Juniper breach mystery starts to clear with new details on hackers and U.S. role

Re:Juniper breach mystery starts to clear with new details o... by vlovich123 on Sunday September 05, 2021 @01:32PM (#28426027)

Kind of, but my reading of it is that it was also a supply-side chain attack where they modified the constant that was used in the code before the binary was built. So at that level of access, I'm not sure any algorithms would hold up. I don't think Dual ECDRGB was used to attack the source control system.

[ Parent | on HN ]

Re:Juniper breach mystery starts to clear with new details o... by timmytokyo on Sunday September 05, 2021 @04:16PM (#28427386)

The brilliant part is that they did it in a way that remained undetected for so long. And the reason they could do that is because the backdoor already existed.

[ Parent | on HN ]

Re:Juniper breach mystery starts to clear with new details o... by Tylast on Sunday September 05, 2021 @04:48PM (#28427633)

I wonder how much Intellectual Property was exfiltrated because of this?

[ Parent | on HN ]

Re:Juniper breach mystery starts to clear with new details o... by throwaway210222 on Monday September 06, 2021 @02:21PM (#28436474)

Its hubris to think that a national state that can design and execute this kind of attack really needs your IP.

[ Parent | on HN ]