Hacker News Board Hacker News, browsed like a classic message board
Live data from Hacker News

Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

mobile.nytimes.com

Post reply on HN
Print view View original

491–500 of 505 posts

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#491

Post by steveklabnik »

panic wrote: post #490
lazaroclapp wrote: post #180

Earlier quoted context omitted.

Pretty sure you can build an X-Ray/MRI control software in Rust on top of seL4, and do lightweight verification (or, even better: hardware breakers of some sort) around issues like "will output lethal doses of radiation". That is a general purpose enough kernel and a general purpose enough programming language, without having to drag in tens of millions of lines of code intended for personal GUI systems... Then for m…

Rust has a lot of nice safety features, but the compiler hasn't been formally verified at all.

This is true, but work is in progress, and some parts of the standard library already have been. And some of that work has found bugs too: https://github.com/rust-lang/rust/pull/41624

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#492

Post by LoonyBalloony »

Griffinsauce wrote: post #429
interfixus wrote: post #395

Earlier quoted context omitted.

Oh you think it's ridiculous we use i.e. 7 in compatibility mode? It's certainly ridiculous if you don't keep it utterly sandboxed and limited to only required use. Also ridiculous is anyone falling for - or being allowed to fall for - a mail based phishing attack anywhere in the organisation.

Oh come on. They are doctors and nurses, not programmers.

But isn't it part of their job to care for their equipment?

This is a failure of management to properly train their employees.

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#493

Post by a3n »

I think tools like this should be secured at least as well as "research" stores of smallpox and other biotoxins. And certainly tracked long after they've outlived their usefulness within the agency that produced them.

Or maybe smallpox isn't actually stored as securely as I assume?

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#494

Post by kneel »

whatupmd wrote: post #452
blitmap wrote: post #406

The real world doesn't update in 2 months. (I wish it did.) The NSA should have responsibly disclosed the vulnerabilities they had been sitting on as soon as they were discovered. That protects national security - not this.

Wikileaks should have disclosed before dumping publicly. Burning down the house to prove that there are fire safety issues is the wrong approach.

Wikileaks did not disclose these exploits

https://motherboard.vice.com/en_us/article/shadow-brokers-du...

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#495

Post by lossolo »

QML wrote: post #133
lossolo wrote: post #46

Earlier quoted context omitted.

There are services that will mix your coins making it impossible to track because he will receive other people coins from the pool.

Do you think it would be possible for those services to block or 'embargo' transactions from 'tainted' addresses, such as the ones used for the cyberattacks' ransom?

Why would they? It's against their business model. They don't have company name and street address on their sites for a reason.

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#496

Post by lossolo »

21 wrote: post #123
lossolo wrote: post #46

Earlier quoted context omitted.

There are services that will mix your coins making it impossible to track because he will receive other people coins from the pool.

Not impossible, just hard. And the cops can go and track each individual person from that pool if they really care. Even if we are talking about thousands. Remember the story from a few days ago where to track a possible spy they went through all glasses prescriptions from a city.

It's different beast. It's almost impossible if done right. How would you track this person? You only see end transactions from those addresses which are not mixed with coins of attackers. You would need to check EVERY possible place where bitcoin exchange happen and there hundreds in hundreds of countries in blind to check if bitcoin address x was used there. Then some countries maybe even will not give you any information because electronic currency doesn't exist in their law and it's not a felony to use mixing service etc. etc. That's why they use bitcoin in the first place for 99% of criminal activities in Internet.

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#497

Post by olivier1664 »

placeybordeaux wrote: post #173

Going through their wallets it looks like they've gotten 32 pay outs, some for more than 300 USD. Are there any addresses that they are using outside of the four listed int he article? It'd be an interesting project to try and track where these funds go and where they came from. https://blockchain.info/address/13AM4VW2dhxYgXeQepoHkHSQuy6N... - 11 https://blockchain.info/address/115p7UMMngoj1pMvkpHijcRdfJNX... - 4 htt…

Does that means the wannacrypt attack has paid only 60,000$ ?

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#498

Post by [deleted] »

dang wrote: post #400
brilliantcode wrote: post #183

Earlier quoted context omitted.

Yeah definitely downvote manipulations going on again... At this point I'm not even upset or shocked. It just further supports the narrative Russia is seeking to manipulate/exploit the internet to their benefit. Considering the average Russian is poorer than an Indian, it looks like Putin is going to fuck over his country as his countrymen cheer him on and suffer in poverty and alcoholism. The West will crush the fee…

We asked you many times to stop breaking the Hacker News guidelines with uncivil and unsubstantive comments. Since you've ignored us, continued, and gotten worse, we've banned your account. Insinuations of astroturfing and shillage without evidence are not allowed here [1], and bad enough, but national rants and slurs are completely unwelcome. 1. https://hn.algolia.com/?sort=byDate&prefix=true&page=0&dateR...

[deleted]

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#499

Post by brilliantcode »

dang wrote: post #400
brilliantcode wrote: post #183

Earlier quoted context omitted.

Yeah definitely downvote manipulations going on again... At this point I'm not even upset or shocked. It just further supports the narrative Russia is seeking to manipulate/exploit the internet to their benefit. Considering the average Russian is poorer than an Indian, it looks like Putin is going to fuck over his country as his countrymen cheer him on and suffer in poverty and alcoholism. The West will crush the fee…

We asked you many times to stop breaking the Hacker News guidelines with uncivil and unsubstantive comments. Since you've ignored us, continued, and gotten worse, we've banned your account. Insinuations of astroturfing and shillage without evidence are not allowed here [1], and bad enough, but national rants and slurs are completely unwelcome. 1. https://hn.algolia.com/?sort=byDate&prefix=true&page=0&dateR...

the trump is strong in you

Re: Cyberattacks in 12 Nations Said to Use Leaked N.S.A. Hacking Tool

#500

Post by placeybordeaux »

olivier1664 wrote: post #497
placeybordeaux wrote: post #173

Going through their wallets it looks like they've gotten 32 pay outs, some for more than 300 USD. Are there any addresses that they are using outside of the four listed int he article? It'd be an interesting project to try and track where these funds go and where they came from. https://blockchain.info/address/13AM4VW2dhxYgXeQepoHkHSQuy6N... - 11 https://blockchain.info/address/115p7UMMngoj1pMvkpHijcRdfJNX... - 4 htt…

Does that means the wannacrypt attack has paid only 60,000$ ?

So far, it looks like tx are still rolling in. They haven't cashed it out yet, so they really have ~35 BTC, nothing in USD yet.
Post reply on HN