Tag: failedstate

Taking away mall cop toys

What do you get when you equip mall cops with military hardware? A banana republic.

The proposed legislation is now in committee. If it’s passed and signed into law by the governor, state and municipal agencies in New Hampshire will be barred from buying or even accepting free offers of “military style equipment” for police use, except with the approval of the assembled citizenry at a public town meeting.

i’m sooo proud. AMERICA!!!!!

Paramilitary Police Are Changing Law Enforcement in the Suburbs. SWAT teams, riot gear, armored vehicles, and other super-sized police equipment and tactics are spreading into smaller spaces and conflicts.

the difference between rank amateurs with a rambo complex, playing with toys several sizes too large for them, and professionals trained in deescalation is enormous.

The Missouri Highway Patrol relieved the Ferguson PD today. Captain Johnson, a Ferguson native, is leading the new security. He started out by removing the tactical units, setting up a media staging center, vowed not to blockade the streets, ordered police working crowd control to take off their gas masks — and marched along with the protesters himself.

(That’s not him in this picture, by the way — Captain Johnson is black. Not sure who the cop in this picture is, but apparently quite a few of the members of the Missouri Highway Patrol marched alongside the protesters today. ETA: Here’s a picture of Captain Johnson.

There’s a bunch more in the story, and I recommend you read it, because it’s such an antidote to the news stories of the past few days. It appears that there’s one cop, at least, who still remembers what the job is all about.

Captain Ronald S. Johnson: Doing it right.

Indemnity

The healthcare.gov bailout has no consequences. this is a disgrace. the fat, lazy and incompetent contractors get bailed out for free when this is the time to have them pay damages?

Google, Red Hat, Oracle and other technology companies are contributing 10s of computer engineers and programmers to help the Obama administration fix the US health-insurance exchange website.

Government occasionally shuts down

I noticed a bug over the past week or so and it seems reproducible: Go to US Government. US Government is shut down. Hope you can resolve this soon. Love this project and would like to continue using it.

===
Um, has anyone seen the crazy fragmentation in the congressional district db? That can’t be helping things.
===
It seems that allocateFunds depends on the Congress class without any proper error handling, causing a complete shut-down of all non-essential system services. Perhaps a reserve allocation is required to ensure the system can use it when no resources are available.
===
It’s a serious architectural issue. I think it’s time to go back to the drawing board and design something with scalability and modularity in mind, and have a talk with the client about the dangers of feature creep and monkeypatching every time some clueless executive wants something “right now” and can’t be bothered to pay to do it right. I wouldn’t even bother forking this; just redesign from the ground up. It’ll be cheaper in the long run.

Dismantling fire departments

Fires have become much rarer, there are too many firefighters. Which is why you see them responding to medical emergencies. Like all organizations, they fight downsizing.

City records show that major fires are becoming vanishingly rare. In 1975, there were 417 of them. Last year, there were 40. That’s a decline of more than 90%. A city that was once a tinderbox of wooden houses has become a much less vulnerable place.

The number of professional firefighters in Boston has dropped only slightly, from around 1600 in the 1980s to just over 1400 today

2014-06-27: Can Fire Stations do health duties?

A new firehouse clinic in California shows how an abundant but under-used public resource—fire stations—can be made even more useful for a community.

We have too many firefighters now due to improved building codes, but like any organization, they resist being shrunk to the correct size. That’s why you often see 3 trucks being dispatched to save a kitten.

2022-10-06: Why do Fire Departments still exist?

According to the 2021 statistics of the FDNY, they attended 1213750 incidents. That’s a lot of fires. But when you take those incidents apart, it emerges that ‘Fire Incidents’ make up less than 25% of calls. Even then, the 290643 ‘Fire Incidents’ cover things from actual fires to malicious false calls, with structural fires being 10639 – the vast majority are more medical incidents. In much of America, the fire departments often take up the role that ambulance services would in Europe. 65% of ambulances in New York are run by the fire department, with the remainder from hospitals.

NSA

the nsa resources deployed on the war on water / drugs:

Agencies working to curb drug trafficking, cyberattacks, money laundering, counterfeiting and even copyright infringement complain that their attempts to exploit the security agency’s vast resources have often been turned down because their own investigations are not considered a high enough priority, current and former government officials say.

2013-08-14: Hipster NSA stopped 50 terrorist attacks. You’ve probably never heard of them.
2013-09-11: Calling the NSA

2013-09-16:

What can we do to roll back this aggressive expansion of the surveillance state, and to lower the probability of it happening again in the near future? The best answer is the simplest one: abolish the NSA. Abolish it, and create an easy mechanism for abolishing agencies like it in the future.

a test if we can still muster the power to dismantle organizations that have outlived their purpose and crossed too many lines.
2013-10-30: and good luck with decrypting the network now, assholes.

This is the big story in tech today:

NSA infiltrates links to Yahoo, Google data centers worldwide

I’m just going to post my thoughts on this. Standard disclaimer: They are my own thoughts, and not those of my employer.

Fuck these guys.

I’ve spent the last 10 years of my life trying to keep Google’s users safe and secure from the many diverse threats Google faces.

I’ve seen armies of machines DOS-ing Google. I’ve seen worms DOS’ing Google to find vulnerabilities in other people’s software. I’ve seen criminal gangs figure out malware. I’ve seen spyware masquerading as toolbars so thick it breaks computers because it interferes with the other spyware.

I’ve even seen oppressive governments use state sponsored hacking to target dissidents.

But even though we suspected this was happening, it still makes me terribly sad. It makes me sad because I believe in America.

Not in that flag-waving bullshit we’ve-got-our-big-trucks-and-bigger-tanks sort of way, but in the way that you can looked a good friend who has a lot of flaws, but every time you meet him, you think, “That guy still has some good ideas going on”.

But after spending all that time helping in my tiny way to protect Google — one of the greatest things to arise from the internet — seeing this, well, it’s just a little like coming home from War with Sauron, destroying the One Ring, only to discover the NSA is on the front porch of the Shire chopping down the Party Tree and outsourcing all the hobbit farmers with half-orcs and whips.

The US has to be better than this; but I guess in the interim, that security job is looking a lot more like a Sisyphus thing than ever.

Also of note, this article from September may call some recent technical decisions into relief:

Google encrypts data amid backlash against NSA spying

2013-11-01:

Despite Dianne Feinstein’s supposed “conversion” earlier this week about the NSA being out of control with its spying, and the associated performance of NSA folks claiming that they were screwed, it’s quickly become apparent that this was all pure theater to make people think that real reform might be coming.

2013-12-08: the low-level thugs at the NSA are polishing their resumes as we speak.

Morale has taken a hit at the National Security Agency in the wake of controversy over the agency’s surveillance activities. Former officials are dismayed that President Obama has not visited the agency to show his support.

2013-12-16: the nsa must be in deep crisis mode that they feel they have to ask for the help of this thug. tl;dr: yes we lied to congress but don’t worry, we don’t care about your data. also, please help out with my mayonnaise kickstarter.
2013-12-22:

The US national security establishment didn’t even attempt to protect us from this. Why? The folks running the show down in Washington don’t, and still don’t, consider the biggest cyber attack on US citizens to date a national security issue. As with 9/11, our expensive national defense system was totally ineffective when we needed it.

A bit hyperbolic but he is right that the thugs at the NSA had one job, and blew even that.
2013-12-26:

a time will come, someday, when we are terrified, once again. When all the “Orwellian” talk will seem far less important than empowering our protectors with any powers they claim to need. Shall we ride this roller-coaster helplessly, oscillating between submission and indignation?

2014-02-24: it’s great to see that other leakers are coming forward. a NSA busy with internal purges and ultra-paranoia will be less of a threat.

the NSA, forbidden by President Obama from tapping German Chancellor Angela Merkel’s phone directly, has ramped up its spying on her senior government officials

2014-03-20: high drama, with response by Richard Ledgett: The NSA responds to Edward Snowden’s TED Talk

2014-04-09:

Hackers are addicted to the power of controlling machines. Almost every time they compromise a new machine, their “compromise boundary” grows. The drug gets better the more you take – unlike “regular” drugs. SIGINT organizations seem to behave like addicts: Making up excuses to escalate the consumption of their favorite drug.

2014-05-09:

the NSA set themselves up for it by preventing the early internet specifications from including transport layer encryption. At every step in the development of the public internet the NSA systematically lobbied for weaker security, to enhance their own information-gathering capabilities. The trouble is, the success of the internet protocols created a networking monoculture that the NSA themselves came to rely on for their internal infrastructure. The same security holes that the NSA relied on to gain access to your (or Osama bin Laden’s) email allowed gangsters to steal passwords and login credentials and credit card numbers. And ultimately these same baked-in security holes allowed Edward Snowden—who, let us remember, is merely 1 guy: a talented system administrator and programmer, but no Clark Kent—to rampage through their internal information systems.

2015-05-23:

piecing this story together took a team that was willing to do everything from learning some fairly difficult number theory to coding up simulations to poring over the Snowden documents for clues about the NSA’s budget

Interesting musings on the diffie-hellman vulnerability.
2017-05-01:

It’s possible that someone penetrated the internal NSA network. We’ve already seen NSA tools that can do that kind of thing to other networks. That would be huge, and explain why there were calls to fire NSA Director Mike Rogers last year.

The CIA leak is both similar and different. It consists of a series of attack tools from ~1 year ago. The most educated guess amongst people who know stuff is that the data is from an almost-certainly air-gapped internal development wiki and either someone on the inside was somehow coerced into giving up a copy of it, or someone on the outside hacked into the CIA and got themselves a copy. They turned the documents over to WikiLeaks, which continues to publish it.

This is also a really big deal, and hugely damaging for the CIA. Those tools were new, and they’re impressive. The CIA is desperately trying to hire coders to replace what was lost.

For both of these leaks, one big question is attribution: who did this? A whistleblower wouldn’t sit on attack tools for years before publishing. A whistleblower would act more like Snowden or Manning, publishing immediately — and publishing documents that discuss what the US is doing to whom, not simply a bunch of attack tools. It just doesn’t make sense. Neither does random hackers. Or cybercriminals. I think it’s being done by a country or countries.

My guess was, and is still, Russia in both cases. Here’s my reasoning. Whoever got this information years before and is leaking it now has to 1) be capable of hacking the NSA and/or the CIA, and 2) willing to publish it all. Countries like Israel and France are certainly capable, but wouldn’t ever publish. Countries like North Korea or Iran probably aren’t capable.