Live data from Hacker News

Wikileaks releases CIA's Marble: Malware obfuscation tools

wikileaks.org

11–20 of 284 posts

Re: Wikileaks releases CIA's Marble: Malware obfuscation tools

#12
post #6

What would be the advantage to making your exploits appear to come from other countries? What do we gain from this? It feels like an instigation.

Misleading information is a weapon in any nation's arsenal. I have to say I'm a little taken aback and almost feel like your comment might be trolling.

Re: Wikileaks releases CIA's Marble: Malware obfuscation tools

#13

wonder when wikileaks will publish fsb hacking tools LOL

Seems FSB has better security than CIA. 90% of intelligence community cyber security spending is on offensive projects, so this revelation should not be too surprising. ( http://www.reuters.com/article/us-usa-cyber-defense-idUSKBN1... )

And FSB's attack surface is less than 1% of CIA's. Much fsb work is farmed out to contractors, the offensive stuff that CIA keeps in house. CIA people chat via email, messaging and by voice. FSB people chat in person. That's why russian hackers are always traveling while CIA hackers keep having thier stuff leaked.

Re: Wikileaks releases CIA's Marble: Malware obfuscation tools

#14
post #11

Why would they release their own tools?

Oh I get it, because Assange is a Russian FSB agent. Yap, makes total sense.

More like Assange knows that the FSB will just straight up poison him with Polonium instead of slapping him around a bit and shipping him to GITMO.

Re: Wikileaks releases CIA's Marble: Malware obfuscation tools

#17

Earlier quoted context omitted.

Seems FSB has better security than CIA. 90% of intelligence community cyber security spending is on offensive projects, so this revelation should not be too surprising. ( http://www.reuters.com/article/us-usa-cyber-defense-idUSKBN1... )

And FSB's attack surface is less than 1% of CIA's. Much fsb work is farmed out to contractors, the offensive stuff that CIA keeps in house. CIA people chat via email, messaging and by voice. FSB people chat in person. That's why russian hackers are always traveling while CIA hackers keep having thier stuff leaked.

Great points. I don't know many details of how they operate. Someone told me they still rely on paper-based methods in order to avoid some types of electronic surveillance.

In theory, 50% offense and 50% defense should be the only budget for a sane operation.

Re: Wikileaks releases CIA's Marble: Malware obfuscation tools

#18
post #9

wonder when wikileaks will publish fsb hacking tools LOL

Russia remains a black spot, due to the language/kyrilic alphabet? And they do most secret stuff with typewriters and photocopies these days, so i've heard. Snowdens revelations had a big impact there.

> And they do most secret stuff with typewriters and photocopies these days, so i've heard. Snowdens revelations had a big impact there.

I think I heard the first heard the "Russia switches back to typewriters" story pre-Snowden.

Electronic typewriter bugs are also not unheard of: http://www.cryptomuseum.com/covert/bugs/selectric/.

Re: Wikileaks releases CIA's Marble: Malware obfuscation tools

#19
post #9

wonder when wikileaks will publish fsb hacking tools LOL

Russia remains a black spot, due to the language/kyrilic alphabet? And they do most secret stuff with typewriters and photocopies these days, so i've heard. Snowdens revelations had a big impact there.

1) I kinda doubt Russian hackers code on typewriters.

2) Cyrillic is an alphabet, not magic incomprehensibility dust. There are plenty of Russian speakers who are not beholden to their spooks.

3) Assange has an agenda in addition and orthogonal to fighting secrecy. I'm not saying he's insincere; I'm saying that some leaks are clearly more equal than others. It would not surprise me in the least if he were to sit on some leaks in order to not piss off a source providing others, especially around hard deadlines.

Re: Wikileaks releases CIA's Marble: Malware obfuscation tools

#20

wonder when wikileaks will publish fsb hacking tools LOL

Or more bad news for the Trump administration with evidence of communication etc coming from Russian servers? ;)

Further down someone asked: "What would be the advantage to making your exploits appear to come from other countries?". If you want to sow doubt about the validity of evidence presented this seems like a good way to do so (not that we shouldn't be skeptical given the tools available).

Post reply on HN