Kaspersky believes it found new CIA malware • Hacker News Board

Re: Kaspersky believes it found new CIA malware

#311

Post by caconym_ » Sat, May 01, 2021, 6:10 PM UTC

kortilla wrote: post #308

caconym_ wrote: post #301

Earlier quoted context omitted.

> Disinformation campaigns very frequently include publicly signaling you’ve come to a different conclusion than the real one you’ve come to. I'm not sure why you think what I said is incompatible with this. Often the best "lie" is a carefully cut-out corner of a larger truth.

> I'm not sure why you think what I said is incompatible with this. Because it’s literally the opposite. Misattribution is disinformation 101 if you have a solid source you need to protect. US finds out China severely compromised a system while pretending to be Russia. The US found this out via a compromised Chinese government asset. They need to fix the system but don’t want to let on they knew it was China and risk…

> we found this that looks like Russia

In your scenario, that's not a lie.

Re: Kaspersky believes it found new CIA malware

#312

Post by b112 » Sat, May 01, 2021, 7:43 PM UTC

boomboomsubban wrote: post #310

b112 wrote: post #309

Earlier quoted context omitted.

By using "only motivation" in your response, you are indicating you believe it to have been a motivation for non-intervention. It wasn't. At all. Period. Even if Roosevelt's goal wasn't to sit back and make a profit, he ran on that platform as the country did want that. You've actually claimed that Roosevelt ran on a platform of "Let's sit back and not do anything, so we can make a profit". Come on! Give it a rest, p…

>indicating you believe it to have been a motivation for non-intervention. Our first century of nonintervention was unquestionably based on the thought that entangling ourselves in European wars would drain us dry. Saying an element of that doesn't still remain is just incorrect, it is broadly the same idea as "Make America Great Again." "Much of America" supported it, I never said all. >If there is no "good" empire,…

Our first century of nonintervention was unquestionably based on the thought that entangling ourselves in European wars would drain us dry. Saying an element of that doesn't still remain is just incorrect, it is broadly the same idea as "Make America Great Again."

There is a vast difference between "drain america dry" and "stay out of the war to profiteer". Vast. Immense. The motives are entirely different.

I cannot continue this conversation, when you keep making these sorts of assertions. There's no common ground. Nothing we can realistically discuss, for, you aren't even discussing the same things when you reply.

Outside of all of this, bear in mind I'm a Canuck. No, I'm not all "rah-rah America', nor is my viewpoint skewed by propaganda. You guys drive me nuts at times. I frankly view your country as a brother, one I wish well for, yet often sit gobsmacked, and even sad, when you I see how my brother is behaving.

I think you're trying to discuss things, with the view that I'm going to respond to US political talking points. Or perhaps culture viewpoints.

Anyhow.

Have a good one. We're not going to agree here, so there's no point.

Re: Kaspersky believes it found new CIA malware

#313

Post by boomboomsubban » Sat, May 01, 2021, 9:08 PM UTC

b112 wrote: post #312

boomboomsubban wrote: post #310

Earlier quoted context omitted.

>indicating you believe it to have been a motivation for non-intervention. Our first century of nonintervention was unquestionably based on the thought that entangling ourselves in European wars would drain us dry. Saying an element of that doesn't still remain is just incorrect, it is broadly the same idea as "Make America Great Again." "Much of America" supported it, I never said all. >If there is no "good" empire,…

Our first century of nonintervention was unquestionably based on the thought that entangling ourselves in European wars would drain us dry. Saying an element of that doesn't still remain is just incorrect, it is broadly the same idea as "Make America Great Again." There is a vast difference between "drain america dry" and "stay out of the war to profiteer". Vast. Immense. The motives are entirely different. I cannot…

>There is a vast difference between "drain america dry" and "stay out of the war to profiteer". Vast. Immense. The motives are entirely different.

Besides the political reason stated for doing so, name one difference. Both involve profiting by staying out of the war, and using that money to further your own ambitions.

We are discussing the same things, you just label them differently than I and think that justifies them. Like claiming the US has never invaded and occupied a country for centuries, as if the First Nations somehow wouldn't count.

I hope you also have a nice day.

Re: Kaspersky believes it found new CIA malware

#314

Post by squarefoot » Fri, May 07, 2021, 2:15 PM UTC

qlk1123 wrote: post #271

squarefoot wrote: post #147

We're lucky that we can still catch some of them now. The current status of closed CPUs running proprietary firmware talking with closed chipsets running proprietary firmware blobs would make trivially easy to move the malware injection to the iron level for agencies funded by governments. Once they accomplish it, detecting their spyware using software, at any privilege level, will become impossible. I fear the scena…

If this is the case, then you only need to set a packet monitor between the computer and the ISP router to observe such magic packet. Or will you claim that all machines that are capable of such tasks are already compromised?

Sorry for being a bit late for the reply, however just suppose that enough resources are used to "convince" hardware manufacturers to add a small code change to their firmware such as "if a packet contains this exact magic word, don't count it and pass it on along with the payload, and possibly send a copy to this other address, again without counting it" where "counting" means also not signaling it is going through the hardware: no management interface would see it, and LEDs on network hardware panels wouldnt even blink. In other words, to actually see that packet one would have to be on the other side.

Admittedly it's absurdly complicated to do that at global level, but let's say someone in the right place manages to do that, the next level would be doing the same at iron level on computers, so that each subsystem can talk with others and the external world without administration tools noticing, because it's all done through a covert channel set up by closed software. That would be the perfect weapon to build pervasive surveillance that no security software at any privilege level, not even debuggers, would detect.

The only way to find something fishy is going on would be to sniff inter-chip communications locally and set digital analyzers on network cables with appropriate software. Network analyzers could fail if they use the same network chipsets, as would do a normal packet monitor.