Live data from Hacker News

DHS Issues BOD Banning Kaspersky from Federal Government

dhs.gov

21–30 of 115 posts

Re: DHS Issues BOD Banning Kaspersky from Federal Government

#22

None of the following is confirmed, but I keep seeing articles online hinting around this, or implying this. Essentially it sounds like is known in classified circles that Kaspersky works closely with and supports Russian Intelligence (FSB). It seems while the US knew about this it had a spy within Kaspersky and was their source for finding out what they were up to. The accused spy was arrested by the FSB recently so…

There was also this article a few days ago about an intentional CIA backdoor in Microsoft products that Kaspersky was plugging: https://theunhivedmind.com/news/2017/09/12/us-explodes-after...

I'm not gonna completely judge a site based on it's links. But that site is pretty putrid on the links it displays. It doesn't exactly lend credence to it.

A sampling:

The Holocaust Hoax Exposed

The Synagauge of Satan

9/11 Nuclear Demolition

The HIV Myth

Adolf Hitler Greatest Untold Story

Re: DHS Issues BOD Banning Kaspersky from Federal Government

#23
post #17

This is very bad for Kaspersky. Put aside how much revenue the entire GSA market represents for a security company (it'll be a double-digit percentage for a typical company). The bigger problem is that in the wake of this, every systemically important financial firm will also eject Kaspersky. In addition to being another significant chunk of revenue, major financial firms set the buying direction for IT security for…

There's no need to have smoking gun. If confrontation between countries go too far, this is a potential attack vector. It can be used even without any cooperation from Kaspersky, is necessary. And, if used wisely, even without attribution (this requires cooperation though). This risk is enough to justify this move.

Re: DHS Issues BOD Banning Kaspersky from Federal Government

#24
post #20

None of the following is confirmed, but I keep seeing articles online hinting around this, or implying this. Essentially it sounds like is known in classified circles that Kaspersky works closely with and supports Russian Intelligence (FSB). It seems while the US knew about this it had a spy within Kaspersky and was their source for finding out what they were up to. The accused spy was arrested by the FSB recently so…

You're making a very big leap from 'Russia arrested someone and charged him with treason' to 'That person was actually a US spy' and even 'The arrest of this person who was actually a US spy is the driver behind a particular US policy'. We just don't have any reasonable insight into why Russia arrests people and what, if anything, they're guilty of.

> We just don't have any reasonable insight into why Russia arrests people

In the actual article link it quotes Russian govt. officials saying they arrested them for treason, and for giving secrets to a US Intelligence Agency that wasn't the CIA.

I do appreciate skepticism in response to claims, but please do read through the article first before contesting.

Re: DHS Issues BOD Banning Kaspersky from Federal Government

#25

The US declaring that it think that an government should think hard about what foreign products to let into it's core infrastructure is going to have consequences the intended ones. That is probably great news if your an European, or especially Asian software vendor trying to compete with any US based company for local government contracts, as the US have now legitimized any concern about foreign governments(includin…

It's different. EU is in NATO with US (most of EU). Buying from an ally vs a non ally (or enemy depending, Ukraine for instance) is a very big difference.

Re: DHS Issues BOD Banning Kaspersky from Federal Government

#26
post #21

Makes sense. I understand their concerns. Would also makes sense to ban Microsoft at least in the EU for anything government or military related and only used a custom tailored Linux. EULinuxs instead of Red Linux :-)

Not the same. Most EU countries are allied with the US. Most of them hold negative or downright hostile views towards Russia.

Re: DHS Issues BOD Banning Kaspersky from Federal Government

#27
Quote:

"The BOD calls on departments and agencies to identify any use or presence of Kaspersky products on their information systems in the next 30 days, to develop detailed plans to remove and discontinue present and future use of the products in the next 60 days, and at 90 days from the date of this directive"

That number of days could be critical. If they have intel telling them that Kaspersky can be used as a vector to exploit their systems by Russia, then this could be used outright to further exploit their systems and possibly (?) plant more ways to attack, even after Kaspersky has been removed.

I am assuming that DHS will already have in place another security company to handle other potential scenarios and ensure the security of their system while the transition process is happening.

Re: DHS Issues BOD Banning Kaspersky from Federal Government

#28

Earlier quoted context omitted.

There was also this article a few days ago about an intentional CIA backdoor in Microsoft products that Kaspersky was plugging: https://theunhivedmind.com/news/2017/09/12/us-explodes-after...

Never heard of that site. Any reputable site reporting in this that we can trust?

Seeing as this site calls HIV a myth, the holocaust a hoax, 9/11 a nuclear test, and the Jewish religion a Satanic cult... I don't think it is _super_ trust worthy.

Re: DHS Issues BOD Banning Kaspersky from Federal Government

#29
post #21

Makes sense. I understand their concerns. Would also makes sense to ban Microsoft at least in the EU for anything government or military related and only used a custom tailored Linux. EULinuxs instead of Red Linux :-)

And Apple as well. And then ban every mobile phone because no one has the slightest idea of what's in the baseband firmware.

Re: DHS Issues BOD Banning Kaspersky from Federal Government

#30
post #17

This is very bad for Kaspersky. Put aside how much revenue the entire GSA market represents for a security company (it'll be a double-digit percentage for a typical company). The bigger problem is that in the wake of this, every systemically important financial firm will also eject Kaspersky. In addition to being another significant chunk of revenue, major financial firms set the buying direction for IT security for…

There's no need to have smoking gun. If confrontation between countries go too far, this is a potential attack vector. It can be used even without any cooperation from Kaspersky, is necessary. And, if used wisely, even without attribution (this requires cooperation though). This risk is enough to justify this move.

If that's true now, it was true 4 years ago too. The McCain/Rubio claims are what's new.
Post reply on HN