<story><title>A Little-Known Company That Enables Mass Surveillance</title><url>https://theintercept.com/2016/10/23/endace-mass-surveillance-gchq-governments/</url></story><parent_chain></parent_chain><comment><author>jgrahamc</author><text>These DPI companies always make me smile because 20 years ago I was the inventor on this patent: &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;patents.google.com&amp;#x2F;patent&amp;#x2F;US6182146B1&amp;#x2F;en&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;patents.google.com&amp;#x2F;patent&amp;#x2F;US6182146B1&amp;#x2F;en&lt;/a&gt; It describes a way of doing DPI to identify protocols that are not running on standard ports. We used this for a protocol analysis product [0] that did network monitoring (for accounting purposes inside companies and led to companies discovering what people were mis-using their network connections for---hello PointCast[1]) and for prediction of network scaling needs. And all that was based on stuff I&amp;#x27;d been doing from about 1984 [2].&lt;p&gt;Bottom line: scooping up packets is easy; encrypt your shit.&lt;p&gt;[0] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;www.cnet.com&amp;#x2F;au&amp;#x2F;news&amp;#x2F;tool-gauges-web-apps&amp;#x2F;&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;www.cnet.com&amp;#x2F;au&amp;#x2F;news&amp;#x2F;tool-gauges-web-apps&amp;#x2F;&lt;/a&gt;&lt;p&gt;[1] &lt;a href=&quot;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;PointCast_(dotcom)&quot; rel=&quot;nofollow&quot;&gt;https:&amp;#x2F;&amp;#x2F;en.wikipedia.org&amp;#x2F;wiki&amp;#x2F;PointCast_(dotcom)&lt;/a&gt;&lt;p&gt;[2] &lt;a href=&quot;http:&amp;#x2F;&amp;#x2F;blog.jgc.org&amp;#x2F;2011&amp;#x2F;01&amp;#x2F;network-protocol-analysis-prior-art.html&quot; rel=&quot;nofollow&quot;&gt;http:&amp;#x2F;&amp;#x2F;blog.jgc.org&amp;#x2F;2011&amp;#x2F;01&amp;#x2F;network-protocol-analysis-prior-...&lt;/a&gt;</text></comment>
<story><title>A Little-Known Company That Enables Mass Surveillance</title><url>https://theintercept.com/2016/10/23/endace-mass-surveillance-gchq-governments/</url></story><parent_chain></parent_chain><comment><author>tptacek</author><text>This article perfectly illustrates a major flaw in surveillance journalism.&lt;p&gt;As luck would have it, I&amp;#x27;m pretty familiar with Endace --- or was, back in 2003-2005. I was at Arbor Networks then. Arbor does large-scale network instrumentation for anti-DDoS and performance monitoring. By the time I left, every major ISP in the world had their network instrumented with Arbor gear.&lt;p&gt;We&amp;#x27;d had lots of conversations with Endace. We were as a firm extremely interested in any technology we could buy off the rack to get performant access to raw packets and telemetry data --- Arbor had no hardware engineers, and everything they shipped at the time shipped on COTS X86 rackmounts running OpenBSD. My point here is not just that there are multiple uses for the kind of stuff Endace makes, but also that I vividly remember Endace because very few companies made products in this space at all.&lt;p&gt;Obviously, any company that can facilitate efficient access to, storage of, and analysis of raw traffic data is going to have multiple markets to sell to. And we should not make apologies for companies that take the extra money --- sell their souls, so to speak --- by offering their products to facilitate dragnet surveillance. We would all do well to keep in mind that the problem with selling to this market is far worse than NSA&amp;#x27;s abuses, which are &lt;i&gt;trivial&lt;/i&gt; compared to the abuses perpetrated by countries in the Middle East and Asia. Point being: packaging and selling for the global surveillance market is ethically hazardous in the extreme.&lt;p&gt;No, the problem here is that this kind of story is unintentionally deceptive about who the real enablers of large-scale surveillance are. They&amp;#x27;re not the dinky little company in New Zealand selling packet capture technology. They&amp;#x27;re the networking and database giants, the companies our parents automatically have their retirement accounts invested in because they&amp;#x27;re huge components of the stock market, who have entire teams of people, euphemistically named (maybe something like &amp;quot;public sector&amp;quot; or &amp;quot;APAC public sector&amp;quot; or &amp;quot;GSA&amp;quot; or &amp;quot;defense&amp;quot;), packaging and selling 8-9 figure &amp;quot;solutions&amp;quot; to government around the world. Compared the giants, Endace is a gnat. They&amp;#x27;re not the enablers. We know who the real enablers are.&lt;p&gt;You can tell, because of the article&amp;#x27;s lurid descriptions of Endace&amp;#x27;s major transactions with GCHQ --- the focus of the article. They&amp;#x27;ve got smoking gun proof: invoices for $300,000 and $160,000. Or: less than SourceFire would have charged Chick-Fil-A† to install commercial Snort boxes.&lt;p&gt;† &lt;i&gt;I have no idea if Chick-Fil-A was a SourceFire customer.&lt;/i&gt;</text></comment>