Live data from Hacker News

Russian Hackers Stole NSA Data on U.S. Cyber Defense

wsj.com

31–40 of 212 posts

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#31
post #3

THEY EXPLOITED KASPERSKY TO DO IT. HOLY. SHIT. Full Text: http://archive.is/szjBQ

I believe the allegation isn't that Kasperky was used to exfiltrate the data, but that Kasperky is passing information about certain files on customer computers to Russian Intelligence.

In this case, they believe the presence of NSA malware samples on the contractor's computer, detected by Kasperky, was used to target him.

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#32

Kaspersky preempting (presumably) this story: "New conspiracy theory, anon sources media story coming. Note we make no apologies for being aggressive in the battle against cyberthreats" https://twitter.com/e_kaspersky/status/915946040561487875 Edit: Kaspersky press release https://usa.kaspersky.com/about/press-releases/2017_kaspersk...

[deleted]

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#33
post #29

Earlier quoted context omitted.

Do you have a number of reliable sources for this You want a source to back up that Russia is always looking to hack us, and USA is always looking to hack the Russians?

He explicitly quoted what he wanted sources for. Don't try to be cute. In other words, what makes you say the NSA is complacent and that Russia is ahead.

while Russia never sleeps (Like NSA does when Russians and others screw up.)

Easy there...meant to say that NSA does the same, or never sleeps. I am 100% sure that NSA is extremely effective.

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#34
how Kaspersky was ever thought to be "okay" in the US enterprise/government market has always been perplexing to me. Antivirus, something which literally inspects all of your files and network activity, made in the country that's a hotbed of blackhat activity and home one of the most aggressive cyber-espionage militaries outside the US. yea okay great, sign me up.

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#35

how Kaspersky was ever thought to be "okay" in the US enterprise/government market has always been perplexing to me. Antivirus, something which literally inspects all of your files and network activity, made in the country that's a hotbed of blackhat activity and home one of the most aggressive cyber-espionage militaries outside the US. yea okay great, sign me up.

[deleted]

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#36

Earlier quoted context omitted.

Uhmm... that's a public key. So it doesn't matter. He could put it on a billboard in Times Square.

I believe keda's point is it's served over HTTP not HTTPS so there's no way to verify you're not being MITM'd when looking at it. (A possible workaround is to check via multiple connections, check Google's cache, etc)

I mean, sure, but if you're sending him a PGP encrypted message, and his public key was messed with, the end result would just be his inability to open the message.

I think his actual point was to try and discredit the messenger.

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#37

NSA /CIA and our National Security is as secure as the weakest link. They need not be traitors, just people that got too complacent...while Russia never sleeps (Like NSA does when Russians and others screw up.) It isn't easy but if tens of thousands people have access to something, it's just a matter of time. And they need access "to connect the dots" so it's a losing game.

This is an oddly one-sided comment on a complex issue. A computer is an incredibly complex, incredibly large attack surface, and when you have millions of computers exposed to the internet and exchanging data, the chances of a state actor gaining a foothold in a government system is almost 100%. This goes for both sides: Russia has likely hacked the US a thousand times over, and the US has likely hacked Russia a thou…

How is it one sided? The parent said exactly what you just said. Literally the exact same thing. "It's just a matter of time" precisely because of the large attack surface.

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#38
post #13

Earlier quoted context omitted.

Funny how this Cybersecurity reporter publish his PGP key using unsecured protocol. http://www.ericjgeller.com/pgp_ejg.txt

Uhmm... that's a public key. So it doesn't matter. He could put it on a billboard in Times Square.

It does matter. Someone could replace his public key with a fake one. Everything that would be encrypted so that only he could see it could end up in wrong hands, because somebody would trust "I'm encrypting using his public key, I can tell anything to that guy", and the bad guy would read it.

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#39

Kaspersky preempting (presumably) this story: "New conspiracy theory, anon sources media story coming. Note we make no apologies for being aggressive in the battle against cyberthreats" https://twitter.com/e_kaspersky/status/915946040561487875 Edit: Kaspersky press release https://usa.kaspersky.com/about/press-releases/2017_kaspersk...

Heh, an extreme interpretation of that statement could be that Kaspersky considers the NSA to be a "cyberthreat"...

Re: Russian Hackers Stole NSA Data on U.S. Cyber Defense

#40

No confirmation from the NSA, only "leaks" from anonymous "multiple people with knowledge of the matter." How do we know it's not another piece of fake news riding the wave of "Russia did it"?

Because you trust journalists to do their job in verifying sources, which maintains their credibility. I want you to think your cunning plan through. What do you think would happen if journalists actually lied?

You have GOT to be fucking kidding. Have you actually been asleep for the last 6 years?
Post reply on HN