Is anyone actually surprised? Even military has USCYBERCOM. What do you think their type of 'weapons' are? My only surprise it that this has leaked.
CIA malware and hacking tools
301–310 of 1001 posts
Re: CIA malware and hacking tools
#302Earlier quoted context omitted.
There also still hasn't been any public evidence that Wikileaks got their Podesta email data from Russians yet. So far we only know the DNC leaks were very likely Russian. That means until today only about ~50% of the 'election hacks' have been attributed to Russia with public evidence. Now this leak calls into question some of the evidence about the DNC hack [1]. This evidence being the malware was Russian. But ther…
There is no hard evidence where the DNC/Podesta leaks came from. However, Julian Assange has repeatedly said that the source is not the russian goverment or a affiliated state party [1] and in a other interview has hinted that the source may be Seth Rich [2], a former DNC staff member that was murdered in Washington DC. [1] https://www.youtube.com/watch?v=uyCOy25GdjQ [2] https://www.youtube.com/watch?v=Kp7FkLBRpKg
Is Julian Assange a reliable actor in this? He has every motive to deny that Russia are the source of the leaks.
Re: CIA malware and hacking tools
#303Earlier quoted context omitted.
The US chemical weapons program is downright frightening. Unlike these exploits which you can just leave in an office and never use (and which con subsequently go stale as people find and patch exploits), chemical weapons were stored in massive US facilities and many of them have started leaking over the years: https://www.youtube.com/watch?v=FjA0EQPeUGM
> The US chemical weapons program is downright frightening. Was : they committed to destroying those weapons, and have been doing so for 24 years. They were 89.75% complete in 2012. The video you linked was from 1973. https://en.wikipedia.org/wiki/United_States_chemical_weapons...
Just like they committed to revealing exploits to the tech industry instead of hoarding them?
Re: CIA malware and hacking tools
#304The CIA's Remote Devices Branch's UMBRAGE group collects and maintains a substantial library of attack techniques 'stolen' from malware produced in other states including the Russian Federation. With UMBRAGE and related projects the CIA cannot only increase its total number of attack types but also misdirect attribution by leaving behind the "fingerprints" of the groups that the attack techniques were stolen from. Th…
> although I can't imagine the CIA wanting to hack the election in Trump's favour
Doesn't preclude planting 'evidence' of Russian hacking to stir up a red scare (towards renewed cold war -level funding of the intelligence community) irrespective of the election's outcome. I.e., the fact that anyone actually uncovered secret data through some other means could have just been unrelated/incidental. E.g., if Wikileaks got their material from an inside whistle-blower as they've insinuated.
I wouldn't either be surprised if the 'evidence' of Russian interference was just circumstantial rather than planted... E.g., "Woah, we found evidence of probing originating from Russia (in the pile of probing evidence from script-kiddies all over the world, mostly Nigerian princes but those don't bolster our narrative)!"
https://www.youtube.com/watch?v=7j_ZfKmcnSk
https://en.wikipedia.org/wiki/Operation_Northwoods
http://www.mintpressnews.com/migrant-crisis-syria-war-fueled...
Re: CIA malware and hacking tools
#305Earlier quoted context omitted.
Any executable is vulnerable to DLL hijacking, they're just looking for easier targets that load known DLLs (with known function signatures) from their own folders (NOT system folders). I'm assuming the goal is to minimise detection by what they call PSPs (av / security products) This is not a flaw within notepad++
Arguably loading DLLs from non-system folders is bad design in this day and age.
No, it's not, not even 'arguably'.
Re: CIA malware and hacking tools
#306Earlier quoted context omitted.
The best offense is a good defense. Improving the quality of software in general would be far more beneficial than developing zero-day short-sighted tools.
I've never heard the phrase "the best offense is a good defense," but I have heard a great many times the phrase "the best defense is a good offense." I don't have any data to back it up, but inclined to believe the more popular form of the statement.
"the best offense is a good defense" - 51,600 Google results
"the best defense is a good offense" - 143,000 Google results, and the only one with a Wikipedia article.
https://en.wikipedia.org/wiki/The_best_defense_is_a_good_off...
Re: CIA malware and hacking tools
#307[Deleted]
RTFA. They didn't release the tools.
Re: CIA malware and hacking tools
#308Well, traveling to the US I have had to fill out a green form stating that I'm not a terrorist or a 40-45 Nazi. I guess they capture a lot of pathological truth-telling terrorists/Nazis with this piece of paper
What is a 40-45 Nazi?
Re: CIA malware and hacking tools
#309Quit with the fucking conspiracy theories. Seriously -- can we get a fucking mod in here to get rid of this shit.
You're commenting on a release that includes CIA guidelines for structuring file metadata specifically to avoid US attribution... And arguing that questioning the integrity of file metadata is a conspiracy theory...
Re: CIA malware and hacking tools
#310Interesting page titled "ConnectifyMe Research" [0] appears to be reverse engineering Connectify [1], which is an In-Q-Tel funded project!