The Daily Parker

Politics, Weather, Photography, and the Dog

Will this affect OINTB?

The Justice Department announced today that it's ending private prisons because, it turns out, they suck:

In making the decision, Deputy Attorney General Sally Yates cited new findings by the Justice Department's inspector general, who concluded earlier this month that a pool of 14 privately contracted prisons reported more incidents of inmate contraband, higher rates of assaults and more uses of force than facilities run by the Federal Bureau of Prisons.

"They simply do not provide the same level of correctional services, programs and resources; they do not save substantially on costs; and ... they do not maintain the same level of safety and security," Yates wrote in a memo Thursday.

Marc Mauer, executive director of The Sentencing Project, nonetheless said the Justice Department announcement represented a "major milestone in the movement away from mass incarceration."

"It has been a stain on our democracy to permit profit-making entities to be handed the responsibility of making determinations of individual liberty," Mauer said in a prepared statement. "Today's action moves us closer to a moment when government can once again assume this important responsibility."

I'm with Mauer. There are some things from which taking profits is simply immoral, and housing prisoners is one. Just watch the last season of Orange is the New Black for an only-slightly-exaggerated view.

This is one of those ways that President Obama is leaving the campsite better than he found it. Good.

NSA has a very bad week

Via Bruce Schneier, the NSA lost control of a crap-ton of hacking tools sometime before 2013, and managed to stop the bleeding only after discovering Edward Snowden's leak:

The exploits themselves appear to target Fortinet, Cisco, Shaanxi Networkcloud Information Technology (sxnc.com.cn) Firewalls, and similar network security systems. I will leave it to others to analyze the reliability, versions supported, and other details. But nothing I've found in either the exploits or elsewhere is newer than 2013.

Because of the sheer volume and quality, it is overwhelmingly likely that this data is authentic. And it does not appear to be information taken from compromised targets. Instead, the exploits, binaries with help strings, server configuration scripts, 5 separate versions of one implant framework, and all sort of other features indicate that this is analyst-side code—the kind that probably never leaves the NSA.

From an operational standpoint, this is not a catastrophic leak. Nothing here reveals some special "NSA magic." Instead, this is evidence of good craftsmanship in a widely modular framework designed for ease of use. The immediate consequence is probably a lot of hours of work down the drain.

But the big picture is a far scarier one. Somebody managed to steal 301 MB of data from a TS//SCI system at some point between 2013 and today. Possibly, even probably, it occurred in 2013. But the theft also could have occurred yesterday with a simple utility run to scrub all newer documents. Relying on the file timestamps—which are easy to modify—the most likely date of acquisition was June 11, 2013 (see Update, however). That is two weeks after Snowden fled to Hong Kong and six days after the first Guardian publication. That would make sense, since in the immediate response to the leaks, as the NSA furiously ran down possible sources, it may have accidentally or deliberately eliminated this adversary’s access.

So, yeah. The NSA had a bigger problem than Edward Snowden until he broadcast his leak and sent their plumbers into overdrive. And even then, they didn't properly secure the data.

What I'm reading (later today)

All for now.

Epic car chase through my neighborhood

Yesterday I mentioned in passing that Illinois State and Chicago police chased a murder suspect pretty much right past my apartment Wednesday night. Both local newspapers have updated stories today.

The Tribune has an interactive map and audio from the CPD.

The Sun-Times reports that one of my neighbors, Mayor Rahm Emanuel, wants to know (a) why the chase was a chase and (b) how the suspect got away:

“There’s a question there. At the end of the day, the [suspect in] the homicide in Lombard, driving through Chicago, I think, to the airport, still got away,” Emanuel said.

“One of the apartments that were hit was not far from where I live. So, there’s a real question. This always gets evaluated when there’s a police chase, which is about both getting and capturing a person who committed a violent crime and then, obviously, the risk to everybody else.”

Emanuel said he’s not about to “second-guess” Lombard police. But, he said, “There will be people that look at that.”

By "not far" he means two blocks away from his house. Here's the aftermath yesterday morning at Ashland and Berteau, complete with news truck: