News for hackers. Stuff that matters.
Re:Technical report on DNC hack [pdf] by mundo on Thursday December 29, 2016 @07:14PM (#13281416)
This (complaining about the lack of evidence) just seems ludicrous to me. Does the FBI have a history of declassifying stuff like this so that randos on the internet can independently verify its conclusions? When high-level intelligence people collude to lie to the American people and discredit a president, do they usually do it via press release clearly written by a PIO?

The accusation that people who find this credible are uncritical is unfounded and insulting. The question is not "would someone in a government agency lie for political reasons," it is "would this many people, in a bunch of different agencies that have a history of lying to and competing with and distrusting each other, all sign on to the same lie, publicly, even though it's almost certain to be disproven in a few months."

Meanwhile, here's the alternative theory:

1. Some Russian intelligence agency hacked the DNC's email servers

2. They left behind evidence

3. The FBI/NSA//DHS/etc found that evidence

4. They classified it and aren't going to put it in a press release

None of those are the least bit hard to believe, and they are collectively WAY easier to swallow than this hypothetical vast, high-level conspiracy to discredit Trump or whatever it's supposed to be for.

Re:Technical report on DNC hack [pdf] by CountSessine on Thursday December 29, 2016 @07:59PM (#13281672)
Except that this is a sort of exclusion of the middle; you say "here's the alternative theory", but there are other even more likely possibilities. Here's one:

1. The DNC and their members are generally ignorant of good security policy and had an easily hacked system.

2. Some Russian intelligence agency hacked the DNC's email servers.

3. A bunch of other people/hackers/groups hacked the DNC's email servers, as it was "left out in the open", so to speak, and was a trivial target..

4. One group at least used trivial methods to do so and left behind evidence.

5. The FBI/NSA//DHS/etc found that evidence.

6. One of these hackers passed information to WikiLeaks. WikiLeaks has denied that it was Russians who did this.

7. The FBI/CIA claim that the Russians hacked the DNC servers.

8. The press and political opportunists jump to the conclusion that it was the Russians who released this information to Wikileaks.

9. The FBI/CIA classified what they found and aren't going to put it in a press release.

Re:Technical report on DNC hack [pdf] by mundo on Thursday December 29, 2016 @08:11PM (#13281736)
Point 7 is the one you're supposed to be trying to explain. The FBI, CIA, DHS and NSA have all said, in plain language, no anonymous sources, just regular old press releases, that Russia hacked the DNC. The reasons they might say this are a) they believe it due to some evidence they are not releasing, and b) ???. Theory a) seems pretty believable, and I haven't heard a b) that sounds remotely plausible yet.

Whether someone else also hacked the DNC would be interesting to know, but it doesn't really impinge on the question of whether there is or is not a vast-but-also-ham-handed-and-kind-of-contradictory conspiracy pushing theory a.

Re:Technical report on DNC hack [pdf] by CountSessine on Thursday December 29, 2016 @08:21PM (#13281781)
Point 7 is the one you're supposed to be trying to explain

Except that point 7 isn't at all controversial. EVERYONE hacks EVERYONE ELSE in cyber-espionage; even Canada was probably hacking the lame-ass security DNC email server, if only to fill a dossier. Remember that Clinton was set to be the next president of the United States; it is very much in Russia's (and anyone else's) best interest to know as much about her and her team as they can learn. It's the job of American spooks to prevent this, and they completely fucked it up.

Frankly, I find the suggestion that telling voters more about their candidate constitutes 'interference' to be repugnant; but assuming that we are going to engineer a scandal about this, we need to ask whether the Russians released that information to Wikileaks? All of the evidence (ie what Wikileaks says) says otherwise.

Re:Technical report on DNC hack [pdf] by md_ on Thursday December 29, 2016 @08:54PM (#13281927)
Er, the parent was replying to a poster who implied he did not believe "point 7."

>Frankly, I find the suggestion that telling voters more about their candidate constitutes 'interference' to be repugnant

Really? By this argument, I take it you believe political candidates' email (or cough tax returns) should automatically be made public?

Much as I agree with transparency, I think we need to recognize that everyone--including political candidates--has some right to private communications.

> but assuming that we are going to engineer a scandal about this, we need to ask whether the Russians released that information to Wikileaks?

The publicly released circumstantial evidence about Russian backing of "Guccifer 2.0" is fairly convincing, I would say. But (contrary to your claim above) the media have not "jumped to the conclusion" that the Russians were the ones who released the leaked emails; the FBI claimed* Russia was not merely behind the attacks but behind the leaks.

You all can debate the merits of trusting intelligence agencies or not, but the situation you described--in which the IC only suggested Russia was behind some intrusions but not the leaks--is not in fact the world we live in.

* http://www.wsj.com/articles/top-russian-officials-shift-away...

Re:Technical report on DNC hack [pdf] by marxmarv on Friday December 30, 2016 @05:33AM (#13283695)
>Much as I agree with transparency, I think we need to recognize that everyone--including political candidates--has some right to private communications.

No, they don't, unless you see the need for them to act against our interests without our knowleddge because markets or something, or see some sort of right for them to rule others.

Re:Technical report on DNC hack [pdf] by md_ on Friday December 30, 2016 @10:42AM (#13284857)
So you believe that all email communication from all elected officials and candidates should be made public?

What about non-email communication? Face-to-face conversations should all be public? Does this extend to classified briefings? Should, for example, discussions of "Olympic Games" have been public before it was executed?

Re:Technical report on DNC hack [pdf] by mundo on Thursday December 29, 2016 @08:36PM (#13281850)
Point 7 wasn't that the hack took place or the matter of who did it, it's the three-letter-agencies publicly accusing Russia of it. They did so because a) they believe it's provably true, or b) ???.
Re:Technical report on DNC hack [pdf] by marxmarv on Friday December 30, 2016 @05:34AM (#13283697)
b) It justifies their ongoing employment.
Re:Technical report on DNC hack [pdf] by Natsu on Friday December 30, 2016 @01:11AM (#13282874)
> Except that point 7 isn't at all controversial. EVERYONE hacks EVERYONE ELSE in cyber-espionage

It's like in Germany where they're up in arms against this and seem to have forgotten the revelation that the USA was tapping Merkel's phone...

Re:Technical report on DNC hack [pdf] by mistermann on Thursday December 29, 2016 @08:59PM (#13281954)
> b) ???

How about the FBI/CIA/DHS/NSA don't like people who don't play by the accepted rules sticking their nose into their business, so they tell a little white lie to try to avoid that?

The three letter agencies have had plenty of people killed before, so "they'd never do that" isn't going to get you very far.

Re:Technical report on DNC hack [pdf] by mundo on Thursday December 29, 2016 @11:14PM (#13282462)
Think this through. Multiple people in the FBI, CIA, DHS, and NSA all decided this? Together? Did they have meetings? And no one is spilling the beans, even though there are maybe dozens or hundreds of people in on it? Not one of them has more to gain by revealing the conspiracy than by keeping silent? And they're all so confident that no one will squeal that they're having press releases now? And the point of this whole treasonous conspiracy was to cause a minor inconvenience for their soon-to-be boss?

That's more believable than "Russia hacked the DNC and the FBI was honest about it"?

Re:Technical report on DNC hack [pdf] by mistermann on Friday December 30, 2016 @02:31AM (#13283118)
Haha, I know, it does sound rather crazy. However, once again I will play the Snowden card: all of that was called crazy conspiracy talk, because there would be too many people involved who <insert your words here> so thinking that is just crazy.

It's certainly not crazy to not trust these people. Deceit is their job.

Re:Technical report on DNC hack [pdf] by DearDon on Friday December 30, 2016 @06:00AM (#13283771)
Not to mention the number of dinosaurs still in each institution that can be simply told what to believe when it comes to technology.
Re:Technical report on DNC hack [pdf] by sroerick on Thursday December 29, 2016 @11:26PM (#13282512)
Could you please link to these press releases?

It's been very difficult for me to wade through the muck on this one.

Re:Technical report on DNC hack [pdf] by mundo on Thursday December 29, 2016 @11:37PM (#13282553)
I'm referring to parent of this whole thread, which (briefly) is a press release that says, "Here are some ways you can protect yourself from the kind of attack the Russians did on the DNC" and then goes on to describe spear-phishing.

The reason this is unusual is because the intelligence agencies are being so matter-of-fact about this. They're not trying to convince anyone, like they did with Iraq's WMDs. They're not giving out pointed leaks and then officially denying them. They - meaning multiple agencies - are jut saying, "Yeah, it was Russia", as if it's a settled issue.

The conclusion I draw from this is that there must be very strong evidence. Could that evidence be forged? Sure! (Another reason why the "show me the evidence or I won't believe it!" people sound nutso - why would they think it wasn't forged?) But to believe it's forged we need at least a plausible theory as to who would forge it and why. Right now, I'm drawing a blank.

Re:Technical report on DNC hack [pdf] by DearDon on Friday December 30, 2016 @06:07AM (#13283799)
Absolutely any state that would enjoy the benefits of the distractions that comes with an escalated political conflict, Israel, China, Saudi Arabia. Think about how quickly Erdogan switched from being US ally to being best chums with Russians and helping with the peace negotiations with Iran after the attempted coup. Was it Russia, was it US, what was the motive, does one have motive to frame the other?

It's not their job to do the convincing, they leave that to CNN, MSNBC or FOX. They just give some superficial material to get the ball rolling. There was next to no in depth articulation as to how this was definitely Russia. They're still twiddling their thumbs and saying 'we're confident' it was them.

Re:Technical report on DNC hack [pdf] by mundo on Friday December 30, 2016 @01:24PM (#13286072)
You're suggesting that a foreign country supplied the FBI with forged evidence, and the FBI said, "Well, this doesn't match our own investigation, but I guess we'll just assume it's true anyway, now let's announce it to the world on our official letterhead"? Does that sound likely to you?
Re:Technical report on DNC hack [pdf] by rieter on Thursday December 29, 2016 @08:53PM (#13281925)
Do the intelligence agencies actually agree on this as unanimously as you're saying? Here's a quote from the testimony of James Clapper on Russia/Wikileaks connection:

"The evidence there is not strong" https://www.c-span.org/video/?c4631568/clapper-wikileaks-con...

Re:Technical report on DNC hack [pdf] by mundo on Thursday December 29, 2016 @11:20PM (#13282484)
That was from a month and a half ago. It seems more likely that he's changed his mind or seen new information than that the DHS and FBI are putting out joint press releases that contradict the beliefs of the DNI, but who knows, maybe the DHS/FBI leadership is involved in some kind of squabble with Clapper or something....?
Re:Technical report on DNC hack [pdf] by Natsu on Friday December 30, 2016 @01:09AM (#13282868)
You're assuming this is true and coming up with speculation. Meanwhile, we can look up the names of many of the reporters spreading these rumors and find that they coordinate with the DNC.

Also, you think it's a conspiracy theory that the DNC would attack Trump? So... you don't seriously think that the RNC's media allies attacked Clinton? That's, uhh, just not how it works.

The DNC has very good reasons to deflect this one. They funneled all the state-level money to Hillary and made their losses worse. They helped promote Trump and the other "pied piper" candidates in the media early on. Their token opponent, Sanders, got far more enthusiasm than Hillary and both candidates under-performed past ones, with Trump edging her out based on smaller losses and working the electoral college to his advantage--a failure reminiscent of how Obama beat Hillary by focusing on delegates. They have to pin the failure on someone else for their own survival. If the average voter saw the actual emails and realized just how much the DNC orchestrated just to shoot itself in the foot here, they'd demand their replacement.

Re:Technical report on DNC hack [pdf] by wyager on Thursday December 29, 2016 @07:29PM (#13281510)
The FBI has a history of political activism, to put it lightly. Here's a fun one: https://en.m.wikipedia.org/wiki/FBI–King_suicide_letter

You're being foolish if you trust a word the FBI says without solid evidence.

Re:Technical report on DNC hack [pdf] by mundo on Thursday December 29, 2016 @07:37PM (#13281550)
I don't! Dammit, read the post! No one on god's green earth trusts the FBI at their word, but that doesn't mean you can assume the opposite of what they said is true without evidence!
Re:Technical report on DNC hack [pdf] by steamer25 on Thursday December 29, 2016 @09:59PM (#13282176)
I suppose that depends on the expected reaction to either believing or not believing. In this case, from my perspective, I see two intended reactions to the claims of Russian subversion:

1) To delegitimize the President-elect 2) To foment war with Russia

I didn't vote for the guy but I don't think he's near so bad as his political opponents try to paint him. I'd like to at least give him a chance and to whatever degree he turns out to suck, I'll still blame the Clinton campaign for promoting controlled opposition 'pied pipers' rather than promoting a robust debate in the interest of the American people.

Wrt #2, I will certainly demand very strong evidence before yielding any resistance to that notion.

Re:Technical report on DNC hack [pdf] by wooter on Thursday December 29, 2016 @07:49PM (#13281624)
Seriously. Clapper lied directly to congress under oath on TV. The whole "they know whats best for us and our only choice is blind faith" attitude is really disturbing.
Re:Technical report on DNC hack [pdf] by mundo on Thursday December 29, 2016 @07:56PM (#13281662)
> The whole "they know whats best for us and our only choice is blind faith" attitude is really disturbing.

This is so, so insulting. There is no way a fair observer could read the comments here and conclude that the people who find Russia hacking the DNC credible do so because they have blind faith in Clapper or the FBI or anyone else.

Re:Technical report on DNC hack [pdf] by mistermann on Thursday December 29, 2016 @09:01PM (#13281966)
> There is no way any a fair observer could read the comments here and conclude that the people who find Russia hacking the DNC credible do so because they have blind faith in Clapper or the FBI or anyone else.

Isn't that what you were more or less saying here: https://news.ycombinator.com/item?id=13281736

Re:Technical report on DNC hack [pdf] by mundo on Friday December 30, 2016 @12:06AM (#13282649)
No. I believe the official version (that the reason the intelligence agencies are accusing Russia of hacking the DNC is because believe it did) because the alternative is less plausible and there's no evidence for it. That's pure Occam's Razor, no faith involved.

The FBI has lied and will lie again, getting me to believe they lied about something is not hard, but they don't generally do it in big, obvious ways that are easy to disprove and involve a lot of co-conspirators and don't accomplish anything.

Re:Technical report on DNC hack [pdf] by wyager on Friday December 30, 2016 @11:02AM (#13284970)
That's not how Occam's razor works. You don't pick the most likely single outcome and then just assume that to be true with 100% confidence. Occam's razor is just an informal statement of the fact that you should assign a higher a priori probability to simpler hypotheses. It doesn't mean you should ignore any marginally less likely hypothesis.
Re:Technical report on DNC hack [pdf] by mundo on Friday December 30, 2016 @12:46PM (#13285766)
Please stop accusing people of being 100% confident. It's such a weak, insulting tactic. What is the alternate hypothesis that's "marginally less likely"?

(Please remember what question we're trying to answer. It is not "Who hacked the DNC?". We are not in a position to know; hell, we don't even know there was a hack. It is also not "Is the FBI trustworthy?" Of course they're not. It is "Why are US intelligence agencies saying they have proof that Russia hacked the DNC?" The base hypothesis is "Because they do." The alternate hypothesis is what you're supplying.)

Re:Technical report on DNC hack [pdf] by wyager on Friday December 30, 2016 @01:09PM (#13285936)
> Please stop accusing people of being 100% confident.

To quote you:

> No. I believe the official version

> What is the alternate hypothesis that's "marginally less likely"?

That Russia didn't hack the DNC. I think it's actually marginally more likely than that Russia didn't hack the DNC than that they did, but I was humoring you.

Re:Technical report on DNC hack [pdf] by mundo on Friday December 30, 2016 @01:33PM (#13286126)
I repeat:

> "Why are US intelligence agencies saying they have proof that Russia hacked the DNC?" The base hypothesis is "Because they do." The alternate hypothesis is what you're supplying.

Re:Technical report on DNC hack [pdf] by wyager on Saturday December 31, 2016 @01:43AM (#13289875)
What do you mean by "base hypothesis" or "alternate hypothesis"? Those aren't real terms in hypothesis testing. I think you might want to do some reading on Bayesian reasoning, and its relationship to Occam's razor.
Re:Technical report on DNC hack [pdf] by mundo on Saturday December 31, 2016 @11:31AM (#13291672)
Those are not highfalutin technical terms, just casual everyday language. Stop waffling and tell me what this theory is that I'm a brainwashed sheep for not believing!
Re:Technical report on DNC hack [pdf] by mistermann on Friday December 30, 2016 @03:07PM (#13286990)
Alternative hypotheses are that they don't like to have their activities monitored, and they like people that can be manipulated with propaganda. Trump seems potentially problematic in both respects.

If these organizations are involved in questionable undertakings (it's their job, so I think we can agree the answer is yes), it's not much of a stretch of the imagination that they like to operate without supervision.

Re:Technical report on DNC hack [pdf] by unclepresent on Friday December 30, 2016 @11:17AM (#13285082)
everyone is innocent until proven guilty... there is no any prove in report that hacking even took place, date, time, size of materials, exact mechanism of attack, which email address was compromized, which link was attached to email, what happened after link got openned, why outlook did not block link, why anti virus did not block exploit be installed, which exploit , why firewall accepted outcoming traffic to unknown source outside of trsuted network ... why russians ?
Re:Technical report on DNC hack [pdf] by mistermann on Friday December 30, 2016 @12:20AM (#13282702)
I don't necessarily disagree, but a guilty charge shouldn't be based on the "most plausible" explanation.
Re:Technical report on DNC hack [pdf] by jessaustin on Friday December 30, 2016 @12:55AM (#13282825)
I, for one, wholly support the "insulting" of the treasonous reptiles that infest our secret agencies, on every possible occasion. The nation and world would be better off if they all jumped in a lake.