Catch up on stories from the past week (and beyond) at the Slashdot story archive

 



Forgot your password?
typodupeerror
×
Government Privacy Security IT

NSA's Best Are 'Leaving In Big Numbers,' Insiders Say (cyberscoop.com) 412

schwit1 quotes CyberScoop: Low morale at the National Security Agency is causing some of the agency's most talented people to leave in favor of private sector jobs, former NSA Director Keith Alexander told a room full of journalism students, professors and cybersecurity executives Tuesday. The retired general and other insiders say a combination of economic and social factors including negative press coverage -- have played a part... "I am honestly surprised that some of these people in cyber companies make up to seven figures. That's five times what the chairman of the Joint Chiefs of Staff makes. Right? And these are people that are 32 years old. Do the math. [The NSA] has great competition," he said.

The rate at which these cyber-tacticians are exiting public service has increased over the last several years and has gotten considerably worse over the last 12 months, multiple former NSA officials and D.C. area-based cybersecurity employers have told CyberScoop in recent weeks... In large part, Alexander blamed the press for propagating an image of the NSA that causes people to believe they are being spied on at all times by the U.S. government regardless of their independent actions.

"What really bothers me is that the people of NSA, these folks who take paltry government salaries to protect this nation, are made to look like they are doing something wrong," the former NSA Director added. "They are doing exactly what our nation has asked them to do to protect us. They are the heroes."
This discussion has been archived. No new comments can be posted.

NSA's Best Are 'Leaving In Big Numbers,' Insiders Say

Comments Filter:
  • by CajunArson ( 465943 ) on Sunday December 11, 2016 @11:37AM (#53463345) Journal

    While nobody wants a huge abusive spy agency tracking Americans at all times, there are going to be plenty of people on here jumping up and down hoping for the destruction of the NSA... while simultaneously running around like chickens with their heads cut off claiming that Russian Hackers are the sole reason that Trump is president.

    You can't have it both ways.

    • by vtcodger ( 957785 ) on Sunday December 11, 2016 @11:41AM (#53463361)

      All well and good. The NSA possibly protects us from our enemies. But who protects us from the NSA? Quis custodiet ipsos custodes?

      • by epyT-R ( 613989 ) on Sunday December 11, 2016 @11:45AM (#53463383)

        A government that believes in, upholds, and understands the constitution.. A 180 from what we have atm.

        • by Anonymous Coward on Sunday December 11, 2016 @01:28PM (#53464005)

          Even before it was not much better. Especially the top brass of the NSA is totally detached from reality. When I read " Alexander blamed the press for propagating an image of the NSA that causes people to believe they are being spied on at all times by the U.S. government regardless of their independent actions. " then I can only say this is self-inflicted. The NSA did indeed engage in unconstitutional mass surveillance and other illegal activity. So far they did not admit to it, did not ask for forgiveness, and above all have absolutely nothing to show for given the billions in tax dollars that they wasted all these decades. It is one of these useless self-fulfilling three letter agencies that accomplish nothing.

          • by Anonymous Coward on Sunday December 11, 2016 @03:55PM (#53464695)

            And notice that Alexander still didn't state that the NSA wasn't spying on all the people all the time -- he just complained that the press shared the idea with we, the people.

            • Re: (Score:3, Interesting)

              by rtb61 ( 674572 )

              Even worse, horror of horrors they exposed how much the NSA spies on their own. Those with the most privacy at the NSA, fucking worthless political appointees, those with the least privacy, everyone else. From the earliest youth every child is taught that those others children who spies on others, who tattle on them in the most exaggerated fashion for the least infringement, those who say one thing to the face whilst saying another behind their back, those who spread lies, are truly awful and are best to be

          • by lpq ( 583377 ) on Sunday December 11, 2016 @06:43PM (#53465485) Homepage Journal

            The idea of the NSA secretly giving spy evidence to the DEA and FBI to use in prosecuting domestic crimes was something anticipated, but still unconstitutional and illegal --- yet this corrupt rogue "lawmen" using their threat powers to force compliance with their unlawful actions.

            The DEA is currently harassing all legal users of prescription pain medications in California with regular urine testing and threats to doctors of suspension if they don't comply with these non-legal requirements.

            They are totally out of control and need to be stopped. Organizations like the DEA who grew out of prohibition enforcement need to be retired -- not allowed to find new frontiers to make illegal and prosecute.

        • by RazorSharp ( 1418697 ) on Sunday December 11, 2016 @01:40PM (#53464073)

          A government that believes in, upholds, and understands the constitution.. A 180 from what we have atm.

          The Constitution hasn't mattered since the Civil War. What a court declares as "Constitutional" matters far more than anything else. At some point we as a nation need to accept that the Constitution is outdated and ill-suited to function as the blueprint of our government. We're a Federalist nation in name only as the Federal government uses the Commerce Clause excuse anytime it wants to intercede in something or they just stick and carrot states with federal funds when that's more convenient.

          Back to the original point, the checks and balances that are worked into the Constitution also do a poor job of actually providing checks and balances in our bi-partisan environment. Check and balances have just become partisan tools both parties use to attack the other when they can get away with it. When it comes to protecting citizen's rights, both parties seem to agree that doing so isn't in their best interests, so various federal bureaus and agencies are permitted to do as they see fit. In essence, Constitution or no Constitution, no one watches the watchmen. Romanticizing the Constitution is detrimental to our rights as it feeds into the lies and illusions the government wants to distract us with.

          • Re: (Score:2, Insightful)

            by Anonymous Coward

            ...our bi-partisan environment...

            A democracy cannot work properly with only two major factions. It is too close to the one party system.
            Look at Swiss democracy for an example.
            And turn off that TV.

          • by lgw ( 121541 ) on Sunday December 11, 2016 @02:51PM (#53464401) Journal

            At some point we as a nation need to accept that the Constitution is outdated and ill-suited to function as the blueprint of our government.

            ... said every tyrant ever. There's a process for amending the Constitution. It requires a supermajority for a reason. The fact that a slim majority can't run rampant over the 49% is a feature, not a bug.

        • by shoor ( 33382 ) on Sunday December 11, 2016 @02:17PM (#53464269)

          Since the beginning there has been a struggle with those in power trying to suppress inconvient truth. (Maybe with the exception of Thomas Jefferson's presidency.) The grandson of Benjamin Franklin, Benjamin Franklin Bache was a newsman who criticized George Washington and John Adams and the government passed the 'Alien and Sedition Acts' of 1798 and had him arrested. From the wikipedia article on Bache:

          The law [Alien and Sedition Acts] may have been written to suppress opponents such as Bache. The persistent theme of Republican journalism of the 1790s was that the federal government had fallen into the hands of an aristocratic party aligned with Britain, and that the Federalists (particularly Washington and Alexander Hamilton) were hostile to the interests of the general public while promoting corporate interests

          Another quote from abolitionist Wendell Phillips in 1852:

          Eternal vigilance is the price of liberty; power is ever stealing from the many to the few.

        • A government that believes in, upholds, and understands the constitution.. A 180 from what we have atm.

          That's more or less what Snowden has shown, that the NSA has gone off the rails in their megalomanic ambition to collect everything about everyone. And you can be sure that a lot of people who work at the NSA have paid attention. And that they have a lot less patriotic pride to motivate them now, which helps if you get paid more elsewhere. And Obama has given the NSA more power and is now transfering that

      • by Nyder ( 754090 ) on Sunday December 11, 2016 @11:53AM (#53463457) Journal

        All well and good. The NSA possibly protects us from our enemies. But who protects us from the NSA? Quis custodiet ipsos custodes?

        But so far the NSA hasn't been protecting us for our enemies. In fact, they are doing so bad at protecting us, the Russian had no problem making everyone vote for Trump. So either the NSA is doing a good job or the NSA fails badly at it's mission.

        • That is because techniques, tools, and procedures were given away to our adversaries!
        • Re: (Score:3, Insightful)

          by Anonymous Coward

          "The Russian" didn't make people vote for Trump. It was 8 years of Obama and the threat of 4 more years of his policies that caused reactionary voting patterns. Clinton in Merkel's pocket, aligned with globalist-Euro interests and big money, is bad for Russia. Trump is only looking out for the USA, he's not beholden to Euro masters or Wall Street, so he's the logical choice for Americans.

          It's incidental that Russia favored a nationalistic US president.

          • It was 8 years of Obama and the threat of 4 more years of his policies that caused reactionary voting patterns.

            Bullshit. The US rejected a neocon warmonger in 2008, an investment banker in 2012, and the Democrats decided to run a candidate that essentially promised to be the handmaiden of both (among her many other problems). Given a choice of steadily boiling to death, or going full dumbass with a low possibility of a better life, the significant portion of America decided the latter.

            The American public would have re-elected Obama for a third term over Trump, if the CotUS had allowed it.

      • Mod Parent Up (Score:5, Insightful)

        by Anonymous Coward on Sunday December 11, 2016 @12:27PM (#53463649)

        All well and good. The NSA possibly protects us from our enemies. But who protects us from the NSA? Quis custodiet ipsos custodes?

        This is exactly the issue. If you've met people in these circles, you know there are a couple of basic types (although everyone has their own characteristics too, obviously). There are amazing people, there are very nice people, there are real jerks, there are psychopaths, and there are people who will just kind of go along with whatever everyone else is doing. You can't rely on individuals alone to protect us from unethical institutional mission creep. That's why we have laws, and that's why we create systems of oversight.

        The only way to prevent corruption and abuse of our federal system in the long run is institutionally. No matter how good someone is, if you give them the power to operate in secret forever and without effective oversight, they will eventually be corrupted by it, but even if they are not the next person will be. We NEED good oversight with as much transparency as is possible under the circumstances, oversight that includes independent inspector generals and a good committee with privacy advocates as well as former NSA and others on it that takes a meaningful response to Constitutional and privacy issues rather than seeing them as a hindrance. So long as we don't have that, we should assume the system will be abused for illegal and unethical purposes.

        The work the NSA does is incredibly important--but so is protecting democracy from what the NSA could become.

    • by Anonymous Coward on Sunday December 11, 2016 @11:54AM (#53463459)

      > You can't have it both ways.

      That's only if you are unaware that the NSA has two mandates:

      (1) Spy
      (2) Protect

      Most of us who complain about the NSA believe that they have over-emphasized (1) at the expense of (2).
      We've all heard about how the NSA hordes zero-days to enable their ability to spy which leaves everyone vulnerable to anyone else who also has those zero-days. That became explicitly clear with the Shadow Brokers fiasco. [wired.com]

      I am happy to support the NSA in their mandate to protect. But as long as they follow a policy of keeping the US weak because it helps them spy, then they don't deserve the support of americans.

    • by H3lldr0p ( 40304 ) on Sunday December 11, 2016 @11:55AM (#53463473) Homepage

      That's a nice troll you have there. You've completely made up two positions and then put them in opposition to each other.

      I don't know of anyone hoping for the agency's destruction. I know I don't. I understand that they have an important roll to play in national security. What I do want is the ability to examine the effectiveness of their actions. What I do want is the ability to hold them legally culpable when they screw up and target the innocent and unwary without legal justification. The line used in the blurb is akin to "They were following orders" which doesn't hold moral or legal water. And maybe that's why they can't get the best and brightest anymore. If you can't find the justification to yourself to keep doing the job, maybe it's the job that needs to change.

      As for the agency itself, this is not an either-or position and I would hold the same position for the FBI and CIA. We, the people, need to be able to examine fully the actions of our government and decide for ourselves if this is what we want. Hiding the results by reproducing them in triplicate, losing two copies, burying the third in soft peat for six months before recycling it for fire-starters isn't doing that.

      • by Bite The Pillow ( 3087109 ) on Sunday December 11, 2016 @12:14PM (#53463581)

        It's the perfect troll. Say something obvious, and include over the top cynicism. It's the pattern for a large percentage of +5 mods here.

        Say something that people agree with emotionally, not factually, get +5, and now everyone has this opinion reinforced. People on the fence are swayed because it was agreed with by at least 3 others.

        And the worst part, factual replies are buried because they have had less time to be moderated. So rebuttals don't appear as prominently.

        It is groupthink, and it happens every day. My point is to recognize it not as a communication strategy, but as an ego strategy. Why else state the obvious? Yes there are people focusing on this facet, and others on a different facet, and those cannot be aligned. Obvious, oversimplified, and unnecessary.

        But you can't argue against it, because facts get buried, and people are fact resistant anyway. So we get the perfect troll. The unintentional, trolling for ego stroking and upmods. And it flies under the radar, as it isn't the classic troll for replies. It's beautiful, in a twisted way.

        • by fahrbot-bot ( 874524 ) on Sunday December 11, 2016 @01:08PM (#53463893)

          Say something that people agree with emotionally, not factually, get +5, and now everyone has this opinion reinforced. People on the fence are swayed because it was agreed with by at least 3 others. And the worst part, factual replies are buried because they have had less time to be moderated. So rebuttals don't appear as prominently.

          And you just explained the Trump campaign and victory.

          For example, fundamentally, both candidates agreed with rust belt voters that jobs were fewer and declining. Clinton told them about progress and that those jobs were probably gone for good, but they would get help learning and getting new jobs that would be better suited to the changing world. Trump blamed job losses on immigrants, greed and (in general) "others" and told them he would get their (same) jobs back. Clinton's statements are (probably) more based in reality, but Trump's makes people feel better - about themselves and their future - and reassures them that they just can keep going like before -- without having to learn new skills, get more education or be better prepared for the future. (I sympathize, but who among us here doesn't understand the need for continuing education and learning new, possibly different, skills to stay relevant in the workforce?)

          Then, to digress a bit, Trump and Pence bribe Carrier with $7M (over 10 years) in tax breaks to save ~1000 jobs and the employees rejoice - ignoring the fact the those Indiana employees just paid that bribe themselves. So lucky that Pence is (was) Governor of Indiana.

          • by Loki_1929 ( 550940 ) on Sunday December 11, 2016 @02:08PM (#53464243) Journal

            Clinton said generally (rarely ever actually talking directly to rust belt workers because her campaign took those lifelong Democrat voters for granted) that manufacturing jobs were gone forever and that was a good thing because trade is good for everyone. There was some lip service done to suggest retraining and better jobs were coming at some point, but nothing remotely specific. That was her basic message on the subject and she didn't spend a whole lot of time discussing it.

            Trump talked directly to rust belt blue collar workers, telling them that decades of trade policy - much of it championed by the Clintons - was rewarding and accelerating moving American manufacturing jobs overseas at the expense of the American worker, but that he would reverse that policy and stem the flow and even come up with ways to bring jobs like that back to the US.

            Somehow we act surprised that so many of the second, third, even fourth generation blue collar rust belt workers who spent decades doing the one job they know, the one job their fathers and grandfathers knew, the job that put food on the table and a roof over their family's head, who always voted for Democrats because Democrats were the union worker's best ally, who have watched their friends and family members lose those great jobs in droves, who've watched entire factories and factory towns disappear before their eyes, who sit at home every night wondering how long they have before their only means of earning a living wage disappears - we're surprised that these voters abandoned the candidate who told them it's better this way and voted for the candidate who promised to fix it.

            Or we just call them racists and sexists because we're pissy our candidate didn't win. Either way, it's total bullshit. Rust belt blue collar workers have voted solidly Democrat for generations because Democrats helped them put food on the table. Their entire way of life is now under threat, in no small part because of the work of Democrats (and to be fair, Republicans too!) on things like trade policy. It should be no surprise they'd get on board with just about anyone who will throw them a lifeline, especially when the other side is only offering to throw them a boat anchor.

    • by Ambassador Kosh ( 18352 ) on Sunday December 11, 2016 @12:02PM (#53463523)

      Actually the NSA has focused more on hacking and putting make sure crypto is weaker than it should be. Some algorithms are even no longer used due to this reason. If the NSA was seriously trying to protect the country they would be working to make sure the USA systems are much better protected and that means better security by default and better crypto.

      The NSA could have worked to make Windows, OSX, Linux, Android, iOS and internet of things stuff more secure by default and pushed for real security standards and tools in programmers to help make the software more secure.

      The USA is simply a higher value target than other computer systems due to the money in the economy and we will never gain as much from being able to break into other systems as they have to gain breaking into our systems.

      The NSA has failed at helping protect the country and destroyed almost any security work they do try and do since they have no credibility anymore. It will take decades to repair the damage if they even try at all.

      • If the NSA was seriously trying to protect the country they would be working to make sure the USA systems are much better protected and that means better security by default and better crypto.

        At one time, this is exactly what they did. Read up on the history of DES S-boxes sometime.

    • by fuzzyfuzzyfungus ( 1223518 ) on Sunday December 11, 2016 @12:15PM (#53463589) Journal
      This is actually one of the major criticisms(right after the whole 'makes grim mockery of the 4th amendment' class of problems) of the NSA's choice of focus.

      When they focus on doing security their work is viewed pretty favorably. When they tolerate(and even create, as in the case of Dual_EC_DRGB) vulnerabilities in order to preserve their ability to play offense; they not only raise serious questions about government surveillance; but they actively sabotage the 'security' part of their mission in exchange for some surveillance data of questionable utility.

      There is absolutely nothing contradictory about opposing the NSA's enthusiasm for playing black-hat while also being of the opinion that, if anything, we need vastly more information security work being done. Espionage isn't of zero value; but it is a very dangerous choice of focus when we depend on computers as much or more as anybody else; and mostly use the same basic hardware and software. We have had very little reason, aside from some vague handwaving and 'trust us' to believe that the NSA's (admittedly technically impressive) exploitation of the fact that security is mostly awful has done us even close to enough good to offset the harm done by the fact that security is mostly awful.
    • by Anonymous Coward on Sunday December 11, 2016 @12:31PM (#53463675)

      While nobody wants a huge abusive spy agency tracking Americans at all times, there are going to be plenty of people on here jumping up and down hoping for the destruction of the NSA... while simultaneously running around like chickens with their heads cut off claiming that Russian Hackers are the sole reason that Trump is president.

      Seriously, WTF is this comment and why is it (currently) +4 Interesting?

      #1. Many, many people who have been most critical of the NSA's activities have been skeptical [snopes.com] of the claim that Russian hackers are the sole reason Trump is president. This includes Glenn Greenwald [twitter.com] as well as many in the security community who don't take leaked reports of CIA briefings at face value. I'm not seeing anyone who is anti-NSA spying wholesale accepting the CIA's story. So the premise of your point is not correct.

      #2. Even if they DID accept the Putin story... There is no inherent conflict between not wanting a "huge abusive spy agency tracking Americans at all times" and wanting an agency to protect against foreign attack (if one has occurred, which as I said is not certain).

      #3. The NSA has done very little that would have prevented the hacks, while actually having done very much to weaken [theguardian.com] national security-- the kind of thing that facilitates break-ins. They have compromised security algorithms [utexas.edu] and pushed the RSA to accept them as standards. They have deliberately inserted weaknesses [infoworld.com] into Cisco products [arstechnica.com]. There are numerous examples of this. If the "Russians" has hacked us because of weak technology, the NSA very well could be to blame. The assumption that they're some kind of shield against attacks appears to be backwards.

      #4. Podesta's emails were reportedly hacked via social engineering [businessinsider.com]. Explain to me how you think the NSA's role has been stopping human beings from typing in their own Gmail login information when tricked to do so.

      #5. Finally, elucidate on the connection you make between a "huge spy agency tracking Americans at all times" and an alleged nation state hacking campaign. What the hell does the surveillance state agency spying on all citizen activity have to do with these hacks? If anything, the alleged influence of Russian agents in our election occurred WHILE the mass-spying is occurring. Therefore, by your logic, the NSA should stop all spying to stop Putin. Right?. Right??

      In short, your post makes no sense, it is not "insightful"-- it connects dots that don't have anything to do with each other. Worse, it is in some ways dangerous because it is really an attack on questioning authority. There is zero contradiction in opposing an all-powerful state surveillance agency on one hand vs. a corrupted electoral system on the other.

      Not to mention that those reports of foreigners meddling in our election originate from an agency with a notorious decades of history in... well, meddling with foreign elections.

    • by hey! ( 33014 ) on Sunday December 11, 2016 @12:37PM (#53463719) Homepage Journal

      This is a false dichotomy.

      The issue is protecting the rights and freedoms of citizens, whether from interference from foreign powers or unaccountable elements in our own government. Or is government automatically our friend now? Who exactly is trying to have it both ways?

      So there is really only one issue: the liberty of Americans. Granted you can't do a perfect job, and at some point you're taking away more liberty than, statistically speaking, you're saving. That's when you've gone too far. And I suspect this may have a great deal to do with the morale of the techies in the agency, who understand this better than the political mandarins they report to.

    • Do you really think the NSA protects anyone against hackers? We've already seen that they would rather keep their own surveillance capability instead of fixing bugs, at times even making encryption weaker......
    • Comment removed (Score:4, Insightful)

      by account_deleted ( 4530225 ) on Sunday December 11, 2016 @04:46PM (#53464931)
      Comment removed based on user account deletion
    • by King_TJ ( 85913 )

      Sure, SOME people might do that. But most people I know (who range Libertarian to Conservative) are neither that concerned about the veracity of the claims that Russians were responsible for the leaked Hillary campaign emails OR concerned that the NSA is bleeding some talent right now.

      As far as I'm concerned, the NSA serves a useful purpose, but it's one of those organizations that's been entrusted with a whole lot of power. Our government has a history of doing that at times, and inevitably, it comes back

  • Snowden made something like 200,000 a year to be a sys admin. That is high even in Silicon Valley.

    I'd say the NSA is more like Bernie Madoff's organization. Everyone makes such stupid high salaries, they take the money and stfu.

    • these aren't going to be sys admins leaving. These will be the guys that do crypto and the hard math stuff. Wallstreet will gobble them up at $500k/yr+.

      Gov't jobs really don't pay all that well at the top end. They're only real advantage is they're secure and often found in cities good for raising families. It's mostly the lower end where they pay better than market rates and they do that to try and spread some money around poor communities (e.g. socialism) and keep the economy from completely collapsin
    • by sg_oneill ( 159032 ) on Sunday December 11, 2016 @12:00PM (#53463513)

      Snowden made something like 200,000 a year to be a sys admin. That is high even in Silicon Valley.

      Snowden did not work for the NSA, he workde briefly for the CIA but took a private sector job for Booz Allen, and was then contracted to the NSA

      Private contractings a whole different kettle of fish. And I suspect a lot of these leaving govt jobs are leaving to go work at private contractors wherein they'll just end up back at the agency they where at before albeit as a contractor, and costing the govt 3x as much, and none of the accountability required of federal employees.

    • Now we know why the government is so happy to see IT salaries drop. No one want to leave their job security to go to a private job that will soon be outsourced. They just didn't move fast enough to keep their employees. Those that are leaving will soon be back when they find out what is happening to the jobs they think they are leaving NSA for.
  • "Protect US" (Score:3, Insightful)

    by zelkovamoon ( 1929096 ) on Sunday December 11, 2016 @11:47AM (#53463403)
    Protect US - From a bunch of hoodlum fundamentalists that kill fewer Americans on average than lightning does. That old adage about trading freedom for security aside, if we wouldn't give every single 'terror' crime days of 24 hour news coverage, they would fade away and blend into the overall background of murders. If the American people want surveillance, it's only because we've created this narrative of fear or "it could happen to you" when in reality you are far far far more likely to die driving into work than from a terrorist attack. Allowing the terrorists to shock and scare the population is doing exactly what the terrorists want... so why do they do it?
  • by khallow ( 566160 ) on Sunday December 11, 2016 @11:49AM (#53463425)

    âoeWhat really bothers me is that the people of NSA, these folks who take paltry government salaries to protect this nation, are made to look like they are doing something wrong,â Alexander said Tuesday. âoeThey are doing exactly what our nation has asked them to do to protect us. They are the heroes. They are the ones that deserve our praise. Not a guy who took this race to Hong Kong and to Moscow.â

    Or maybe they no longer want to work at an unaccountable agency which is breaking the law on a regular basis? Or a reorg that sounds a bit screwed up?

  • by MobyDisk ( 75490 ) on Sunday December 11, 2016 @11:52AM (#53463447) Homepage

    The link in the summary points to the submission. The submission itself has no links. No sources for the quotes, no nothing. Of course, even without an article there's already 20 comments. That takes RTFA to a new level: There actually *is* no article.

  • A country where people consider their political opponents "enemies" and where the leaders use government power to hurt them is not a country that can trust an agency like the NSA. And it's not a country that prioritizes the defense against foreign threats that the NSA was originally created to provide.
     

  • Especially in the security field, people have always taken government jobs for a while in order to leave for a better-paying private career.

    There's a whole network of ex-police, FBI, and security officials working for corporations and private security services. VP in charge of security is a well-paying job.

    Back in the 1990s, I met a guy from the New York State police department who had established the state's first computer crime division. After his talk, he told me that he was planning to work for the poli

  • I'm surprised (Score:5, Insightful)

    by ledow ( 319597 ) on Sunday December 11, 2016 @11:56AM (#53463487) Homepage

    I'm surprised that they even go there in the first place.

    The kind of people who can do software security audits, tap into hardware designs and suchlike can command just about any salary they like.

    The problem I have is understanding why such people would ever end up at places like the NSA/GCHQ in the first place. It's no longer a "cracking open the enigma" kind of place and hasn't been in a very long time, and now they are spying on their own, including themselves and their families, and putting deliberate holes into things, and doing all kinds of stupid shit.

    I'm amazed anyone goes there at all.

    I'm a maths and computer science graduate. I have a keen interest in coding theory and graph theory especially, both borne of an interest in codes, ciphers and such concepts. I'm a tinkerer and play with electronics and radios in my spare time, not to mention programming and other kinds of gadgets. I don't claim to be anywhere near the top of the class but, surely, I'm at least the type of person who they should be looking at.

    The problem is that because of the above, I'm inherently buried in reasons that freedom, privacy and security need to be preserved by means other than trust in the government.

    They are quite literally the last places I'd want to work and, even as a pacifist, if we were to go to war (a proper war, not some undeclared concept-war), and I was drafted in and told to do something, I'd refuse to the utmost of my being but even if forced at gunpoint every morning, I'd end up making bullet casings or delivering food rather than touch those kinds of organisation. Some activity for which I'm just another pair of hands.

    Turing is my hero, Bletchley is my nativity manger, and "brains over brawn" are my commandments . But I couldn't ever do what he did, or work where he did, because of what it was and, even worse now, because of what it's become.

    It's why I don't give credence to the "acres of supercomputers tapping all your calls" crap. I don't believe it's impossible, it's just expensive. And you can find an acre of supercomputers in any country if you rearrange things. I just don't believe they have the talent to make it do anything useful, and that much of it is wasted in isolated brute-force and hope rather than working out how to utilise it effectively.

    Whenever I hear "the next stage" - more surveillance, laws protecting those agencies when they break the law, etc. - I find it even more ludicrous that what they have are a bunch of highly-skilled, educated, dedicated codebreakers, engineers and undetectable spies. It doesn't fit. These agencies are so good and yet Manning and Snowden can just copy embarrassing things to a USB stick and make them look like fools (not that I particularly think either of them got anything of value out of the venture, even if they believe so... they may have made the agencies look foolish and showed things weren't as they should be but literally NOTHING has changed because of them that I can see).

    I don't buy it. I certainly don't buy that highly educated people who could walk out tomorrow and get a job in a computer security company (even of their own making) and sell products never seen before, ala Zimmerman, and they just sit there tapping people's emails and letting their agency's reputation go to shit in the press when they are all about secrecy.

    The good ones probably left a long time ago. And no Times crossword is going to bring them back, even if we go to war, while those agency's agendas aren't compatible with the precept that they are they to "protect" their peoples.

  • How about this (Score:4, Insightful)

    by sacrilicious ( 316896 ) <qbgfynfu.opt@recursor.net> on Sunday December 11, 2016 @11:56AM (#53463489) Homepage

    "What really bothers me is that the people of NSA, these folks who take paltry government salaries to protect this nation, are made to look like they are doing something wrong," the former NSA Director added. "They are doing exactly what our nation has asked them to do to protect us. They are the heroes."

    Let's make a deal: I'll make it clear I don't want your flavor of so-called heroism, and you can quit what you're doing and stop feeling put-upon and self-righteous.

    But you're so addicted to your "hero" narrative that you'll never step away from the spy cams. Pricks. Can you at least mute your press conference drivel?

  • by QuietLagoon ( 813062 ) on Sunday December 11, 2016 @12:04PM (#53463535)

    ..."What really bothers me is that the people of NSA, these folks who take paltry government salaries to protect this nation, are made to look like they are doing something wrong," the former NSA Director added. "They are doing exactly what our nation has asked them to do to protect us. They are the heroes."...

    I am sure that many, even most, in the NSA are the heroes he asserts. On the other hand there are instances such as NSA Officers Spy on Love Interests [wsj.com] that cast a pall upon the agency.

    .
    Maybe it is time to stop blaming the media for reporting what is happening.

    • by AthanasiusKircher ( 1333179 ) on Sunday December 11, 2016 @03:00PM (#53464429)

      "They are doing exactly what our nation has asked them to do to protect us. They are the heroes."...

      I also think this misunderstands the word "hero." Normally we don't equate the word "hero" with "doing exactly what we ask" of someone. A hero is generally somebody who goes beyond what the normal person would do -- who aspires to nobler intentions, greater achievements, unusual bravery, courage in the face of overwhelming odds, etc.

      I don't mean to take anything away from those who do public service -- whether military, police, firefighters, paramedics, teachers, etc. Most of them are admirable people, but does just "showing up for work" qualify them to be "heroes"? I think there's some modern slippage in meaning that tends to say "yes," but that's not what the word "hero" has traditionally meant.

      I'm sure there are some NSA people who are legitimate "heroes" in the traditional sense -- people who go far beyond what an average person might do, or what we'd ask a reasonable person to do, in service of the U.S. And I laud their efforts.

      But just because "our nation asked" a number of NSA folks to spy on people in unconstitutional or illegal ways doesn't make their actions right, let alone "noble," and certainly not "heroic." Even in the service of "protecting us." And even IF you agree with the spying, it STILL doesn't make most people who just do their job "heroes," especially if they aren't doing anything particularly courageous, etc.

      Shame on this NSA Director for co-opting the language of heroism to try to legitimize his own bad actions and decisions. It is a nefarious distortion and appropriation of the term that detracts from the legitimate heroes who serve us in all sorts of ways.

  • by mykepredko ( 40154 ) on Sunday December 11, 2016 @12:07PM (#53463547) Homepage

    Isn't what Director Alexander saying the Nuremberg defense?

    How is saying "They are doing exactly what our nation has asked them to do to protect us. They are the heroes." any different than someone saying that they were "just following orders from a superior" (https://en.wikipedia.org/wiki/Superior_orders)?

  • I am honestly surprised that some of these people in cyber companies make up to seven figures. That's five times what the chairman of the Joint Chiefs of Staff makes. Right? And these are people that are 32 years old. Do the math.

    That's a wonderful double entendre right there. If your old geezers could do the math, you wouldn't have to pay youngsters who can. Wonderful to see military's "now that we have Cobol, can we get rid of all those beatnik programmers" still alive after all those decades! So much Schadenfreude to be had here.

    • "now that we have Cobol, can we get rid of all those beatnik programmers"

      Check your punctuation rules. It isn't a quote, when you are quoting directly from your imagination.

      Or, you can defend your punctuation with a citation.

  • "They are doing exactly what our nation has asked them to do to protect us. They are the heroes."

    We asked them to protect us, not treat everyone as a criminal by scanning every phone call, tracking our movements and creating a database of every person in this country to run queries against.

    Also, they're not heroes. Not even for broad definition of heroes. They're doing a job a) they want to do and b) they're paid to do. If they're considered heroes then so are myself and my team whose job it is t
  • by ooloorie ( 4394035 ) on Sunday December 11, 2016 @12:29PM (#53463667)

    It takes a certain disconnect from reality for Mr. Alexander to believe that Americans are going to feel much pity for government employees getting only six figure salaries (with good benefits and retirement plans) when a few of them could be making seven figure salaries in the private sector; or when he thinks that "you all wanted to be spied on by us" is going to get much agreement from the public. In any case, I suspect that some of those employees are leaving not because of the money, but because of conscience and purpose: they have recognized that the NSA is a fairly useless institution and an institution with questionable ethics.

  • If I were working for the NSA right now, I probably wouldn't be the happiest employee either. Ever since the Snowden thing happened, plus WikiLeaks and the like, followed by the Equation Group and that guy who was caught getting ready to sell stolen material, the general public has been shown a new perspective about what intelligence agencies do behind the scenes. I highly doubt that's the full picture of what they do, but that's the problem with seeing only pieces of the puzzle.

    It is definitely a different

  • NSA, CIA, DHS, hell even NASA, army, and navy positions are going to be emptied as intelligence is anti-Trump, and Trump is anti-intelligence; both forms work and supply distinct explanations. There aren't enough of his family members to fill all those seats so Trump won't be able to respond.
  • >In large part, Alexander blamed the press for propagating an image of the NSA that causes people to believe they are being spied on at all times by the U.S. government regardless of their independent actions. (...)
    >"What really bothers me is that the people of NSA, these folks who take paltry government salaries to protect this nation, are made to look like they are doing something wrong," the former NSA Director added. "They are doing exactly what our nation has asked them to do to protect us. They

  • by Anonymous Coward
    ALL NSA employees are required to take an oath of office. Part of that oath is to support and defend the Constitution of the United States. The Constitution has several amendments, Number 1 is "Congress shall make no law respecting an establishment of religion, or prohibiting the free exercise thereof; or abridging the freedom of speech, or of the press; or the right of the people peaceably to assemble, and to petition the Government for a redress of grievances." Freedom of Speech!!! Yet when some NSA emplo
  • Yes, nice equation you got there: doing exactly what you've been told to do makes you a hero.

    Interesting how a culture of inhibited personal judgement—once people spy greener grass on the other side—turns out not to be a selling feature. Let me ask you a question: This "does not compute" head-in-sand response of yours, how's that working for you inside the giant, black Faraday cage?

    I've never been able to comprehend how many people look at history, and the first thing they wish to do is abstract

  • by saccade.com ( 771661 ) on Sunday December 11, 2016 @02:39PM (#53464365) Homepage Journal
    I see a parallel here with the US Patent office. They have big employee turnover: graduates with tech degrees sign up as patent examiners, use their government education benefits to get a law degree, then leave a few years later for much greener pastures as patent attorneys. Same could be happening at the NSA: Spend a few years letting Uncle Sugar teach you the basics of computer security and penetration testing, then leave for more $$$ as a computer security consultant. Infosec is a hot field now.
  • by geekmux ( 1040042 ) on Sunday December 11, 2016 @03:22PM (#53464525)

    Information Security in recent years has gone from a hard job to a damn near impossible job. It's not a matter of if, it's a matter of when; that statement has gone from FUD to fact very quickly, so it doesn't surprise me in the least that the "best and brightest" are doing the math, and at least are looking to get paid for tackling the impossible job.

    There's one simple answer to this; pay security professionals what they're worth.

    Don't give me this bullshit about how the CJCS makes x and InfoSec professionals are demanding 5x. It's not that fucking hard to find a businessman to fill the CJCS position. It can be damn hard to find skilled operators in the InfoSec community. Demand outpaces supply, resulting in increased salaries. Not a fucking hard concept.

    Clearly our government doesn't want to pay the appropriate pay rate, which will cost them when they refuse to prioritize funds properly. Can't simplify this any more, so if they don't want to learn, then they're getting what they deserve.

  • by AHuxley ( 892839 ) on Sunday December 11, 2016 @06:02PM (#53465273) Journal
    The NSA saw a huge growth in staff, mission creep and mission design in the past decade.
    From just supporting other real agencies with background data in the past, the NSA then wanted to design mission, to follow the missions and get the resulting political/mil budget growth.
    A huge growth in budget, outside staff allowed in with poor vetting, computer use, decryption expected to track an enemy who would always be connected. Decades of interesting people always using a phone, fax, computer, cell phone, the internet, sat phone, pager, have a bank account, order services online... was just expected to grow.
    A system designed to track domestic users with all junk big US/UK brand crypto and all foreign mil who's encrypted command and control was export grade and also junk.
    The NSA projected endless growth in domestic spying and that every other nation would advance into export grade junk encrypted gov, banking, command and control networks.

    Now the collection issues that MI5,6, CIA, GCHQ hinted at is reality. Once the world knows its been spied on domestically and globally the interesting people can just change their behaviour.
    Human spies, covert teams need really great support, mass domestic collection has taken their budgets away for decades.
    The decades of easy domestic decryption becomes less easy when interesting people stop using junk brand devices, systems and networks.
    They meet face to face, in faith groups, cults, on holiday, sabbaticals and are part of an endless jet set. No phone, fax, junk backdoor and trapdoor US brand crypto network needed. Number stations are one way.
    Parallel construction in domestic courts does not work. For a few easy years it looks good and budgets grow. Decades of access is lost once interesting networks go dark once court staff and security cleared lawyers work out what happened to their clients.

    Too many outside contractors, the core mission of helping others in the US mil replaced with a rush for budget growth.
    The GCHQ faced the same issues in the 1970-80's. They returned to their actual core mission and supported their own staff with merit advancement and better pay, further education.
    Looking after workers is a start, vetting needed contractors and then replace the contractors with real staff. Decades of good internal advancement support for staff also helps. Been replaced by or having to work under a contractor is not great. The buddy system now shows how deep and far low quality contractor vetting has reached.
    A vast domestic and global spying network can be run by contractors but quality and vetting will slip as any clandestine service knows or later finds out.
  • by Gussington ( 4512999 ) on Sunday December 11, 2016 @09:26PM (#53466343)
    "They are doing exactly what our nation has asked them to do to protect us. They are the heroes."
    Edward Snowden did exactly that and you fucked him in the ass. Why would anyone else bother?

Real Programs don't use shared text. Otherwise, how can they use functions for scratch space after they are finished calling them?

Working...