Live data from Hacker News

Equation Group Cyber Weapons Auction

theshadowbrokers.tumblr.com

71–80 of 151 posts

Re: Equation Group Cyber Weapons Auction

#71
post #41

Earlier quoted context omitted.

> has no idea what their doing You complained about bad grammar in your article, so I feel the need to point out this error in the last sentence.

Oh lawrd. I need to stop writing blog posts in vim. Thanks for the catch.

Why? vim has spellchecking ;)

    set spell spelllang=en_us
https://www.linux.com/learn/using-spell-checking-vim

Re: Equation Group Cyber Weapons Auction

#72

Just want to make this as clear as possible. Throwaway account, so I won't be replying or ever using this ever again, but let me run through a few things. * Whomever is running this auction knows everything that has been mentioned in these threads already, and they're probably a few steps ahead of us all. There are multiple indicators that they know what they're doing from a technical standpoint and that it's very li…

> I plan to bid a couple dozen BTC or so

I will really be surprised if anyone actually bids any significant amount. Come on, an open-ended auction where they keep all bids? The overly-russian phrasing? Just screams legitimacy.

Re: Equation Group Cyber Weapons Auction

#73
Remember that money causes work. When you give people money in return for doing some type of work, people will do more of it.

So if you buy organic food, people will grow more organic food. If you buy oil, people will pump more oil. If you buy ivory, people will kill elephants for their tusks.

If you put money into this, people will do more of it.

Re: Equation Group Cyber Weapons Auction

#74

Wikipedia link for the lazy folks like me that didn't know the Equation Group: https://en.wikipedia.org/wiki/Equation_Group

> The malware used in their operations, dubbed EquationDrug and GrayFish, is found to be capable of reprogramming hard disk drive firmware. Wow. We really are f----d all the way down the stack.

The row hammer attack convinced me of that. It feels like nothing is hardened at the very low levels that get hit by truly dedicated attacks.

(https://en.wikipedia.org/wiki/Row_hammer#Implications)

Re: Equation Group Cyber Weapons Auction

#75
post #10

If this is real and has anything that can link the files to the NSA, it has the potential to be a major humiliation for the US.

I suspect that's the real plan here. Use the auction to stir up attention and blackmail any state actors implicated by these files into hushing the whole thing. Hence the open ended termination.

Alternatively, use the auction to stir up attention and low bids, even though there's nothing here.

Then imply a state actor won (via a large self-bid) or disrupted the auction. Hence the penny-auction structure, where they can walk away and keep preliminary bids.

Re: Equation Group Cyber Weapons Auction

#76

Earlier quoted context omitted.

Not to mention the complete insults to anyone who would want to buy it. A government would handle this by trying to chase down the autioneers. If they wanted the data, they would buy it from Kaspersky, assuming it's real.

The auctioneers indicate that they have the "server side" code. Kaspersky would only have the "client side" code. ...The client gets infected with malware and sends the data home... to some server. The server side.

But the servers are uninteresting, the clever part is just the client code. And that in original source form, not as the binary. But also much more until the 0-days used are patched.

Re: Equation Group Cyber Weapons Auction

#77

There's a lot of game theory that suggests it's not worth betting on this because any bet will have a rational higher one.

Yep - dollar auctions shouldn't ever get bids if I remember. That's one hell of a strange structure if you have a real product.

Re: Equation Group Cyber Weapons Auction

#80
post #9

The structure of this auction is amazing! 1. All bids are paid up front, and you never get your money back, even if you aren't the highest bidder. So if people bid $50, $70, and $100, they collect $220. 2. No one can verify what is actualy up for sale before the auction. 3. There is no way for the world to know that they actualy delivered the goods after the auction. 4. There is no way for the highest bidder to know…

Alternatively, the whole auction is a ruse to confuse people before they drop the whole thing for free.

Who would that benefit and how?
Post reply on HN