Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

twitter.com

Post reply on HN
Print view View original

131–140 of 476 posts

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#131

Post by gsich »

dogma1138 wrote: post #94
ATsch wrote: post #48

Earlier quoted context omitted.

It will be more or less impossible to prove or disprove that anyone obtained some crucial information from there. The info will always somehow make it's way into the places it's needed eventually.

It doesn’t matter if it’s provable or not, most developers won’t risk it especially if they want to keep their jobs or be hireable. If you review the content and publish say a blog post, even without legal repercussions it can impact your ability to be hired in the future since everything you do from that point can be tainted. So if you do look you should keep it quite or publish it under a pen name that you can’t ev…

You can always say you reverse engineered it yourself. Hard to disprove.

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#132

Post by dleslie »

aflag wrote: post #118
dleslie wrote: post #67

Earlier quoted context omitted.

Intel is an American company; so wherever there is an extradition treaty with the USA and where there are also similar laws.

No country Will extradite their own citizens, though. If intel wants the person punished, they have to sue them in the country they live in.

> No country Will extradite their own citizens, though.

This is demonstrably false. While not all of this list are Canadian citizens, some are:

https://en.wikipedia.org/wiki/Category:People_extradited_fro...

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#133

Post by Nasrudith »

kmeisthax wrote: post #61
gabcoh wrote: post #28

Earlier quoted context omitted.

Is the person publishing this liable or just their source? Because this seems to be a hobby for the person publishing it and yet they also aren't concealing their identity. They list their former employer on their website.

Misappropriating trade secrets for financial gain is a punishable offense, and this data would qualify as a trade secret, at least for as long as it's not general knowledge to everyone or it has yet to be reverse-engineered. Aside from that, much of the data in these files has standard copyright and patent concerns.

Wouldn't financial gain limit it to essentially their competitors? Which renders that part irrelevant and is kind of a "no shit" to anyone actually working in processors not to include their stuff in there.

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#134

Post by dlivingston »

bogidon wrote: post #80
SEJeff wrote: post #76

Earlier quoted context omitted.

As in a manhole cover in a street for maintenance.

Yes, yes. Seems like an outdated term. Downvotes accepted.

Pick your battles. This isn’t a hill worth dying on (or even a hill worth getting slightly bruised on).

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#135

Post by skissane »

orisho wrote: post #11

At a previous workplace we had a few places in the code which used the word backdoor. It was not an actual backdoor though, but merely a debugging server that could be enabled and allowed you to inspect internal state during runtime. At some point I removed the word backdoor, fearing it would get to a customer or during an audit someone would misunderstand. :|

Once I got a complaint from a security auditor that some code was using MD5. It wasn’t being used for any security purpose, just to check whether an autogenerated file had been manually edited. We decided it was easier to do what they wanted than argue with them, so we replaced it with CRC32C. That would have been faster than MD5, but nobody cares about saving a few milliseconds off reading a configuration file at startup. It would have made the manual edit check somewhat less reliable, but probably not by much in practice. But the security auditor was happy we’d stopped using MD5

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#136

Post by at-fates-hands »

ccurrens wrote: post #2

> If you find password protected zips in the release the password is probably either "Intel123" or "intel123". This was not set by me or my source, this is how it was aquired from Intel. Can't say I'm surprised, people are lazy. Another large tech company I used to work for commonly used an only-slightly more complex password. But it was never changed, so people who had left the team still could have access to things…

I was an admin for a medium sized company and handled their websites. Almost all of them (about a dozen or so) were hosted on Go Daddy. Plus they had about two dozen reserved domains they were sitting on like www.yourcompanysucks.com and others.

I left the company 5 years ago. Just checked the login to see if it still worked.

Yeap.

Any disgruntled employee could change the password, lock them out of all of their sites (including several e-commerce sites that amount for a large chunk of revenue) and then if they really wanted to, delete all of them.

I remember talking the main network guy about any backups when a lot of the ransomware stuff was making the rounds. The big, really big stuff on their network (mostly ERP stuff) was backed up in two or three places. Their web stuff? Yeah. . . NOPE.

Pretty scary how lazy people are about stuff like that.

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#137

Post by shoo »

SEJeff wrote: post #58
orisho wrote: post #11

At a previous workplace we had a few places in the code which used the word backdoor. It was not an actual backdoor though, but merely a debugging server that could be enabled and allowed you to inspect internal state during runtime. At some point I removed the word backdoor, fearing it would get to a customer or during an audit someone would misunderstand. :|

We use the term “manhole” for those sorts of things

readers may tangentially enjoy yosefk's "cardinal programming jokes" -- the first one featuring a manhole: https://yosefk.com/blog/the-cardinal-programming-jokes.html

> I must warn you about those jokes. Firstly, they are translated from Russian and Hebrew by yours truly, which may cause them to lose some of their charm. Secondly, I'm not sure they came with that much charm to begin with, because my taste in jokes (or otherwise) can be politely characterized as "lowbrow". In particular, all 3 jokes are based on the sewer/plumber metaphor. I didn't consciously collect them based on this criterion, it just turns out that I can't think of a better metaphor for programming.

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#138

Post by Nasrudith »

RSO wrote: post #113

Anybody else wondering at the rate of bad news around Intel at this moment? Like, is someone after them or is this just bad luck?

Personally it seems more like complacency and cultural rot has caught up to them than any bad actor - excluding their own management chasing ego gratification or short term profits. Falling behind AMD in so many metrics when they were previously often a second-best rival screams that they need to get their shit together.

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#139

Post by crdrost »

gspr wrote: post #125
hawkoy wrote: post #71

Earlier quoted context omitted.

Not reliable. Most people torrenting this are hopefully using a vpn.

Why?

Because until this thing gets diffused and dissected by everyone and their mothers, the law is likely to view it as publication of confidential trade secrets, and people who can be confirmed to be spreading such things can get federal time, e.g. [1] for example. Using a VPN is the barest of mechanisms to try to obscure your identity to avoid this sort of punishment.

[1] https://www.wsj.com/articles/SB10001424052970204409004577158...

Re: 20GB leak of Intel data: whole Git repositories, dev tools, backdoor mentions

#140

Post by throwaway45349 »

bogidon wrote: post #80
SEJeff wrote: post #76

Earlier quoted context omitted.

As in a manhole cover in a street for maintenance.

Yes, yes. Seems like an outdated term. Downvotes accepted.

This reads like the people who want to use "womxn" because the normal version is a superstring of "men".
Post reply on HN