Seems plausible, though regardless of whether Kaspersky cooperates (maybe under some gag order) with Russian agencies or not, it seems prudent for any government in the world to avoid using software that potentially uploads confidential data to foreign servers. Governments anywhere would probably be ill-advised to use anti-virus software from countries like the US or Russia, unless they can be sure that cloud analysi…
Kaspersky: Yes, we obtained NSA secrets. No, we didn’t help steal them
131–139 of 139 posts
Re: Kaspersky: Yes, we obtained NSA secrets. No, we didn’t help steal them
#132Earlier quoted context omitted.
It is absolutely feasible. Much of Russia's wealth is generated by a handful of large state owned businesses, predominantly the oil sector. And all these positions are staffed with individuals who have intimate contact to Putin himself. Ranging from the husband of his daughter (Kirill Shamalov) who within months after the marriage took over Sibur, one of the largest petro businesses in the country, to old KGB aides o…
For starters, do you not see the huge logical leap going from naming a couple of executives who are close with Putin, to saying that ALL people in Russia with money or power are doing nothing but following Putin's agenda? What about the minor detail that the oligarchs existed not only before Putin, but before Yeltsin, his predecessor, as well (not that they didn't grow under Yeltsin, but still)? Most documentation th…
Re: Kaspersky: Yes, we obtained NSA secrets. No, we didn’t help steal them
#133Seems plausible, though regardless of whether Kaspersky cooperates (maybe under some gag order) with Russian agencies or not, it seems prudent for any government in the world to avoid using software that potentially uploads confidential data to foreign servers. Governments anywhere would probably be ill-advised to use anti-virus software from countries like the US or Russia, unless they can be sure that cloud analysi…
>whether Kaspersky cooperates (maybe under some gag order) with Russian agencies or not no offense, it is just very entertaining(and educational) to observe how people from one culture try to apply their mental frameworks to completely different mentality. There is no "whether", "or not", "gag order" (in the sense as if explicit one was necessary) in the Russian reality in the context of private company cooperating w…
If you believe this I have an AT&T switch closet to show you.
Re: Kaspersky: Yes, we obtained NSA secrets. No, we didn’t help steal them
#134Earlier quoted context omitted.
> the US government allowed highly intrusive software from a non-allied country on government machines in the first place. This is the key point. Also, the US Government was recently found to have fake Kaspersky SSL certs.
> Also, the US Government was recently found to have fake Kaspersky SSL certs. This is not true. An old commit for a leaked implant included example client certificates, which were invalid and self-signed, used to disguise C2 communications as anti-virus updates to avoid scrutiny. Part of the system involved copying fields from valid certificates into self-signed (invalid ones) so the traffic would not look suspiciou…
That sounds "fake" to me.
Re: Kaspersky: Yes, we obtained NSA secrets. No, we didn’t help steal them
#135Earlier quoted context omitted.
When I engage with conspiracy communities it's usually to debunk extreme claims, so I approach most claims with skepticism, but wouldn't this: https://wikileaks.org/podesta-emails/emailid/225 Suggest that it's not fabricated?
The claim of a quid-pro-quo is fabricated (seriously: it requires collusion between like five governments and three branches of the USG, of which Clinton had control of only one -- there is zero evidence of any of that). Obviously the conspiracy nuttery exists, so yeah, it's "out there".
Re: Kaspersky: Yes, we obtained NSA secrets. No, we didn’t help steal them
#136So an NSA contractor or employee takes confidential/highly sensitive code and documents home and leaves it on their machine. They then install a pirated version of Office, after disabling their antivirus software which is telling them it is infected with a virus and preventing the installation. Seems like massive incompetence from this user rather than Kaspersky doing anything malicious, and those files where destine…
> I don't buy the narrative that Kaspersky is some evil Russian cyber hoover I don't know about this particular story, but Kaspersky is certainly has strong ties with FSB, FSO and other official structures. I don't mean that it's their main business model — developing anti-virus software pays well enough not to be some cover story — but they're definitely _friendly_ on a deep personal level. Kaspersky himself was edu…
Read the first-person account by Igor Ashmanov who witnessed the whole incident. [1] Kaspersky's son was found not by FSB, he was found by the unit of Moscow police that was specifically created to deal with kidnappings, with cases like that one. If the story with the kidnapping proves anything, it proves the opposite, that he actually had NO any serious FSB connection.
[1] https://roem.ru/18-10-2017/261503/kaspersky-poprosil-dokazat... and following comments
Re: Kaspersky: Yes, we obtained NSA secrets. No, we didn’t help steal them
#137Earlier quoted context omitted.
> I don't buy the narrative that Kaspersky is some evil Russian cyber hoover I don't know about this particular story, but Kaspersky is certainly has strong ties with FSB, FSO and other official structures. I don't mean that it's their main business model — developing anti-virus software pays well enough not to be some cover story — but they're definitely _friendly_ on a deep personal level. Kaspersky himself was edu…
> (which he used, for example, with that shady story when his son was kidnapped). Read the first-person account by Igor Ashmanov who witnessed the whole incident. [1] Kaspersky's son was found not by FSB, he was found by the unit of Moscow police that was specifically created to deal with kidnappings, with cases like that one. If the story with the kidnapping proves anything, it proves the opposite, that he actually…
Yeah, a really good and unbiased source you got there.
Re: Kaspersky: Yes, we obtained NSA secrets. No, we didn’t help steal them
#138I have to ask: Is there any concrete evidence against Kaspersky doing anything remotely concerning since this whole charade against them started in 2015 or is it still "they're Russian, so they must be doing something bad" scenario? EDIT: Fuck if I understand why people like JohnStrange, revelation and ryanlol are downvoted in their replies to this comment. They're on topic.
Watching US situation from outside it's seems there's an urgent need for some kind of a bad guy. Kaspersky is just easy target and apparently three-letter-agencies have means to steer the media to pursue this direction.
How else would you justify all that Defense budget spending?
Re: Kaspersky: Yes, we obtained NSA secrets. No, we didn’t help steal them
#139Earlier quoted context omitted.
The Gitlab production data deletion event occurred unintentionally because the system was not designed to make it impossible. Looking at the Kaspersky situation the same way, the leaking of classified documents to Russia occurred because the system was not designed to make it impossible (i.e. by never creating these materials in the first place). GP isn't equating the facts of the events but instead drawing a contras…
Drawing that comparison is asinine though. We treat nude photos differently than photos of a dog. We treat credit card/user information differently than app logs. That's why we have concepts such as HIPAA and PCI.
I am very saddened by my inability to communicate this in a better way but punishing this person will not solve any problem except someone somewhere can check a box saying they did their job.