Live data from Hacker News

CIA malware and hacking tools

wikileaks.org

561–570 of 1001 posts

Re: CIA malware and hacking tools

#561

Earlier quoted context omitted.

The vast majority of our history was spent with substantial limits on the ability to collect, distribute, and access information on any one individual, let alone cross-compile information from multiple sources or for multiple individuals. Scale and rates matter.

I don't think the scale matters for the past. You spent the majority of your time with other people in your tribe or village, and they knew everything about you, and you knew everything about all of them. New information could be distributed to 90% of the people within minutes. You could physically ask most the people any questions you wanted about someone else with just a little more time than that. The current scal…

Today the observer can be anywhere on Earth, and the data are vastly more detailed. Impunity of the observer is far greater.

The subject isn't conversations but surveillance.

Re: CIA malware and hacking tools

#562

Earlier quoted context omitted.

It absolutely provides the Trump Administration with cassus belli to take punitive measures against the CIA. WikiLeaks appeared to have received the dump quite recently. This is all conjecture, but this could be seen as a 'civil cyber war'. The Executive branch suffers from leaks, followed by an evisceration of the CIA hacking capabilities? Trumps love of the intelligence community is well known, and the scale of the…

Are you positing that Trump or members of his administration have somehow released these CIA resources? Or just that WikiLeaks is bringing attention to these resources and their current "libre" status in the wild?

Im stating the possibility that the Executive Branch made available the means to doxx the CIA.

The timing, the target, and the vector of attack all line up very nicely.

Re: CIA malware and hacking tools

#563

Earlier quoted context omitted.

> The main connection I have eeked out that I don't think most understand though is the relationship between the Wall Street group and The City of London/Vatican/Swiss Banking groups and their many associated secret society groups and orders of knighthood. This is where you started to lose me. If you've eeked this out, surely you have something you can include to convince us? > I think it is telling that the decrypti…

"surely you have something you can include to convince us?" Perhaps, but it's not an easy subject to breach at all, but I appreciate your honest question and will attempt a terse summary. During both my time in the military as a pawn, and during my time as a civilian trying to understand the deep state, I have continually come across two fundamental issues regardless of particular area of research: Bankers touch ever…

That's a lot to digest, but I'm still not really sure the probability I should assign to these assertions. That doesn't mean you're wrong, it just means that it's one thing to hear a narrative that makes sense, and another to actually have enough knowledge to know how accurate and encompassing that narrative is, and I don't have that knowledge.

> Now, perhaps in a small village everyone in the village, or everyone in the family, knew what you were doing, but there is a big difference between immediate friends and family having first-hand knowledge of your goings and doings and them having knowledge of your goings and doings and storing them on insecure devices which the government can search surreptetiously at will and at a mass scale heretofore unimagined by all but the most forward looking thinkers such as Orwell and Huxley.

For all intents and purposes, if you are born into a small tribe or village and die in that same village and have little or no interaction with outsiders, that village is your world. Everyone in the group knows almost everything about you, and you about them. There is no need for vast apparatus, because the scale is small enough to easily fit within a single person't head, and what's more it's in everyone's head, so is repentantly distributed. Some very personal information is known to a select few close individuals, but for the most part there's few secrets, and when secrets are discovered the likely spread very quickly. The group is the government, so the government does know everything, and if you exhibit unsanctioned behavior you will hear about it, and if it's bad enough you'll face ostracism or worse. The world (group) knows your secrets, and you know the world's (group's) secrets, and the world (group) will enforce their conception of what is correct behavior. Seems pretty close to where I see the future heading.

Re: CIA malware and hacking tools

#564
post #142
post #92

In what is surely one of the most astounding intelligence own goals in living memory, the CIA structured its classification regime such that for the most market valuable part of "Vault 7" — the CIA's weaponized malware (implants + zero days), Listening Posts (LP), and Command and Control (C2) systems — the agency has little legal recourse. The CIA made these systems unclassified. Why the CIA chose to make its cyberar…

> Command & Control and Listening Post software were classified, then CIA officers could be prosecuted or dismissed for violating rules that prohibit placing classified information onto the Internet. Consequently the CIA has secretly made most of its cyber spying/war code unclassified. This is almost hilarious. Not that being classified would make any difference: cyber-"weapons" have something in common with biologic…

>once used it's possible for the enemy to vaccinate against them.

So think long term...

Is this an innoculation game >10 years out????

Re: CIA malware and hacking tools

#565

Earlier quoted context omitted.

Which makes perfect sense. Any weapon leaves some trace (even if only new theory as to what is possible), so its use against a party that does not have that technology but is capable of understanding the technology at some level will always give information to the enemy. Using a modern missile against an indigenous people will only impart that you are capable of that type of attach. Using a modern missile against WWI…

You don't just have to worry about the people you are attacking. Their allies can also reverse-engineer the tech. Pakistan and China come to mind. Pakistan has given China a lot of tech that it's recovered.

True, but this is somewhat covered by considering everyone not us an enemy of some degree or another, which is natural in game theory.

Re: CIA malware and hacking tools

#566

Earlier quoted context omitted.

You don't actually say why they shouldn't be doing this, though. Everyone with this opinion seems to base it on moral grounds around privacy, but in practical terms, is this really harming citizens? So far there's zero evidence these things being used illegally domestically. IE: Without a warrant. There is some evidence that they've prevented some wrongdoing with it, though. I get the theoretical moral argument. I ju…

Considering the government is letting pedophiles walk[1] because they don't want to release their exploits, do you really think we would know if they were abusing their power? [1]: https://news.ycombinator.com/item?id=13798924

Ok, so we didn't prevent the maximum amount of wrongdoing? No program is perfect. Those pedophiles would've been just as free had they not developed the programs in the first place.

You're comparing reality against a theoretical world where we can both prevent crimes and never need to develop the tools necessary to do so.

As to the second point, sure, we don't know. That's tangential to my point. Let's assume the government is abusing their power. What does that have to do with these tools? Nothing, besides it maybe makes it a little bit easier for them. But, like I said, they'd do it anyways with sufficient motivation.

I still optimistically believe that an important tenet of liberalism is that you put some trust in your government, but recently it seems for many liberals that trust only extends to cushy (not to say I don't want them) domestic programs like healthcare, equality programs, or whatever the program du jour is. I'm willing to trust that our intelligence agencies aren't some nightmare Orwellian monster hellbent on subjugating the populace. Abuse of power could happen just as easily through other agencies, it just doesn't sounds as scary as when you slap a three letter acronym on it.

Re: CIA malware and hacking tools

#568
post #488

Earlier quoted context omitted.

> What exactly in the admittedly shortened list am I supposed to be upset about? That, with taxpayer dollars, the government of the United States is undermining the security of consumer devices around the world. Part of the difference between your worldview and the view of those of us who find this behavior childish and unacceptable is that you "expect a spy agency would be doing [this;] if they were not then [you] w…

your chart is defective, the y-axis is supposed to continue indefinitely in either direction

Oh goodness. Thank you. edited. :-)

Re: CIA malware and hacking tools

#569

It's interesting to note that Julian Assange didn't demonstrate control of the wikileaks private key during his Reddit AMA 1 month ago: https://www.reddit.com/r/IAmA/comments/5n58sm/i_am_julian_as... Considering the political situation unfolding in the US and who this leak weakens, there is some evidence that wikileaks is not in the hands of a neutral party. There is clear motive right now for undermining the CIA. Th…

I think that anyone who has been following the Wikileaks social media accounts has noticed what can only be described as a blatant subverting of those accounts by another party.

What are some examples?

Re: CIA malware and hacking tools

#570
post #5

Based on the overview alone (of course I can't read the entire report that fast!), this is exactly what I expect a spy agency would be doing -- if they were not then I would be disappointed. What exactly in the admittedly shortened list am I supposed to be upset about? It makes no distinction between US citizens and overseas parties. If these actions are being done domestically against US citizens, with no just cause…

I'm just disappointed with the phone industry for the current state of rampant insecurity.
Post reply on HN