News for hackers. Stuff that matters.
Re:Scans of North Korean IP Space by jedberg on Saturday December 20, 2014 @04:57PM (#8778080)
So they seem to have at least some commercial software and hardware made by American companies. Given that the US cannot trade with NK that means either 1) the companies broke the embargo or 2) they bought through a 3rd party or 3) the software is pirated/stolen/

I'll assume #1 isn't true since it would be stupid for those companies to do that for so little money.

#2 has interesting implications about trade embargoes. Unless everyone in the world participates, it seems like all an embargo does is add complexity and middle-men to the transaction. For example, if they legally acquired the software and hardware through a Chinese or Russian reseller, then all that happened was the Chinese or Russians took a cut.

#3 interestes me because what happens there? Ok, they are using clearly stolen software, now what? Are there any consequences?

Re:Scans of North Korean IP Space by lucasgw on Saturday December 20, 2014 @09:02PM (#8778705)
No idea about NK. But re: #2 - I believe that sort of trade is regularly transacted with Iran through resellers in UAE/Dubai. US companies with overseas subsidiaries. They are legally separate companies. The goods are manufactured in Asia and never touch US soil. The employees are citizens of a country without restricted trade. The end result is the same - what are essentially US-backed goods make their way to a country with enforced economic sanctions, but without violating US law or OFAC regulations.
Re:Scans of North Korean IP Space by bane on Sunday December 21, 2014 @12:02PM (#8780159)
I can't find it right now, but I've read that U.S. companies cannot do business with other companies that are within 2 degrees of separation from a state sponsor of terror under some crazy penalties. In other words, if I make a widget, sell it to somebody in Dubai who sells it to the North Koreans, I can be held responsible unless I break off business ties with my Dubai customer. So they'd likely need to be going through 2 or 3 middlemen for a reliable source. It's hard to enforce though, once your good go through Dubai and Beijing or wherever the U.S. ability to track a chain of ownership becomes impossible.
Re:Scans of North Korean IP Space by yeukhon on Sunday December 21, 2014 @12:41PM (#8780294)
Exactly. Even if your product was bought on US soil, sold on eBay to someone outside of the U.S., and then sold to the 4th party via the black market or 2nd hand market again, now it's legal that a NK spy picks it up. That's the same effect as saying "I picked up this US Dell computer from a recycle shipment from US to China last week." Yeah a lot of electronics are "re-used" that way oversea.

The U.S. government is aware of this but for as long as their US companies are never directly selling to NK the sanction is enforced from the US's perspective. This including banks cannot do transaction (via multiple middlemen? yes sure! Money laundering, but the FBI will be looking at it).

Re:Scans of North Korean IP Space by grobinson on Sunday December 21, 2014 @06:03AM (#8779471)
Is this not a __good__ thing for the Americans since the NSA backdoored most Cisco routers (http://www.infoworld.com/article/2608141/internet-privacy/sn...). Much better the North Koreans running Cisco routers which they have backdoored then a Chinese competitor such as Huawei, which could be much harder to attack?
Re:Scans of North Korean IP Space by cli on Sunday December 21, 2014 @03:56AM (#8779328)
Even if number 2 happens often, the embargo would still be effective in that North Korea would have to spend more for the embargoed goods. Adding complexity to a transaction is not a small thing.
Re:Scans of North Korean IP Space by ghshephard on Saturday December 20, 2014 @05:20PM (#8778150)
There is a huge market (In the Billions of dollars) for used technology hardware - I've seen some warehouses that had over $500million dollars (at list price) of used Networking and Server equipment. I can't believe it would be particularly difficult for places like Cuba, North Korea, etc... to purchase a bunch of containers of Cisco Routers or HP servers and have them routed through cut-out countries before final shipping to them.
Re:Scans of North Korean IP Space by jedberg on Saturday December 20, 2014 @05:33PM (#8778186)
Exactly! Which means the embargo isn't doing anything but enriching the cut-out countries.
Re:Scans of North Korean IP Space by ikawe on Saturday December 20, 2014 @05:41PM (#8778205)
It's making it more expensive for the embargoed to get goods.
Re:Scans of North Korean IP Space by MrJagil on Saturday December 20, 2014 @07:39PM (#8778517)
> I've seen some

Please elaborate! If you're comfortable with it of course.

Re:Scans of North Korean IP Space by ghshephard on Saturday December 20, 2014 @11:39PM (#8778954)
These guys (who I've worked with back when they were NHR) have massive warehouses of used equipment that you purchase for 70-80% off list. They sell about $250mm worth of equipment each year.

https://www.curvature.com

Here is their distribution center: https://www.curvature.com/DistributionCenter

Carrying inventory valued at $200mm.

Re:Scans of North Korean IP Space by bane on Sunday December 21, 2014 @12:13PM (#8780192)
You'd be surprised. There's a guy in San Jose with two giant warehouses full of Atari products.

http://www.bertelmann.org/atari-archive/be_en.htm

Re:Scans of North Korean IP Space by shalmanese on Sunday December 21, 2014 @02:04AM (#8779187)
The actual hardware might easily slip by an embargo but not the service contracts. If you look at a typical IT contract, usually over 50% of the cost is in maintenance. This alone seems to justify an embargo as effective.
Re:Scans of North Korean IP Space by kw71 on Sunday December 21, 2014 @12:53PM (#8780340)
Third party support is still available. Many people with secondhand Cisco equipment, but no contract (and therefore no CCO login) rely on their own network of contacts to share things like firmware updates with them.

After I terminated my employment at Cisco Systems, some of my departmental coworkers started a consulting business to provide services related to the products that we used to work on, including maintenance services that duplicate and compete with professional services offered by Cisco itself.

I'm also earning a living as a thirdparty support provider, but not for Cisco products. All of my customers have been denied support by the original vendors for economic reasons (can't afford it) or corporate decisions to discontinue support. In addition to my own experience operating and reverse engineering the products I support, I have benefited from corporate leaks of documents and binaries as well as being passed material from paying customers.

I even generate licenses on my own for products that aren't sold anymore, without permission of the original vendors, but they know about it and haven't requested that I stop.

Therefore, I am certain that anyone subject to a government embargo would be able to procure these services from a third party or hire a local hacker to take care of these things.

Re:Scans of North Korean IP Space by forensichell on Monday December 22, 2014 @11:56PM (#8786828)
#3 Dictates consequences for sure, http://www.NorthKoreaOffline.com
Re:Scans of North Korean IP Space by forensichell on Monday December 22, 2014 @11:57PM (#8786830)
#NorthKoreaOffline #TangoDown #ChristmasParty
Re:Scans of North Korean IP Space by strathmeyer on Sunday December 21, 2014 @03:20PM (#8780806)
Cisco products are made in China.