They posted an update on amazon: We continue to investigate this issue. We can confirm that there is both impact to volumes and instances in a single AZ in US-EAST-1 Region. We are also experiencing increased error rates and latencies on the EC2 APIs in the US-EAST-1 Region.
Also Amazon Relational Database Service (N. Virginia) is unavailible.
It may be an AWS outage as the cause, but ultimately it's Heroku's problem. They're the ones touting:
"Erosion-resistant architecture.
Heroku takes full responsibility for your app's health,
keeping it up and running through thick and thin..."
The thick happened today, something eroded, and people are holding them to their word: full responsibility for their app's health. Heroku could do load balancing between multiple independent providers rather than be solely dependent on [one region of?] AWS.
The main issue with transmitting data across the airways is not eavesdropping but jammers and the source being shut down. Encryption takes care of the eves, but with a few radios, you can triangulate the source. Why waste time breaking the encryption key (and if your smart you'll use 2048 Bit Cyphers+) when you can simply walk over to the source and take it directly from the transmitter.
Other than transmission, the hard part is making these systems resilient to attack and failure and for most of them, they want to be fully anonymous.
Now the alternative to full on meshnets are darknets. Darknets are built on existing infrastructure but are designed for resilience, anonymity, and encryption. These exist in popular forms such TOR, I2P and others. Of course the downside to this is that it can be shut down if the physical wiring is removed.
So the key seems to be to having many nodes, corrects?
They may shut down some but others can be built at the same time.
It's good to know that there are some efforts in this sense, but as far as I understand we're pretty far from it right?
Great post, I've been looking to work with CV and was plannin g on using OpenCV with a python interface, but after your post I think I'll start with SimpleCV. as you said if the only limitation is speed, then I can port it to pure C for OpenCV.
You might want to change the videos on the Demos page as youtube is saying the uploader has closed their account.
One interesting thing from this was that the FBI couldn't trace him via the Tor network until they had his physical location. Good for Tor, glad to see they are still anonymous.
If I had been him, I'd have put Tor on top of a couple of vpses in some select countries around the world.
That being said, he was reckless and too ideological without considering he wouldn't be furthering his ideals. Its one thing to dump company secrets, its another to dump personal CCs.
Now if I was the FBI, I'd be trying to combine the successful methods of having undercover agents pose as terrorists with a hacker bent. Its the same sort of system, albeit purely digital.
"...the FBI couldn't trace him via the Tor network..."
I honestly think they already knew who he was from his comments - by reviewing Sabu's chat logs they found he had slipped up and identified himself.
I guess what I'm trying to say is, we have no data either way. Tor may be secure, or it may not.
Take-aways seem to be:
1. IRC logs do not contain identifying info - unless you reveal youself
2. IRC active / away status leaks information about your schedule
3. Using multiple identities online works pretty well
4. Trusting criminals = fail
5. Committing federal crimes = fail
The FBI had a pretty solid case against him. By the time they were doing the IP sniffing and identifying Tor nodes, they already had the guy under 24/7 surveillance. It sounds like they were solidifying their case.
If this were hollywood, I bet he would have sensed the surveillance somehow - and tried to make a run for it. But it didn't sound like he had many friends who would have hidden him.
IRC logs do not contain identifying info - unless you reveal youself
You'd be surprised. I was about six years old when I realized I could tell who was walking upstairs by the sound of their footsteps.
I can identify code that my co-workers have written by their individual styles. And that's after conforming to our coding standard.
It's common knowledge that individual (prose) writing style can be as identifiable as a fingerprint.
In short, pretty much every action you take has the potential of adding to a list of identifying information about you. If your actions are watched long enough, you will be identified.
If they _could_ track via tor, I highly doubt they'd tip their hand in such an obvious way. They'd use their tor-tracking abilities to get a suspect, then use this prior knowledge to assist with ordinary evidence-gathering. Or even not use it at all unless the intelligence gained was valuable enough to risk losing that source of information.
Also Amazon Relational Database Service (N. Virginia) is unavailible.
Seems like its snowballing.