<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Heroes, Hackers, and Hacks</title>
	<atom:link href="http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/feed/" rel="self" type="application/rss+xml" />
	<link>http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/</link>
	<description>Defending the liberal tradition in history, science, and philosophy.</description>
	<lastBuildDate>Sat, 11 Feb 2012 13:24:07 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Martin L. Shoemaker</title>
		<link>http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162458</link>
		<dc:creator>Martin L. Shoemaker</dc:creator>
		<pubDate>Sat, 20 Sep 2008 14:06:41 +0000</pubDate>
		<guid isPermaLink="false">http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162458</guid>
		<description>John_B, you&#039;re arguing pragmatism.


jrogge, you&#039;re trying to educate, so people realize the limits of pragmatism and the risks in careless use of tech.


I&#039;m not seeing any disagreement there, because you&#039;re on two different tracks (and in my opinion, both right).</description>
		<content:encoded><![CDATA[<p>John_B, you&#8217;re arguing pragmatism.</p>
<p>jrogge, you&#8217;re trying to educate, so people realize the limits of pragmatism and the risks in careless use of tech.</p>
<p>I&#8217;m not seeing any disagreement there, because you&#8217;re on two different tracks (and in my opinion, both right).</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jrogge</title>
		<link>http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162447</link>
		<dc:creator>jrogge</dc:creator>
		<pubDate>Sat, 20 Sep 2008 06:02:02 +0000</pubDate>
		<guid isPermaLink="false">http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162447</guid>
		<description>&lt;em&gt;The ideal is wonderful. Itâ€™s sometimes attainable. When it isnâ€™t, the world cannot push the pause button and wait until the IT folks get it all squared away.

&lt;/em&gt;I agree with that. The only point I am making is, when you do do that you are risking something. If it were a dire emergency and the system was down and there was no way to send an encrypted message to someone that needs it now, then you have no choice.

All I am saying is, when you use a &quot;Yahoo&quot; account you have a good chance of getting hacked and getting that information to the wrong hands. The world may not be perfect, but under normal circumstances this should be avoided. If you are a high profile public figure, it is probably best to avoid this sort of thing for this very reason. I would hate to think someone sent our President vital security information on an unsecured AOL chat or a Gmail account. I am hoping this never happened.</description>
		<content:encoded><![CDATA[<p><em>The ideal is wonderful. Itâ€™s sometimes attainable. When it isnâ€™t, the world cannot push the pause button and wait until the IT folks get it all squared away.</p>
<p></em>I agree with that. The only point I am making is, when you do do that you are risking something. If it were a dire emergency and the system was down and there was no way to send an encrypted message to someone that needs it now, then you have no choice.</p>
<p>All I am saying is, when you use a &quot;Yahoo&quot; account you have a good chance of getting hacked and getting that information to the wrong hands. The world may not be perfect, but under normal circumstances this should be avoided. If you are a high profile public figure, it is probably best to avoid this sort of thing for this very reason. I would hate to think someone sent our President vital security information on an unsecured AOL chat or a Gmail account. I am hoping this never happened.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: John_B</title>
		<link>http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162395</link>
		<dc:creator>John_B</dc:creator>
		<pubDate>Fri, 19 Sep 2008 03:11:37 +0000</pubDate>
		<guid isPermaLink="false">http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162395</guid>
		<description>jrogge: Real life interferes with the ideal, sometimes. When I was working for State, I had two &#039;government&#039; e-mail addresses; one unclassified, on classified. Not only were there two different addresses, but I needed two different machines to access them. Security regs required a 5-ft air gap between the two.

But you know what? The e-mail servers that handled the accounts weren&#039;t always up and working. You can blame MS; you can blame the techs. Whichever was responsible, the systems were frequently down.

I had no qualms whatsoever about using my Yahoo e-mail to contact people to handle unclassified matters, particularly when the e-mail I was sending to had a .gov address. The message would be archived at one end instead of two, but it was archivable and, in the event of a FOIA request, searchable. Just not by me or my local techs. Otherwise, I could use a phone, but with an 8-hour time difference from DC, that wasn&#039;t always useful.

If the classified e-mail was down, then I could either wait until it was up again or change to a scrambled phone if it was critical. There&#039;s always somebody at the other end of that phone, 27/7.

Routine business can&#039;t always wait until the system is up and running, particularly when you don&#039;t know how long it will take before it to be up again. Sometimes, you have to actually do things, not just plan or talk about them. Giving confirmation that tickets are waiting for a flight tomorrow doesn&#039;t work when the e-mail is down until two days from tomorrow. Sending a query that needs an immediate answer is not compatible with waiting for days for that answer. Telling someone that he shouldn&#039;t get on a plane tonight is information that needs to move right now, not tomorrow. 

As noted above, putting public systems out of bounds also means that no work gets done from home. Lots of work gets done from home.

I worked in a pretty secure office. I needed to punch in combinations in six different locks, including the elevator, on my way into my office, starting at the front gate. I had Marine Security Guards checking my office every night just to make sure I hadn&#039;t left any classified materials out of the safes. I couldn&#039;t have my cell phone in my office, couldn&#039;t have a TV or radio, couldn&#039;t even have a wall clock unless it was purchased under a secure protocol. PDAs were forbidden, even if they had no telephonic circuitry. 

Diplomatic Security was very much on top of how our computers worked and didn&#039;t work. They knew full well that public systems sometimes had to be used for official businesses. That didn&#039;t bother them. They got bothered when &lt;em&gt;classified&lt;/em&gt; information needed to be moved. 

You see, even they had to face reality and use public systems sometimes, for some kinds of information flow. None of us was intentionally stupid about security and we knew what could and could not be said over open circuits. Since our home phones were bugged anyway, we also knew how to hint at the content of a sensitive message and then get to the proper device for the required level of security.

There was certainly no regulation forbidding the use of a public system to handle unclassified business. An e-mail from a .gov address to my personal address was accepted as being as authoritative as one to my .gov address because I was considered trustworthy as certified by my security clearance.

Could I have gamed the system? In some ways, certainly. There&#039;s nothing, for example, that would prevent me from simply memorizing the contents of a classified cable, then retyping it in an unclassified e-mail. Except that I, and most of my government peers, had a sense of honor that wouldn&#039;t permit us to do that. There were certainly punishments to be meted out after the fact if we did things like that, up to and including Leavenworth and hundred thousand dollar fines. But you know, most of us were decent people.

The ideal is wonderful. It&#039;s sometimes attainable. When it isn&#039;t, the world cannot push the pause button and wait until the IT folks get it all squared away.

&lt;em&gt;John_B&#039;s last blog post..&lt;a href=&#039;http://xrdarabia.org/2008/09/18/saudis-craft-new-anti-smoking-laws/&#039; rel=&quot;nofollow&quot;&gt;Saudis Craft New Anti-Smoking Laws&lt;/a&gt;&lt;/em&gt;</description>
		<content:encoded><![CDATA[<p>jrogge: Real life interferes with the ideal, sometimes. When I was working for State, I had two &#8216;government&#8217; e-mail addresses; one unclassified, on classified. Not only were there two different addresses, but I needed two different machines to access them. Security regs required a 5-ft air gap between the two.</p>
<p>But you know what? The e-mail servers that handled the accounts weren&#8217;t always up and working. You can blame MS; you can blame the techs. Whichever was responsible, the systems were frequently down.</p>
<p>I had no qualms whatsoever about using my Yahoo e-mail to contact people to handle unclassified matters, particularly when the e-mail I was sending to had a .gov address. The message would be archived at one end instead of two, but it was archivable and, in the event of a FOIA request, searchable. Just not by me or my local techs. Otherwise, I could use a phone, but with an 8-hour time difference from DC, that wasn&#8217;t always useful.</p>
<p>If the classified e-mail was down, then I could either wait until it was up again or change to a scrambled phone if it was critical. There&#8217;s always somebody at the other end of that phone, 27/7.</p>
<p>Routine business can&#8217;t always wait until the system is up and running, particularly when you don&#8217;t know how long it will take before it to be up again. Sometimes, you have to actually do things, not just plan or talk about them. Giving confirmation that tickets are waiting for a flight tomorrow doesn&#8217;t work when the e-mail is down until two days from tomorrow. Sending a query that needs an immediate answer is not compatible with waiting for days for that answer. Telling someone that he shouldn&#8217;t get on a plane tonight is information that needs to move right now, not tomorrow. </p>
<p>As noted above, putting public systems out of bounds also means that no work gets done from home. Lots of work gets done from home.</p>
<p>I worked in a pretty secure office. I needed to punch in combinations in six different locks, including the elevator, on my way into my office, starting at the front gate. I had Marine Security Guards checking my office every night just to make sure I hadn&#8217;t left any classified materials out of the safes. I couldn&#8217;t have my cell phone in my office, couldn&#8217;t have a TV or radio, couldn&#8217;t even have a wall clock unless it was purchased under a secure protocol. PDAs were forbidden, even if they had no telephonic circuitry. </p>
<p>Diplomatic Security was very much on top of how our computers worked and didn&#8217;t work. They knew full well that public systems sometimes had to be used for official businesses. That didn&#8217;t bother them. They got bothered when <em>classified</em> information needed to be moved. </p>
<p>You see, even they had to face reality and use public systems sometimes, for some kinds of information flow. None of us was intentionally stupid about security and we knew what could and could not be said over open circuits. Since our home phones were bugged anyway, we also knew how to hint at the content of a sensitive message and then get to the proper device for the required level of security.</p>
<p>There was certainly no regulation forbidding the use of a public system to handle unclassified business. An e-mail from a .gov address to my personal address was accepted as being as authoritative as one to my .gov address because I was considered trustworthy as certified by my security clearance.</p>
<p>Could I have gamed the system? In some ways, certainly. There&#8217;s nothing, for example, that would prevent me from simply memorizing the contents of a classified cable, then retyping it in an unclassified e-mail. Except that I, and most of my government peers, had a sense of honor that wouldn&#8217;t permit us to do that. There were certainly punishments to be meted out after the fact if we did things like that, up to and including Leavenworth and hundred thousand dollar fines. But you know, most of us were decent people.</p>
<p>The ideal is wonderful. It&#8217;s sometimes attainable. When it isn&#8217;t, the world cannot push the pause button and wait until the IT folks get it all squared away.</p>
<p><em>John_B&#8217;s last blog post..<a href='http://xrdarabia.org/2008/09/18/saudis-craft-new-anti-smoking-laws/' rel="nofollow">Saudis Craft New Anti-Smoking Laws</a></em></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jaymaster</title>
		<link>http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162393</link>
		<dc:creator>jaymaster</dc:creator>
		<pubDate>Fri, 19 Sep 2008 00:21:11 +0000</pubDate>
		<guid isPermaLink="false">http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162393</guid>
		<description>And we should also extend Martinâ€™s sage advice to the &quot;other side&quot;.Â Â  

There is no evidence that Palin used these email accounts for state business. Â That too is pure speculation at this point.</description>
		<content:encoded><![CDATA[<p>And we should also extend Martinâ€™s sage advice to the &quot;other side&quot;.Â Â  </p>
<p>There is no evidence that Palin used these email accounts for state business. Â That too is pure speculation at this point.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: CosmicConservative</title>
		<link>http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162392</link>
		<dc:creator>CosmicConservative</dc:creator>
		<pubDate>Fri, 19 Sep 2008 00:21:03 +0000</pubDate>
		<guid isPermaLink="false">http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162392</guid>
		<description>jrogge:

Well, if you ever run for office, I guess you&#039;ll be the one with two blackberries and two cell phones to your ear all the time.

More power to you.

&lt;em&gt;CosmicConservative&#039;s last blog post..&lt;a href=&#039;http://www.cosmicconservative.com/weblog/?p=4094&#039; rel=&quot;nofollow&quot;&gt;Tennessee State Representative&#039;s son targeted in Palin email hack probe&lt;/a&gt;&lt;/em&gt;</description>
		<content:encoded><![CDATA[<p>jrogge:</p>
<p>Well, if you ever run for office, I guess you&#8217;ll be the one with two blackberries and two cell phones to your ear all the time.</p>
<p>More power to you.</p>
<p><em>CosmicConservative&#8217;s last blog post..<a href='http://www.cosmicconservative.com/weblog/?p=4094' rel="nofollow">Tennessee State Representative&#8217;s son targeted in Palin email hack probe</a></em></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: zach</title>
		<link>http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162389</link>
		<dc:creator>zach</dc:creator>
		<pubDate>Fri, 19 Sep 2008 00:07:33 +0000</pubDate>
		<guid isPermaLink="false">http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162389</guid>
		<description>Dave,

I don&#039;t know, which criminal&#039;s house?</description>
		<content:encoded><![CDATA[<p>Dave,</p>
<p>I don&#8217;t know, which criminal&#8217;s house?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Martin L. Shoemaker</title>
		<link>http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162387</link>
		<dc:creator>Martin L. Shoemaker</dc:creator>
		<pubDate>Thu, 18 Sep 2008 23:53:49 +0000</pubDate>
		<guid isPermaLink="false">http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162387</guid>
		<description>&lt;em&gt;The hacker is apparently one &lt;a href=&quot;http://minx.cc/?post=273765&quot; rel=&quot;nofollow&quot;&gt;David Kernell&lt;/a&gt;â€“ son of a Democratic state lawmaker.Â  Let the canonization begin.&lt;/em&gt;


Very far from proven yet. Don&#039;t jump to conclusions. Did someone say &quot;Hatfill&quot;?</description>
		<content:encoded><![CDATA[<p><em>The hacker is apparently one <a href="http://minx.cc/?post=273765" rel="nofollow">David Kernell</a>â€“ son of a Democratic state lawmaker.Â  Let the canonization begin.</em></p>
<p>Very far from proven yet. Don&#8217;t jump to conclusions. Did someone say &quot;Hatfill&quot;?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jrogge</title>
		<link>http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162386</link>
		<dc:creator>jrogge</dc:creator>
		<pubDate>Thu, 18 Sep 2008 23:27:23 +0000</pubDate>
		<guid isPermaLink="false">http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162386</guid>
		<description>&lt;em&gt;You think the appropriate response is &quot;Hang on, let me call you on my government phone.&quot;&lt;/em&gt;

Yes.

Considering the attitude adjustment to security after 911 I would say yes to that. If you want to advocate laziness that&#039;s fine. You could also say, shoot me an e-mail on that (we know which one).

If you want common sense, work in a factory. Don&#039;t work for a bureau or government office. In these positions you sometimes have sensitive data and the line is provided to you for a reason. I am sorry you feel that issues of security do not outweigh simple convenience.

If you are dealing with sensitive information, even if it is a bill that is public knowledge, you risk much using a public line to discuss it.</description>
		<content:encoded><![CDATA[<p><em>You think the appropriate response is &quot;Hang on, let me call you on my government phone.&quot;</em></p>
<p>Yes.</p>
<p>Considering the attitude adjustment to security after 911 I would say yes to that. If you want to advocate laziness that&#8217;s fine. You could also say, shoot me an e-mail on that (we know which one).</p>
<p>If you want common sense, work in a factory. Don&#8217;t work for a bureau or government office. In these positions you sometimes have sensitive data and the line is provided to you for a reason. I am sorry you feel that issues of security do not outweigh simple convenience.</p>
<p>If you are dealing with sensitive information, even if it is a bill that is public knowledge, you risk much using a public line to discuss it.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: CosmicConservative</title>
		<link>http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162385</link>
		<dc:creator>CosmicConservative</dc:creator>
		<pubDate>Thu, 18 Sep 2008 23:24:39 +0000</pubDate>
		<guid isPermaLink="false">http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162385</guid>
		<description>Let me try to take this to a more personal level.

I would guess that the majority of people on this blog have both a work and a home email address. I certainly do.

I try to keep the two separate, but I have also found it to be impossible to do so. In part that is because there is significant overlap between my professional and my personal circle of contacts. Plus I am not allowed to check my personal email while at work due to security concerns. (When I work from home I can do so since I have separate computers). So if someone wants to invite me to a lunch, they send my WORK email the invitation.

I would say that it is a rare week that I don&#039;t have at least one significant personal exchange on my work email, and vice versa.

Trying to make an issue out of this is just a demonstration about how LITTLE the army of Obamatons actually have found to beat Sarah Palin with after three weeks digging under every moose dropping in Wasilla.

&lt;em&gt;CosmicConservative&#039;s last blog post..&lt;a href=&#039;http://www.cosmicconservative.com/weblog/?p=4093&#039; rel=&quot;nofollow&quot;&gt;They just can&#039;t help themselves?&lt;/a&gt;&lt;/em&gt;</description>
		<content:encoded><![CDATA[<p>Let me try to take this to a more personal level.</p>
<p>I would guess that the majority of people on this blog have both a work and a home email address. I certainly do.</p>
<p>I try to keep the two separate, but I have also found it to be impossible to do so. In part that is because there is significant overlap between my professional and my personal circle of contacts. Plus I am not allowed to check my personal email while at work due to security concerns. (When I work from home I can do so since I have separate computers). So if someone wants to invite me to a lunch, they send my WORK email the invitation.</p>
<p>I would say that it is a rare week that I don&#8217;t have at least one significant personal exchange on my work email, and vice versa.</p>
<p>Trying to make an issue out of this is just a demonstration about how LITTLE the army of Obamatons actually have found to beat Sarah Palin with after three weeks digging under every moose dropping in Wasilla.</p>
<p><em>CosmicConservative&#8217;s last blog post..<a href='http://www.cosmicconservative.com/weblog/?p=4093' rel="nofollow">They just can&#8217;t help themselves?</a></em></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jrogge</title>
		<link>http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162384</link>
		<dc:creator>jrogge</dc:creator>
		<pubDate>Thu, 18 Sep 2008 23:21:12 +0000</pubDate>
		<guid isPermaLink="false">http://deanesmay.com/2008/09/18/heroes-hackers-and-hacks/#comment-162384</guid>
		<description>&lt;em&gt;I guess it was the expressed desire of the alleged hacker to find something to bring her down that makes it so offensive.Â  As I posted yesterday, some of the more fanatical amongst the left are still casting wildly about for that magic bullet that will return the world to the way they just &lt;em&gt;know&lt;/em&gt; itâ€™s supposed to be.Â  This is pretty much a textbook example of what I was talking about.

&lt;/em&gt;Well, yeah isn&#039;t that always the case? They haven&#039;t learned yet to just make one up. It&#039;s easier, and people will still believe it even if it is an obvious lie.</description>
		<content:encoded><![CDATA[<p><em>I guess it was the expressed desire of the alleged hacker to find something to bring her down that makes it so offensive.Â  As I posted yesterday, some of the more fanatical amongst the left are still casting wildly about for that magic bullet that will return the world to the way they just </em><em>know</em> itâ€™s supposed to be.Â  This is pretty much a textbook example of what I was talking about.</p>
<p>Well, yeah isn&#8217;t that always the case? They haven&#8217;t learned yet to just make one up. It&#8217;s easier, and people will still believe it even if it is an obvious lie.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

