Hacker Newsnew | past | comments | ask | show | jobs | submit | xrayzerone's commentslogin

This is a great resource. Why is it getting downvoted?


Their job is to collect signals intelligence and execute cyber warfare operations. Not whatever you think it is.


Their job is more than that.

"The National Security Agency/Central Security Service (NSA/CSS) leads the U.S. Government in cryptology that encompasses both signals intelligence (SIGINT) and information assurance (now referred to as cybersecurity) products and services, and enables computer network operations (CNO) in order to gain a decision advantage for the Nation and our allies under all circumstances."

[1] https://www.nsa.gov/about/mission-values/


So...SIGINT and CNO. Exactly as I stated.


Security assurance isn’t necessarily cyber warfare. To have the high ground is not the same as using it offensively, hence the expectation of defensive posture as part of the NSA’s mission (although admittedly some offensive activities are to be expected, depending on the situation, such as Stuxnet and Iran).


Not sure if you’re just being snarky, but the NSA’s stated mission includes helping with cyber security: https://www.nsa.gov/about/mission-values/


It also involves breaking enemy cyber security (signals intelligence).

It's actually a rather fascinating incongruity, since we live in a world where "the enemy" is more likely than not to be using the same software systems that the NSA themselves are, and that therefore any exploitable flaws they find in enemy systems are pretty likely to be just as exploitable in their own. (And that similarly, disclosing the flaw in order to fix the issue in their own systems is very likely to result in "the enemy" fixing the flaw as well.)

A couple years ago the White House released a document explaining the process they use for deciding what vulnerabilities they keep secret: https://www.cnet.com/news/white-house-trump-administration-h... noting that "In the vast majority of cases, responsibly disclosing a newly discovered vulnerability is clearly in the national interest". Though from what we've seen in past leaks, it's pretty obvious they don't reach that conclusion for all vulnerabilities they find.


And what do you think the end state of all that cybersecurity research is?


NSA has long had an explicit offensive and defensive mandate. They even recently created a cyber defense directorate:

https://www.washingtonpost.com/national-security/nsa-launche...


NSA has both attack and defense mandates and organizations. Currently, the attack org has priority, but it's not like the defense org does nothing. So if the attack org doesn't want a vuln, they can let the defense org reveal it for PR points.


“The Wire” in its last season thought-provokingly explores this topic. What got me was the big lie was comprised of a mesh of micro-decisions, not a big monolithic deception.


This thread is clearly going nowhere on HN.


How is this relevant to Hacker News? Are we to surmise that any and all news articles are now welcome here?


Awesome. Will be reading these in short order. Can anyone recommend other good incident response resources (that are relevant in 2019)?


There are some good additional resources referenced in the docs here: https://response.pagerduty.com/resources/reading/

Specifically, Google's SRE books are particularly useful (https://landing.google.com/sre/books/) along with the book "Incident Management for Operations" (http://shop.oreilly.com/product/0636920036159.do) and Etsy's Debriefing Facilitation Guide (http://extfiles.etsy.com/DebriefingFacilitationGuide.pdf).

The book "Comparative Emergency Management" (https://training.fema.gov/hiedu/aemrc/booksdownload/compemmg...) is also quite interesting, as it compares the emergency management practices of about 30 different countries.


Firefighter for over 10 years and an IT career spanning Red Team/Blue Team and now SRE, I can't recommend enough taking the FEMA Independent Study course in Incident Command.

https://training.fema.gov/is/courseoverview.aspx?code=IS-100...

Even if you don't adopt the system it will help you frame and understand how complex IR can be. Having a scalable system to a) grow with resources and b) grow with external interactions is crucial to have BEFORE you need it.


Atlassian's handbook is pretty good: https://www.atlassian.com/software/jira/ops/handbook


What are you talking about? US-launched GPS satellites are owned and operated by the USAF, which last I checked, is a national security outfit.


Please drop acerbic swipes like "What are you talking about?" from your comments here. Your comment would be much better with just the second sentence.

https://news.ycombinator.com/newsguidelines.html


> Huawei denies having any ties to the Chinese government beyond those of being a law-abiding taxpayer.

I find it interesting that these kinds of verbal games are continually played out in the public eye despite everyone involved knowing exactly what's going on. And that goes for all APT / nation-state actors.


Australia has effectively banned Huawei since 2012 (NBN participation ban). Therefore, there is plenty of discourse and information from Australia about technology sovereignty.

The article at [1] directly addresses the claim:

> Huawei denies having any ties to the Chinese government beyond those of being a law-abiding taxpayer.

Articles at [2] also provide more in-depth analysis.

[1] https://www.aspistrategist.org.au/huawei-and-the-ambiguity-o...

[2] https://www.aspi.org.au/report/huawei-and-australias-5g-netw...


The irony here in that Australia just passed laws requiring local vendors to put in backdoors at the governments request, not just for national security but also in regards to "national economic well-being" aka industrial espionage.


Then it will read like the mythical ad. God. The pedantry around here is astounding.


I have grown weary of statements based on truthiness.

Shackleton's failed expedition goes around in business circles because it was a successful failure. No one died, despite the ship being caught in the ice, the men holed up on Elephant Island, and the incredible voyage of the James Caird to South Georgia and trek across the mountains to the whaling station.

The mythical ad builds on pop culture resonances, like the 2003 book "Shackleton's Way: Leadership Lessons from the Great Antarctic Explorer", and "Leading at The Edge: Leadership Lessons from the Extraordinary Saga of Shackleton's Antarctic Expedition", plus scores of other books and movies.

Tell me, downvoters, why don't we see 'mythical ads' for real failures, like the Scott's Terra Nova Expedition? Presumably they would have been just as heroic, no?

Or, would you interpret that fake ad the same if you replaced Shackleton's name with Scott's?


In a similar vein, Mallory's justification for attempting Mount Everest is often repeated. He died in the attempt.

We hear about heroic failures too.


Indeed. The Terra Nova Expedition I mentioned is one of those failures.

Would you have the same interpretation if Musk had referenced a similar fake advertisement but recruiting people for Scott's final expedition instead of Shackleton's famed one?


I think it’s intended to be a joking introduction into a side topic rather than a “well, actually”


> It does not show in money, or people going to STEM field

Anecdotally, I know many a kid who has taken an interest in space and rocketry after watching a SpaceX launch.

What empirical data have you to show that there is no correlation between space awareness (whether by Musk or anyone else) and STEM enrollment?


> Anecdotally, I know many a kid who has taken an interest in space and rocketry

I was personally inspired to go to physics partially because of my love of sci-fi and all space related. That's completely orthogonal to the skeptical sentiment or lack of moon landings in my lifetime.

Real "space awarenes" comes with facts, not with hype. You can drive only so much motivation from outside.


Right but to be able to absorb facts you first need to be excited. Like all the efforts for more kids/blacks/women in STEM/programming don't start with "this is a variable, the program will crash if you add a boolean to a string" but instead start with flashy things like games or robots or large salaries to get them excited and interested first.


And the facts, as stated in this article, are that the Starship design has changed, which you seem to conflate with marketing. So which is it.


I was not discussing the article.

It's the frequent meta comments like dimillian above about "hate" and "negativity" that I find negative and harmful. They try to steer the tone of discussion to direction that the commentator feel more comfortable with.

Wanting protect feelings from getting hurt even in discussions related to technology and science are absurd.

'Say only positive things or the fragile Mars mission will collapse.'


Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: