News for hackers. Stuff that matters.
Re:Probe of leaked U.S. NSA hacking tools examines operative... by ryanlol on Saturday September 24, 2016 @11:31PM (#12573796)
>That person acknowledged the error shortly afterward, they said. But the NSA did not inform the companies of the danger when it first discovered the exposure of the tools, the sources said. Since the public release of the tools, the companies involved have issued patches in the systems to protect them.
Re:Probe of leaked U.S. NSA hacking tools examines operative... by meowface on Saturday September 24, 2016 @11:47PM (#12573847)
There are two reasons why I think this could be (very selfishly) sensible from their perspective:

1. They were probably relying on those exploits quite a bit and had frequent success with them, in which case totally burning them would have directly harmed operational capacity.

2. They appear to be huge fans of piggybacking off of other intelligence agencies' footholds and data ("fourth-party collection").

http://www.theverge.com/2015/1/17/7629721/nsa-is-pwning-ever...

>Fourth party collection appears so successful that agents of the NSA and GCHQ have cracked jokes about it in top secret slide decks. In an NSA presentation titled "fourth party opportunities," the first slide references Daniel Day-Lewis' infamous "I drink your milkshake"

Another intelligence agency acquiring these exploits would give them additional "fourth-party opportunities". As long as the US government's systems were protected against the exploits (were they? no idea), that could mean keeping them secret still meant more pros than cons for their goals. It could give them more intel, and maybe give additional insight into the other nation's goals and interest by who they're targeting.

Pure speculation on my part, though. The real reason could just be regular old incompetence, and/or internal cover-up of the tool leakage.

Re:Probe of leaked U.S. NSA hacking tools examines operative... by caf on Sunday September 25, 2016 @01:27AM (#12574105)
The logical conclusion of that is that they should deliberate leak some of their best exploits to rival agencies, so I think that argument has to be flawed.

Furthermore, they can't really keep using them after exposure for the same reason the Russians didn't start using them: everyone who knows about them can watch for them being exploited and so gain useful intelligence on their rivals.

Re:Probe of leaked U.S. NSA hacking tools examines operative... by meowface on Sunday September 25, 2016 @01:43AM (#12574140)
>The logical conclusion of that is that they should deliberate leak some of their best exploits to rival agencies, so I think that argument has to be flawed

How do we know they don't? Or at least, some of their exploits.

Also, that's not necessarily the only conclusion. This leak could have have been more harmful than no leak, yet thought to be less harmful than publicly burning every exploit.

>Furthermore, they can't really keep using them after exposure for the same reason the Russians didn't start using them: everyone who knows about them can watch for them being exploited and so gain useful intelligence on their rivals.

True, but they could possibly change them in a way to make them less detectable.

The Russians could have done the same, but maybe their reason for believing it'd be helpful for fourth-party collection is that they already had access to some of Russian intelligence's communications and compromised hosts, devices, and networks.

Anything could be possible here, though. We're all speculating pretty blindly.

Re:Probe of leaked U.S. NSA hacking tools examines operative... by kwhitefoot on Sunday September 25, 2016 @06:30AM (#12574727)
> and so gain useful intelligence on their rivals.

The principal rival in the short term for any department whether of government or inside a company is other departments not the corresponding department in another company. In fact it is plausible to think that at least some of the people within agencies like the NSA have more in common and a substantial degree of fellow feeling with their nominal rivals in, for instance, Russia than they have with other US agencies.

Re:Probe of leaked U.S. NSA hacking tools examines operative... by rashkov on Sunday September 25, 2016 @12:45AM (#12574015)
thegrugq just wrote a persuasive analysis of the calculus that intelligence agencies must go through with this kind of event. In short, the benefits of revealing that they're aware of the leak aren't worth it. All of the benefit is in passively monitoring what the adversary does with the information. You can find it here, it's quite interesting: https://medium.com/@thegrugq/mind-games-international-champi...
Re:Probe of leaked U.S. NSA hacking tools examines operative... by meowface on Sunday September 25, 2016 @05:33AM (#12574587)
I swear I didn't read any commentary like this before I wrote my post! And I know jack shit about intelligence agencies otherwise. Nice to see my speculation partly validated by none other than thegrugq.
Re:Probe of leaked U.S. NSA hacking tools examines operative... by tptacek on Sunday September 25, 2016 @11:13AM (#12575661)
The problem with informing the companies --- and this is a positive statement not a normative one --- is that as soon as the vulnerability is broadly known, NSA's foreign targets can identify any machines NSA has instrumented using those bugs. Doing that could compromise operations in progress. And because NSA does likewise, it has to assume its adversaries have full packet captures of their most sensitive networks. Remember also that many (most?) of the tools disclosed weren't penetration tools but instead persistence tools, and that the disclose could reveal whole chains of other machines and burn additional capabilities.

I'm not saying that I personally would reach the same conclusion, just that the situation is more complex than Reuters makes it out to be.

Re:Probe of leaked U.S. NSA hacking tools examines operative... by aburan28 on Sunday September 25, 2016 @01:40AM (#12574129)
I just got a alert from DHS about these vulnerabilities last week which is absolutely ridiculous giving the severity of these exploits