Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

How the “Kim” dump exposed North Korea's credential theft playbook

dti.domaintools.com

Post reply on HN
Print view View original

151–160 of 196 posts

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#151

Post by lovich »

wkat4242 wrote: post #126
the_af wrote: post #124

Earlier quoted context omitted.

Apparently, due to cultural, political and economical issues, South Korea cannot/won't do this. I suppose it theoretically could, but in practice it would mean it would cease to exist as it is now. Due to the scale of their population collapse, the influx of immigrants would have to be massive. Which country does that? It would completely overtake its native ethnic population... which unlike a country built on immigr…

> I suppose it theoretically could, but in practice it would mean it would cease to exist as it is now. But it's going to cease to exist as it is anyway. One way or another. And the people that remain will not be staring at a wall waiting for it to end. Also, young people seem to have a radically different mindset there, which is what tends to happen when they see their parents screwing everything up. Maybe the cultu…

> But there are lots of people that would love this kind of thing.

Doesn’t the fact that the people in said culture have decided it’s no longer worth reproducing, en masse, because of how their life is, imply that a lot of people wouldn’t actually like that kind of thing?

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#152

Post by rr808 »

sgnelson wrote: post #6

This is interesting due to the tying of DPRK and PRC. It seems hard to say how much coordination there is between the two, but whatever it is, it appears to be greater than zero. While not necessarily surprising, I wonder if this public attribution will make it harder for the PRC to deny involvement with both the DPRK's efforts and their own.

Russia too after the public hand holding last week.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#153

Post by alexey-salmin »

wkat4242 wrote: post #136
the_af wrote: post #128

Earlier quoted context omitted.

I mean, I don't know what to tell you. You seem to be reacting in disbelief, "this cannot be true". But reality shows it is happening, it is accelerating, and young people are part of the problem. It's a real thing, and the consensus seems to be it's irreversible, however bizarre it may seem to us.

I just think life finds a way. Societies don't just disappear. They just change. There's too much value in Korea to just give up. Will it disappear as we know it? Yes. But that is true everywhere. The America as you knew it in 2010 is also gone forever (and not for the better, unfortunately with its current politics). Same in Europe where the nazis are trying to take over. Change is a constant.

Life finds a way, just not necessarily your life or your kids'

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#154

Post by KyleBerezin »

vntok wrote: post #91
Joel_Mckay wrote: post #86

Earlier quoted context omitted.

State sponsored thieves are not a talent pool that anyone wants in a trusted position. The fact is there were only around 40 unique hacks ever invented, and people simply adapt these into new zero day exploits. Notably, this is now mostly a fully automated process. If people want in, they will get in eventually. =3 x C62=:K6 J@F 2C6 AC66>AE:G6=J 5:D28C66:?8 H:E9 E96 DFCAC:D:?8=J =@H 6DE:>2E6 @7 6IA=@:E E2I@?@>J[ 3FE…

ChatGPT decoded the ROT47 text immediately from a simple prompt: "Decode this string sent by some random pompous guy on Hacker News: [raw string]". If robots want in, they will get in eventually too, apparently.

No need for insults, I found it fun. ROTs are easy to detect because they usually still have word-length chunks, and common repeating symbols. In this case the '6's ('e's). This is something a language oriented AI is going to be very good at detecting. It's great demo of why hashing is so important.

If you don't see repeating symbols, it could be a running key, like a Vigenèr cipher.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#155

Post by Joel_Mckay »

bgwalter wrote: post #118
Joel_Mckay wrote: post #95

Earlier quoted context omitted.

It was a simple way to highlight impulsive behavior common in modern users, and the trivial encoding function should be obvious to those who are minimally empathetic. Ask the LLM handler if being lied to makes people feel worse than getting robbed... then consider if you would hire such individuals. If you are ever unsure of someones motives, than politely ask for context. Have a wonderful day =3 https://en.wikipedia…

What is the impulsive behavior? Do you have a zero day in some ROT-47 decoder? Or perhaps a zero day in the file command in case a user creates a file containing the string and runs the command on it? Or is the string both a valid ROT-47 string and a valid executable on some platform? > If you are ever unsure of someones motives, than politely ask for context. Asking for context.

In general, the point was predicting statistical behavior is easy in large enough populations, and finding utility in that fact is trivial.

Exploits are boring, and thus have questionable utility in a proper business context. Don't worry about it... =3

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#156

Post by 0xDEAFBEAD »

AngryData wrote: post #140
fluoridation wrote: post #131

Earlier quoted context omitted.

So there is a universe out there where the US would have supported/allied with Nazi Germany had it been convenient?

I mean the US had no problems selling Nazi Germany arms at the start of the war. The US only really took a side after Germany told the US to stop also supplying war materials to their enemies, which Germany viewed as merely prolonging the war and deaths, and when the US ignored them because they were making too much money Germany stopped buying and doubled down on blockading material support to allies.

>I mean the US had no problems selling Nazi Germany arms at the start of the war.

This claim doesn't appear to be true: https://www.reddit.com/r/AskHistorians/comments/1k6yi1z/comm...

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#157

Post by rikafurude21 »

pphysch wrote: post #139
rikafurude21 wrote: post #99

Earlier quoted context omitted.

I would go as far as to say slaves of a dictatorship. Most likely threathened with death, including the hackers' entire family, if they dont follow the line. Considering these factors, how much do you think they actually "support crimes against humanity"? North Koreans filter their students very early on to find the smart ones and teach them hacking in specialized military camps. Whoever this hacker is, he probably h…

How is this any different from say a Pentagon or IDF employee who is involved (by some degree) in the documented mass murder of civilians? Their livelihoods are also on the line. Are they off the hook because they "choose" to participate in mass murder?

Youre gonna pretend theres no difference between your entire bloodline (literally) or your salary being on the line? If you work at the Pentagon and see mass murder of civilians you have the option to stop going to work. A north korean hacker does not have that option.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#159

Post by jgilias »

Joel_Mckay wrote: post #102
JumpCrisscross wrote: post #100

Earlier quoted context omitted.

> State sponsored thieves are not a talent pool that anyone wants in a trusted position Why? They’re intelligent, crafty and able to make trade-offs. Empirically, ex-spies have a solid history in reaching commanding positions in politics and business.

It is complicated, but Moral Development theory does cover the phenomena of why some won't understand until they personally grow through the stages of development. Have a great day. =3 https://en.wikipedia.org/wiki/Lawrence_Kohlberg's_stages_of_...

Reading up on it made me realize that a certain well known orange person is really on Stage 2 of moral development. That explains a lot.

But also gives hope. I mean, it’s rare that adults fail to advance from pre-conventional phases, so it must be super rare to have such a confluence of factors that puts someone like that in the given job.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#160

Post by A4ET8a8uTh0_v2 »

rikafurude21 wrote: post #157
pphysch wrote: post #139

Earlier quoted context omitted.

How is this any different from say a Pentagon or IDF employee who is involved (by some degree) in the documented mass murder of civilians? Their livelihoods are also on the line. Are they off the hook because they "choose" to participate in mass murder?

Youre gonna pretend theres no difference between your entire bloodline (literally) or your salary being on the line? If you work at the Pentagon and see mass murder of civilians you have the option to stop going to work. A north korean hacker does not have that option.

You may be assuming a fair bit. Just because it is evidently true that there is a difference, to the parent, depending on their philosophical bent, it is not impossible that it is the outcome alone that determines level of willingness to accept level of.. dunno what is a good word here.. responsibility. In other words, from where they come from, all other factors are not relevant. I don't subscribe to this particular view of the world, but it helps to be able to understand others.
Post reply on HN