft-free household, using floss systems makes your life in some ways easier.
- ionised 11y agoI run Windows solely for playing games. If I could run games without issue on Linux I would drop Windows in a heartbeat. That said, I do use Debian or Slackware on other machines and my laptop.
- Cakez0r 11y agoTS//SI//REL) Currently CASTLECRASHER is the only production quality Windows execution technique that Payload Persistence techniques have. Another mechanism to execute DNT payloads is needed. Most pre-boot Persistence techniques only have the ability to influence an OS through modifications to the target file system. Work needs to be done to investigate other ways to get execution inside of Windows
- jhallenworld 11y agoWell there is Zeitgeist in Ubuntu..
- junto 11y agoWoah. Can anyone shed anybkight on this extract? This new capability will result in a much more complete and timely collection response from SSO for our Enterprise customers. Who are the NSA's "enterprise customers". Is this corporate espionage?
- necrodawg 11y agoWhat do you think the whole point of all of this is?
- XorNot 11y agoNo. Companies use the term "customer" for internal requests a lot. "Enterprise" would probably be large divisions within the NSA - i.e. groups working Middle Eastern intelligence, for example.
- jacquesm 11y agoI don't think you can say that with 100% certainty. There is some smoke - but so far no fire - that NSA collected data ended up with corporations. https://www.google.com/search?q=NSA+industrial+espionage https://www.google.com/search?q=NSA+industrial+espionage
- junto 11y agoWoah. Can anyone shed anybkight on this extract? This new capability will result in a much more complete and timely collection response from SSO for our Enterprise customers. Who are the NSA's "enterprise customers". Is this corporate espionage?
- junto 11y agoWoah. Can anyone shed anybkight on this extract? This new capability will result in a much more complete and timely collection response from SSO for our Enterprise customers. Who are the NSA's "enterprise customers". Is this corporate espionage?
- ionised 11y ago> MS, working with the FBI, developed a surveillance capability to deal with the new SSL. These solutions were successfully tested and went live 12 Dec 2012. And there it is. They claim ignorance to NSA data tapping of their servers but are in fact entirely complicit as we suspected.
- mcintyre1994 11y ago> This success is the result of the FBI working for many months with Microsoft to get this tasking and collection solution established. And there's the direct link to complicity in PRISM - is that new?
- josefresco 11y ago"They claim ignorance to NSA data tapping" They did? Interested in the link/reference if you have it.
- mcintyre1994 11y agohttp://news.microsoft.com/2013/07/11/statement-from-microsoft-about-response-to-government-demands-for-customer-data/ http://news.microsoft.com/2013/07/11/statement-from-microsof... >our compliance team examines all demands very closely > To be clear, Microsoft does not provide any government with blanket or direct access to SkyDrive, Outlook.com, Skype or any Microsoft product. Not hugely direct but seems to be contradicted by the document.
- josefresco 11y agoWording is probably important: "blanket or direct access" Seems it would lack foresight if MS denied something that they new would be uncovered in the leaked documents.
- deleted 11y ago[deleted]
- rayiner 11y agoIt's not at all contradicted by the document. The document references Section 702 of the FISA Amendment Act, and the Stored Communications Act. Section 702 allows targeted access to non-U.S. persons and Section 2703 of the Stored Communications Act allows the government to compel disclosure of stored communications with a warrant, or notice to the customer plus a subpoena or court order. 18 U.S.C. 2703(b)(1). Nothing about the document suggests blanket or direct access.
- linkregister 11y ago> March 7, 2014 What was the name of this doc? There is some date incongruity here, unless Ed got his old job back.
- Pent 11y agoHe had access to the NSA servers even after he fled using credentials from other employees. Sorry I can't find a citation but I read about it about 6 months after the initial leak.
- rqebmm 11y agoThere's evidence[0] of other, possibly currently active, whistleblowers leaking documents from inside NSA. This database includes those leaked documents as well, as it mentions XKEYSCORE, which Snowden has said he did not leak. [0]https://www.schneier.com/blog/archives/2014/08/the_us_intellig.html https://www.schneier.com/blog/archives/2014/08/the_us_intell...