Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

CIA malware and hacking tools

wikileaks.org

Post reply on HN
Print view View original

81–90 of 1001 posts

Re: CIA malware and hacking tools

#81

Post by at-fates-hands »

tyingq wrote: post #15
dvcc wrote: post #5

Based on the overview alone (of course I can't read the entire report that fast!), this is exactly what I expect a spy agency would be doing -- if they were not then I would be disappointed. What exactly in the admittedly shortened list am I supposed to be upset about? It makes no distinction between US citizens and overseas parties. If these actions are being done domestically against US citizens, with no just cause…

One cause for concern is that the CIA appears to not only have lost control of the documentation, but of the tools themselves: "Recently, the CIA lost control of the majority of its hacking arsenal...and associated documentation. This extraordinary collection...gives its possessor the entire hacking capacity of the CIA." So, now, you get to worry about anybody else that might have this toolset. (Not withstanding your…

>> So, now, you get to worry about anybody else that might have this toolset.

You also have to consider who has the capability to actually use these tools - its not like they come with a user manual. Could Joe Schmo download these and start using them tomorrow? Probably not.

Also, I'm pretty sure this isn't "the entire hacking capacity of the CIA". If you consider all the stuff that came out with the Snowden leaks, you'd think this is more likely the tip of the iceberg in terms of tools they're currently using. I would think they're developing new tools and techniques daily.

Re: CIA malware and hacking tools

#83

Post by buzz27 »

luso_brazilian wrote: post #3

This had the potential of being a positive development brought by Trump's election: many behaviors by the US three letter agencies that were glossed over for the past 8 years (due to the party in power being "on the right side of history") are again reprehensible and deemed a threat to be fought by the tech community.

I'm not a US citizen, but if I was, I would want professionals sworn to defend my country and the constitution to be able to modernize their capabilities. Today, these tools are essential to defense. It may turn out to have been the best defense against RU attempt to Balkanize USA.

Re: CIA malware and hacking tools

#84

Post by dvcc »

topwer wrote: post #79
dvcc wrote: post #5

Based on the overview alone (of course I can't read the entire report that fast!), this is exactly what I expect a spy agency would be doing -- if they were not then I would be disappointed. What exactly in the admittedly shortened list am I supposed to be upset about? It makes no distinction between US citizens and overseas parties. If these actions are being done domestically against US citizens, with no just cause…

>What exactly in the admittedly shortened list am I supposed to be upset about? It makes no distinction between US citizens and overseas parties. If these actions are being done domestically against US citizens, with no just cause sure I will get upset, but that has yet to be seen. From the Reppublica article: "Three years ago the news that the Agency had spied on the US Senate intelligence committee's years-long eff…

This is a past revelation that was already investigated, no? Without any direct connection to the current release it muddies the waters.

Re: CIA malware and hacking tools

#85

Post by spacemanmatt »

LyndsySimon wrote: post #74
alphonsegaston wrote: post #68

But considering that Wikileaks is essentially a Russian intelligence services front at this point, spreading this kind of disinformation does a great deal to muddy the waters about the hacking.

Can you point to any instance where WikiLeaks has released information that was not authentic and correct?

Can you point to any instance during the election when a leak was not precisely timed/filtered to damage the Clinton campaign and/or advantage the Trump campaign?

Re: CIA malware and hacking tools

#86

Post by tyingq »

at-fates-hands wrote: post #81
tyingq wrote: post #15

Earlier quoted context omitted.

One cause for concern is that the CIA appears to not only have lost control of the documentation, but of the tools themselves: "Recently, the CIA lost control of the majority of its hacking arsenal...and associated documentation. This extraordinary collection...gives its possessor the entire hacking capacity of the CIA." So, now, you get to worry about anybody else that might have this toolset. (Not withstanding your…

>> So, now, you get to worry about anybody else that might have this toolset. You also have to consider who has the capability to actually use these tools - its not like they come with a user manual. Could Joe Schmo download these and start using them tomorrow? Probably not. Also, I'm pretty sure this isn't "the entire hacking capacity of the CIA". If you consider all the stuff that came out with the Snowden leaks, y…

>its not like they come with a user manual

"including malware, viruses, trojans, weaponized "zero day" exploits, malware remote control systems and associated documentation"

Sounds like they do potentially come with a manual.

>Also, I'm pretty sure this isn't "the entire hacking capacity of the CIA"

Well, yeah. Wikileaks does like to put their spin on things.

Re: CIA malware and hacking tools

#87

Post by LyndsySimon »

DickingAround wrote: post #51
addedlovely wrote: post #44

I wander what phones / computers CIA operatives use - do they have special patched versions which address the zero day exploits they are aware of.

This is a great question. Surely they look for vulnerabilities also in their own systems but then what do they do when they find them? Is there some special set of software that always gets patched because the CIA uses it?

> Is there some special set of software that always gets patched because the CIA uses it?

If so, a diff between the "CIA version" and the "civilian version" would be highly instructive.

Re: CIA malware and hacking tools

#88

Post by lolc »

alphonsegaston wrote: post #78
imron wrote: post #72

Earlier quoted context omitted.

Why would anyone consider that? (Yes I know the accusations, but they don't appear backed by evidence or reason).

The guy went from "cryptoanarchy" to having a TV show on RT(a propaganda network)and saying Russia has "vibrant" criticism of Putin's regime (beyond absurd). Not to mention him somehow being able to facilitate Snowden's entry into Russia. I'm no fan of imperialist American foreign policy, but Russia is just as grotesque. http://www.repubblica.it/esteri/2016/12/23/news/assange_wiki...

First time I hear that Assange "the guy" was "somehow" instrumental in Snowden's flight.

Re: CIA malware and hacking tools

#89

Post by drops »

spacemanmatt wrote: post #85
LyndsySimon wrote: post #74

Earlier quoted context omitted.

Can you point to any instance where WikiLeaks has released information that was not authentic and correct?

Can you point to any instance during the election when a leak was not precisely timed/filtered to damage the Clinton campaign and/or advantage the Trump campaign?

Wikileaks' political alignment doesn't have anything to do with the authenticity of the material they provide.

Re: CIA malware and hacking tools

#90

Post by at-fates-hands »

imron wrote: post #66

The CIA's Remote Devices Branch's UMBRAGE group collects and maintains a substantial library of attack techniques 'stolen' from malware produced in other states including the Russian Federation. With UMBRAGE and related projects the CIA cannot only increase its total number of attack types but also misdirect attribution by leaving behind the "fingerprints" of the groups that the attack techniques were stolen from. Th…

I'm wondering if these documents are going to match the same ones that were taken by Harold Martin III and if the CIA will out him as the Wikileaks source.
Post reply on HN