Crypto breakthrough shows Flame was designed by world-class scientists
1–10 of 128 posts
Re: Crypto breakthrough shows Flame was designed by world-class scientists
#2"Flame could only have been developed by a wealthy nation-state"
While I do agree that it was indeed developed by one, I'm not sure how it could only have been developed by one. Would it truly take massive levels of money to do or simply some smart, determined people?
Re: Crypto breakthrough shows Flame was designed by world-class scientists
#3What exactly was the requirement for a "0day" MD5 collision attack here; I thought the Terminal Server Licensing thing at Microsoft spat out good-for-code-signing certificates by itself?
Re: Crypto breakthrough shows Flame was designed by world-class scientists
#4What exactly was the requirement for a "0day" MD5 collision attack here; I thought the Terminal Server Licensing thing at Microsoft spat out good-for-code-signing certificates by itself?
They did, but it seems that those certificates had some extensions that made the code-signing attack difficult to carry out on some versions of Windows, so the collisions were used to generate certs without those extensions.
(I read this at http://blog.cryptographyengineering.com/2012/06/flame-certif...)
Re: Crypto breakthrough shows Flame was designed by world-class scientists
#5"Flame could only have been developed by a wealthy nation-state" While I do agree that it was indeed developed by one, I'm not sure how it could only have been developed by one. Would it truly take massive levels of money to do or simply some smart, determined people?
Presumably, if you are not employed by a three-letter agency, and you manage to invent a breakthrough crypto technique, there's more value in publishing it, than sitting on it until you just blow it all away on one exploit anonymously.
At least, you would _hope_ criminal enterprises don't actually have the means to fund and recruit their own secret, cutting-edge math research labs/networks :)
Re: Crypto breakthrough shows Flame was designed by world-class scientists
#6"Flame could only have been developed by a wealthy nation-state" While I do agree that it was indeed developed by one, I'm not sure how it could only have been developed by one. Would it truly take massive levels of money to do or simply some smart, determined people?
Presumably, if you are not employed by a three-letter agency, and you manage to invent a breakthrough crypto technique, there's more value in publishing it, than sitting on it until you just blow it all away on one exploit anonymously. At least, you would _hope_ criminal enterprises don't actually have the means to fund and recruit their own secret, cutting-edge math research labs/networks :)
drug cartels can recruit people to build their own submarines and cell phone networks, so ...
Re: Crypto breakthrough shows Flame was designed by world-class scientists
#7"Flame could only have been developed by a wealthy nation-state" While I do agree that it was indeed developed by one, I'm not sure how it could only have been developed by one. Would it truly take massive levels of money to do or simply some smart, determined people?
Its actually a shame, in the pursuit of blaming the USA and/or Israel people lose common sense.
Look, It seems that it was certainly USA/Israel, but throwing common sense out the window just so we can make this point is not a good idea.
What these people are saying, essentially is that very few countries have lots of smart people in different industry's, which is wrong.
The zero days can come from all over, the PLC and SCADA system knowledge is all over the world.
meh, I'm rambling now, I agree with you kposehn. Its more obvious that this is the work of USA/Israel simply because they are the ones desperate enough to try anything. I might be wrong but who else is threatening war with Iran?
Re: Crypto breakthrough shows Flame was designed by world-class scientists
#8"Flame could only have been developed by a wealthy nation-state" While I do agree that it was indeed developed by one, I'm not sure how it could only have been developed by one. Would it truly take massive levels of money to do or simply some smart, determined people?
Well the TPS reports alone would have taken an army of programmers
Re: Crypto breakthrough shows Flame was designed by world-class scientists
#9"Flame could only have been developed by a wealthy nation-state" While I do agree that it was indeed developed by one, I'm not sure how it could only have been developed by one. Would it truly take massive levels of money to do or simply some smart, determined people?
Smart determined people don't come for cheap, and you don't get world class cryptanalysts and mathematicians working on such a specific endeavor out of "determination".
Plus, we can all guess what wealthy nation-state developed the software and similar things in the past, let's not be hypocritical here...
Re: Crypto breakthrough shows Flame was designed by world-class scientists
#10Earlier quoted context omitted.
Presumably, if you are not employed by a three-letter agency, and you manage to invent a breakthrough crypto technique, there's more value in publishing it, than sitting on it until you just blow it all away on one exploit anonymously. At least, you would _hope_ criminal enterprises don't actually have the means to fund and recruit their own secret, cutting-edge math research labs/networks :)
drug cartels can recruit people to build their own submarines and cell phone networks, so ...
Those submarines are crude, has you seen pictures? And submarines and cell phone networks are pretty standard technologies, well understood, that any competent engineer can build off of off the shelve components.
It's not like drug cartels are Dr. No like enterprises...