Skip to content
0:00 / 0:00

#nsa#fosdem#surveillance

NSA operation ORCHESTRA Annual Status Report - FOSDEM 2014

cnxlinux

5.6K subscribers • 1 video on Hallway

YouTube
  • Recommended by 2 people: 2 on Hacker News.
  • A classic. People kept recommending it from 2014 to 2021.
  • Presented by Poul-Henning Kamp
  • An opinion. It argues one side of a question engineers disagree on.

Intermediate. Assumes working knowledge.

6.6K views12 years ago2 recommendations

SecurityOpen sourceWeb and application securityPrivacy and surveillance

Poul-Henning Kamp delivers a satirical presentation on how intelligence agencies can subvert open-source software and startups.

Presentation about an NSA's fictitious ORCHESTRA program by Poul_henning Kamp at FOSDEM 2014 involving startups, FON (friends of NSA), and SFON (special friends of NSA)... :) Source: video.fosdem.org/2014/ Slides: phk.freebsd.dk/_downloads/FOSDEM_2014.pdf Uploaded by CNXSoft - cnx-software.com

Why it's here

2 people recommend this

What people say. Recommended as an entertaining and insightful look at how state actors can influence software security.

dobbsbobon Hacker News • Recommends

On “Were Intelligence Agencies Using Heartbleed in November 2013?”

I would say after watching this almost everybody could be a target of state interest from VCs to a janitor with a cellphone who works at a network they want into link to this video (FosDem2014 presention) and especially if you have any kind of trust in an open source community and your patches are accepted blindly. Personally if I were an evil intel agency I'd be going after GPU developers and manufacturers at all costs to get at their firmware sources or even possibly find ways to sabotage it at the source. It's the final frontier of awesome evilware potential. - the execution of GPU code, and transfer of data between device and host do not require admin privs so it will always run regardless of what…

wang_lion Hacker News • Recommends

On ““They introduce kernel bugs on purpose””

There’s no research going on here. Everyone knows buggy patches can get into a project. Submitting intentionally bad patches adds nothing beyond grandstanding. They could perform analysis of review/acceptance by looking at past patches that introduced bugs without being the bad actors that they apparently are. From FOSDEM 2014, NSA operation ORCHESTRA annual status report. It’s pretty entertaining and illustrates that this is nothing new. link link to this video

xnull2gueston Hacker News • Mentions

On “Feds Threatened to Fine Yahoo $250K Daily for Not Complying with NSA's PRISM”

link to this video I'm not saying that this thread or even HN is a victim of this. I do want to use this opportunity to contribute that there are NSA programs designed to derail conversations.