Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Iranian Hackers Post Images Over JFK Airport From UAV That Was Hijacked In March

rce.ir

Post reply on HN
Print view View original

91–100 of 130 posts

Re: Iranian Hackers Post Images Over JFK Airport From UAV That Was Hijacked In March

#91

Post by blhack »

This thread seems to be pretty chock full of some tinfoil hats.

1) You're not going to be added to "a list" because you clicked a link on hacker news. Remember that the NSA employs some of the smartest people in the world. Would it be meaningful to add a bunch of curious silicon valleyists to a list of "possible terrorists"? Probably not.

2) If you think that an aircraft that is anything bigger than a small pigeon could get anywhere near a major airport without getting itself a nice escort, then you're nuts.

Here is a map of the airspace near JFK: http://www.aeroplanner.com/notams/airspace.cfm?apt=jfk

This is all "Class b" or "bravo" airspace. It's all heavily controlled, heavily monitored with radar, and you have to ask permission to enter it.

It's incredibly unlikely that there was a "drone" in bravo airspace. Possibly a UAV, definitely not the boogey man Iranians.

3) This website doesn't even say anything. It's some pictures that could have easily been photoshopped together. Google translate isn't giving me anything interesting, and unless HN is a LOT more diverse than I realized, you're all going nuts over a couple of grainy photos.

Finally, here is what the drone that Iran supposedly "captured" last year looks like: http://i.imgur.com/ALveZWi.jpg

It isn't a toy. It's huge. There is no way that is getting anywhere near a RADAR without everybody knowing about it. Yes, it is [possibly...meant to be, rumored to be] stealth. That doesn't mean it's going to go undetected into a major airport like that.

Relax. Go have a beer.

Re: Iranian Hackers Post Images Over JFK Airport From UAV That Was Hijacked In March

#92

Post by oostevo »

msoad wrote: post #27
omegant wrote: post #20

Earlier quoted context omitted.

What kind of mystic poems? autors? not precisely these ones but generally. I find it interesting.

I'm not sure about authors, but I can try to translate. To give you a context, these poems are written by gnostic who believed they saw the real truth and they had no fear of dying because you can not never kill their souls. I assume any culture has this sort of things" First poem: We are stuck in a deep well of the bad thinking one Our message would not reach to you (God?) easily Second (red) I have experienced a lo…

My Arabic is pretty terrible, so the third part didn't make much sense at all, but I copied it as: بكم فتح الله و بكم يختم و بكم ينزل الغيث و بكم يمسك السماء ان تقع على الارض الا باذنه و بكم ينفس الهم و يكشف الضر

Maybe someone else who speaks the language or someone who wants to try with Google Translate could help out.

Re: Iranian Hackers Post Images Over JFK Airport From UAV That Was Hijacked In March

#94

Post by mkr-hn »

thezach wrote: post #93

If you look at OP's submissions you can see that well, this person posts iranian hacking stuff, and thats it. Makes you wonder about OP's motives. I'm also okay if the NSA targets OP looking at his submission list.

People have their domains of interest. Not all hacker-minded people focus on the latest fad programming language or database.

Re: Iranian Hackers Post Images Over JFK Airport From UAV That Was Hijacked In March

#95

Post by jnbiche »

blhack wrote: post #91

This thread seems to be pretty chock full of some tinfoil hats. 1) You're not going to be added to "a list" because you clicked a link on hacker news. Remember that the NSA employs some of the smartest people in the world. Would it be meaningful to add a bunch of curious silicon valleyists to a list of "possible terrorists"? Probably not. 2) If you think that an aircraft that is anything bigger than a small pigeon co…

1. You have a lot more confidence in our government's ability to accurately compile lists than I do, particularly in light of the failures of the no-fly list: https://en.wikipedia.org/wiki/No_Fly_List#False_positives

2. Based on commentary from native Persian speakers on this thread, it would appear that no one is claiming that the drone was remotely piloted by Iranians into US Airspace, but rather the one that was shot down in Iran several months ago (confirmed by the US Government) had these photos on it.

3. See above, there are at least 2 Persian speakers on this thread. HN is a LOT more diverse than you realize.

https://en.wikipedia.org/wiki/Iran–U.S._RQ-170_incident‎

Re: Iranian Hackers Post Images Over JFK Airport From UAV That Was Hijacked In March

#96

Post by ChuckMcM »

dfc wrote: post #87
ChuckMcM wrote: post #81

Earlier quoted context omitted.

Or display any compressed image, or even download compressed javascript that you aren't going to run. A number of exploits that malwaredomains.com finds are objects that are either normally or optionally compressed, and constructed in such a way to exploit an issue with the decompression software used. If I'm both curious and suspicious (so in my most tin-hatish of moods) I fire up a virtualbox instance with a clean…

I googled "site:malwaredomains.com compression" and nothing turned up. Can you recall any instances? Do you know where they get the data from? I must be missing something obvious but I don't see where the describe the how the list is created. NB: I am not disagreeing with you I am just curious to look at some of the recent compression vulnerabilities.

Here is a great place to start: https://www.google.com/search?q=jpeg+decoder+exploit&oq=jpeg...

Note there have been various fixes, and you can often tell when you see one because you get a 'broken image' icon rather than a picture and an new friend. The compressed Javascript exploits were primarily tied to pdfs apparently (you can search for 'compressed js exploit') and then look for "gif decoder exploit" and of course the whole cross site scripting thing which when you're building a web site to compromise people its not a 'bug' that it has a cross site exploit vulnerability per se :-)

Basically anything that 'decompresses' is effectively a data driven computation engine where the bad guys can feed an arbitrary stream of data into that engine to make it do unexpected things. Whether it was the font exploits in Stuxnet and elsewhere or pdf exploits or jpeg exploits. Sadly it has been a target rich environment in the past.

Re: Iranian Hackers Post Images Over JFK Airport From UAV That Was Hijacked In March

#97

Post by dfc »

ChuckMcM wrote: post #96
dfc wrote: post #87

Earlier quoted context omitted.

I googled "site:malwaredomains.com compression" and nothing turned up. Can you recall any instances? Do you know where they get the data from? I must be missing something obvious but I don't see where the describe the how the list is created. NB: I am not disagreeing with you I am just curious to look at some of the recent compression vulnerabilities.

Here is a great place to start: https://www.google.com/search?q=jpeg+decoder+exploit&oq=jpeg... Note there have been various fixes, and you can often tell when you see one because you get a 'broken image' icon rather than a picture and an new friend. The compressed Javascript exploits were primarily tied to pdfs apparently (you can search for 'compressed js exploit') and then look for "gif decoder exploit" and of cou…

My fault. I was looking for the javascript compression vulnerabilities. I'm sorry I did not mention that.

Re: Iranian Hackers Post Images Over JFK Airport From UAV That Was Hijacked In March

#98

Post by s_q_b »

blhack wrote: post #91

This thread seems to be pretty chock full of some tinfoil hats. 1) You're not going to be added to "a list" because you clicked a link on hacker news. Remember that the NSA employs some of the smartest people in the world. Would it be meaningful to add a bunch of curious silicon valleyists to a list of "possible terrorists"? Probably not. 2) If you think that an aircraft that is anything bigger than a small pigeon co…

If this is anything, it's probably a redux of the Taliban accessing the unencrypted video feed of Predator drones. For a long time, most video (not control) feeds were sent in the open. The Taliban realized this and were able to grab those feeds using a $30 antenna and a laptop. A compromise in operational security? Sure. A method of "hijacking" UAVs? No way.

I'm not convinced this shows anything at all. But even if it did, remember, the Iranian government has a history of photoshopping images for propaganda purposes. See e.g. http://thelede.blogs.nytimes.com/2008/07/10/in-an-iranian-im...

Agree with OP. Very little here. Keep calm and carry on.

EDIT: Turns out they're claiming these were pulled off the RQ-170 Sentinel that crash landed in Iran. If that's true, it would mean the drive was salvaged and decrypted, which is a potentially big deal.

Re: Iranian Hackers Post Images Over JFK Airport From UAV That Was Hijacked In March

#99

Post by s_q_b »

jnbiche wrote: post #95
blhack wrote: post #91

This thread seems to be pretty chock full of some tinfoil hats. 1) You're not going to be added to "a list" because you clicked a link on hacker news. Remember that the NSA employs some of the smartest people in the world. Would it be meaningful to add a bunch of curious silicon valleyists to a list of "possible terrorists"? Probably not. 2) If you think that an aircraft that is anything bigger than a small pigeon co…

1. You have a lot more confidence in our government's ability to accurately compile lists than I do, particularly in light of the failures of the no-fly list: https://en.wikipedia.org/wiki/No_Fly_List#False_positives 2. Based on commentary from native Persian speakers on this thread, it would appear that no one is claiming that the drone was remotely piloted by Iranians into US Airspace, but rather the one that was s…

"2. Based on commentary from native Persian speakers on this thread, it would appear that no one is claiming that the drone was remotely piloted by Iranians into US Airspace, but rather the one that was shot down in Iran several months ago (confirmed by the US Government) had these photos on it."

If this is true it means the Iranians compromised the encryption on the UAV's drive, which would be seriously not good.

Post reply on HN