Live data from Hacker News

Google Hack Attack Was Ultra Sophisticated, New Details Show

wired.com

91–100 of 116 posts

Re: Google Hack Attack Was Ultra Sophisticated, New Details Show

#92
post #47
post #33

Earlier quoted context omitted.

link to Google Translate'd in English: http://translate.google.com/translate?js=y&prev=_t&h...

Google, congratulate you on your return to the embrace of mercy of the Lord. Yes, we are here to congratulate you, rather than mourning. When the sun finally shining in Jerusalem tomb of your Lengji, we will meet your resurrection. Huh?

I've been trying to learn Chinese, and poking around Chinese websites with peraperakun occasionally. Every time I come across a WTF sentence like that, I wonder whether maybe I've bitten off more than I can chew.

Re: Google Hack Attack Was Ultra Sophisticated, New Details Show

#93
post #45

Earlier quoted context omitted.

Yeah, so you give it to a government who is reviewing it for security problems. More than likely the NSA and CIA also have the source code for Windows.

on the other hand iDefence itself has a conspiratable spooky background of CIA/DoD http://www.reddit.com/r/netsec/comments/app8q/_/c0issy7 The more you poke into it the more it looks like a full scale war

It's not unusual among security firms, Kaspersky was founded by a Russian government cryptologist, Check Point was founded by a Unit 8200 alumni, etc.

People with computer security talent founding security companies shouldn't be surprising, especially here of all places !

Re: Google Hack Attack Was Ultra Sophisticated, New Details Show

#94
post #35

Another aspect perhaps most of people ignored is: Chinese government has all the source code of Windows systems: http://news.cnet.com/2100-1016_3-5083458.html Including: Windows Vista, Windows XP, Windows Server 2003, windows 2000, Windows CE 6.0/5.0/4.2(PSK), Microsoft Office Pro 2003, Microsoft Office Systems It's reviewed by top three Chinese universities and other three government agencies. The Party is the new o…

The report stressed the need for checking Windows source code for security loopholes, especially in light of recent attacks The irony is too rich.

Just fyi, this article is in reference to the Blaster/Slammer worms back in 2003.

Re: Google Hack Attack Was Ultra Sophisticated, New Details Show

#95
post #63

Earlier quoted context omitted.

>But I know enough not to feel comfortable commenting on this in a public forum. why?

Because it's a lose-lose proposition. If I get it right, I'm helping some other schmuck break into people's systems. If I get it wrong then I'm the schmuck. And yes, people will learn to break into systems without my help, and yes, openness is the best defense we have against these things. I've just decided I'm just not going to put anything out there that could possibly be used like that. I tell you one of the reaso…

> I never knew if they wrote the system or what happened to my design, but it never sat well with me. I always wished I could have went back and not provided them with the information.

This is the least favourite part of my job too. I have a couple of uncomfortable memories from university days when I ran my mouth about some little ideas.

Re: Google Hack Attack Was Ultra Sophisticated, New Details Show

#96
post #47
post #33

Earlier quoted context omitted.

link to Google Translate'd in English: http://translate.google.com/translate?js=y&prev=_t&h...

Google, congratulate you on your return to the embrace of mercy of the Lord. Yes, we are here to congratulate you, rather than mourning. When the sun finally shining in Jerusalem tomb of your Lengji, we will meet your resurrection. Huh?

Basically that paragraph is praising Google's decision to stand against the Chinese government and pull out of China (thus "return to the mercy of the Lord"). And the author is really celebrating and congratulating here (instead of mourning its possible absence in China due to government restrictions).

The last sentence is very poetic. I get the idea, but since I'm not Christian, I'm not so sure about the exact analogy. Anyway, the real meaning is that eventually freedom of speech will come to China, and at that time, we (the author and the Chinese people) will celebrate Google's return.

P.S. I cried a little bit after the paragraph. I guess I'm moved.

P.S. 2. Machine translating is never good at this kind of stuff... I'm native Chinese.

Re: Google Hack Attack Was Ultra Sophisticated, New Details Show

#97
post #19

What I wonder about is what do they mean by "stealth programming"? I can think of just programming with white text on a white background, but that wouldn't serve any security related purpose. From reading that, it's clear that the shellcode was obfuscated ('encrypting' it three times, though, would be unnecessary ), but that's just a good way to muddle things up. Although from reading that it's obvious that it was a…

This is something I had a hard time understanding and which I thought the article did a poor job of explaining. In exploiting a remote system, which part of your attack would benefit from being encrypted?

If you encrypted or otherwise obfuscated the payload of the attack, it would make log analysis (particularly on the network level) difficult, and may help get around things like an IDS. It'd also make some forms of forensics much harder.

Re: Google Hack Attack Was Ultra Sophisticated, New Details Show

#98
post #47

Earlier quoted context omitted.

Google, congratulate you on your return to the embrace of mercy of the Lord. Yes, we are here to congratulate you, rather than mourning. When the sun finally shining in Jerusalem tomb of your Lengji, we will meet your resurrection. Huh?

I've been trying to learn Chinese, and poking around Chinese websites with peraperakun occasionally. Every time I come across a WTF sentence like that, I wonder whether maybe I've bitten off more than I can chew.

I guess poetic sentences are always hard to get right, if you don't really grow up in that culture, just like I have a lot of trouble with some essays in English. Well, if you keep learning, eventually you'll get there :)

Re: Google Hack Attack Was Ultra Sophisticated, New Details Show

#99
post #61
post #49

Earlier quoted context omitted.

Looks like the page is setup by a local Christian. It's observable phenomenon that all Christian Chinese favor Google more than any other search engines.

Isn't the Christian/Catholic Church in China run by the Party?

Not all of them. I know some independent (possibly secretive) Christian churches. But those "official" ones are usually penetrated ...

Re: Google Hack Attack Was Ultra Sophisticated, New Details Show

#100
post #67

Earlier quoted context omitted.

I imagine most of the staff. Google makes sure all of their software works in most of the popular browsers.

Well, sure. But as I understand it, most people at Google are running Linux on their desktops. I'd expect most browser testing to be taking place in VMs or on separate boxes, and under test accounts -- which would have made the level of infiltration described in the article more difficult.

Companies like Google try to make their employees happy. If someone prefers Windows XP they are aloud to use it.
Post reply on HN