Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

mobile.nytimes.com

Post reply on HN
Print view View original

401–410 of 505 posts

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#401

Post by srtjstjsj »

aeorgnoieang wrote: post #221
mjevans wrote: post #128

Earlier quoted context omitted.

Yes, it actually is. Life critical systems should be small, fully open stack, fully audited, and mathematically proven to be correct. Non-critical systems, secondary information reporting, and possibly even remote control interfaces for those systems should follow industry best practices and try to do their best to stay up to date and updated. Most likely many modern pieces of medical technology have not been designe…

Maybe you really think it's just as simple as mandating exactly what you wrote here. But I'd imagine you'd agree that even doing this would have real and significant costs, which means tradeoffs are going to have to be made, e.g. some people won't receive medical care they otherwise would.

> some people won't receive medical care they otherwise would.

which is what happens when your whole computing network is remote-killed

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#402

Post by srtjstjsj »

nradov wrote: post #206
a2decrow wrote: post #165

Earlier quoted context omitted.

The doctors' PC can run just fine on an isolated network and doesn't have to be connected to the internet.

No that wouldn't work. Modern healthcare is a team effort, especially for patients with complex conditions. Doctors must be able to collaborate with each other including securely sharing data across the Internet in order to deliver effective patient care. No one is going to give up on that just to prevent a few isolated security incidents.

> securely sharing data

> security incidents

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#403

Post by jgaa »

lmz wrote: post #399
jgaa wrote: post #397

If NSA made it, and failed to protect it - then NSA should be liable for law suits to pay for damages.

Should that apply only to NSA or also to the writers of e.g. Metasploit exploits?

NSA made a weapon with the purpose of harming someone. In court, intent matters.

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#404

Post by placeybordeaux »

20delta wrote: post #317
placeybordeaux wrote: post #191

Earlier quoted context omitted.

I haven't looked into tumbling recently, whats the volume look like these days? So far the attack has yielded less than 5 btc, I'd guess that amount can be laundered safely. Whats the current limit?

You don't have to worry about tumbling anymore. You can use XMR.to, Shapeshift.io, or Changelly.com over TOR to move funds directly into another another blockchain currency. So have fun following things around Bitcoin blockchain like some high tech sleuth, but thats a wild goose chase. I buy all my cryptocurrencies through those kind of services nowadays, because there's no risk or temptation to keep coins on custodi…

Thanks for the info, I finally took the time to read the Monero whitepaper, cool stuff!

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#407

Post by arthurfm »

ComodoHacker wrote: post #53

Edit: Botnet stats and spread (switch to 24H to see full picture): https://intel.malwaretech.com/botnet/wcrypt Live map: https://intel.malwaretech.com/WannaCrypt.html Relevant MS security bulletin: https://technet.microsoft.com/en-us/library/security/ms17-01... Edit: Analysis from Kaspersky Lab: https://securelist.com/blog/incidents/78351/wannacry-ransomw...

MalwareTech found the kill switch for WannaCrypt too.

https://www.theguardian.com/technology/2017/may/13/accidenta...

https://twitter.com/MalwareTechBlog/status/86318710471668531...

https://twitter.com/MalwareTechBlog/status/86318907784311603...

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#408

Post by davidpardo »

pmoleri wrote: post #313
ComodoHacker wrote: post #53

Edit: Botnet stats and spread (switch to 24H to see full picture): https://intel.malwaretech.com/botnet/wcrypt Live map: https://intel.malwaretech.com/WannaCrypt.html Relevant MS security bulletin: https://technet.microsoft.com/en-us/library/security/ms17-01... Edit: Analysis from Kaspersky Lab: https://securelist.com/blog/incidents/78351/wannacry-ransomw...

Great info. So, for the layman. How vulnerable are users behind a firewall or broadband router?

Pretty safe until a machine in the network gets infected. The first infection comes from a phishing email or similar. From then on, the worm infects other machines connected to the same network, but usually not across the internet.

It uses a vulnerability in a protocol that's used for network sharing, and that's usually blocked at your router

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#409

Post by nl »

ajmurmann wrote: post #371
nl wrote: post #359

Earlier quoted context omitted.

Patriotism can be a way to align the interests of a group ahead of those of the individuals in the group. This can be a wonderful and terrible thing.

The scary thing is that it's about the group as opposed to people not in the group. This tribalism is nothing but scary.

It can be, yes.

But it's often patriotism that is seen as what enabled things like the congressional Republicans in the Nixon era to authorize the special investigations which brought him down.

That's only one example - there are plenty of others where an individual puts the interest of the group ahead of themselves. That isn't always a bad thing: the alternative is the tyranny of the strong, where the strongest individual has the most say.

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#410

Post by qznc »

_asummers wrote: post #291
hkmurakami wrote: post #252

Earlier quoted context omitted.

If you explicitly ask someone with the form "are there are organizations that are infalliable to leaks?" they're likely to say "no of course not. Humans make errors" But if you phrase it to something like "Can the government be trusted with backdoors to protect us from terrorists and Chinese hackers", then suddenly public sentiment will change dramatically.

To quote Göring, > Göring: Oh, that is all well and good, but, voice or no voice, the people can always be brought to the bidding of the leaders. That is easy. All you have to do is tell them they are being attacked and denounce the pacifists for lack of patriotism and exposing the country to danger. It works the same way in any country. Patriotism is both a wonderful and terrible thing, and it is made worse by feari…

Greetings from Germany. Losing WW2 thoroughly destroyed patriotism here. We do fine.
Post reply on HN