Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How the “Kim” dump exposed North Korea's credential theft playbook

dti.domaintools.com

Post reply on HN
Print view View original

141–150 of 196 posts

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#141

Post by immibis »

fluoridation wrote: post #131
hetman wrote: post #84

Earlier quoted context omitted.

In fairness, the US kept indirectly funding the Khmer Rouge even after evidence of their atrocities came to light for their own strategic geopolitical reasons. The realpolitic of international relations very often follows the words of the British prime minister, Lord Palmerston: "We have no eternal allies, and we have no perpetual enemies. Our interests are eternal and perpetual, and those interests it is our duty to…

So there is a universe out there where the US would have supported/allied with Nazi Germany had it been convenient?

Yes, this one.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#142

Post by immibis »

forgotoldacc wrote: post #94
moomoo11 wrote: post #71

Earlier quoted context omitted.

How did they manage to brain control millions of people like that? I mean it’s so ludicrous to an outsider.

Nearly every authoritarian country starts with people promising good things. A lot also start with rebels fighting against a group that led a massacre. They're underdog groups with popular support. Then those underdogs take over. They become paranoid about the possibility of being killed themselves, so they repeat the massacres they fought against. A lot of people who supported the new regime think it's just a few re…

Not limited to non-Western countries btw. We are also vulnerable.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#143

Post by immibis »

ViktorRay wrote: post #134
jonasdegendt wrote: post #101

Earlier quoted context omitted.

It's my understanding there were plenty of USSR nostalgics in the east given how long it took for the free market to "trickle down" and the east to catch up economically. They never did catch up all the way anyway.

Today the areas that were previous controlled by East Germany overwhelmingly vote for right wing parties though. I believe the AfD political party in Germany won significant support in those areas of Germany that were once behind the Iron Curtain.

Yes, they won control of an entire state and almost won another.

People vote far right because they're fed up with the status quo, and perceive the far right can't be that much worse when everything is already so bad. Politicians who are not far right would do well to take this into account in their politics. Sadly, they don't, and history repeats.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#144

Post by fluoridation »

immibis wrote: post #141
fluoridation wrote: post #131

Earlier quoted context omitted.

So there is a universe out there where the US would have supported/allied with Nazi Germany had it been convenient?

Yes, this one.

What do you mean? Some US companies did business with Nazi Germany, famously IBM and of course Ford, and of course there were nazi sympathizers in the US, but to my knowledge the US never supported Germany at that time.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#145

Post by sieabahlpark »

tremon wrote: post #3

> The dump also revealed reliance on GitHub repositories known for offensive tooling. TitanLdr, minbeacon, Blacklotus, and CobaltStrike-Auto-Keystore were all cloned or referenced in command logs. What's the rationale for allowing the development of offensive tooling on github? Is this a free-speech thing, or are these repositories relevant for scientific research in some way?

[dead]

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#148

Post by lovich »

_def wrote: post #87
lawgimenez wrote: post #18

I believe these are the hackers responsible for this leak: https://phrack.org/issues/72/7_md#article

> I am a Hacker and I am the opposite to all that you are. In my realm, we are all alike. We exist without skin color, without nationality, and without political agenda. We are slaves to nobody. Classic elitist take ignoring that this this space where "all are alike" can only work for certain kinds of people.

I don’t necessarily agree with you but I’m not sure why you are being downvoted into oblivion.

Tangentially, my problem with this phrase post is that I am struggling to get past all the obvious falsehoods when it comes to the non technical part of the writing.

It starts off the bat with using terminology like “Advanced Persistent Threat” and conflates what it already identified as a North Korean group as Chinese in this sentence

> It shows a glimpse how openly "Kimsuky" cooperates with other Chinese APTs and shares their tools and techniques.

And then gives some flowery speech about how the Koreans are bad and political but this author who opposes them is good and not political.

This reads to me like the ravings of some crazy person with advanced skills who thinks everyone else is the crazy one while wearing a tinfoil hat, or a federal group leaking a no longer useful technical hack surrounded in language pushing propaganda

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#149

Post by corimaith »

jmyeet wrote: post #129
corimaith wrote: post #108

Earlier quoted context omitted.

The causality between missiles in Turkey causing the Cuban Missile Crisis is unsubstantiated by historical facts from the Soviets own perspectives. It's more that Cuba requested nukes first, the USSR opportunistically took, then they to resolve the crisis they took that opportunity to remove Turkish missiles. It wasn't really a tit for tat on part of the USSR's intentions, Cuba was the primary agent here. Not that it…

From Khrushchev's own words (27 October 1962) [1]: > Your missiles are located in Britain, are located in Italy, and are aimed against us. Your missiles are located in Turkey. > You are disturbed over Cuba. You say that this disturbs you because it is 90 miles by sea from the coast of the United States of America. But Turkey adjoins us; our sentries patrol back and forth and see each other. Do you consider, then, tha…

>From Khrushchev's own words (27 October 1962):

That dosen't refute anything from his own words as a justification as opposed to his primary goal to provide Cuba with defence here to deter a US invasion. As others have pointed out, the USSR was annoyed by these placements in Italy and Turkey earlier, but they did not declare war or start a crisis over it beforehand. It's more that Turkey was a bargaining chip here.

>>Our aim has been and is to help Cuba, and no one can dispute the humanity of our motives, which are oriented toward enabling Cuba to live peacefully and develop in the way its people desire.

You need to place here in context that the Jupiter missiles in Turkey were already obselete but the US had the overwhelming advantage in a nuclear strike with their Atlas ICBMs in USA at the time, relying more on a fleet of intercontinental bombers that could targeted by NORAD.

Removing nukes for Turkey did little to change the strategic calculus, but it did heavily deprive the USSR of an opportunity to change that calculus with Cuban nukes at the time, which was a major factor in Kruschev's later removal from power.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#150

Post by kbrkbr »

alt227 wrote: post #146
codedokode wrote: post #127

Why everyone working with the government doesn't use hardware keys without passwords so that fishing is useless?

Surely people can still phish for the user to insert their hardware key to approve something malicious?

What is phishing resistant MFA? - https://www.sans.org/blog/what-is-phishing-resistant-mfa
Post reply on HN