Re:Equation Group Cyber Weapons Auction
by AnkhMorporkian on Monday August 15, 2016 @11:27AM
(#12291075)
If this leak is real, it points to one of two things. Either it isn't the NSA and is a company or some quasi-governmental group - owing to the fact that any of this shit the NSA makes would be on JWICS terminals and absolutely not accessible to the internet, or it means there's a leak from the NSA that dumped these files and has decided to sell them. I'd lean more towards the former.
[ Parent
| on HN ]
The command and control ("listening posts" in intelligence community parlance) for even NSA implants has to be on the public internet so the victims can phone home. This stuff could be from one of those servers.
Is that necessarily true for NSA et al.? I don't see why the target couldn't just send the data towards an arbitrary destination, and that data be collected by NSA via a passive tap. Commands could be sent using a QUANTUM-style technique (packet injection with spoofed origin)
Snowden did tweet what looked like an AES key last week.
Re:Equation Group Cyber Weapons Auction
by matt_wulfeck on Tuesday August 16, 2016 @02:53AM
(#12295953)
It was a sha2 (or rather, a 64-byte length hex string). I wondered myself if it wasn't the secret key to some encrypted file.