Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Kaspersky believes it found new CIA malware

therecord.media

Post reply on HN
Print view View original

251–260 of 314 posts

Re: Kaspersky believes it found new CIA malware

#251

Post by bostonsre »

coliveira wrote: post #173
scoofy wrote: post #62

Earlier quoted context omitted.

>If I had to wager I'd always bet on national security agency of any powerful country lying, I don't see how anyone could come to another conclusion given their history. Let's not pretend the FSB and MSS don't also lie constantly. That you're more familiar with the CIA lying is a testament to the free press of the US, not the other way around. The point of the previous post is that it could easily be another security…

The CIA has a budget for lying and cheating that is an order of magnitude larger than anything else other countries have. I always assume that they are doing more damage than what we know about.

How do you get to those numbers exactly? You really think Russia and China are choir boys?

Re: Kaspersky believes it found new CIA malware

#252

Post by didericis »

hnarn wrote: post #146
MauranKilom wrote: post #103

Earlier quoted context omitted.

> Even then there will almost always be evidence if you log network traffic. You'd need to know what to look for though. It was shown that the CIA can hide its communication in metadata of legitimate traffic which is then recovered at intermediate hops to the target. So, do you know precisely what an innocent DNS packet looks like to detect this anomaly?

>do you know precisely what an innocent DNS packet looks like to detect this anomaly Wouldn't an abnormal amount of DNS data also stand out? I assume for this to work they'd still have to send a lot of data unless they're willing to wait for half an eternity. Just curious, since I hadn't heard of this before.

I’d imagine it depends on what you’re trying to send out and the size of it.

Re: Kaspersky believes it found new CIA malware

#253

Post by mike_d »

freeflight wrote: post #234
mike_d wrote: post #228

Earlier quoted context omitted.

> How many domestic sponsored accounts have been banned? The Smith–Mundt Act makes it illegal to distribute propaganda where it may be consumed by a primarily US audience. Also from just a practical investment perspective, creating a bunch of sock puppets on Reddit to try and influence the opinion of Putin doesn't make sense. r/Russia for example only has 150k subscribers and most of the posts are in English. You wou…

> The Smith–Mundt Act makes it illegal to distribute propaganda where it may be consumed by a primarily US audience. That hasn't been true for nearly a decade as the Smith-Mundt act was "modernized" in 2012 to allow for exactly that [0]. Even when it was in effect, I doubt anybody was seriously trying to abide by that. The closest thing to practically doing that would have been to completely skip on the English langu…

That is not at all what the modernization act did. It allows Voice of America and other clearly government owned media outlets to also broadcast in the United States. Independent fact checkers agree [0].

The "opinion wars" in the US are won on what you consider to be the dominant social media networks. Again, if you want to convince a bunch of people to overthrow Putin, those daily active users are on VK - not Facebook.

But you literally can't use a lack of evidence of US influence on US social networks as proof that it is happening. Your second link plainly states that the US created an entirely new social network to try and influence Cuba, they didn't do it on Instagram. Hold yourself to a higher standard.

0. https://www.politifact.com/factchecks/2019/aug/23/facebook-p...

Re: Kaspersky believes it found new CIA malware

#254

Post by godelski »

lostlogin wrote: post #110
willcipriano wrote: post #98

Earlier quoted context omitted.

Sure, I dont focus on them because I don't believe that Mossad or MI5 are the reason why my country has been at war my entire adult life, but I have witnessed the NSA and CIA justify those wars-that-arent-really-wars time and time again. How much blood was spilled over the 'yellow cake' line alone? Remember when they lost that ten thousand page report on torture right before it was to be delivered? Or the time they d…

> my country has been at war my entire adult life The US has been at war for most it’s existence. Someone made a search tool to see how many years the US had been at war for, and then ran it on Wikipedia. Interestingly, France performed worse (assuming one doesn’t like war), though being involved in things like ‘The 100 years war’ skews things a little. https://freakonometrics.hypotheses.org/50473

I don't think this is surprising given globalism and the US. The countries got together and kinda said "hey, instead of having a bunch of armies why don't we just have one big army?" Thought being that countries with big militaries want to use them. So where to put that big military? Across an ocean and away from the first world. I mean that's essentially the super powers theory. It is of course a tricky cost benefit problem because the US spends more money on their military than other countries (and needs to to follow this line of reasoning) while other countries can use that money for other social programs. So that's a big cost. But a big benefit (or maybe a cost) is that the military industrial complex is extremely profitable and has helped the US economically. But of course this leads to the US being the neocolonial power. But we also act like the US is the only one in favor of many of the decisions it has made. The US is the biggest (Western) presence in the Middle East but far from the only.

It is a complex topic that for some reason we don't talk about much. I find the theory really interesting because hind sight we haven't had major wars like we did in the past. But clearly this leaves the US wanting to use its military (though that's the basis of the theory in the first place).

Re: Kaspersky believes it found new CIA malware

#255

Post by Stupulous »

mhermher wrote: post #212
stjohnswarts wrote: post #199

Earlier quoted context omitted.

I highly doubt if they have an order of magnitude more than China "budget" for CIA type activities. Probably more but not 10X, maybe 2X

you can use military spending as a proxy.

I don't think you can, I expect different countries to have a wide variety of intelligence budgets as a percentage of military. But, if you did this anyway for the US and China, you would get 3.1x, closer to 2x than 10x.

Re: Kaspersky believes it found new CIA malware

#256

Post by Banana699 »

jessaustin wrote: post #217
cyberlurker wrote: post #87

Earlier quoted context omitted.

Even if you think CNN is bad it still might be true.

Truly, a level of excellence to which all "news" organizations should aspire. "CNN" is a recursive acronym, modeled after "GNU".

what a galaxy brain joke

Re: Kaspersky believes it found new CIA malware

#257

Post by ljm »

scoofy wrote: post #62
willcipriano wrote: post #24

Earlier quoted context omitted.

If I had to wager I'd always bet on the CIA lying, I don't see how anyone could come to another conclusion given their history.

>If I had to wager I'd always bet on national security agency of any powerful country lying, I don't see how anyone could come to another conclusion given their history. Let's not pretend the FSB and MSS don't also lie constantly. That you're more familiar with the CIA lying is a testament to the free press of the US, not the other way around. The point of the previous post is that it could easily be another security…

Classic whataboutism, executed masterfully.

Re: Kaspersky believes it found new CIA malware

#258

Post by enkid »

whimsicalism wrote: post #240
fouric wrote: post #154

Two weeks ago, the NSA accused the Russian SVR (intelligence agency) of exploiting vulnerabilities in US networks and suggesting that they were behind the SolarWinds compromise[1]. Now, Kaspersky (which is suspected to be affiliated with Russian intelligence - possibly unwillingly) claims to have found CIA malware (effectively "burning" it, if it's real). The timing does not seem to be a coincidence. Tit-for-tat? [1]…

> which is suspected to be affiliated with Russian intelligence - possibly unwillingly I have yet to see actually compelling evidence that this is the case.

Here you go: https://www.bloomberg.com/news/articles/2017-07-11/kaspersky...

Re: Kaspersky believes it found new CIA malware

#259

Post by jimmyed »

yrlihuan wrote: post #246
avaldes wrote: post #131

Earlier quoted context omitted.

> Dude, it is well known that US is the single most powerful cyber warfare practitioner. They even had a few very successful operations in Iran and may be in China and Russia (you can guarantee that those countries won't disclose the incidents). I don't follow that logic: > >1: The US is the single most powerful cyber warfare practitioner > >2: Successful operations in Iran, China and Russia > >3: But those countries…

About eighty years ago, the US assembled the top minds of nuclear physics, and the US military knew the potential of creating a weapon out of physics, then BOMB. Now the situation is the same, it's reasonable to think the US is the most advanced nation in cyber weaponary.

Things were different in the era immediately after WW2 and now. Power and wealth is distributed amongst more countries now. The US cannot do much with the Taiwan situation for example.

Re: Kaspersky believes it found new CIA malware

#260

Post by genmud »

boomboomsubban wrote: post #113
genmud wrote: post #102

Earlier quoted context omitted.

Recorded Future = CIA? Solely based on them taking money from IQT? IQT funds a ton of different companies, it doesn't make them fronts for the CIA. Cloudera, FireEye and a ton of others have taken money from IQT, it doesn't make them propaganda.

>Cloudera, FireEye and a ton of others have taken money from IQT, it doesn't make them propaganda. Though I won't say for sure that Recorded Future is CIA propaganda, there are obvious reasons why the CIA would fund a software development or computer security company besides propaganda. For what other reason would they fund a media company?

Recorded Future isn't a media company... They are a threat intel/osint/reporting platform.

TheRecord is essentially their blog/news site, just like ThreatPost is Kasperskys blog/news site. Just like I wouldn't consider Kaspersky a media company, just like I wouldn't consider Recorded Future to be a media company.

Post reply on HN