News for hackers. Stuff that matters.
Re:Technical report on DNC hack [pdf] by cmdrfred on Thursday December 29, 2016 @06:06PM (#13281014)
I have personally written that exact tool while learning Python. A RAT using Twitter for C & C. Uses PGP for encryption and verification. The twitter handles for the C & C change based on a hash of Googles lastest Doodle so you can access it without fear of account deletion.

TIL I'm as good as a state level intelligence team.

Hey CIA/NSA we know you are reading this, my contact info is in my profile. Hire me.

Re:Technical report on DNC hack [pdf] by politician on Thursday December 29, 2016 @06:19PM (#13281093)
Tomorrow: "Cyberhacker admits to Russian hacker tools"

> Yesterday, an Internet cyber hacker using the alias "cmdrfred" claimed on "HackerNews", an elite underground hacker site, that he or she personally built the hacking tools used by Russia to breach the DNC email servers and change the outcome of the recent election.

> "I have personally written that exact tool [it] uses ... encryption ... so you can access [the DNC] without fear."

> "I'm as good as a state level intelligence team."

> cmdrfred went on to taunt American intelligence agencies while admitting that he was aware that elite anti-cyberhacking teams from the NSA and CIA were monitoring his operations.

> The owner of HackerNews Paul Graham -- venture capitalist, flamboyant playboy, and known Russian sympathizer -- could not be reached for comment.

Re:Technical report on DNC hack [pdf] by jocro on Thursday December 29, 2016 @07:16PM (#13281426)
> TIL I'm as good as a state level intelligence team.

Not to totally ignore the pithiness, but I feel like your comment touches on something I see a ton here (and elsewhere): an offhand dismissal of the 'state level' intelligence capacity.

At the end of the day, the systems were exploited. That more sophisticated methods went unused should be a measure of efficiency and not necessarily execution. Why break out the trick play if your opponent can't keep from you running it up the middle?

Re:Technical report on DNC hack [pdf] by avn2109 on Thursday December 29, 2016 @07:39PM (#13281566)
True. But the absence of sophistication constitutes evidence neither in favor nor against the "State Actor" hypothesis.
Re:Technical report on DNC hack [pdf] by billions on Thursday December 29, 2016 @08:10PM (#13281734)
Until a Russian name or IP address is provided, the accusations fail to hold water. An incomplete proof is equivalent to "'cause we said so"
Re:Technical report on DNC hack [pdf] by stordoff on Friday December 30, 2016 @12:04AM (#13282642)
If you are targeting a US political entity, using a staging server in Russia probably isn't the worst idea, so unless the IP address directly ties to the Russian government/intelligence services, it's still only weak evidence of Russia's involvement.
Re:Technical report on DNC hack [pdf] by empath75 on Thursday December 29, 2016 @09:13PM (#13282004)
Spoofing ips is absurdly easy.
Re:Technical report on DNC hack [pdf] by cmdrfred on Thursday December 29, 2016 @09:32PM (#13282072)
I agree that IP addresses aren't good evidence but it isn't really possible to spoof TCP in practice.

http://security.stackexchange.com/questions/55279/how-easy-i...

Re:Technical report on DNC hack [pdf] by cmdrfred on Thursday December 29, 2016 @07:55PM (#13281655)
>hat more sophisticated methods went unused should be a measure of efficiency and not necessarily execution. Why break out the trick play if your opponent can't keep from you running it up the middle?

I question how efficient it is to get caught red handed in the cookie jar of the worlds only super power.

Sure Vladimir Putin could invite President Obama to a state dinner and then proceed to blow his head off with an AK-47 but that would lack the subterfuge I expect from "state level actors". If this is indeed the Russians, they are as laughably incompetent as our elected officials in regards to infosec and thus a threat to no one.

Re:Technical report on DNC hack [pdf] by debaserab2 on Thursday December 29, 2016 @08:54PM (#13281931)
Publicly assassinating the president of a country is slightly different then pilfering clumsily guarded emails of campaigning politicians. One starts world wars. The other doesn't.
Re:Technical report on DNC hack [pdf] by Natsu on Friday December 30, 2016 @01:00AM (#13282843)
I'd like to believe that it won't.