Live data from Hacker News

Hackers ransack Citrix, make off with 6TB+ of emails, biz docs, secrets

theregister.co.uk

211–216 of 216 posts

Re: Hackers ransack Citrix, make off with 6TB+ of emails, biz docs, secrets

#211
post #95

Earlier quoted context omitted.

“Resecurity Inc., California-Based cybersecurity company” timezone_string: Europe/Kiev Admin IP address: 109.207.124.196, AS196740, Ukraine Really piling on the confidence here.

This one's before the Forbes article: Citrix Data Breach – Next is what to do next newsbeezer.com "resecurity" kiev ukraine from newsbeezer.com 19 hours ago · KIEV, UKRAINE – 2019/01/ 20: Citrix Systems software ... According to Security Company Resecurity, the attacks were ... https://newsbeezer.com/zimbabwe/citrix-data-breach-next-is-w... Here's the article's top image sub-text: Citrix was hit by hackers in attacks…

Way too sloppy for a false flag operation. Probably just some shady company trying to make a buck.

Regardless, it would be irresponsible to trust their attribution claim, especially when no evidence has been presented.

Re: Hackers ransack Citrix, make off with 6TB+ of emails, biz docs, secrets

#212

Potentially stupid question but in instances of hacks, how do companies know for sure what was and wasn't taken?

They don't, they just try their best to reconstruct the attack with whatever "footprints" the perpetrators left, along with any independent logging they might have in place. It's a little nightmare because it's rare to give absolute certainty.

Re: Hackers ransack Citrix, make off with 6TB+ of emails, biz docs, secrets

#213

Earlier quoted context omitted.

It’s absolutely reasonable to be critical of any accusations that “Iran did it” or any other nation that the US considers enemies. Didn’t our security ministers claim North Korea was behind the Sony hacks when Obama was in office? We were never given any proof, so it’s impossible to verify... When you consider the way we lie on international affairs, all statements our government makes must be considered suspect. Thi…

I think it is best to take a wholesale view that the news as we know it is a religion. That sounds a bit odd given that a lot that is in the news is fact oriented and a lot of current affairs is discussed. But in a formal church there is mention and prayers for those caught up in actual events. Fundamentally though the news requires belief. It is there for the 'capitalist flock' who have a world where the government,…

I'm not really sure how this is so controversial. Even formal mathematical systems contain axioms. And science is largely based on faith in other people's truthfully reported observations. And news is founded on faith in a whole bunch more different things, and there is sectarian tension between the congregation s of, let's say, Fox and NPR. Even the qualia of physical existence can be considered as a matter of faith , but typically it's only practical for philosophers to worry about that. But, it is practical for everyone to consider the matter of faith in news, given human history.

Re: Hackers ransack Citrix, make off with 6TB+ of emails, biz docs, secrets

#214
post #100
post #90

Earlier quoted context omitted.

Assad is using chemical weapons against his own people. It was determined by OPCW. You can read full reports of the two well publicized attacks here: https://www.opcw.org/fileadmin/OPCW/Fact_Finding_Mission/s-1... https://www.opcw.org/sites/default/files/documents/2019/03/s... But there were many more. So please don't spread unsubstantiated falsehoods and doubt.

These reports make no such conclusion - that the Syrian government was responsible for the attack. They do confirm that chemical weapons were used. Who used them, is not determined, and even the reports themselves state that the provenance of the chemicals is out of scope of the FFM. It states that Sarin and chlorine-based weapons were used - but the FFM was not able to visit the site directly and relied on samples c…

> These reports make no such conclusion - that the Syrian government was responsible for the attack.

They can be used to make a conclusion. We don't need the mandate, and we can think for ourselves, no? In both cases the munitions were reportedly dropped from the air. Once from the airplane, and second time from helicopters.

https://medium.com/@Brian_Whit/opcws-douma-investigation-poi...

Rebel groups don't have airplanes or heliopters, so Khan-Sheikoun attack was most likely made by the Assad regime. Douma can be speculated about somewhat more, but dropping the chlorine containers from the air was not excluded, and was quite likely, based on previous documented droppings of chlorine canisters from helicopters, that used the same mounting technology.

It was also not unprecedentend, dropping chlorine canisters from helicoters by Assad regime was docummneted previously on multiple occasions. The same canisters, and mounting technology for dropping from helicopters. The same goes for Sarin use. (look up other Sarin uses OPCW investigated)

https://www.gppi.net/2019/02/17/the-logic-of-chemical-weapon...

I mean what's so surprising about this? Assad regime has been procuring chemical weapons for decades. They do it just for fun? It's a very expensive hobby.

> Indeed, the Syrian government themselves requested this mission proceed to determine the use of these chemical weapons - why would they do that if they knew they'd used the chemical weapons?

How would I know.

You can obviously kill people and request an inestigation at the same time. There's nothing that prevents that.

It's pointless to speculate on motives. But hey: Because they don't care? Because nothing's gonna happen anyway? Because they were scared of non-cooperation? Because Russia wanted them to? Because it's good optics in the war propaganda - it seems like they have nothing to hide? Calculated risk? (noone's gonna invade them for chlorine use, and they would have had to know that Sarin was not used in Douma, so why not?)

Even if Sarin would have been used, most likely nothing would have happened to them, like many times before. There were several other recent Sarin uses that went unpunished. US is not there for a regime change, and Assad has an upper hand, except for Idlib, and SDF areas. Chemicals are a great weapon for terrorizing civilian population. So why not use them after calculating some risks?

Just look at some WWI documentaries. People/leaders can get completely crazy under a war situation, and justify pretty much anything - even sacrificing almost 30000 soldiers in one day in pointless attacks. It's pointless to speculate on motives now.

Re: Hackers ransack Citrix, make off with 6TB+ of emails, biz docs, secrets

#215
post #90

Earlier quoted context omitted.

Assad is using chemical weapons against his own people. It was determined by OPCW. You can read full reports of the two well publicized attacks here: https://www.opcw.org/fileadmin/OPCW/Fact_Finding_Mission/s-1... https://www.opcw.org/sites/default/files/documents/2019/03/s... But there were many more. So please don't spread unsubstantiated falsehoods and doubt.

What you're saying is impossible; until June, the OPCW didn't have the mandate to assign blame[1], and while they now do, the Duoma expedition still did not[2]. [1] https://www.bbc.com/news/world-europe-44634434 [2] https://www.bbc.com/news/world-middle-east-47424266

Lack of mandate doesn't make it impossible to assign blame based on facts in the report. It's just that OPCW wasn't tasked with it. Though you're right that OPCW didn't blame Assad. I was inaccurate, there.

Re: Hackers ransack Citrix, make off with 6TB+ of emails, biz docs, secrets

#216
post #130
post #90

Earlier quoted context omitted.

Assad is using chemical weapons against his own people. It was determined by OPCW. You can read full reports of the two well publicized attacks here: https://www.opcw.org/fileadmin/OPCW/Fact_Finding_Mission/s-1... https://www.opcw.org/sites/default/files/documents/2019/03/s... But there were many more. So please don't spread unsubstantiated falsehoods and doubt.

They don't say what you say they do. Saying something happened doesn't mean they said who did it. They did not. Most likely it is false flag.

Most likely based on what? There's zero evidence for that.
Post reply on HN