Slashdot Mirror
Federal Criminal Probe Being Opened Into WikiLeaks' Publication of CIA Documents (cnn.com)
A federal criminal investigation is being opened into WikiLeaks' publication of documents detailing alleged CIA hacking operations, CNN reports citing several U.S. officials. From the report: The officials said the FBI and CIA are coordinating reviews of the matter. The investigation is looking into how the documents came into WikiLeaks' possession and whether they might have been leaked by an employee or contractor. The CIA is also trying to determine if there are other unpublished documents WikiLeaks may have. The documents published so far are largely genuine, officials said, though they are not yet certain if all of them are and whether some of the documents may have been altered. One of the biggest concerns for the federal government is if WikiLeaks publishes critical computer code on how operations are conducted, other hackers could take that code and cause havoc overseas. Security expert Robert Graham, wrote on Tuesday: The CIA didn't remotely hack a TV. The docs are clear that they can update the software running on the TV using a USB drive. There's no evidence of them doing so remotely over the Internet. The CIA didn't defeat Signal/WhatsApp encryption. The CIA has some exploits for Android/iPhone. If they can get on your phone, then, of course they can record audio and screenshots. Technically, this bypasses/defeats encryption -- but such phrases used by Wikileaks are highly misleading, since nothing related to Signal/WhatsApp is happening. [...] This hurts the CIA a lot. Already, one AV researcher has told me that a virus they once suspected came from the Russians or Chinese can now be attributed to the CIA, as it matches the description perfectly to something in the leak. We can develop anti-virus and intrusion-detection signatures based on this information that will defeat much of what we read in these documents. This would put a multi-year delay in the CIA's development efforts. Plus, it'll now go on a witch-hunt looking for the leaker, which will erode morale.
Where is the Federal Criminal Probe into illegal spying by our own government?
So, Just like Snowden, let's ignore the purportedly criminal and corrupt activity of the US Government and it's elected thugs - and just kill the messenger. Sweep the body under the run and strong arm anyone with evidence to go away.
Case Closed, mission accomplished, normality achieved.
One of the biggest concerns for the people of the United States is if WikiLeaks publishes critical computer code on how operations are conducted, CIA/FBI hackers could take that code and cause havoc overseas AND/OR at home and blame someone else. False-flag ops are standard I hear.
Maybe they should have thought of that before hoarding vulnerabilities instead of disclosing them. Security by obscurity is equivalent to no security at all. The responsible thing for the CIA to do now is a disclosure of all known vulnerabilities to the parties of those products so they have some chance to patch them before exploits are in the wild. What they will do instead is waste taxpayer money on this investigation and continue to go after WikiLeaks while continuing to hoard vulnerabilities and continue illegal domestic spying.
Gotta keep cleaning house until all Democrat moles are gone.
Remember when it emerged that the NSA was intercepting Cisco hardware during shipping, installing malware on it and then sending it on to the buyer? I imagine that's how they infect most of the Samsung TVs, not some Mission Impossible dangling from a wire shit.
const int one = 65536; (Silvermoon, Texture.cs)
SJW, n: "Someone I don't like, and by the way I'm a fuckwit" - AC
The documents published so far are largely genuine, officials said, though they are not yet certain if all of them are and whether some of the documents may have been altered. However, WikiLeaks thus far has a 100% accurate record, so it would be absolutely shocking if even a single document is not authentic. One of the biggest concerns for the federal government is if WikiLeaks publishes critical computer code on how operations are conducted, other hackers could take that code and cause havoc overseas. Of course, the federal government is merely deflecting blame on WikiLeaks, when it appears likely the CIA has already lost control of these tools to the hacking communities and agencies of the world.
10 Times today it was repeated on CNN that the CIA "Only spies on foreign citizens, not on US citizens"
I don't believe that for one second. Knowing how little oversight the CIA gets from congress they could dragnet all of American communications and lie to congress and say they weren't doing it. Actually, wait isn't that exactly what the NSA did? Didn't Former NSA director James Clapper lie under oath to congress when he professed the NSA wasn't spying on americans, just a few months before snowden proved that they where? Why should we expect the CIA to do any different, just because their mission statement say's they don't have jurisdiction to spy within american borders?
Nobody's watching this watcher, which is why we shouldn't trust them one iota.
This. Heck, the NSA even had a program where they would infect with malware all the PCs/laptops shipped to an area, just in hopes the target would buy one. I'm sure the CIA could do the same with TVs.
Socialism: a lie told by totalitarians and believed by fools.
If you hire a bunch of honest people who are loyal to their country, and then ask them to do illegal and immoral things, eventually they rat you out (that being the decent thing to do, and all).
If you hire a bunch of crooks who have no qualms about betraying others for your profit, eventually they will betray you for their profit.
If you hire people stupid enough to believe that patriotism is the same thing as unquestioning obedience to government officials, they won't be competent enough to do their jobs.
I realize that government officials absolutely abhor transparency and public accountability...but....the new technological landscape is eliminating some options for secrecy that once allowed corruption to thrive.
Just and FYI, most of the commercial product hacks are known. There is very little security on IoT devices, including "smart" TVs that it is trivial to compromise one. And I've seen active "hacks" of vehicles in videos, not quite as trivial as IoT devices,
In general, I already suspected much of what was revealed by WikiLeaks, even if I couldn't actually prove it. Most of the IT people I am familiar with, understood the possibility and even the likelihood that the tools existed, and weren't surprised when WikiLeaks said as much.
Most people don't want to know how deep the surveillance state goes. Very few of us are terrified of it.
Agent K: A *person* is smart. People are dumb, stupid, panicky animals, and you know it.
here's a nice tidbit that, to me, nicely illustrates the problem with attribution: "one AV researcher has told me that a virus they once suspected came from the Russians or Chinese can now be attributed to the CIA" Bear this in mind the next time someone says "that guy did it"
This posting is provided 'AS IS' without warranty of any kind, implied or otherwise.
It occurs to me that this Leak could be used as the argument for why placing a backdoor into encryption is a bad idea. At some point in time - somebody will figure it out and leak it to the world.
The idea that the government is going to be trusted with these BIG secrets and they won't get out is preposterous. See see -- don't look over there!! Ignore the man behind the curtain.
Go get Wikileaks' "summary" of the first Vault7 release. You'll know you're on the right one because it's a list of bullet points.
Now get the actual first Vault7 release from Wikileaks. You'll have to do a little searching, but see for yourself if the summary (made to be released to the Western media) actually corresponds to anything in the Vault7 release itself.
You will be surprised, especially if you think Wikileaks is a force for transparency.
If you're really lazy, go read some posts by infosec experts and pro-privacy bloggers. They're already doing some of this work for you, and you will still be surprised at what they say. I don't want to spoil it by telling you.
You are welcome on my lawn.
One of the biggest concerns for the federal government is if WikiLeaks publishes critical computer code on how operations are conducted, other hackers could take that code and cause havoc overseas.
Criminals that get ahold of this will loot AMERICA. This is exactly what every single security expert has warned against, pretty much since the internet existed.
Wikileaks allegedly leaked the CIA's toolkit. I see nowhere in the leak where that toolkit is being used in the way you claim it is. Now I wouldn't be surprised if that was happening, unfortunately, but at the moment spying on US citizens still requires FISA approval, and so long as these tools are used in that context when spying on US citizens, then no law has been broken.
The world's burning. Moped Jesus spotted on I50. Details at 11.