Live data from Hacker News

CIA malware and hacking tools

wikileaks.org

971–980 of 1001 posts

Re: CIA malware and hacking tools

#971
post #783
post #97

Earlier quoted context omitted.

And Visual Studio https://wikileaks.org/ciav7p1/cms/page_11629039.html

In many pages I explored from the leak I keep coming across this *.devlan.net domain. Whois info belongs to a French personality and is suspiciously updated 2 days ago and it has a month for expiration: Updated Date: 2017-03-05T16:38:16Z Creation Date: 2004-04-19T13:12:21Z Registrar Registration Expiration Date: 2017-04-19T04:00:00Z Registrant Name: SADIER, NICOLAS Registrant Organization: Registrant Street: 5 Bis Ch…

What's suspicious about that? It's certainly hosted on their intranet, they just picked a sensible name that employees could remember. The publicly-registered devlan.net is probably unrelated or unused.

Re: CIA malware and hacking tools

#972
post #761

Earlier quoted context omitted.

It's known that WL will often save some of the worst leaks as an 'insurance' against retaliation from the entity the leaks pertain to. It's likely there's aspects they're holding back from this leak as well, if they don't already hold enough over the U.S. gov.

They have already stated in black and white that they have held back a lot concerning this release; due to various concerns. They are completely open about that. A lot of the stuff they keep to themselves can be used as collateral, like all the names they redact, operational details, etc, but I think they would quickly find themselves in an even more dangerous game than they are now, if they started to exploit these…

uhm... what are the current speculations as to what they may be holding back?

Re: CIA malware and hacking tools

#973

Earlier quoted context omitted.

Bypass encryption means they broke the protocol. They could say "also malware can read your private messages and anything else on your phone". But no, bypassing encryption sounds a lot better. Fake news.

I don't read it that way. To me, if they meant they broke the protocol, they would say "broke the encryption" or "defeated the encryption". "Bypass" implies to me that they get the information without interacting with the encryption.

We basically need to just accept: "If you have a device, it is being monitored, PERIOD."

Re: CIA malware and hacking tools

#974
post #9

- Smart TV turned into listening devices with fake off mode? - Intercepting audio/texts before encryption by Signal, Whisper, WhatsApp etc. - Dozens of O-day attacks again Andriod and iPhone. Pretty powerful stuff.

It's 0-day, not O-day.

0K

Re: CIA malware and hacking tools

#975
post #123

Earlier quoted context omitted.

I'm pretty okay with wikileaks not releasing hundreds of zero day exploits into the wild en mass.

I'd like to hear a security expert's opinion on whether releasing even patched 0-days could be considered harmful ? even if the 'sploits dont work out of the box, it seems like they would still advance the state of the art, and allow moderately-skilled hackers to build on very sophisticated designs, adapt and make them effective again - "stand on the shoulders of giants" kind of thing.

Thats a very interesting comment...

I am going to make a few assumptions: You have no kids. You're realatively young.

---

That said, lets unpack your comment... sure it would be good to explore this (as many people havent looked into the depth of the layers of cyber culture... few really and honestly understand it) - but the implications are fractally deep... if there are people who are diving into this, we shall never know. cyberwar is a known but also unknown thing... implecations are not known, but tactics appear to be revealing themselves.. how to attack... how to defend.

Firewalls are one-dimensional - we are talking 5+ dimensions with CW, arent we...

What are those 5Ds? think of OSI as 1 and add some layers... I would love your feedback....

(BTW, How many ppl work at [company] which are ex [service] - Why is it called 'The Company')

Re: CIA malware and hacking tools

#976

Earlier quoted context omitted.

everyone knows russia does it. their whole game is, "see. everyone oppresses their citizens. america is just as bad as us and real democracy can't exist"

Where everyone = every American that knows very little about foreign affairs (and probably couldn't even point Iowa on the map), but believes all the crap they see in mainstream media, from WMDs to the latest "Russians hacked our elections" -- and always roots for the current "enemy du jour" of the establishment. Aside from the constant pressure and threats, and the constant military presence around its borders, few…

Constant pressure and threats? Can you provide a few examples?

Re: CIA malware and hacking tools

#977

Earlier quoted context omitted.

Because we don't live in a Disney movie where everyone gets along and lives happily ever after? Do you think if we get rid of CIA the Russians will just disband the FSB? The Chinese will just suddenly become transparent and stop all international espionage? The entire world will suddenly love US and try to suck up to the biggest superpower?

> Because we don't live in a Disney movie where everyone gets along and lives happily ever after? Do you think if we get rid of CIA the Russians will just disband the FSB? No, but I'm not American, and I know that 80% of the world has been royally fucked over (toppling governments, meddling, dictatorships supported) by the CIA, whereas few have had any issues with FSB (just/mainly their neighboring countries, and not…

> 80% of the world has been royally fucked over (toppling governments, meddling, dictatorships supported) by the CIA, whereas few have had any issues with FSB (just/mainly their neighboring countries, and not the sweetest ones either).

I'd ask for sources for this claims... but I'm really afraid for the outcome.

If you really believe in all of this... it's extremely disturbing.

Re: CIA malware and hacking tools

#978
post #226

Earlier quoted context omitted.

Obviously there's a difference between cyber and conventional weapons, but imagine if the same rationale were extended to physical munitions: "We can't drop this bomb on the enemy, it contains classified technology"

While the weapon too secret to use sounds very Dr Strangelove, there have been slightly similar things with real weapons. The one I remember is when radar-triggered proximity shells were invented at the end of WW2 they were only issued for use on ships, so that undetonated shells would fall into the sea, so couldn't be recovered and investigated by the enemy.

The Germans in WWII could have brought the British to their knees with magnetic mines alone, but one German aircrew dropped their mine intact on mud flats instead of into the water, allowing the British to recover the mine intact and develop countermeasures.

Re: CIA malware and hacking tools

#979

Earlier quoted context omitted.

Where everyone = every American that knows very little about foreign affairs (and probably couldn't even point Iowa on the map), but believes all the crap they see in mainstream media, from WMDs to the latest "Russians hacked our elections" -- and always roots for the current "enemy du jour" of the establishment. Aside from the constant pressure and threats, and the constant military presence around its borders, few…

Constant pressure and threats? Can you provide a few examples?

The NATO expanding its presence all around their border states, 24x7 demonization of Russia and its actions in the media, financing "orange revolutions", sanctions and embargoes, all kinds of NGOs and opposition parties sponsored openly (and often covertly) by US organizations to meddle in internal Russian politics.

Just check how many Russian political groups, organizations, events and "NGOs" a single US body, the National Endowment for Democracy (funded by the U.S. Congress through the State Department) openly lists as funding:

http://www.ned.org/region/eurasia/russia-2011/

And here's an example of crude double standards, either never put forward (since few in the US even know anything of the history of those regions, short and long-term, and just repeat what they read, about an innocent country victimized by those Russian bullies), or ignored by invoking "whataboutism":

A border state to Russia has its elected government toppled and a group of various opposition powers (including neo-nazis) comes to power with strong anti-Russian sentiments. This state has areas with huge populations of Russian ethnicity that don't like the new situation and feel threatened. Russia moves in to those places to protect them. And they're called all kinds of things for it, get sanctions and embargoes, etc. Meanwhile, the US can invade 3 countries they have no borders and no business with -- and no population of US ethnicity living there -- in the span of 10 years, with BS pretexts like WMDs, and leave hell-holes of fundamentalist and civil war behind, plus hundreds of thousands of deaths, and that's a-OK. Or some "self-critique" and crocodile tears is enough to forgive it, but what Russia did in Crimea is unforgivable.

Heck, every second Evil Plotter / Crazy ex-General etc in action movies is still Russian, 25+ years since the end of the Cold War...

Some moar stuff: http://www.counterpunch.org/2016/07/12/putins-threats-to-the...

http://www.counterpunch.org/2016/09/28/ukraine-as-the-border...

Re: CIA malware and hacking tools

#980

>"As of October 2014 the CIA was also looking at infecting the vehicle control systems used by modern cars and trucks. The purpose of such control is not specified, but it would permit the CIA to engage in nearly undetectable assassinations." Reminds me of the reporter who was supposedly working on a massive investigation and then died in a flaming car crash while skipping town. Forgot his name

I can't believe this meme won't die -- it's so incredibly disrespectful to his family. Honestly no better than the Sandy Hook Truther bullshit. Michael Hastings was a recovering alcoholic and meth-abuser whose brother, Jonathan, had flown into town the day before because he suspected that Michael was having a manic breakdown similar to the ones he had in the past. Jonathan had been called to LA since several of Micha…

Personally, fuck you.

WHO CARES if he was an alcoholic, wouldnt you be in a situation decribed. MAYBE he was touted as such.. do you have proof... These are HEAVY fucking claims against the system - so back your shit up... dont make claims against him.

Post reply on HN