Thousands of computers now compromised with leaked NSA tools, researchers say

Re:Thousands of computers now compromised with leaked NSA to... by lazy_gator on Monday April 24, 2017 @01:17AM (#14182105)

A unreported zero day is a de facto backdoor. The chain you mentioned has similar flaws as the current strategy. Step 3 would be incredibly difficult. It would be similar to detecting a virus signature, which are easily circumvented. The second party can use trivial techniques to change the signature in a way that makes it incredibly difficult to detect.

Many 0-days are built of of multiple bugs. A triple letter may use bug #1 and bug #2 to get a result, but another party will use bug #1 and bug #3 to get a similar result. Back to square one with corporate/government/personal equipment getting hacked reducing overall security.

[ Parent | on HN ]

Re:Thousands of computers now compromised with leaked NSA to... by acdha on Monday April 24, 2017 @08:18AM (#14183629)

> A unreported zero day is a de facto backdoor

Traditionally the meaning of “backdoor” has involved intent as well as access. Unlike a basic bug, the system is working as designed but the designer wasn't trustworthy.

[ Parent | on HN ]

Re:Thousands of computers now compromised with leaked NSA to... by willstrafach on Monday April 24, 2017 @08:55AM (#14183902)

> A unreported zero day is a de facto backdoor.

This is not true. A backdoor indicates that Microsoft is aware of it (and/or colluded to put it in), but there is no evidence of that. I respect your disagreement with my thoughts on how they should handle 0-days, but re-defining "backdoor" does not seem helpful.

[ Parent | on HN ]

Re:Thousands of computers now compromised with leaked NSA to... by lazy_gator on Tuesday April 25, 2017 @04:02AM (#14191591)

We can debate the meaning of words, but the goal of a backdoor from the perspective of the government is to gain access to a system. The effect of a backdoor is accomplished through a literal backdoor or a figurative backdoor by hoarding exploits, which both are a detriment of security.

By de facto, I was implying that they both accomplish the same things with almost the same list of pros and cons.

[ Parent | on HN ]

Re:Thousands of computers now compromised with leaked NSA to... by willstrafach on Tuesday April 25, 2017 @08:36AM (#14192849)

When I worked on jailbreaking tools for iOS devices, we routinely held onto multiple 0-days, waiting for a major iOS release to ensure compatibility.

While I know there may be reasons to disagree with that practice, I think it would be a major stretch to say that it meant iOS suddenly had a backdoor.

[ Parent | on HN ]

Re:Thousands of computers now compromised with leaked NSA to... by lazy_gator on Tuesday April 25, 2017 @09:54AM (#14193508)

I agree that it is not a true backdoor, but I am simply pointing out that the goal is accomplished by hoarding 0-days or creating an actual backdoor.

The 0-day you were not reporting gave you escalated access to iOS devices. If Apple had given you a backdoor, you would have had the exact same access to the device.

Not saying its the same thing, which is why I used "de facto". The government just wants the access. Regardless the hole is intentional or unintentional, if a hole exists, then overall security is weakened

[ Parent | on HN ]