Re:Hacking Team hacked, attackers claim 400GB in dumped data
by bobcostas55 on Monday July 06, 2015 @03:25PM
(#9841560)
It's software sold to law enforcement/intelligence agencies, and it is designed explicitly to plant false evidence. Even post-Snowden I think that qualifies as interesting.
Re:Hacking Team hacked, attackers claim 400GB in dumped data
by MichaelGG on Monday July 06, 2015 @03:39PM
(#9841665)
Can you elaborate on "design explicitly to plant false evidence"? I don't know what the program does, but those path names are zero evidence, come on.
Re:Hacking Team hacked, attackers claim 400GB in dumped data
by yAnonymous on Tuesday July 07, 2015 @07:42AM
(#9844787)
The file explicitly said "evidence" in the first line. It's deleted now.
Re:Hacking Team hacked, attackers claim 400GB in dumped data
by sathio on Monday July 06, 2015 @03:28PM
(#9841590)
yes, I thought the same exact thing, but then I've read this:
> better evidence generation
https://github.com/hackedteam/rcs-common/commit/7059fb04a189...
probably those are just placeholders but the intent seems at least a bit shady
Re:Hacking Team hacked, attackers claim 400GB in dumped data
by MichaelGG on Monday July 06, 2015 @03:38PM
(#9841658)
Look at the change. They went from a unix-like file system path name to a Windows one. Considering they call to_utf16le_binary_null I'm going to guess they just wanted it to look reasonable (and perhaps not crash?) on Windows.
I find it very hard to believe anyone thinks "child_porn.avi" is a compelling filename for child pornography. I'd imagine they'd be more like "<age> <gender> <explicit act>.mp4".