News for hackers. Stuff that matters.

A comment on US Govt Data Shows Russia Used Outdated Ukrainian PHP Malware. Parent comment

Re:US Govt Data Shows Russia Used Outdated Ukrainian PHP Mal... by threeseed on Sunday January 01, 2017 @04:13AM (#13295195)
a) Anyone who thinks this document is the sole source of evidence is deluding themselves. The intelligence agencies are not going to document their capabilities to the world. Which I am sure would include compromised Tor nodes and DPI (including SSL/encrypted traffic) across many of the key sites/switches/cables.

b) It has been claimed that this document is more a guide for other companies and government agencies about the type of techniques that Russia allegedly used. General education about security is still pretty low and the US government et al are going to need to more in this area.

[ Parent | on HN ]
Re:US Govt Data Shows Russia Used Outdated Ukrainian PHP Mal... by Natsu on Sunday January 01, 2017 @05:10AM (#13295299)
The problem with a line of reasoning that includes secret evidence we'll never get to see is that it can be used to support any conclusion whatsoever.

Inasmuch as it's a guide for other agencies, they'd be better served by OWASP recommendations. It's not clear what anyone could do with a report like this. I don't see any great takeaways that one could add to the next revision of their STIG. There are no 0-days for an IAVA.

As long as we're going for pure speculation, I think that Kim Dotcom hired Ukranian hackers and I could potentially find weak circumstantial evidence by going through a timeline of his Tweets. I seem to remember that he had foreknowledge of some of the items to be leaked, though that could've been pure BS and I didn't really investigate it at the time. He also has motive based on this administration's treatment of him.

EDIT: Found it -

https://www.bloomberg.com/politics/articles/2015-05-14/kim-d...

[ Parent | on HN ]
Re:US Govt Data Shows Russia Used Outdated Ukrainian PHP Mal... by Toe-Rag on Sunday January 01, 2017 @09:02PM (#13298592)
Interesting theory about Dotcom. He knew something. I also think that Wikileaks has more material than they released and that Dotcom knows it. His tweets during October suggest that he was expecting something more to drop. It could have been BS, as you say, but I think he knew something.
[ Parent | on HN ]