Earlier quoted context omitted.
Running misinformation is part of Wikileaks' job. It's not the NYT's job.
Agreed 100% - but methinks NYT (and others) still look to them for technical guidance on some matters - however misguided that might be.
WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents
21–30 of 250 posts
Re: WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents
#22According to the statement from WikiLeaks, government hackers can penetrate Android phones and collect “audio and message traffic before encryption is applied.” How is that possible? Isn't the data encrypted before it's sent over the wire?
The kernel is owned (or some part of the phone below the application level). The encryption only gets applied at the application level before the messages are sent down the wire. The interception happens prior to the encryption being applied . Think of it as a dongle on the wire between your keyboard and the computer. It doens't matter if the computer is secure - the message is intercepted prior to any encryption. Th…
Re: WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents
#23This headline is extremely dangerous. The phone itself was owned. No encryption was harmed by capturing the keystrokes and audio before it reaches the application. NYTimes should be ashamed of themselves for basically lying about the nature of the hacks.
Re: WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents
#24Earlier quoted context omitted.
> Please be aware that the Chrome browser does not offer a secure local storage protocol for its developers ... Compare this to Safari, which offers secure local storage at OS level security But this is just as secure as full disk encryption of the device right?
Not for malware running in user space.
Re: WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents
#25Mention "Signal" in any article and you'll have @tptacek running here to defend it with any costs.
Re: WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents
#26Edit: deleted, for very valid criticism. Next time I won't post in a rush during work hours.
Would you consider heavily caveating statements you make about information security? A lot of what you say here is basically wrong.
Re: WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents
#27Earlier quoted context omitted.
Running misinformation is part of Wikileaks' job. It's not the NYT's job.
Agreed 100% - but methinks NYT (and others) still look to them for technical guidance on some matters - however misguided that might be.
Re: WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents
#28Earlier quoted context omitted.
Unfortunately, this is a line that Wikileaks themselves are running with: https://twitter.com/wikileaks/status/839120909625606152
Running misinformation is part of Wikileaks' job. It's not the NYT's job.
YES! Because they are Russian stooges and they helped Trump get elected!
Re: WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents
#29To me this is much more worrying: > As of October 2014 the CIA was also looking at infecting the vehicle control systems used by modern cars and trucks. The purpose of such control is not specified, but it would permit the CIA to engage in nearly undetectable assassinations. https://wikileaks.org/ciav7p1/ Given the fact that car makers don't even have "PC age" security in their cars, things are looking pretty bad for…
Potential assassination?
Re: WikiLeaks Releases Trove of Alleged C.I.A. Hacking Documents
#30To me this is much more worrying: > As of October 2014 the CIA was also looking at infecting the vehicle control systems used by modern cars and trucks. The purpose of such control is not specified, but it would permit the CIA to engage in nearly undetectable assassinations. https://wikileaks.org/ciav7p1/ Given the fact that car makers don't even have "PC age" security in their cars, things are looking pretty bad for…