Live data from Hacker News

Kaspersky believes it found new CIA malware

therecord.media

1–10 of 314 posts

Re: Kaspersky believes it found new CIA malware

#2
So this was deployed in 2014 and we’re just connecting all the dots now? It really makes you wonder what’s being deployed at the moment.

The fact that they can determine all this from some binary is amazing. Security researchers really are techno-archaeologists.

Re: Kaspersky believes it found new CIA malware

#4
post #2

So this was deployed in 2014 and we’re just connecting all the dots now? It really makes you wonder what’s being deployed at the moment. The fact that they can determine all this from some binary is amazing. Security researchers really are techno-archaeologists.

I recall how when we had North Korean hacking activities and official attributions people would say, but how do we know it was them and how do we know the government isn’t making things up?

But when someone accuses the US we never add any salt. Not that I don’t think it’s false, it’s just that the lack of consistent skepticism is interesting.

Re: Kaspersky believes it found new CIA malware

#5
post #2

So this was deployed in 2014 and we’re just connecting all the dots now? It really makes you wonder what’s being deployed at the moment. The fact that they can determine all this from some binary is amazing. Security researchers really are techno-archaeologists.

Hopefully - we never find out the extent of our (and their) capabilities.

Re: Kaspersky believes it found new CIA malware

#6
post #4
post #2

So this was deployed in 2014 and we’re just connecting all the dots now? It really makes you wonder what’s being deployed at the moment. The fact that they can determine all this from some binary is amazing. Security researchers really are techno-archaeologists.

I recall how when we had North Korean hacking activities and official attributions people would say, but how do we know it was them and how do we know the government isn’t making things up? But when someone accuses the US we never add any salt. Not that I don’t think it’s false, it’s just that the lack of consistent skepticism is interesting.

One reason would be the capability. There's no doubt that there are US citizens able to produce complex software including malware. Same could be said about China or Russia. But when it comes to North Korea, I really have doubts about their IT competence. Sure, they probably have some good programmers able to create ordinary IT systems. But working on edge of current technologies - that's what I have my doubts about.

Re: Kaspersky believes it found new CIA malware

#7
post #3

Aside: Kaspersky is a Russian company.

Whose products are sanctioned against use in US government systems because of ties to Russian intelligence services.

But you should take both these statements with a grain of salt when either side of the field stands to gain (or lose) something.

Re: Kaspersky believes it found new CIA malware

#8
post #3

Aside: Kaspersky is a Russian company.

Not sure it's really meaningful to simply say they're a "Russian company". More specifically, they're a company that has been accused of cooperating with the FSB in attacks against the US government.

https://en.wikipedia.org/wiki/Kaspersky_bans_and_allegations...

Whatever the case, it's probably wise to take their statements with some skepticism of bias in this regard.

Re: Kaspersky believes it found new CIA malware

#9
post #4
post #2

So this was deployed in 2014 and we’re just connecting all the dots now? It really makes you wonder what’s being deployed at the moment. The fact that they can determine all this from some binary is amazing. Security researchers really are techno-archaeologists.

I recall how when we had North Korean hacking activities and official attributions people would say, but how do we know it was them and how do we know the government isn’t making things up? But when someone accuses the US we never add any salt. Not that I don’t think it’s false, it’s just that the lack of consistent skepticism is interesting.

It's human nature to give things that fit your preconceived notions and biases the benefit of the doubt over those that don't, even when you're aware of this effect. The best we can do is try to be cognizant of it and be really self-critical about our knee-jerk reactions.

Re: Kaspersky believes it found new CIA malware

#10
post #4

Earlier quoted context omitted.

I recall how when we had North Korean hacking activities and official attributions people would say, but how do we know it was them and how do we know the government isn’t making things up? But when someone accuses the US we never add any salt. Not that I don’t think it’s false, it’s just that the lack of consistent skepticism is interesting.

One reason would be the capability. There's no doubt that there are US citizens able to produce complex software including malware. Same could be said about China or Russia. But when it comes to North Korea, I really have doubts about their IT competence. Sure, they probably have some good programmers able to create ordinary IT systems. But working on edge of current technologies - that's what I have my doubts about.

Why exactly do you think no North Korean can make malware?

Hell, I've seen malware from countries in Africa that lack food. These societies have a lot of kurtosis.

Post reply on HN