Outlaw Country: CIA Linux Kernel Malware

Posted by mahesh_rm on Thursday June 29, 2017 @02:12PM
from the wikileaks.org dept.

https://wikileaks.org/vault7/#OutlawCountry

( 6 comments | 15 points | on HN )

Re:Outlaw Country: CIA Linux Kernel Malware by benchaney on Thursday June 29, 2017 @02:44PM (#14665845)

I was expecting a kernel vulnerability. This is really more of an exploit payload.

[ Parent | on HN ]

Re:Outlaw Country: CIA Linux Kernel Malware by thelamer on Thursday June 29, 2017 @02:45PM (#14665849)

How is this any different from a standard root kit? It is not a remote hack and requires elevated perms on the machine. This could be a shadowed binary blob and achieve the exact same thing.

With that said , are they technically in breach of GPLv2 ?

[ Parent | on HN ]

Re:Outlaw Country: CIA Linux Kernel Malware by scj on Thursday June 29, 2017 @03:03PM (#14665992)

As I understand the GPL, they would need to provide source code to people they distribute binaries to...

So in practice, they are probably complying with the GPL.

[ Parent | on HN ]

Re:Outlaw Country: CIA Linux Kernel Malware by ezoe on Saturday July 01, 2017 @12:50AM (#14675442)

So, If the USA spy infected my computer with malicious Linux kernel module which use GPL protected kernel APIs, Can I demand the source code?

[ Parent | on HN ]

Re:Outlaw Country: CIA Linux Kernel Malware by scj on Monday July 03, 2017 @12:05PM (#14689281)

You'd probably need to prove they provided the infection.

[ Parent | on HN ]

Re:Outlaw Country: CIA Linux Kernel Malware by cphoover on Thursday June 29, 2017 @05:04PM (#14666857)

Only works on CentOS 6. Also not a vulnerability but a payload. Interesting tool tho.

[ Parent | on HN ]