Showing posts with label IT. Show all posts
Showing posts with label IT. Show all posts

Saturday, May 9, 2009

US warns of 'military' response to hackers

When one might be forgiven for thinking that we have seen it all, now this:

Press TV reports: A top US commander has warned that Washington will consider using any option even a military one against threats to the army's computer networks.

Air Force General Kevin Chilton said cyber espionage and attacks from well-funded nations or terror groups are the biggest threats to the military's networks.

"Our job would be to present options. I don't think you take anything off the table when you provide options," in the wake of an attack, whether the weapon is a missile or a computer program, said the general.

Gen. Chilton, who heads US Strategic Command, added that the Pentagon is concerned about new ways for disabling or distorting battlefield communications.

The US military is planning to set up a new cyber command at Fort Meade near Washington that would report to the Strategic Command.

The decision is a response to concerns that offensive and defensive cyber operations are currently separate, and not as coordinated as they should be.

Gen. Chilton said 2,000-4,000 more staff were needed over the next five years to provide the expertise for both offensive and defensive cyber operations.

There have been no major attacks against the military's networks so far, only intrusions or efforts to steal data, he concluded.
-------

This is truly one of the most idiotic statement any US officer has ever made. Bombing hackers?! This really begs the questions whether the good general has any ideas of how computer networks work. Turns out that General Chilton is not only a highly qualified officer (check out his bio here) but even a former NASA astronaut. A person with this time of qualifications has to understand networks, rather well in fact. So Chilton is spewing this kind of nonsense not because he believes it, but because he is "selling" it to somebody - either his political bosses, or the American public. Either way, that kind of nonsensical talk is really bad news as it makes me wonder what the crazies in power in Washington are up to next.

Wednesday, March 4, 2009

The Electronic Frontier Foundation (EFF) has created the Surveillance Self-Defense website

From the EFF's SSD home page:
The Electronic Frontier Foundation (EFF) has created this Surveillance Self-Defense site to educate the American public about the law and technology of government surveillance in the United States, providing the information and tools necessary to evaluate the threat of surveillance and take appropriate steps to defend against it.

Surveillance Self-Defense (SSD) exists to answer two main questions: What can the government legally do to spy on your computer data and communications? And what can you legally do to protect yourself against such spying?

Go to the SSD website (https://ssd.eff.org/home) and read it all for yourself!

I would add a few comments on my own.

First, if you have any reasons to fear a government then you should never use any computers at all, at least none which belong to you. Basically, you need to pretend that ANYTHING that goes on the Internet will become public knowledge. Only use computers which are not traceable to you in any way (usage, contents of transmission, physical location and monitoring, etc.).

Second, you need to assume that ANY computer you have at home, or in your car, or in your office, will be not only electronically penetrated, but physically seized.

Third, do not use encryption for anything not 100% legal and politically correct. You HAVE to assume that Uncle Shmuel can - and will - decrypt all your encrypted communications or stored data. The truth is that Uncle Shmuel can probably not do this, but you have to assume he can. Encrypted data is like a 'red flag', like I beacon of sorts yelling "I am hiding something! I am hiding something!" - at least that is what the bad guys think. So *never* use it for anything illegal or politically incorrect (that can get you blacklisted also), but DO use as much encryption as you can if you do only 100% Uncle Shmuel approved stuff as this overloads their snooping infrastructure.

So, you might ask, is it possible to use the Internet and defeat the government spooks? Yes, of course, but chances are you do not know how - so don't try. You need to understand how networks work, what triggers suspicion, what kind of encryption is really solid, etc. Most of you probably don't, and knowing just a little is even more dangerous than simply operating by the three basic assumptions above.

The main thing: do not attract attention, do not be noticed. Bury yourself deep in the 'background noise' of the Internet.

You cannot built a fortress against the big guys, not a legal one, not a technological one. Once they see you - you are dead. So remain unseen.

But do check out the SSD website. It's a good basic reading.

Good luck!