Live data from Hacker News

Trove of Stolen Data Is Said to Include Top-Secret U.S. Hacking Tools

nytimes.com

1–10 of 84 posts

Re: Trove of Stolen Data Is Said to Include Top-Secret U.S. Hacking Tools

#2
Would be cute if a foreign country passed an analogue to JASTA [1] making the United States responsible for damages resulting from its developing, and keeping secret, tools for the exploitation of security vulnerabilities in civilian software.

[1] https://en.wikipedia.org/wiki/Justice_Against_Sponsors_of_Te...

Re: Trove of Stolen Data Is Said to Include Top-Secret U.S. Hacking Tools

#4

Would be cute if a foreign country passed an analogue to JASTA [1] making the United States responsible for damages resulting from its developing, and keeping secret, tools for the exploitation of security vulnerabilities in civilian software. [1] https://en.wikipedia.org/wiki/Justice_Against_Sponsors_of_Te...

Stop. Stop. I can only take so much excitement!

Re: Trove of Stolen Data Is Said to Include Top-Secret U.S. Hacking Tools

#6

Would be cute if a foreign country passed an analogue to JASTA [1] making the United States responsible for damages resulting from its developing, and keeping secret, tools for the exploitation of security vulnerabilities in civilian software. [1] https://en.wikipedia.org/wiki/Justice_Against_Sponsors_of_Te...

What would those damages consist of? The only material impact I can think of is the apparently U.S.-developed Stuxnet program.

Re: Trove of Stolen Data Is Said to Include Top-Secret U.S. Hacking Tools

#7

As far as I'm concerned, the NSA are the enemy - so props to anybody who can poke a stick in their eye. I just hope this guy doesn't wind up in Guantanamo for the rest of his life.

What is interesting to me is that even super security gurus at NSA can't contain their most sensitive data (well, maybe tools aren't highest level?). At some point I think we need a better security strategy than trying to stop data from leaving, and more about how to make sure data is useless outside of its domain.

edit: I say that now in retrospect that security and freedoms of data seem always at odds. DRM being a keen example. Just wish we had better options..

Re: Trove of Stolen Data Is Said to Include Top-Secret U.S. Hacking Tools

#8

Would be cute if a foreign country passed an analogue to JASTA [1] making the United States responsible for damages resulting from its developing, and keeping secret, tools for the exploitation of security vulnerabilities in civilian software. [1] https://en.wikipedia.org/wiki/Justice_Against_Sponsors_of_Te...

What would those damages consist of? The only material impact I can think of is the apparently U.S.-developed Stuxnet program.

Cost of the incident response and remediation can easily be millions for a large corporation.

The malware on that belgacom server has probably required them to scrub all of their email servers and more that can't be cheap.

Re: Trove of Stolen Data Is Said to Include Top-Secret U.S. Hacking Tools

#9

As far as I'm concerned, the NSA are the enemy - so props to anybody who can poke a stick in their eye. I just hope this guy doesn't wind up in Guantanamo for the rest of his life.

Uhm, per his story, he was working for "the enemy" and took his work home so he could get better at it. Shouldn't you be angry at someone so diligently working to harm you?

Re: Trove of Stolen Data Is Said to Include Top-Secret U.S. Hacking Tools

#10
So, basically, it looks like there's a reasonable probability that this guy isn't the leaker.

I know that if I wanted to actually blow the whistle on somebody like the NSA, I would make sure to plant the evidence on somebody else to give them a juicy target to latch onto.

Post reply on HN