Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Been Breached

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by morsch on Wednesday October 11, 2017 @05:45AM (#15448459)

There is no single source for the article.

It refers to a "person familiar with the case" when they explain how an NSA guy exposed his malware to Kaspersky.

It refers to different sources which discuss how any malware might have made its way from Kaspersky to the NSA -- unnamed "information security analysts" (they think the KGB hacked Kaspersky), "other experts" (they say the Russian's version of PRISM picked it up) and Steven Hall, a former spook with no disclosed ties to the case (he says Kaspersky is "likely to be beholden to the Kremlin").

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by stickdogg on Wednesday October 11, 2017 @02:09PM (#15451834)

It is obvious to me that Kaspersky is beholden to the Kremlin. The founders of Kaspersky are after all Russian.

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by thewhitetulip on Wednesday October 11, 2017 @06:35AM (#15448621)

Why would a hacker not use Mac or Linux for sensitive stuff?

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by andreif on Wednesday October 11, 2017 @07:04AM (#15448753)

Why would a NSA guy use Russian security software?

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by leereeves on Wednesday October 11, 2017 @07:11AM (#15448785)

Why would an NSA guy put secret government tools on his personal laptop?

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by YouKnowBetter on Wednesday October 11, 2017 @08:45AM (#15449273)

Stupid as it may sound, but my experience with many many "why did you take the data there" dramas, the answer is:

To get things done you can not do at the office or you just lack the office time to get it done.

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by marcosdumay on Wednesday October 11, 2017 @11:08AM (#15450368)

Too restrictive corporate policies?

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by marcusjt on Wednesday October 11, 2017 @08:06AM (#15449043)

User error

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by _e on Wednesday October 11, 2017 @12:27PM (#15450970)

Why would a NSA guy even run any AV? Isolate and compartmentalize everything based on the task and its dependencies. You should assume everything you run could be bad or that you are already compromised.

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by wetghost on Wednesday October 11, 2017 @02:09PM (#15451837)

He works for the NSA, but he was on his home computer which is unlikely to stay air-gapped unless he's content with making mspaint art and playing skifree :)

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by stickdogg on Wednesday October 11, 2017 @02:12PM (#15451873)

Straight up. They spew forth this stupid reasoning so that the general public will become frightened. Most people don't understand what any AV does, or how it operates anyway. For them to understand compartmentalization based on dependencies is way too far out there. The US government might have granted access as well in another effort to spread fear amongst the uneducated American populus.

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by thecrazyone on Wednesday October 11, 2017 @01:43PM (#15451576)

Is this reasonable to do with number of softwares even average people use?

There was a person on the docker team, who had dockerized every other applications like chrome, firefox, ALSA sound server, and more. But even she found it hard to sandbox everything.

I'm using docker as a leading sandboxing tech. Do you mean something else when you mean sandbox?

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by codedokode on Wednesday October 11, 2017 @02:18PM (#15451924)

I should warn that Docker was never planned as a security tool. If you read the documentation on Linux containers you will see that they are pretty complicated and therefore can have vulnerabilities.

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by SEJeff on Wednesday October 11, 2017 @10:50AM (#15450215)

Because he's a RIS mole pretending to be incompetent.

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by 13of40 on Wednesday October 11, 2017 @10:57AM (#15450280)

I assume if you voluntarily give Kaspersky root access to your laptop, they don't care whether it's Windows, Mac, or Linux.

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by marcosdumay on Wednesday October 11, 2017 @11:08AM (#15450363)

Does Karpersky sell that run on Macs or desktop Linux?

[ Parent | on HN ]

Re:Israel Hacked Kaspersky, Then Tipped NSA Its Tools Had Be... by 13of40 on Wednesday October 11, 2017 @11:30AM (#15450544)

According to Google they have both, and based on the descriptions they probably follow the same model as the Windows one. That said, it would be kind of ironic if the original comment actually meant, "Use Mac or Linux for sensitive stuff because there's a good chance Kaspersky doesn't exist (or work very well) on them."

[ Parent | on HN ]