Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

wired.com

Post reply on HN
Print view View original

11–20 of 63 posts

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#11

Post by rangestransform »

brudgers wrote: post #2

If your threat model includes nation states, you are outgunned. A nation state can probably buy the building across the street if that's the value of hacking your system. Of course there are almost certainly cheaper options,but that's the level of time and budget you are up against...teams of motivated and well resourced experienced professionals working against you full time.

We should still try our best to secure everything against nation state actors, so that people who really need it (journalists, dissidents, security researchers, etc.) can blend into the crowd with regular consumer grade devices

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#13

Post by aaron695 »

brudgers wrote: post #2

If your threat model includes nation states, you are outgunned. A nation state can probably buy the building across the street if that's the value of hacking your system. Of course there are almost certainly cheaper options,but that's the level of time and budget you are up against...teams of motivated and well resourced experienced professionals working against you full time.

[dead]

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#14

Post by BenjiWiebe »

rurban wrote: post #10
sigmoid10 wrote: post #8

Earlier quoted context omitted.

You make it sound like you just have to flip a switch in your router's settings to enable it, but that is very far from the truth. For that to work you need a RADIUS server to handle credentials, a certificate authority if you want any useful kind of authenticity checks, a process for distributing said certificates and finally you need to configure all your access points. This is something that companies can (and sho…

No radius server needed, the builtin kernel module for wifi access points can do that easily.

Do you mean hostapd? I'm not aware of any builtin kernel/modules doing AP stuff.

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#15

Post by rapjr9 »

brudgers wrote: post #2

If your threat model includes nation states, you are outgunned. A nation state can probably buy the building across the street if that's the value of hacking your system. Of course there are almost certainly cheaper options,but that's the level of time and budget you are up against...teams of motivated and well resourced experienced professionals working against you full time.

But then the source code of the nation states is hacked and anyone can pull off nation state style attacks:

https://en.wikipedia.org/wiki/Vault_7

The nation states still have a money/people/breaking+entering advantage, but the cyberattack code is now something everyone has to protect against. Also some companies are important enough that they have to protect against nation state attacks, like pipeline operators, chemical plant operators, utilities, and telecom companies:

https://www.nytimes.com/2024/11/22/us/politics/chinese-hack-...

And criminals won't hestitate to use your family to blackmail you, so all the families of people with critical jobs need to be protect also, and their friends families, and...basically everybody.

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#16

Post by rurban »

BenjiWiebe wrote: post #14
rurban wrote: post #10

Earlier quoted context omitted.

No radius server needed, the builtin kernel module for wifi access points can do that easily.

Do you mean hostapd? I'm not aware of any builtin kernel/modules doing AP stuff.

Right, hostapd. It has the radius functionality builtin you'd need for proper wifi enterprise functionality

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#17

Post by Toutouxc »

brudgers wrote: post #2

If your threat model includes nation states, you are outgunned. A nation state can probably buy the building across the street if that's the value of hacking your system. Of course there are almost certainly cheaper options,but that's the level of time and budget you are up against...teams of motivated and well resourced experienced professionals working against you full time.

If your threat model includes states. The states being nation states or not is irrelevant.

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#18

Post by fulafel »

brudgers wrote: post #2

If your threat model includes nation states, you are outgunned. A nation state can probably buy the building across the street if that's the value of hacking your system. Of course there are almost certainly cheaper options,but that's the level of time and budget you are up against...teams of motivated and well resourced experienced professionals working against you full time.

The nation state as a threat model adversary is kind of a weird abstraction. Does it include intrusive questions eg about social media asked by a border agent on your next trip abroad? Does it include getting your web browsing traffic collected up by the nine eyes spooks? Or does it mean a rich country is marshaling all its resources in a manhattan project grade effort to target you personally?

In any case as in all things defense, you assume your adversary is to some extent rational and making attacks harder (more expensive, risky, opportunity cost, etc) improves the equation for you.

Re: Spies Jumped from One Network to Another via Wi-Fi in an Unprecedented Hack

#20

Post by mu53 »

rapjr9 wrote: post #15
brudgers wrote: post #2

If your threat model includes nation states, you are outgunned. A nation state can probably buy the building across the street if that's the value of hacking your system. Of course there are almost certainly cheaper options,but that's the level of time and budget you are up against...teams of motivated and well resourced experienced professionals working against you full time.

But then the source code of the nation states is hacked and anyone can pull off nation state style attacks: https://en.wikipedia.org/wiki/Vault_7 The nation states still have a money/people/breaking+entering advantage, but the cyberattack code is now something everyone has to protect against. Also some companies are important enough that they have to protect against nation state attacks, like pipeline operators, chem…

You say criminals, but I think you meant intelligence agencies
Post reply on HN