Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Technical report on DNC hack [pdf]

us-cert.gov

Post reply on HN
Print view View original

431–440 of 502 posts

Re: Technical report on DNC hack [pdf]

#431

Post by marxmarv »

x0x0 wrote: post #362
StanislavPetrov wrote: post #190

Earlier quoted context omitted.

>This report merely points the finger at Russia; it does not purport to substantiate that allegation. That's the point, its just another completely baseless, unsubstantiated accusation. This report contains nothing that suggests that the Russians were any more likely to be the source of the hack then countless other entities. The problem is that these baseless claims are being presented as evidence and being consumed…

This report doesn't claim to substantiate those allegations. It merely repeats them.

By the Big Lie theory, what's the diff?

Re: Technical report on DNC hack [pdf]

#432

Post by DearDon »

mistermann wrote: post #421
mundo wrote: post #361

Earlier quoted context omitted.

Think this through. Multiple people in the FBI, CIA, DHS, and NSA all decided this? Together? Did they have meetings? And no one is spilling the beans, even though there are maybe dozens or hundreds of people in on it? Not one of them has more to gain by revealing the conspiracy than by keeping silent? And they're all so confident that no one will squeal that they're having press releases now? And the point of this w…

Haha, I know, it does sound rather crazy. However, once again I will play the Snowden card: all of that was called crazy conspiracy talk, because there would be too many people involved who so thinking that is just crazy. It's certainly not crazy to not trust these people. Deceit is their job .

Not to mention the number of dinosaurs still in each institution that can be simply told what to believe when it comes to technology.

Re: Technical report on DNC hack [pdf]

#433

Post by nkadri1 »

ryanlol wrote: post #16

~ grep IPV4 JAR-16-20296.csv|awk -F ',' '{print $1}'|sed 's/[][]//g'|sort -u|grep -f exits -c 191 ~ grep IPV4 JAR-16-20296.csv|awk -F ',' '{print $1}'|sed 's/[][]//g'|sort -u|wc -l 876 At least 191 of the IOC IPs are (probably random) Tor exit nodes :) The actual number may very well be higher, I just grabbed current exit node list from https://check.torproject.org/exit-addresses Here's the PHP backdoor the YARA rule…

There is at least one IP that belong to Microsoft ....

65[.]55[.]252[.]43,IPV4ADDR,,IP_WATCHLIST,C2,,TLP:WHITE,This IP address is located in the United States.

https://virustotal.com/en/ip-address/65.55.252.43/informatio...

Re: Technical report on DNC hack [pdf]

#434

Post by DearDon »

mundo wrote: post #368
sroerick wrote: post #366

Earlier quoted context omitted.

Could you please link to these press releases? It's been very difficult for me to wade through the muck on this one.

I'm referring to parent of this whole thread, which (briefly) is a press release that says, "Here are some ways you can protect yourself from the kind of attack the Russians did on the DNC" and then goes on to describe spear-phishing. The reason this is unusual is because the intelligence agencies are being so matter-of-fact about this. They're not trying to convince anyone, like they did with Iraq's WMDs. They're no…

Absolutely any state that would enjoy the benefits of the distractions that comes with an escalated political conflict, Israel, China, Saudi Arabia. Think about how quickly Erdogan switched from being US ally to being best chums with Russians and helping with the peace negotiations with Iran after the attempted coup. Was it Russia, was it US, what was the motive, does one have motive to frame the other?

It's not their job to do the convincing, they leave that to CNN, MSNBC or FOX. They just give some superficial material to get the ball rolling. There was next to no in depth articulation as to how this was definitely Russia. They're still twiddling their thumbs and saying 'we're confident' it was them.

Re: Technical report on DNC hack [pdf]

#435

Post by ethbro »

cloakandswagger wrote: post #340
ethbro wrote: post #335

Earlier quoted context omitted.

It's not evidence of a state sponsored actor. But it's also not evidence against a state sponsored actor. Given that it's neutral, you can look at outcomes. Trump wins the election. That was probably best for Russia, Israel, or China. It very well could have been a random hack. But the release seems to have been politically timed and motivated (though someone could absolutely have just bought the data) which would su…

I'd prefer something a bit sturdier than circumstantial evidence if we're going to accuse a nuclear superpower of cyber warfare.

And sometimes defectors drink polonium-210 and die from radiation poisoning.

The world doesn't come with nice "I did it" notes. You make the best decisions you can with the information you have.

Re: Technical report on DNC hack [pdf]

#436

Post by Reese1379 »

LargeCompanies wrote: post #269

Ummm what piece of information in the leak caused Clinton to lose? Reality check nothing because there were no bombshells found like James Coomey re-opening the FBI's investigation against that woman. A woman who nationally especially compared to Obama is highly unlikeable with a horrible public image. Though we're stuck with that crazy man... losing game either way!

@LargeCompanies: "Ummm what piece of information in the leak caused Clinton to lose?"

What she said in 'private' was different than what she said in public. Leading to a loss of faith in people who would have otherwise voted for her.

Re: Technical report on DNC hack [pdf]

#437

Post by travmatt »

epmaybe wrote: post #397
lern_too_spel wrote: post #389

Earlier quoted context omitted.

What "meddling" did the DNC do in the primary? How were they were backing her before the primaries finished?

I was referring to the emails that showed clear favoritism for Clinton over Sanders. I put meddling in quotations because it wasn't necessarily actual instances, but rather the way the DNC treated one of their candidates that left a sour taste in many Sanders supporters mouths. That led to a lot of acquaintances of mine that supported Sanders to continue bashing Clinton after the primaries were already over, when it…

I think that's the exact delusion I'm referring to. I think many Sanders supporters genuinely believe that since they have a clear preference for a candidate, that their preference is the only valid option and other people simply aren't allowed to make their own choice.

Again, I refer to them as delusional because the '16 primary fight was about 1/3 as dirty as the '08 primaries, and somehow Sanders supporters feel being treated gently isn't good enough, what they expected was a clear majority of democratic voters to simply hand over the reins of the Democratic Party. They truly expected politics to revolutionize itself because of Sanders presidential run, and somehow tricks would not be a part of politics instantly and forevermore.

I think my big takeaway regarding the primaries is that most 'progressive' Sanders voters simply wanted to hurt the American establishment, and if they couldn't do it with Bernie they wanted to cry, pick up their ball, and go home.

Re: Technical report on DNC hack [pdf]

#438

Post by Natsu »

dmix wrote: post #214
coldcode wrote: post #148

Jeez people, read the report, it isn't any kind of justification of anything, its just a fairly generic don't do this, like I see 100 times a week at work. The real details were likely shown to congress and the senate (or at least a portion of it). Those are the only people who can say if the actual attack was real or imagined. Do you think the British and Americans were going to publish stories about Enigma back in…

> Do you think the British and Americans were going to publish stories about Enigma back in WW2 in the Times during the war? There were like a handful of people in the world who knew the details. Well they plan on releasing the malware samples and evidence of the hack, so I'm not sure what you mean here... This isn't the enigma in war time. It's not even a denied operation like Stuxnet (which was also had malware sam…

I'll wait to actually see it first.

We know what nation state hacking looks like thanks to the leaks about the NSA. There would normally be things like custom hardware or TEMPEST like tools, not kiddie level phishing scams.

Re: Technical report on DNC hack [pdf]

#439

Post by thebedyoumade »

spinlock wrote: post #414
candiodari wrote: post #372

Earlier quoted context omitted.

So essentially someone hacked the DNC, and it's "advanced" because some custom software was written just for this particular target ? I've written custom software (which was a lot harder to find than some python WMI hooks) for hacking a lot lower profile organisations. I've consulted for organisations that were hacked by Chinese hackers for bitcoin ransom that had custom software written too. I mean, high profile tar…

Let's keep the discussion to the technical aspects of the attack. The democrat vs republican antagonism doesn't belong on hacker news.

Then hacker news doesn't belong in human company.

Re: Technical report on DNC hack [pdf]

#440

Post by Natsu »

nukka wrote: post #383

Seriously! Here is technical analysis of one of the malware used. http://researchcenter.paloaltonetworks.com/2015/07/unit-42-t... Why does everyone thinks that only Russians can write such a malware, that too in python! Also, does it dawns on anyone that anyone can actually take this malware up and reverse engineer it and repurpose it. All it takes is changing one JSON blob embedded in the code to point to your own s…

This doesn't deserved to be downvoted.
Post reply on HN