USENIX Enigma 2016 - NSA TAO Chief on Disrupting Nation State Hackers 

+Stephen Allen USENIX does a great job of getting awesome speakers. The slides and talk are available open access, but you have to go to the conference to hear Q&A.

maybe he convinced himself.

Having been to a couple of security conferences the best talks/aftertalks are the one's that they don't record, for obvious purposes.

wow good catch

Do you recommend any videos for technical side of this? Thanks

of course he didn't and he technically will not, look at Stuxnet malware and their recent incident of hacking the chinese university this year, some chinese IT guys who've been working on analysing their trojan that pulled off about 140GB successfully of stolen data confirmed the TAO team has had used more than 40 of cyber weapons! can you imagine? now you're saying he didn't talked about 0-day vulns..

​​@@detective525340 it's not that much for the amount of operations they are doing plus we don't know how large of a team they are, you need to put in perspective, the response is not always a zero day, but sometimes can be a lot easier than that

youlikeicecream it's a full sized LED array, much cheaper to make very big

It's in use. He brought it up a little bit, basically software that watches for irregular activity on networks

It wouldn't get as many clicks if it were worded manager does it really matter? good talk anyway. we know its different to look thru code to find out of date stuff to break... the developers of many programs don't see half the problems in their software as its a feature not a bug after so many false bug reports what matters is actually taking the time to dig in and be meticulous, it takes good teams to do blue and red

Posi P He has to understand hacking to be a manager of TAO hackers

+RR123RR How? By laying off whatever is tripping you out and applying some clear logic. Why? He says it. Most often they don't even need to use 0-days because security in most corporations and government is so relaxed that anyone can hack in. And he is giving this talk because government/banks/corps today keep loosing money for example to bitcoin ransom-ware that some kid wrote. It's happened to the FBI, it's happening right now to banks in India, it's happened to regular people in Australia... the cyber-criminals keep getting paid-off because companies don't update their software/protocols. At the end of the day, even if you fix everything, the NSA will still be able to hire the best people to reverse engineer security , find 0days, or even just buy off every zero day on the darknet. So you're still screwed lol, but that method of operation is expensive and not used at scale. It requires time, good engineers are rare and not cheap, many new exploits become useless atfer being detected once, so they're best used in special cases (i.e. Iranian nuclear plant). Most of the time (as he said), they don't even need to do that, they can easily break in through publicly known methods.

+1

+RR123RR It effectively conditions people to think that the NSA's crimes are all shits and giggles, and to be expected.

You're wasting your time. Their tinfoil hats will block out your false flag, or something like that.

We are computers and computers are us, bios, wake up boot up start scans viruses malware storage motherboards mother earth, etc etc, computer motherboards pretty much Mirror how ancient civilizations are laid out, although it's much deeper than a bunny's dooty shoot in it's entirety, that is what seems to be the jist of the jiggy , in my opinion, but I know absolutely nothing so I'll leave grains of salts and 2 cents just to be on the safe side in the event of disagreement or conflict 😂 so take what I say with a grain of salt and there's my 2 cents Gracias compa mai frenn

+Dirk Kuepper Wrong secure encryption is only secure if everyone knows how it is implemented and still cant find a way to crack it.

Yo Dirk. Sit down

My experience is there is turnover in companies so who built the app is now gone and in his place is someone who is seeing a black box. Good luck getting support. I suspect the NSA has a team who know the code line by line and advanced tools to examine it for every Firewall, IPS, VPN and the underlying tech.

Because it is common sense, no secrets here.....the adversaries have "smart guys and genius's" too