Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Equation Group Cyber Weapons Auction

theshadowbrokers.tumblr.com

Post reply on HN
Print view View original

141–150 of 151 posts

Re: Equation Group Cyber Weapons Auction

#141

Post by nadaviv »

kharms wrote: post #40
nadaviv wrote: post #33

To prove this is real, they should've: - Split the leak into multiple chunks, each encrypted with a different key, and each readable/usable on its own - Announce, ahead of time, that a random chunk will be revealed, based on the hash of block #N on the Bitcoin network - On block #N, reveal chunk number block_N_hash % num_chunks . Basically, reveal a provably random chunk in a way that cannot be controlled by the auct…

They would need to reveal several chunks, otherwise they could encrypt the same thing n times.

Yes, you're correct, I missed that! An alternative solution is to give a descriptive name to each chunk (could simply be its filename), so that people could see the contents matches the description once its revealed.

Re: Equation Group Cyber Weapons Auction

#142

Post by EthanHeilman »

nadaviv wrote: post #140
EthanHeilman wrote: post #131

Earlier quoted context omitted.

They could even use the blockchain as a source of randomness to choose which chunks of the encrypted file they reveal for free.

That's exactly what my parent comment suggested :-)

Opps didn't see that. =)

Using hashes like you are suggesting you wouldn't even need ZK proofs. There is a simple trick you could do with the keys such that you post a single 128 value which is checkable with a tree of OP_HASH and OP_DUPs and would, with very high probability, reveal all the keys.

As pointed out below the problem with this scheme is that you could hash the same files with a little randomness added and make it look like you have more data to sell than you do. I think with some GC-based ZK proofs you could show this isn't true and each file is legitimately different (for example demonstrating randomly selected bit relationships or word frequencies).

Re: Equation Group Cyber Weapons Auction

#145

Post by matt_wulfeck »

jtsylve wrote: post #63
AnkhMorporkian wrote: post #29

Earlier quoted context omitted.

If this leak is real, it points to one of two things. Either it isn't the NSA and is a company or some quasi-governmental group - owing to the fact that any of this shit the NSA makes would be on JWICS terminals and absolutely not accessible to the internet, or it means there's a leak from the NSA that dumped these files and has decided to sell them. I'd lean more towards the former.

Snowden did tweet what looked like an AES key last week.

It was a sha2 (or rather, a 64-byte length hex string). I wondered myself if it wasn't the secret key to some encrypted file.

Re: Equation Group Cyber Weapons Auction

#150

Post by theshadows1 »

omgitstom wrote: post #7

Auction information is here: https://github.com/theshadowbrokers/EQGRP-AUCTION

DOWNLOAD UNLOCKED FILE NSA : http://www7.zippyshare.com/v/Ts54bb2p/file.html BTC ADRESS FOR BID : 1DVm58QvyRksyRtzHvbo6UyEt4fZYMWXFQ BLOCKCHAIN :https://blockchain.info/address/1DVm58QvyRksyRtzHvbo6UyEt4fZ...
Post reply on HN