Y
HN Search
Hacker News Search
new
|
comments
|
top
|
jobs
mpyne
searching PlanetScale…
1.
▲
2.
▲
3.
▲
4.
▲
5.
▲
6.
▲
108 ms
·
661.
▲
by
mpyne
12y ago
I am 100% not trying to say we shouldn't pursue better remedies (or even cures). I am trying to say that we should be careful in how we phrase (and understand) these success stories. For instance there were 6 success out of a group o
662.
▲
by
mpyne
12y ago
My oldest son has autism, and much more than "lightly". My youngest son may or may not have it, he seems to be right on the edge. I am aware of how disabling it can be, which is why my wife and I employ the mitigating techniques w
663.
▲
by
mpyne
12y ago
I hope this helps as many children out there as possible. But I'm actually more worried that this, left as it is, is just going to be used by mothers and fathers of children with autism, or the adults around them, as an indictment that
664.
▲
by
mpyne
12y ago
> However, people are concerned that the methods used to find him were not constitutional. However, people are expressing this concern independent of evidence to support this concern. Even if you're of the school of thought that the
665.
▲
by
mpyne
12y ago
It seems to me that IP logs would be even more "regularly collected" than meeting minutes though. And somewhat ironically, would not be exculpatory evidence here, but substantiating evidence of the FBI claim that DPR didn't k
666.
▲
by
mpyne
12y ago
> Instead they said "this totes happens all the time, trust us". They're the FBI. They probably do see this all the time. Your "bragging rights" is likely just another example of the same stupid mistake that th
667.
▲
by
mpyne
12y ago
Then again, I found it incredible that HeartBleed hung out in OpenSSL for as long as it did, when you'd think there'd be at least a couple of people in every security group out there reviewing each patch for new vulns.
668.
▲
by
mpyne
12y ago
If the agent's claim is true it wouldn't have come from an HTTP header anyways, but instead the IP address was leaked by the captcha part of the SR website, which the agent would have noticed on his wireshark-equivalent dumping TC
669.
▲
by
mpyne
12y ago
Scrutiny is fine, but the "scrutiny" on display in this thread is quite fanciful indeed. It's almost as if people were hoping that FBI is, somehow, someway, wrong , instead of skeptically analyzing the data presented using c
670.
▲
by
mpyne
12y ago
I don't see how you read Parallel Construction from there. Instead the amended declaration is responding to the claim from the defense that "there's no way FBI could have found our boy's IP address without NSA hax!!!!1&q
671.
▲
by
mpyne
12y ago
I can second the recommendation for The Cuckoo's Egg. I picked it up somehow in 1994 or so and was immediately impressed. I hear there's an alternate title it's being published under now though, so look for the author, Cliff
672.
▲
by
mpyne
12y ago
Reading the Krebs story on this same topic ( http://krebsonsecurity.com/2014/09/dread-pirate-sunk-by-leak... ), it occurs to me that FBI may not have needed to try to authenticate at all . Basically all the analyst
673.
▲
by
mpyne
12y ago
His accuser signed his name to the criminal complaint already, if you'd read the indictment.
674.
▲
by
mpyne
12y ago
Which they could easily claim as being incidental to gathering the evidence needed to obtain the probable cause that is mandatory for a warrant. CFAA talks about "unauthorized access", not about any "unwanted" interactio
675.
▲
by
mpyne
12y ago
I think that this is somewhat due to different definitions of parsing what "economic espionage" means. As you say, it's old news that NSA and CIA have tried to figure out bargaining strength . CIA was doing that even before
676.
▲
by
mpyne
12y ago
Reddit's the same site with the dedicated subreddit called "/r/thefappening", right? That Reddit? I'm not seeing how they get a completely free pass here, it's like saying UNIX doesn't store file data
677.
▲
by
mpyne
12y ago
> Wouldn't it make more sense for individual agencies to re-jigger their IT policies How do you get bureaucracies to do that though? Not by fiat from the top. The system simply doesn't work that way, the career bureaucrats ha
678.
▲
by
mpyne
12y ago
The logic doesn't sound that far-fetched if you've read the linked article and find the business case plausible.
679.
▲
by
mpyne
12y ago
You're asking the parent commenter to prove a negative? Is this what logic has come to at HN?
680.
▲
by
mpyne
12y ago
Again, this is moving the goalposts. The original claim was "the NSA records all phone calls". This is saying, "the NSA records all phone calls, in a certain, non-domestic country, for a 30-day window ", which is nowher
681.
▲
by
mpyne
12y ago
> Taking homeland security-justified warrantless searches and turning those over to criminal investigations is far beyond unconstitutional. Except, that it's not. It's all about how the government comes into possession of inf
682.
▲
by
mpyne
12y ago
Why wouldn't Snowden cross that line, given all the other ones he crossed? I mean, blowing PRISM by itself was far more than "alerting them of our intelligence capabilities", so he's already crossed the Rubicon on that
683.
▲
by
mpyne
12y ago
> Also, more explicitly-stated details about how powerful "metadata" can be. Obvious to anybody who understands INNER JOIN, but this is still new for most people. The power of metadata is implicit. No one at NSA is arguing that
684.
▲
by
mpyne
12y ago
Of all the people I would expect to be following the rules (even the "stupid" ones), it would be actual employees of the government and military itself. Once the military decides that they get to ignore laws which are silly, they
685.
▲
by
mpyne
12y ago
Chump change compared to what software vendors have wrung out of DoD. :( Look up DIMHRS for merely one example. http://en.wikipedia.org/wiki/Defense_Integrated_Military_Hum... One of my favorite quotes in the "Iss
686.
▲
by
mpyne
12y ago
Guys, guys, I get it. All I'm saying is that we do actually need to try to anticipate issues ahead of time. For everyone who's saying that nothing could evolve to resist this, please look at Legionnaire's disease: http:/
687.
▲
by
mpyne
12y ago
Yep. Not seriously enough IMHO, but I was using open source in my job as far back as 2006, on gear that wasn't even that new.
688.
▲
by
mpyne
12y ago
Even if it could kill 99.9% of bugs now , just wait until we get the inevitable HRSA superbugs after 20 years of this. Though this does sound neat, and it's still much better to have than nothing at all.
689.
▲
by
mpyne
12y ago
There are bugfixes in the x.org code based from a "@tycho.nsa.gov" developer that might even be from the Bush 43 Administration...
690.
▲
by
mpyne
12y ago
I think it would be amusing if these "sympathetic NSA agent tipoffs" are actually tipoffs of bugs they've seen utilized by Iranian, Russian, etc. intelligence agencies and would put activists friendly to American values at ri
More ›