Why/How is McAffee involved?
Would a company like Google really outsource the cleanup/forensics of an attack?
Google Hack Attack Was Ultra Sophisticated, New Details Show
51–60 of 116 posts
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#52Another aspect perhaps most of people ignored is: Chinese government has all the source code of Windows systems: http://news.cnet.com/2100-1016_3-5083458.html Including: Windows Vista, Windows XP, Windows Server 2003, windows 2000, Windows CE 6.0/5.0/4.2(PSK), Microsoft Office Pro 2003, Microsoft Office Systems It's reviewed by top three Chinese universities and other three government agencies. The Party is the new o…
The report stressed the need for checking Windows source code for security loopholes, especially in light of recent attacks
The irony is too rich.
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#53I'm guessing they're leaving out the "sophisticated" details of the compromise. Using encryption to hide your malware from virus scanners and using some computer "social engineering" (ssl connection) is not very sophisticated. I don't understand why it needs to be sophisticated ? because it's google ? It's known that some of the largest viruses have spread to government comuputers (sobig).
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#54In other news, I was just sent an Email by Bank of America... Said my card was compromised, I called in and they said their systems were hacked and he gave the name and location of the system... You might not know it, but sounds like BoA was compromised as well.
I think that's just a coincidence. I received a similar notification about a year ago. I think they just get hacked from time to time.
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#55Earlier quoted context omitted.
Yeah, North Korea, Iran, and Afghanistan also have all of the source code of Linux. What is your point?
Linux security assumes source code visibility, Windows doesn't?
Yes, Windows' closed-source nature has allowed MS to rely on security-though-obscurity. Now that one of the entities MS has taken behind it's golden screen has turned out to be a black hat, MS' approach is looking foolish.
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#56I'm guessing they're leaving out the "sophisticated" details of the compromise. Using encryption to hide your malware from virus scanners and using some computer "social engineering" (ssl connection) is not very sophisticated. I don't understand why it needs to be sophisticated ? because it's google ? It's known that some of the largest viruses have spread to government comuputers (sobig).
Perhaps is was custom encryption not previously seen?
I would imagine that while using encryption doesn't imply massive resources, developing custom encryption does.
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#57I'm guessing they're leaving out the "sophisticated" details of the compromise. Using encryption to hide your malware from virus scanners and using some computer "social engineering" (ssl connection) is not very sophisticated. I don't understand why it needs to be sophisticated ? because it's google ? It's known that some of the largest viruses have spread to government comuputers (sobig).
Perhaps is was custom encryption not previously seen? I would imagine that while using encryption doesn't imply massive resources, developing custom encryption does.
I don't know a lot about security -- certainly not as much as some here (although I can follow along with their banter easily enough)
But I know enough not to feel comfortable commenting on this in a public forum.
(Not trying to pass a value judgment on you, just suggesting a reason you guys might not be getting an answer to your question.)
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#58Sorry, this article lacks real detail. Sounds like standard fare -- an IE vulnerability, malicious emails, "several layers of encryption?" Sorry...not impressed.
Try reading it again.
“The initial piece of code was shell code encrypted three times and that activated the exploit,” Alperovitch said. “Then it executed downloads from an external machine that dropped the first piece of binary on the host. That download was also encrypted. The encrypted binary packed itself into a couple of executables that were also encrypted.”
One of the malicious programs opened a remote backdoor to the computer, establishing an encrypted covert channel that masqueraded as an SSL connection to avoid detection. This allowed the attackers ongoing access to the computer and to use it as a “beachhead” into other parts of the network, Alperovitch said, to search for login credentials, intellectual property and whatever else they were seeking
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#59Why/How is McAffee involved? Would a company like Google really outsource the cleanup/forensics of an attack?
They were probably one of the first to see the activity across a few machines.
Re: Google Hack Attack Was Ultra Sophisticated, New Details Show
#60Another aspect perhaps most of people ignored is: Chinese government has all the source code of Windows systems: http://news.cnet.com/2100-1016_3-5083458.html Including: Windows Vista, Windows XP, Windows Server 2003, windows 2000, Windows CE 6.0/5.0/4.2(PSK), Microsoft Office Pro 2003, Microsoft Office Systems It's reviewed by top three Chinese universities and other three government agencies. The Party is the new o…
Yeah, North Korea, Iran, and Afghanistan also have all of the source code of Linux. What is your point?
All the pitfalls of open source with none of the benefits.