Slashdot Mirror
Researchers Tie Regin Malware To NSA, Five Eyes Intel Agencies
Trailrunner7 writes Researchers at Kaspersky Lab have discovered shared code and functionality between the Regin malware platform and a similar platform described in a newly disclosed set of Edward Snowden documents 10 days ago by Germany's Der Spiegel. The link, found in a keylogger called QWERTY allegedly used by the so-called Five Eyes, leads them to conclude that the developers of each platform are either the same, or work closely together. "Considering the extreme complexity of the Regin platform and little chance that it can be duplicated by somebody without having access to its source codes, we conclude the QWERTY malware developers and the Regin developers are the same or working together," wrote Kaspersky Lab researchers Costin Raiu and Igor Soumenkov today in a published report. (Here is the Spiegel article.)
Now our Malware/Virus software engineers are practicing reuse. Excellent development practice out there folks! Keep Reusing that code!
Harrison's Postulate - "For every action there is an equal and opposite criticism"
And I thought it was IS/Russians/NKoreans/Aliens, because US and allies hold moral highground and would never initiate actions which they themselves consider to be acts of war, right?
http://www.wsj.com/articles/SB...
After all, it's ok if they do it. It's only bad if terrorists, communists and perverts do it.
Crying wolf and all that.
It is time ro return to the Write Protect Switch. Passwords are no longer effective in preventing firmware alterations by hostile organizations.
For those old enough to remember them, changing a BIOS required an EPROM burner and UV eraser. Changing CMOS settings required setting the write protect jumper.
Early infections were restricted to Write Enabled floppies, hard drives for machines with them, and everything else was write protected.
It is time to return to write protected firmware requiring physical access to alter.
Our complacency with remote management is showing the error of our ways as we are compromised.
The truth shall set you free!
You're mad because all the software available to use is security swiss cheese, and there's nothing you can do about it. But your anger is misplaced. It should be directed at Linus and other "white hat" software developers who *could* write secure software but do not. Linux could be designed so that each app only has access to its own files, not complete user-level access. The kernel could be written in a safe language (a Rust-like language), where minor mistakes wouldn't let hackers take over the whole system. The kernel could cryptographically verify apps and modules. ...except making a safe system is too boring and inconvenient for open-source developers to do, and not demanded by customers of purchased software.
There's evil all over the world. If the systems are not built to be secure then somebody will take advantage of that. Russia or China, organized crime, dictators. You can't shame all actors and if you manage to get one to stop taking advantage then you haven't really changed anything -- your computer is still wide open to bad guys. So be mad at the programmers for being lazy and careless, because that might actually result in safer systems.
It's not self-loathing, it's loathing of tyranny -- a fine, patriotic American tradition.
"[Regarding the 'cloud,'] ownership was what made America different than Russia." -- Woz
Way more then just the website.
More info on http://www.net-security.org/se...
Not only the website, but "26,000 systems were found to be infected: email and share point servers, as well as the technical staff's workstations."
Belgacom is the largest telecom operator and is also the largest ISP. I would guess almost all political individuals would at least use their phone system, but most likely also their internet.
Don't fight for your country, if your country does not fight for you.
General Alexander lied to Congress, denied NSA was spying on millions of Americans, pretended the NSA didn't have the technical ability. Has he been punished? Has he been found in contempt of Congress?
No, he retired, set up a private company which banks pay tens of millions of dollars for some vague service, and the CTO of the NSA is involved as a consultant. In other words this is some NSA front company most likely. Yet another way for NSA to escape legal bounds.
Tempora, the UK's massive full-take surveillance system, that the NSA queries using its UK base to avoid any legal questions in the US. The one they use to spy on British politicians, press and activists with the help of GCHQ (aka traitors to their democracy). Has any GCHQ staff been prosecuted for that? Quite the opposite, their agents in the Lords are busy trying to amend bills to make it legal!
So who exactly is going to punish the NSA? Because everyone of those politicians is in the database, and politicians who step out of line find their private lives leaked to the press.
UKIP MPs are the being targetted now, with their phone calls over the years, leaked. Who records phone calls of people just in case they become political MPs, then selectively leaks the most embarrassing ones? GCHQ and NSA, that's who.
So no good people will make their way up the political ladder and no fix is possible.