News for hackers. Stuff that matters.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by tomp on Wednesday November 02, 2016 @10:17AM (#12854935)
So this is how rumour becomes truth - the US government accuses Russia of hacking the DNC, either because they have some kind of proof (unlikely) or because it serves their global interests (likely), media publishes articles of this myth, and then completely unrelated articles embed this "truth" in the title, even though the content doesn't really require it. Abhorent!
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by joshmaker on Wednesday November 02, 2016 @10:33AM (#12855108)
> the US government accuses Russia of hacking the DNC, either because they have some kind of proof (unlikely)

"two competing cybersecurity companies, Mandiant (part of FireEye) and Fidelis, confirmed CrowdStrike’s initial findings that Russian intelligence indeed hacked the DNC. The forensic evidence that links network breaches to known groups is solid... etc etc"

http://motherboard.vice.com/read/all-signs-point-to-russia-b...

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by mtgx on Wednesday November 02, 2016 @10:50AM (#12855305)
Attribution is hard. The NSA likely never hacks someone's systems from US IPs. They hack Russian and Chinese computers first, from where they launch their exploits. I would imagine the NSA is not the only country that does this.

I don't know how good the two security firms are and whether they could actually identify something like this, though.

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by phaus on Wednesday November 02, 2016 @11:32AM (#12855791)
Attribution is difficult, but your comment shows a lack of understanding. Everyone already knows that you can't attribute activity based solely on the geographical association of IP addresses.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by cloakandswagger on Wednesday November 02, 2016 @11:41AM (#12855937)
Read the whitepaper that CrowdStrike wrote on the HammerToss virus. They attribute it to Russia for two reasons:

1) It is "sophisticated", because it uses public services like Twitter/Github and embeds command & control scripts into images. Any mid-level application developer could write a similar virus in a weekend.

2) The work required to keep the virus operating (registering Github/Twitter accounts, posting messages) was done during the Russian workday. Because the Russian hackers are highly sophisticated enough to write this virus but incompetent enough to not cover their tracks.

This is the clearest, most blatant example of the US propaganda machine at work. With no concrete evidence whatsoever they have accused a nuclear power of performing these attacks, and the media and a bunch of "infosec researchers" (who most in tech recognize as charlatans) fell in line.

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by deeth_starr_v on Wednesday November 02, 2016 @12:03PM (#12856229)
Did you read the link? There's actually a lot more evidence than that.

"a reused command-and-control address—176.31.112[.]10—that was hard coded in a piece of malware found both in the German parliament as well as on the DNC’s servers. Russian military intelligence was identified by the German domestic security agency BfV as the actor responsible for the Bundestag breach. "

Also, occam's razor.

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by empath75 on Wednesday November 02, 2016 @10:38AM (#12855162)
It's funny how conspiracy theories take more evidence that they are wrong as evidence that the conspiracy is bigger than they thought. So now, it's a bunch of us intelligence agencies, the wall street journal, the democratic party, several unrelated it security companies, microsoft and google that are all trying to frame the russians?
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by 13years on Wednesday November 02, 2016 @11:47AM (#12856018)
Just like there was no conspiracy to frame Iraq as having WMDs or being responsible for 9/11? I mean, all of NATO was on board, they couldn't have possibly been wrong.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by dvtv75 on Wednesday November 02, 2016 @06:09PM (#12859862)
So, because that conspiracy theory adopted some very well known (at the time) correct elements, then this one is also correct?

Then how about these: because Iraq was framed as having WMDs, then the Titanic was actually the Olympic rebadged and sunk as insurance fraud. The Moon? Man didn't walk on it, that's just an American lie because no WMDs. It's also a hologram, because Iraq didn't have WMDs!

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by 13years on Thursday November 03, 2016 @09:55AM (#12863931)
Nothing else you mention has a documented history of government non transparency.

Foreign policy on the other hand continues to reveal events that occur not as they were originally described.

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by Roritharr on Wednesday November 02, 2016 @10:42AM (#12855207)
It's not a conspiracy theory to say that solid attribution of cyber attacks is practically impossible.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by BoringCode on Wednesday November 02, 2016 @11:07AM (#12855510)
There are other kinds of intelligence besides computer forensics. So, attribution is not impossible if you are a nation state with other resources.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by csmattryder on Wednesday November 02, 2016 @10:48AM (#12855283)
Does anybody else feel like there's a ongoing media push against Russia recently (as a UK resident, US/RU relations haven't been that great since WW2) - if I had to put a date on it, around the time of the Aleppo bombing?

Kinda like how 'terrorists' were responsible for every drop of spilled milk in the early 2000s, Russia is now responsible for hacking every system in the west.

Not that I care one iota for Russia, but being influenced to distrust and hate feels really underhanded.

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by kbart on Wednesday November 02, 2016 @10:59AM (#12855415)
It's not media's fault. Russia is waging open cyber war against west, of course media covers it. I know from reliable source that my country's government IT infrastructure, especially ministry of foreign affair, are being attacked by Russia nearly constantly -- it's even worse that what media says.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by tdkl on Wednesday November 02, 2016 @11:23AM (#12855689)
It's not like NSA and Chinese gov. hackers weren't doing the same, hilariously hypocritical to blame only one party. Same was happening with surveillance, with basically everyone with their hands in the cookie jar.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by toddchambery on Wednesday November 02, 2016 @11:46AM (#12855997)
I think everyone understands/expects espionage, it's the public 'weaponization' of the information that makes Russia a particularly bad actor.

If Russia had not released the DNC emails (or had somehow done so surreptitiously) to queer the US election, there would be no story to report on.

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by tdkl on Wednesday November 02, 2016 @11:49AM (#12856039)
How quickly we forget things.

https://en.wikipedia.org/wiki/Stuxnet

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by toddchambery on Wednesday November 02, 2016 @12:05PM (#12856250)
Did the media incorrectly implicate the actors in that case?
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by tdkl on Wednesday November 02, 2016 @12:21PM (#12856450)
The argument is that if Country A uses cyber warfare it's "good", but if country R does it, it's "bad". While both are doing the exact same thing, as I said above.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by joshmaker on Wednesday November 02, 2016 @09:10PM (#12860826)
Is trying to stop a country from obtaining nuclear weapons in violation of the Nuclear Nonproliferation Treaty really morally equivalent to interference with a democratic election?
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by keymone on Wednesday November 02, 2016 @03:22PM (#12858374)
If country R hacking other countries is an accepted fact, why all the whining about it being covered in media? It is a big deal.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by wruza on Wednesday November 02, 2016 @01:14PM (#12857059)
This statement is very unpopular. "Someone" has to be good and anti-evil and at the same time very competitive. No one knows how, sadly, but also no one want to feel like evil.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by TazeTSchnitzel on Wednesday November 02, 2016 @06:48PM (#12860095)
Well, relations with Russia have gotten worse since Ukraine.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by sickbeard on Wednesday November 02, 2016 @10:58AM (#12855413)
Why do people seem so adamant that Russia didn't do it when it's very and most likely that they did?
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by deeth_starr_v on Wednesday November 02, 2016 @12:11PM (#12856325)
Trump/Alt-right supporters. They love Putin because he's a "strong leader" and he hacked the DNC.

But it could be anyone! China! Or a 400 lb kid living with his parents. /s

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by 13years on Wednesday November 02, 2016 @01:12PM (#12857034)
Maybe not adamant, but doubtful considering our government has consistently misled us about who are our real enemies and their level of actual threat.

What Iraq and those WMDs? Or Iran that has been just a few months away from getting Nukes for like 20 years. Or nearly all the 9/11 hijackers were from Saudi Arabia, but apparently they are our friends.

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by joshmaker on Wednesday November 02, 2016 @09:14PM (#12860836)
Except the Russians have been implicated by more than just the government, its been backed up by multiple independent internet security firms. Also, the Bush administration that supported the Iraq war has kinda been out of power for a while now.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by 13years on Thursday November 03, 2016 @10:04AM (#12863991)
This is not about just one administration.

Foreign policy continues to reveal events that occur not as they were originally described.

The real question "Are we certain enough to take actions that could lead to war?" because that is where are government is going with this. http://www.pbs.org/newshour/rundown/does-government-know-hac...

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by tomp on Wednesday November 02, 2016 @11:56AM (#12856134)
> when it's very and most likely that they did

Why do you think so? First of all, there are countless "enemies" that would want to hack the US/DNC (North Korea comes to mind, who was accused of hacking Sony some time ago, as does Iran, who was itself victim of US hacking). All of those seem equally likely. Second, it's possible that there was a leak, not a hack.

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by empraptor on Wednesday November 02, 2016 @01:04PM (#12856938)
Given that there is forensic evidence that led infosec/intelligence institutions to conclude Russian hackers did it, I would say the other options are not equally likely.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by sickbeard on Wednesday November 02, 2016 @12:56PM (#12856844)
But you don't see much reaction when NK or Iran gets accused of hacking.. but the mention of Russia seems to get people really up in arms about it.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by tomp on Wednesday November 02, 2016 @01:22PM (#12857162)
Maybe. I called it "bullshit" then just as I do now.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by 13years on Wednesday November 02, 2016 @11:32AM (#12855802)
Yes, it will be repeated until accepted as truth.

This is the same kind of 'truth' that led us to war in Iraq over WMDs.

[dead]
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by sctb on Wednesday November 02, 2016 @06:57PM (#12860152)
We've asked you already to please not comment like this, and we have to ban accounts that continue. Please comment civilly and substantively on Hacker News or not at all.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by 07d046 on Wednesday November 02, 2016 @11:11AM (#12855562)
> either because they have some kind of proof (unlikely) or because it serves their global interests (likely)

Is it just me or is Trump making conspiracy theories great again? There's always a fringe that is happy to see a conspiracy in everything (and sometimes they're actually true), but it seems that this sort of thinking is everywhere at the moment.

Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by tdkl on Wednesday November 02, 2016 @11:36AM (#12855853)
Snowden revelations made "conspiracy theories" plausible regarding cyber security, operations and media reporting.
Re:Microsoft Says Russian Hackers Exploited Flaw in Windows by soundwave106 on Wednesday November 02, 2016 @12:22PM (#12856461)
The thing is, I remember the EFF reporting on NSA spying activity long before Snowden blew the cover open. The EFF has a great timeline (https://www.eff.org/nsa-spying/timeline). The first apparent reveal of warrant-less spying was in 2005 (http://www.nytimes.com/2005/12/16/politics/bush-lets-us-spy-...) and Mark Klein was the first major whistleblower back in 2006. (https://en.wikipedia.org/wiki/Mark_Klein).

What Snowden confirmed was more the scale. The details honestly shouldn't have been terribly surprising for anyone who had followed computer news for the last decade, unfortunately.

As far as Russia hacking the DNC is concerned, what I know is there are several cybersecurity companies that have confirmed that Russian hackers were involved, publishing white papers with a fair bit of evidence. I personally haven't seen a single cybersecurity company so far refute that information.

I do welcome a technical refutation of the white papers or a point to a cybersecurity company that disagrees! Counterpoints however have to be data-oriented to be interesting. I consider random commentators posturing that all this is just US propaganda with little evidence to be merely cheerleading, sorry, that's not interesting to me...