31–39 of 39 posts
I am trying to temper my dislike for krebs, but it is getting difficult. Kaspersky operates an autonomous system (AS) and "Prospero" has traffic routed through that AS. Microsoft and Google also route all sorts of malware and spam through their ASes. > The routing through networks operated by Kaspersky doesn’t by default mean provision of the company’s services, as Kaspersky’s automatic system (AS) path might appear…
Is this one of these stealth advertisements where cyber security companies teach you how to operate better malware under the pretense of warning the public? Key takeaways from the article: Prospero is a Russian hoster trusted by top cybercrime groups. Especially popular is their bearhost brand, which provides great service since 2019 and openly invites you to operate botnets, brute-force attacks or phishing websites…
1) a company like Kaspersky can easily be employing 1-5-10-50 KGB/FSB agents, even without them knowing about the existence of the other agents (so they rat on each other)
2) a company like Kaspersky can be arm-twisted and/or knee-capped to knowingly employ 1-5-10-50 employees (similar to US three letter agencies operating in US companies)(room 641A)(NOBUS MS Exchange hole that was there for 20 years, etc)
3) I remember as a sysadmin using McAfee ePO 20+ years ago to "check things and do stuff" on employees' PCs when my Microsoft SMS was not working
4) Russia just like China have a different sense of "rule of law". The supreme law is the "national interest " and Xi/Putin and their apparatus-es define it very freely.Earlier quoted context omitted.
Honestly, I really have to take what he says with a shaker of salt after the Ubiquiti fiasco and his refusal to admit what happened until a year later and being forced to by a court.[0] [0]: https://krebsonsecurity.com/2022/08/final-thoughts-on-ubiqui... [1]: https://news.ycombinator.com/item?id=32663296
[flagged]
I am trying to temper my dislike for krebs, but it is getting difficult. Kaspersky operates an autonomous system (AS) and "Prospero" has traffic routed through that AS. Microsoft and Google also route all sorts of malware and spam through their ASes. > The routing through networks operated by Kaspersky doesn’t by default mean provision of the company’s services, as Kaspersky’s automatic system (AS) path might appear…
One comment even says the AS name is an acronym for their DDoS protection service.
I am trying to temper my dislike for krebs, but it is getting difficult. Kaspersky operates an autonomous system (AS) and "Prospero" has traffic routed through that AS. Microsoft and Google also route all sorts of malware and spam through their ASes. > The routing through networks operated by Kaspersky doesn’t by default mean provision of the company’s services, as Kaspersky’s automatic system (AS) path might appear…
Honestly, I really have to take what he says with a shaker of salt after the Ubiquiti fiasco and his refusal to admit what happened until a year later and being forced to by a court.[0] [0]: https://krebsonsecurity.com/2022/08/final-thoughts-on-ubiqui... [1]: https://news.ycombinator.com/item?id=32663296
Earlier quoted context omitted.
An NSA contractor writing malware choosing to use Kaspersky is either a massive mark against that contractor or a massive endorsement of Kaspersky.
Two reasons: 1. Kaspersky AV had the strongest heuristics analyzer and the largest signature base 2. If you write malware, you want to test it periodically (in sandbox) if AV engines detect it
NSA Contractor has a requirement for AV on all computers, it was installed on all computers and fact it's bad idea on select computers doesn't matter. Contract dictates, the contract gets.
Earlier quoted context omitted.
I might be missing something here: What sidebar are you talking about? I don't know if one of my extensions is blocking something native to HN or what. I don't see anything describing rules, aside from the guideline bit along the bottom of the main page.
Apologies, sidebar is a reddit term. HN guidelines: https://news.ycombinator.com/newsguidelines.html " In Comments Be kind. Don't be snarky. Converse curiously; don't cross-examine. Edit out swipes. Comments should get more thoughtful and substantive, not less, as a topic gets more divisive. When disagreeing, please reply to the argument instead of calling names. "That is idiotic; 1 + 1 is 2, not 3" can be shortened…