[liberationtech] XKeyScore code authenticity - genuine [was: messing with XKeyScore]

[coderman]

On Sun, Jul 6, 2014 at 7:51 PM, Nathan Andrew Fain <nathan at squimp.com> wrote:
> ... the half hazard rules protecting five eyes users. Apparently
> as someone (terrorist or not) accessing Tor from the five eyes nations
> you are filtered out. If you also happen to have looked at the linux
> journal there is no filtering for five eyes so you would have been
> tagged. This inconsistency shows how foot loose things were/are at the
> NSA.
>
> This would fit with what Diane Roark said in her interview with
> Frontline [1]. She protested the removal of strict filtering for US
> Citizens and was buffed by every side. In that light it is clear the
> US made the entire cache free game for one or many engineers without
> anyone looking over their shoulder. A ship early fix later policy many
> engineers love so much.

well said.  any protections of the nature ThinThread would have made
systemic and pervasive are instead left as ad-hoc, opt-in type filters
upon what is so clearly full take (at the deep inspection point at
least.  i agree with Graham that it is far to expensive to mirror all
traffic everywhere back to NSA)

i also completely disagree with the legal interpretation of "a search"
occurring only when a human analyst sees the intelligence gathered,
and not when the intelligence gear gathers it.



> In the end, with their budget, a 50% reduction in efficiency from a
> regex would just justify a few hundred more distributed computing
> nodes. The only person in the chain that may question this would be a
> pro-surveillance tax payer that knows regular expressions. So it may
> not indicate the age of the filters at all.

i never considered the "hire more mediocre analysts for budget
justification" angle, which is impressive, as i'm usually a pretty
jaded individual ;)



> http://www.pbs.org/wgbh/pages/frontline/government-elections-politics/united-states-of-secrets/the-frontline-interview-diane-roark/

you might the mix a friend made for the Tor hackfest a fun listen:

two versions (which has better voice over?)

https://peertech.org/files/Prodigy_-_Their_Law_-_Toggs_Diane_Roark_Remix.mp3
https://peertech.org/files/Prodigy_-_Their_Law_-_Toggs_Diane_Roark_Remix2.mp3

 [ cache friendly plaintext
http://207.198.103.187:8081/Prodigy_-_Their_Law_-_Toggs_Diane_Roark_Remix.mp3
http://207.198.103.187:8081/Prodigy_-_Their_Law_-_Toggs_Diane_Roark_Remix2.mp3
]


best regards,