“Warning: Do Not use my mirrors/services until I have reviewed the situation”

Post by cesarb » Mon, Dec 22, 2014, 9:47 AM UTC

Shank wrote: post #104

throwaway2048 wrote: post #54

Earlier quoted context omitted.

it is pretty likely the USB device is this http://www.cru-inc.com/products/wiebetech/mouse_jiggler/ to prevent the computer going to sleep while this is utilized http://www.cru-inc.com/products/wiebetech/hotplug_field_kit/ These are pretty standard plays in seizing computers these days. One should note that the grsec linux patchset has functionality to not load drivers for any plugged usb devices, as well as log when…

Pretty sure Jake Appelbaum stated at 30c3 that the Mouse Jiggler will cause the system to lock immediately if plugged into Systemd [0]. [0]: https://www.youtube.com/watch?v=vILAlhwUgIU

Post by mike_hearn » Mon, Dec 22, 2014, 10:00 AM UTC

yafujifide wrote: post #78

jerf wrote: post #34

Earlier quoted context omitted.

Oh, the whole cyberwar situation is far from "hopeless". The truth is nobody to speak of has taken it seriously yet. Security is still mostly an afterthought, if that , almost everywhere you look. Even in nominally security-focused contexts. And much of the activity in places that really are security focused are built around an environment in which software must be assumed to basically be constructed out of styrofoam…

I agree about C and C++, but is there a language that exists today that you think would be better for writing security-conscious code? Should a language be invented that is specifically for writing security-conscious code?

Post by halfcat » Mon, Dec 22, 2014, 11:04 AM UTC

Havoc wrote: post #42

_RPM wrote: post #12

Earlier quoted context omitted.

Does ISIS really have the resources to carry out criminal computer activities? From what I understand, they are a group with limited technological advantage, and there is no way they could carry out a major attack on the Internet.

Must admit I'm slightly amused that this is even being considered as a plausible theory. They're busy executing elderly with AK47s...thats very far away from physically cracking open servers in a western data center and inserting USB devices with targeted attack software.

Post by psykovsky » Mon, Dec 22, 2014, 11:09 AM UTC

dsl wrote: post #30

xorcist wrote: post #28

Earlier quoted context omitted.

Can you explain more? How do go about dumping memory?

This is a good intro to the subject http://www.forensicswiki.org/wiki/Memory_Imaging Law enforcement also has additional undisclosed methods to avoid detection by systems.

Post by osivertsson » Mon, Dec 22, 2014, 11:39 AM UTC

flux_w42 wrote: post #124

A Dutch tech news site [1] published the news on their site and got in contact with the ISP Snel: The ISP told Tweakers that the account of Thomas White was blocked due to a security policy of the company. The customer let a deadline for verification accidentally expire and logged in through KVM. "Some KVM's generate a USB event when you use it to set up a connection to the server, this is what the customer just noti…