Tag Archives: Transparent Computing

To Know the Truth Even if it Harms You

Distributed Denial of Secrets, or DDoSecrets, an NGO, had been a thorn in the side of secretive governments, corrupt corporations, and powerful law firms since its founding in late 2018. In June 2020, in a release known as BlueLeaks, the group published 269 gigabytes of law enforcement data, which exposed police malfeasance and surveillance overreach across the United States.

DDoSecrets also published incriminating records from overseas tax shelters, from the social media site Gab, and from a Christian crowdfunding site often used by the far right. The group has affected autocrats as well, exposing the Russian government’s plans in Ukraine and mapping out the Myanmar junta’s business dealings. These revelations have spawned numerous news stories in the public interest, making DDoSecrets a valuable source for journalists, but also rendering it a target: In July 2020, German authorities seized one of the organization’s servers. August of 2020 brought ominous news of a Department of Homeland Security bulletin labeling DDoSecrets a “criminal hacker group.” ..

Avowedly nonpartisan, DDoSecrets nonetheless exhibits an ethos that seems to fuse anarchist politics, a hacker’s curiosity about forbidden knowledge, and a general sympathy for the oppressed. Its barbed Latin slogan, Veritatem cognoscere ruat caelum et pereat mundus, roughly translates to, “To know the truth, even if the heavens fall and the world perishes.” Call it a bolder, more transformative version of “information wants to be free.”

Emma Best…launched DDoSecrets in December 2018 with someone known only by the pseudonym “The Architect.” Together, they set out to distinguish their group from WikiLeaks, which they felt had morphed into a vehicle for Julian Assange’s ego…”Truth has an impact, regardless of the respectability politics some people choose to engage in when it comes to the alleged sources,” Best wrote after Swiss law enforcement, at the request of U.S. authorities, arrested Tillie Kottmann, a hacker who alerted journalists to security vulnerabilities in a vast commercial network of surveillance cameras. “The world can no longer be rid of hacktivists or leaktivists. Not as long as people are willing.”

Excerpts from Jacob Silverman, The New WikiLeaks, The New Republic, Aug. 18, 2021

DARPA for Transparent Computing

From the DARPA website
Modern computing systems act as black boxes in that they accept inputs and generate outputs but provide little to no visibility of their internal workings. This greatly limits the potential to understand...advanced persistent threats (APTs). APT adversaries act slowly and deliberately over a long period of time to expand their presence in an enterprise network and achieve their mission goals (e.g., information exfiltration, interference with decision making and denial of capability). Because modern computing systems are opaque, APTs can remain undetected for years if their individual activities can blend with the background “noise” inherent in any large, complex environment. ..

The Transparent Computing (TC) program aims to make currently opaque computing systems transparent by providing high-fidelity visibility into component interactions during system operation across all layers of software abstraction, while imposing minimal performance overhead. The program will develop technologies to record and preserve the provenance of all system elements/components (inputs, software modules, processes, etc.); dynamically track the interactions and causal dependencies among cyber system components; assemble these dependencies into end-to-end system behaviors; and reason over these behaviors, both forensically and in real-time. By automatically or semi-automatically “connecting the dots” across multiple activities that are individually legitimate but collectively indicate malice or abnormal behavior, TC has the potential to enable the prompt detection of APTs and other cyber threats, and allow complete root cause analysis and damage assessment once adversary activity is identified. In addition, the TC program will integrate its basic cyber reasoning functions in an enterprise-scale cyber monitoring and control construct that enforces security policies at key ingress/exit points, e.g., the firewall.

Excerpt from http://www.darpa.mil/Our_Work/I2O/Programs/Transparent_Computing.aspx