Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Russian Hackers Stole NSA Data on U.S. Cyber Defense

wsj.com

Post reply on HN
Print view View original

11–20 of 212 posts

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#11

Post by mattnewton »

1001101 wrote: post #7
NN88 wrote: post #3

THEY EXPLOITED KASPERSKY TO DO IT. HOLY. SHIT. Full Text: http://archive.is/szjBQ

Interesting. After seeing the gloves come off in the last month or so, it hit me just this morning that one could make the case for it being a bad idea to have a system with root access to thousands of US systems in Russian jurisdiction.

It boggles my mind they don’t require source files for things running with administrative privledges on government computers, so they can audit it and then compile it themselves. Though in this case it wouldn’t have helped, because apparently the information was brought home to a personal computer.

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#12

Post by uptown »

mattnewton wrote: post #11
1001101 wrote: post #7

Earlier quoted context omitted.

Interesting. After seeing the gloves come off in the last month or so, it hit me just this morning that one could make the case for it being a bad idea to have a system with root access to thousands of US systems in Russian jurisdiction.

It boggles my mind they don’t require source files for things running with administrative privledges on government computers, so they can audit it and then compile it themselves. Though in this case it wouldn’t have helped, because apparently the information was brought home to a personal computer.

That's actually a recent development:

http://fortune.com/2017/07/02/kaspersky-source-code-inspecti...

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#13

Post by keda »

mozumder wrote: post #9

"An NSA contractor brought home documents about U.S. offensive cyber capabilities. He used Kaspersky on his home computer. Russian government hackers stole the documents." https://twitter.com/ericgeller/status/915983591737319427 So, yah, avoid Kaspersky AV software.

Funny how this Cybersecurity reporter publish his PGP key using unsecured protocol. http://www.ericjgeller.com/pgp_ejg.txt

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#14

Post by strictnein »

mattnewton wrote: post #11
1001101 wrote: post #7

Earlier quoted context omitted.

Interesting. After seeing the gloves come off in the last month or so, it hit me just this morning that one could make the case for it being a bad idea to have a system with root access to thousands of US systems in Russian jurisdiction.

It boggles my mind they don’t require source files for things running with administrative privledges on government computers, so they can audit it and then compile it themselves. Though in this case it wouldn’t have helped, because apparently the information was brought home to a personal computer.

The UK has a program that does just that, especially in regards to networking/telecom hardware and software from China.

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#15

Post by comicjk »

iloveluce wrote: post #6

I hope NSA is doing the same with Russian Cyber Defense systems. This is what NSA should be focused on and not on turning its eavesdropping capabilities towards the homeland. What if an adversary where to hack the NSA warehouses were all communications swept up by their eavesdropping efforts are stored?

I've been thinking about writing a spy thriller based on that premise, ever since the Snowden leaks. At this point I'd assign 30% probability that it's already happened.

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#16

Post by strictnein »

keda wrote: post #13
mozumder wrote: post #9

"An NSA contractor brought home documents about U.S. offensive cyber capabilities. He used Kaspersky on his home computer. Russian government hackers stole the documents." https://twitter.com/ericgeller/status/915983591737319427 So, yah, avoid Kaspersky AV software.

Funny how this Cybersecurity reporter publish his PGP key using unsecured protocol. http://www.ericjgeller.com/pgp_ejg.txt

Uhmm... that's a public key. So it doesn't matter. He could put it on a billboard in Times Square.

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#17

Post by mtgx »

iloveluce wrote: post #6

I hope NSA is doing the same with Russian Cyber Defense systems. This is what NSA should be focused on and not on turning its eavesdropping capabilities towards the homeland. What if an adversary where to hack the NSA warehouses were all communications swept up by their eavesdropping efforts are stored?

They've already stolen a bunch of NSA's spying and mass hacking tools, so we're probably years away until stored data is stolen, too, if we'll even find out about it.

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#18

Post by mtgx »

austincheney wrote: post #8

Another damn NSA contractor took confidential information home. Epic fail.

It's of their own doing:

https://www.salon.com/2013/06/11/500000_contractors_can_acce...

Also, I believe I read a recent article about them allowing even more private companies access to this stuff, but I can't find a link right now.

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#19

Post by vkou »

tryingagainbro wrote: post #4

NSA /CIA and our National Security is as secure as the weakest link. They need not be traitors, just people that got too complacent...while Russia never sleeps (Like NSA does when Russians and others screw up.) It isn't easy but if tens of thousands people have access to something, it's just a matter of time. And they need access "to connect the dots" so it's a losing game.

> Russia never sleeps (Like NSA does when Russians and others screw up.)

Do you have a number of reliable sources for this, or is it just unsubstantiated us-vs-them jingoism?

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#20

Post by TheAdamAndChe »

tryingagainbro wrote: post #4

NSA /CIA and our National Security is as secure as the weakest link. They need not be traitors, just people that got too complacent...while Russia never sleeps (Like NSA does when Russians and others screw up.) It isn't easy but if tens of thousands people have access to something, it's just a matter of time. And they need access "to connect the dots" so it's a losing game.

This is an oddly one-sided comment on a complex issue. A computer is an incredibly complex, incredibly large attack surface, and when you have millions of computers exposed to the internet and exchanging data, the chances of a state actor gaining a foothold in a government system is almost 100%. This goes for both sides: Russia has likely hacked the US a thousand times over, and the US has likely hacked Russia a thousand times over.
Post reply on HN