<?xml version="1.0" encoding="utf-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Gazing Back From the Abyss</title>
	<atom:link href="http://www.outsidethebeltway.com/archives/gazing_back_from_the_abyss/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.outsidethebeltway.com/archives/gazing_back_from_the_abyss/</link>
	<description>Online Journal of Politics and Foreign Affairs</description>
	<lastBuildDate>Mon, 22 Mar 2010 03:01:59 -0500</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.5</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Boyd</title>
		<link>http://www.outsidethebeltway.com/archives/gazing_back_from_the_abyss/comment-page-1/#comment-142351</link>
		<dc:creator>Boyd</dc:creator>
		<pubDate>Wed, 15 Aug 2007 15:10:03 +0000</pubDate>
		<guid isPermaLink="false">http://www.outsidethebeltway.com/archives/2007/08/gazing_back_from_the_abyss/#comment-142351</guid>
		<description>You bring up some good points, Michael, and unfortunately the answers to these questions are unknowable by us &quot;unwashed masses&quot; (although my experience leads me to strongly disagree with your position that &quot;I also wouldn&#039;t think these systems would be considered a top priority to secure...&quot; Until you&#039;ve experienced it, you just can&#039;t imagine how (appropriately, IMO) anal NSA is about systems security).

My main point is that Ms. Landau is as much a member of the unwashed masses as you and I. Her article is scare-mongering.</description>
		<content:encoded><![CDATA[<p>You bring up some good points, Michael, and unfortunately the answers to these questions are unknowable by us "unwashed masses" (although my experience leads me to strongly disagree with your position that "I also wouldn't think these systems would be considered a top priority to secure..." Until you've experienced it, you just can't imagine how (appropriately, IMO) anal NSA is about systems security).</p>
<p>My main point is that Ms. Landau is as much a member of the unwashed masses as you and I. Her article is scare-mongering.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Michael</title>
		<link>http://www.outsidethebeltway.com/archives/gazing_back_from_the_abyss/comment-page-1/#comment-142334</link>
		<dc:creator>Michael</dc:creator>
		<pubDate>Wed, 15 Aug 2007 14:40:02 +0000</pubDate>
		<guid isPermaLink="false">http://www.outsidethebeltway.com/archives/2007/08/gazing_back_from_the_abyss/#comment-142334</guid>
		<description>It&#039;s not so much that the NSA&#039;s systems aren&#039;t secure enough, it&#039;s just that their systems are so big and so many, that the potential for a vulnerability is greater than would be for smaller systems.  Add to that the fact that the NSA is still a government organization, which probably means that fixing any potential vulnerability takes months of approval and funding processes, and you can see that a hacker intrusion sometime in the next 10 years is certainly possible.  Heck, one careless employee can make every security system they have irrelevant.

However, the key to security is always segregation, and if the NSA has done this right, that means that no single vulnerability can give a hacker access to everything, and the systems holding the more sensitive information will have the smallest possible exposure surface, and therefore the least likely to have a vulnerability.  

Since the wiretapping system is incorporated into the telecom&#039;s systems, they necessarily have a larger exposure surface.  I also wouldn&#039;t think these systems would be considered a top priority to secure, because they are a source of information, not a storage place for it.</description>
		<content:encoded><![CDATA[<p>It's not so much that the NSA's systems aren't secure enough, it's just that their systems are so big and so many, that the potential for a vulnerability is greater than would be for smaller systems.  Add to that the fact that the NSA is still a government organization, which probably means that fixing any potential vulnerability takes months of approval and funding processes, and you can see that a hacker intrusion sometime in the next 10 years is certainly possible.  Heck, one careless employee can make every security system they have irrelevant.</p>
<p>However, the key to security is always segregation, and if the NSA has done this right, that means that no single vulnerability can give a hacker access to everything, and the systems holding the more sensitive information will have the smallest possible exposure surface, and therefore the least likely to have a vulnerability.  </p>
<p>Since the wiretapping system is incorporated into the telecom's systems, they necessarily have a larger exposure surface.  I also wouldn't think these systems would be considered a top priority to secure, because they are a source of information, not a storage place for it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Boyd</title>
		<link>http://www.outsidethebeltway.com/archives/gazing_back_from_the_abyss/comment-page-1/#comment-142328</link>
		<dc:creator>Boyd</dc:creator>
		<pubDate>Wed, 15 Aug 2007 14:25:56 +0000</pubDate>
		<guid isPermaLink="false">http://www.outsidethebeltway.com/archives/2007/08/gazing_back_from_the_abyss/#comment-142328</guid>
		<description>Since I acknowledge that I&#039;m not anywhere near omniscient and that anything is possible, I&#039;ll concede the &lt;i&gt;possibility&lt;/i&gt; that something somewhere is more secure than NSA&#039;s systems.

I&#039;ve just never heard of anything &lt;i&gt;approaching&lt;/i&gt; NSA&#039;s security implementations, and I&#039;m of the &lt;i&gt;opinion&lt;/i&gt; that Ms. Landau&#039;s &quot;hackers will break into NSA&#039;s telecom surveillance systems in 10 years&quot; statement is utter crap.</description>
		<content:encoded><![CDATA[<p>Since I acknowledge that I'm not anywhere near omniscient and that anything is possible, I'll concede the <i>possibility</i> that something somewhere is more secure than NSA's systems.</p>
<p>I've just never heard of anything <i>approaching</i> NSA's security implementations, and I'm of the <i>opinion</i> that Ms. Landau's "hackers will break into NSA's telecom surveillance systems in 10 years" statement is utter crap.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Michael</title>
		<link>http://www.outsidethebeltway.com/archives/gazing_back_from_the_abyss/comment-page-1/#comment-142320</link>
		<dc:creator>Michael</dc:creator>
		<pubDate>Wed, 15 Aug 2007 14:07:07 +0000</pubDate>
		<guid isPermaLink="false">http://www.outsidethebeltway.com/archives/2007/08/gazing_back_from_the_abyss/#comment-142320</guid>
		<description>While I don&#039;t necessarily believe Boyd&#039;s assertion that the NSA&#039;s systems are the best protected, he is absolutely right that the capability to perform the wiretaps already exists, and exists without being vulnerable to hackers.  

I&#039;ve worked on computers in the telecom industry, and while I know for a fact that their systems are not secure, creating a system to monitor telephone conversations is rather trivial, and can be setup so that outside parties have no access to it.  Now, that said, it also wouldn&#039;t surprise me if a telecom company made these systems available to anyone on their internal network, so all bet&#039;s are off.</description>
		<content:encoded><![CDATA[<p>While I don't necessarily believe Boyd's assertion that the NSA's systems are the best protected, he is absolutely right that the capability to perform the wiretaps already exists, and exists without being vulnerable to hackers.  </p>
<p>I've worked on computers in the telecom industry, and while I know for a fact that their systems are not secure, creating a system to monitor telephone conversations is rather trivial, and can be setup so that outside parties have no access to it.  Now, that said, it also wouldn't surprise me if a telecom company made these systems available to anyone on their internal network, so all bet's are off.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Boyd</title>
		<link>http://www.outsidethebeltway.com/archives/gazing_back_from_the_abyss/comment-page-1/#comment-142309</link>
		<dc:creator>Boyd</dc:creator>
		<pubDate>Wed, 15 Aug 2007 12:35:12 +0000</pubDate>
		<guid isPermaLink="false">http://www.outsidethebeltway.com/archives/2007/08/gazing_back_from_the_abyss/#comment-142309</guid>
		<description>As Colonel Potter would say, &quot;Horse hockey.&quot;

The esteemed privacy advocate Ms. Landau is conflating two entirely different things to make a grand scare story. NSA has the &lt;i&gt;ability&lt;/i&gt; to monitor those communications today (and obviously, has had that capability for quite some time). The FISA bill provides them the warrentless &lt;i&gt;authority&lt;/i&gt; to conduct that surveillance. It has nothing to do with how exploitable the US&#039;s communication infrastructure may be.

Here&#039;s the baseless claim she makes: &quot;To avoid wiretapping every communication, NSA will need to build massive automatic surveillance capabilities into telephone switches.&quot;

Oh, really? You&#039;re that familiar with how NSA performs telephonic surveillance, and you can freely say that without violating any secrecy law protecting how the government collects intelligence? I don&#039;t think so, Ms. Landau.

But even if we take her unsupported assertion as fact, nobody, I mean &lt;i&gt;nobody&lt;/i&gt;, is better at or more paranoid about protecting intelligence collection methods, equipment and data than NSA. I spent my 20 year Navy career working directly or indirectly for NSA, and to believe that hackers could blithely tap into their intelligence collection networks either A) knows absolutely nothing about NSA and how they operate, and is pulling it out their @ss, or 2) is so deeply involved in the details of such a system that they&#039;d make Vice President Cheney&#039;s &quot;undisclosed locations&quot; look like Disney World, and would be the last person who would be writing &lt;strike&gt;this crap&lt;/strike&gt; an article for &lt;i&gt;The Washington Post&lt;/i&gt;.

Or I suppose there&#039;s the possibility of iii) has her own personal agenda (that has no connection to reality) and is trying to draw attention to it.

I end as I began: horse hockey.</description>
		<content:encoded><![CDATA[<p>As Colonel Potter would say, "Horse hockey."</p>
<p>The esteemed privacy advocate Ms. Landau is conflating two entirely different things to make a grand scare story. NSA has the <i>ability</i> to monitor those communications today (and obviously, has had that capability for quite some time). The FISA bill provides them the warrentless <i>authority</i> to conduct that surveillance. It has nothing to do with how exploitable the US's communication infrastructure may be.</p>
<p>Here's the baseless claim she makes: "To avoid wiretapping every communication, NSA will need to build massive automatic surveillance capabilities into telephone switches."</p>
<p>Oh, really? You're that familiar with how NSA performs telephonic surveillance, and you can freely say that without violating any secrecy law protecting how the government collects intelligence? I don't think so, Ms. Landau.</p>
<p>But even if we take her unsupported assertion as fact, nobody, I mean <i>nobody</i>, is better at or more paranoid about protecting intelligence collection methods, equipment and data than NSA. I spent my 20 year Navy career working directly or indirectly for NSA, and to believe that hackers could blithely tap into their intelligence collection networks either A) knows absolutely nothing about NSA and how they operate, and is pulling it out their @ss, or 2) is so deeply involved in the details of such a system that they'd make Vice President Cheney's "undisclosed locations" look like Disney World, and would be the last person who would be writing <strike>this crap</strike> an article for <i>The Washington Post</i>.</p>
<p>Or I suppose there's the possibility of iii) has her own personal agenda (that has no connection to reality) and is trying to draw attention to it.</p>
<p>I end as I began: horse hockey.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Fredw</title>
		<link>http://www.outsidethebeltway.com/archives/gazing_back_from_the_abyss/comment-page-1/#comment-142303</link>
		<dc:creator>Fredw</dc:creator>
		<pubDate>Wed, 15 Aug 2007 06:46:02 +0000</pubDate>
		<guid isPermaLink="false">http://www.outsidethebeltway.com/archives/2007/08/gazing_back_from_the_abyss/#comment-142303</guid>
		<description>I am glad we are starting to recognize how vulnerable our anti-terror resources are making ALL of us.  Think about this - the last time you refinanced your home you had to fill out a from to be sure that you were not a terrorist refinancing for jihad.  That form had all of the financial and personal information needed to easily and totally steal your identity.  Where is that form now.  Every other month you hear about stuff like this found in some dumpster.  In the name of terror we are aggrgating data for identity thieves in low secutiry locations.  It will be the same for simple rental applications soon.  This scares me a lot more than the wire tap scenario.</description>
		<content:encoded><![CDATA[<p>I am glad we are starting to recognize how vulnerable our anti-terror resources are making ALL of us.  Think about this - the last time you refinanced your home you had to fill out a from to be sure that you were not a terrorist refinancing for jihad.  That form had all of the financial and personal information needed to easily and totally steal your identity.  Where is that form now.  Every other month you hear about stuff like this found in some dumpster.  In the name of terror we are aggrgating data for identity thieves in low secutiry locations.  It will be the same for simple rental applications soon.  This scares me a lot more than the wire tap scenario.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
