Slashdot Mirror
CIA Tricked Antivirus Programs, Claims WikiLeaks (betanews.com)
Reader Mark Wilson writes: Today, WikiLeaks published the third installment of its Vault 7 CIA leaks. We've already had the Year Zero files which revealed a number of exploits for popular hardware and software, and the Dark Matter batch which focused on Mac and iPhone exploits. Now we have Marble to look at. A collection of 676 source code files, the Marble cache reveals details of the CIA's Marble Framework tool, used to hide the true source of CIA malware, and sometimes going as far as appearing to originate from countries other than the US. The source code for Marble Framework is tiny -- WikiLeaks has provided it in a zip file that's only around 0.5MB. WikiLeaks explains that the tool is used by the CIA to hide the fact that it is behind malware attacks that are unleashed on targets: "Marble is used to hamper forensic investigators and anti-virus companies from attributing viruses, trojans and hacking attacks to the CIA. Marble does this by hiding ("obfuscating") text fragments used in CIA malware from visual inspection. This is the digital equivalent of a specialized CIA tool to place covers over the english language text on U.S. produced weapons systems before giving them to insurgents secretly backed by the CIA. Marble forms part of the CIA's anti-forensics approach and the CIA's Core Library of malware code."
Our Guard Dogs have turned on us ... and they have rabies.
"and sometimes going as far as appearing to originate from countries other than the US" <- Russian hackers?
The CIA is a bigger threat to us than Russia is.
This is my signature. There are many like it, but this one is mine.
Everyone knows Vault 101 is the best.
It's common practice in a secret organization that presumably everyone knows about for your actions so they look in the wrong direct. I'm not justifying anything, just point out the basic "what do you expect". When China attacks us, they blame home grown hackers either domestic or foreign. Russia does the same, why are we any different. What would be interesting is if they did something original, like said it was a rouge employee within their own ranks when they were caught hacking someone. Or have they done that already? Anyone see anything like that from the NSA or CIA?
"Imagination is more important than knowledge" - Einstein
That may be true, but these releases are still clearly meant to be more of a distraction than an attempt at fixing a problem. Kind of trivializes that point of view.
Only fools doubt this now, Russia is on the offensive on the internet and deeply implicated in Trump and Brexit elections.
Weakening Europe so it cannot oppose them in the Ukraine and Crimea .
Remind me, where is Snowden, now?
These leaks don't have the effect that R&C thinks they're having. The US will keep their knowledge of R&C secret while R&C keep disclosing what they know about the US in terms of cyberwarfare abilities. This sort of thing only makes US change tactics and enforces their capabilities.
Alan Turing would've been proud of the work, American (and British) intelligence agencies are doing in the area of computers and communications.
And whoever leaked the information to adversaries, would've been shot in Alan Turing's times... For treason.
Synzronvg zl gnvy...
In Soviet Washington the swamp drains you.
That may be true, but these releases are still clearly meant to be more of a distraction than an attempt at fixing a problem. Kind of trivializes that point of view.
It is true. The CIA is a grave and existential threat to everything that the US stands for. They will stop at nothing to distract, and ultimately consolidate power. This is not power for the people, nor by the people, it is lawless power over the people.
The key fact is it disguises the original malware writers in Chinese, Russian, Korean,Arabic and Farsi.
Wikileaks Vault 7 Part 3 has released the CIA's Marble framework that is used the disguise the origin of malware. Specifically it is designed to " "[D]esigned to allow for flexible and easy-to-use obfuscation" as "string obfuscation algorithms (especially those that are unique) are often used to link malware to a specific developer or development shop."
https://slashdot.org/submissio...
Brings up a key point if the CIA does this, other countries do the same thing.
Do you really think Russia would sprinkle their hacked documents with Fancy Bear and Cozy Bear?
I wish that somebody would dig into the relationship between Slashdot and this "BetaNews" site that's being linked to.
There is a submission linking to this "BetaNews" site almost every day. Hell, there have already been two submissions linking to that site today alone! There were 3 submissions linking to that site on March 25!
Why are they getting so much attention around here? Their site isn't remarkable in any way. The articles are mediocre.
I have no evidence that something nefarious is going on here, but I do find it suspicious. Why is a such a little-known site ending up linked to from the front page of Slashdot so often?
Even if it's purely accidental, perhaps the Slashdot editors should be more careful about plastering links to that site all over the Slashdot front page. If that site has a truly remarkable article then link to it. Otherwise, keep the links to their site to a minimum. Maybe just one or two a month, if even that many.
If we really felt the need to read "BetaNews" articles, we'd visit the "BetaNews" site directly! We come to Slashdot for variety, and not to be sent to "BetaNews".
At this point it's really starting to feel like another Bennett Haselton sort of situation. We really don't need that to happen again.
Julian's a Russian asset. He might've had the best intentions at some point, but it's very difficult to realize them while staring down the barrel of a figurative or literal gun. His omissions, timing, and deeply misleading editorialism are equally as powerful as printing blatant falsehoods.
And by that you mean that his release isn't authentic?
Or maybe that it isn't important? Or interesting? Or valuable to society?
And I have to wonder, just how is it that you know his intentions? Or that he's a Russian asset?
You mention "printing blatant falsehoods". Do you have references, sources, rationalization, or... in fact... *anything* to support what you just said?
Someone always tries to direct the conversation away from the issues and to the person making the claim.
Does this work on Slashdot? Can we get everyone talking about the merits of Julian Assange at the top of the discussion, pushing any real debate down "below the fold" so fewer people see it?
Most efficient ad & threat blocker there is
APK Hosts File Engine 9.0++ SR-5 32/64-bit https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/
Ads & malwares rob speed, security & privacy
Hosts add speed (hardcodes/adblocks), security (bad sites/poisoned dns), reliability (dns down), & anonymity (dns requestlogs/trackers) natively
Host&s stops all trafic even better than a fierwall to unknown hosts and ports all while us less powr
Hosts better than AV at detecting malicious software and stop$ in tracks
Less power/cpu/ram + IO use vs. DNS/routers/addons/antivirus + less security bugs/complexity
* Using what you already NATIVELY have, built into your TCP/IP stack running in FASTOR kernelmode!
Able to keep Grandm4 and you kid sister out of your porn stash
Generate nightly when I sodomize yur cat
So simple it won't actually provide any protection that a small child couldn't get around
APK
P.S. - Safe because it will only keep script kiddies at bay on the best day
Leave it to BetaNews to misundertand a story. They didn't fool antivirus software. They fooled "forensics experts." Stop pushing this crappy site with crappy writing already. There are so many things wrong in that article I don't know where to start.
How dastardly! These CIA hackers wrote a program that takes the "Copyright 2011 CIA" strings in executables and replaces them with Chinese copyright notices!
On the other hand, it's nice that the CIA was putting origin-identifying strings into the binaries in the first place (so they exist to be removed or changed). If I were running a spy agency, I'm not sure I would have thought to do that.
As copyright owner of this comment, I authorize everyone to defeat any technological measure which limits access to it.
Remind me, where is Snowden, now?
Right where the US knowingly forced him to be. Snowden didn't want to seek refuge in Russia, the US gave him no choice by yanking his passport when/how they did. It's easier for the US intelligence services and their propaganda mouthpieces to dismiss Snowden's revelations to the low-info US public that way.
Russia is on the offensive on the internet...
When has Russia, or every other major power including the US for that matter, NOT been on the offensive on the internet?
...deeply implicated in Trump and Brexit elections.
Innuendo and conjecture unsupported by verifiable facts. Just as likely, if not more so, that it was British and US intelligence services attempting to interfere, if anyone was. They'd have more to gain (or lose), actually.
Strat
Progressivism (aka US 'Liberalism'): Ideas so good they need a police/surveillance-state to enforce.
And you're a CIA asset, it seems.
Look: Putin's an authoritarian asshole. The FSB is out of control, and Russian government is pushing their power agenda, among other at the Russian's cost (excepting the few ultra rich). We know that.
But what the fuck has this to do with the fact that our secret services are out of control, a state whithin the state, and that we have to do something about it, if we want to keep our democracies in working order -- more or less.
Why are you trying to derail the discussion? Let's focus on CIA's abuses here, shall we?
That may be true, but these releases are still clearly meant to be more of a distraction than an attempt at fixing a problem. Kind of trivializes that point of view.
It is true. The CIA is a grave and existential threat to everything that the US stands for. They will stop at nothing to distract, and ultimately consolidate power. This is not power for the people, nor by the people, it is lawless power over the people.
Yeah but the CIA does a few "nice" things for us. I mean, if not for them it would be much harder to buy illegal drugs! They pretty much owned the LSD manufacturing (a truly complex process requiring specialized knowledge of organic chemistry). In the 80s they deliberately saturated poor African American neighborhoods with crack cocaine (as though those people didn't have it bad enough as it was). They import most of the illegal opiates including heroin too. As a matter of fact Afghanistan became one of the major producers of opium and opium products, once our regular military got rid of that pesky Taliban that strictly forbade such things.
Drugs being illegal means high profit margins! And every time the police shut down one of their upstart competitors they control even more of a given market. Seriously this is how they fund a lot of their black-ops, this way there's no accountability, no high-ranking Congresspeople with security clearances can see the real total of how much they're spending or everything they spend it on. They see only the more legitimate-looking line items, if they even have access to that much. Why, the only ones who lose are the regular people.
All of the above is documented and not a difficult research topic. It just isn't something the mass media is going to spoon-feed to you. For more fun and excitement (outrage) read up on MK-ULTRA some time. How do you cause law-abiding family men to suddenly go assassinate an inconvenient pest or just flip out and go on shooting rampages, effectively turning them into remote-control killers, sleeper agents who don't know they are sleeper agents? With Soviet-style brainwashing, of course! If you ever saw The Manchurian Candidate, that's very much how it is done.
The CIA is a bigger threat to us than Russia is.
I think you're missing a key point here: The CIA threat *is* the Russia threat.
Consider the balance of evidence: Putin says the Clinton leaks did not come from Russia, Julian said specifically that he knew where the Clinton leaks came from and that it wasn't Russia, the US evidence that the Clinton leaks came from Russia can be summed up as "it's something they would do".
And now we find out that the CIA can leak whatever they want and make it *look* like it came from Russia.
Also, they are one of the government agencies who claims that the leaks came from Russia.
Now, I don't have any evidence that the CIA is leaking things and making it appear as if Russia did it, but this has to make us question whether we can trust *any* government pronouncement of where some leak or another came from.
All this "the Russians did it!" can now be completely ignored as an ad-hominem attempt to lead attention away from the actual data that was leaked.
We don't know *who* leaked it, because for all we know it was our own security agency.
(And need I point out that GCHQ, Russian intelligence, and a host of other players could probably do the same thing.)
They pretty much owned the LSD manufacturing (a truly complex process requiring specialized knowledge of organic chemistry).
Indeed. This isn't like crack or meth. LSD isn't something the local gang member is going to cook up in his kitchen. Even assuming said gang member can somehow obtain the laboratory glassware, chemical feedstocks, and reagents without raising a ton of suspicion and getting loads of attention from law enforcement (they routinely catch people making methamphetamine this way, and unlike LSD, the ingredients for meth generally have plausible legitimate/legal uses).
The CIA did give up on trying to use LSD to control people. As Terrence McKenna put it, LSD "dissolves the social machinery through which it moves". People who took it reported a feeling of oneness with other human beings and a desire for peaceful coexistence. That's really not what the CIA stands for.
Don't worry, those "heros" you worship so hard will do the right thing and put a stop to it. After all I keep hearing from you people online about your "freedom" and "freedom isn't free" and other patriotic garbage. I'm sure the Muircan people will stand up and say no more.
Right "Murica"?
The CIA is a bigger threat to us than Russia is.
Sure, right. Because Wikileaks has also given us equivalent info on Russian espionage.
Wait, they haven't? What's going on here?
=-+
Innuendo and conjecture unsupported by verifiable facts.
Politics does not operate by means of verifiable facts. I'm not sure if it has ever worked that way, except MAYBE in small-scale democracies like Athens where important offices were assigned by lottery. Even then ...
No, politics at the individual level is governed by two major things: what someone has been taught to believe and never seriously questioned, and what someone really wants to believe. To give an easy example, a lot of people want to believe that banning guns will work in the USA. If you point out, with references that Chicago has loads of shootings despite it being nearly impossible to legally own a gun there, or that mass shootings overwhelmingly happen in "gun free zones", or that states which enable conceal-carry experience lower violent crime rates, or that (and this is basic and easy to understand) criminals willing to commit mass murder aren't afraid of weapons charges, well they get upset.
They get angry. They get upset. They might try to shout you down (or mod you down), call you names, demonize you, misrepresent your position, etc. They don't do anything like saying "hey that's a good point, and I really need to explain that or else my position becomes untenable". Far from it. That's politics.
At most, verifiable facts might be (selectively, carefully framed, with no rebuttal permitted) brought up after a decision has already been made, in order to give an appearance of objectivity to what was going to happen anyway because that's what the monied interests want. This also has the side-effect of convincing supporters that they had a monopoly on truth all along, increasing their zeal, making them more useful, vocal, and so convinced that "their side" is "right" that listening to reasonable doubts seems like a waste of time.
https://search.wikileaks.org/?...
Mebbe there's no equivalent info on russia because they have less of a corrupt, lawlessness problem with their government than we have here in America.
Some people just don't understand that there's little excuse for not knowing almost anything you want these days...
When the king heard the words of the Book of the Law he tore his robes.2Kings22:11
The "guard dogs" were proprietary programs. Users of proprietary OSes (chiefly MacOS and Windows) were trusting one black box to "guard" against the ills of other black boxes (other likely proprietary programs running on the same system). This was always known to be foolish and this WikiLeaks release shows another indisputable example how this system is broken by design.
Software freedom (the freedom to run, share, inspect, and modify) is no guarantee against malware, life offers no such guarantees. As with other endeavors we can act to improve the odds in our favor for computers we own so we don't fall prey to the ills of proprietary software. We know that keeping secrets from computer users prevents them from controlling their own computers (this is the power of a proprietor and why proprietary software is released). When we have software freedom we increase the odds skilled software practitioners will identify malware, change the software to excise the malware, and release the improved software. One could even hire someone's skill and time to do this on their behalf.
But no such inspection, improvement, and release is legally permitted with proprietary software. Thus most computer users fall prey not only to the traps of proprietary software itself, but also to the traps built into the software, and the traps of the software ostensibly meant to guard from the ills of other malware. There's no good reason to have faith in one black box over another, trust that one black box will keep you safe while another is less trustworthy, or to continue choosing one master over another. It's easy, convenient, and untrustworthy to do as the proprietors want you to do. You can choose software freedom and invest in businesses working to provide you with practical hardware to make this an everyday reality that meets your computing needs. The Free Software Foundation's "Respects Your Freedom" list includes a high-powered X86 64-bit mainboard called the "Vikings D16 Mainboard" which looks particularly appealing for high-powered, high RAM ceiling systems. WikiLeaks continues to tell us all why we need hardware and software we can trust, software that respects our freedom—we see the consequences of not having trustworthy systems! We can choose to value software freedom for its own sake and we should. Investing in our own future in this way now portends big practical payoffs in the near and long-term future.
Digital Citizen
See subject: You're reduced to impersonating me w/ bogus posts (or downmodding my real posts) & can't prove me wrong technically so yes, I am winning.
APK
P.S.=> Thanks whoever you are impersonating me - you're tipping your hand you can't get the better of me... apk
What is wrong with Bennett Haselton? If a man decides to have a sex-change operation, that is his right.
Could the source code reverse a method? A good tech journalist could then look back over past events and uncloak past cold litter discoveries?
Domestic spying is now "Benign Information Gathering"
Bantam Dominique roosters crow a four-note song. Once you've heard it as "Happy BIRTHday" you can't NOT hear it that way
See my subject: I catch & log (in bookmarks) every time this impersonating me happens (makes me laugh & proves I'm right is why)
APK
P.S.=> Yes, I know - you're the SAME weak jackass doing the impersonating of me & yes, you can go FUCK yourself whimp - NOW, & I've said this before? The owner here whipslash/Logan Abbott, can ask me to leave in person or by email (apk4776239@hotmail.com) & yes, I'll leave (he'll have to KNEEL to me to do it, essentially martyring me, proving me right (I affect ads from his sponsors, & yes, that's how it really works (same thing's happening w/ InfoWars & Alex Jones - everyone KNOWS how bogus "the system" is))... apk
Why aren't people paying attention? Wikileaks summaries are always just propaganda, intentionally misleading to work up conspiracy theorists. It's clever though, it's based on half-truths, but it's generally nothing in the end. They look over their info for weeks to write their summary, then dump a huge amount of info that no one can reasonably read quickly, so the media just publishes the Wikileaks summary.
Just wait a few days, the truth will come out to be something extremely boring. Ah, but who follows up and finds out the truth? This propaganda is very effective.
I think the most shocking revelation from the Clinton email leaks was Podesta's risotto recipe.
And changing the code to make it look like the Russians were involved. Stirs up all their targets and doesn't burden us with that snore-fest of a drunkard Hillary Clinton.
Wow get out much do you?
...deeply implicated in Trump and Brexit elections.
Innuendo and conjecture unsupported by verifiable facts.
FACT: RT exists and has a pro-Russia - and therefore anti-Hillary - bias.
FACT: RT has a website where they sometimes post their biased US coverage which often ends up on facebook and twitter where innocent American eyes might see it.
FACT: Lying on the internet is completely equivalent to - if not actually worse than - hacking into government vote-counting machines or computers in swing states on election day and adding thousands of votes for Trump.
FACT: No American news organizations have any institutional biases of their own; agenda-driven, factually-deficient journalism is a complete unknown in the US; and Americans would never, ever, EVER meddle in anyone else's elections.
CONCLUSION: Russia hacked the election, Trump is Putin's puppet, and we must neutralize him immediately by any means necessary before he causes the annihilation of all life on earth.
QED
Irrelevant.
You're an idiot repeating a dumbfuck talking point, as truth does not need to be "balanced" to be true. That's whats happening.
See my subject: Why? CA falsely accused a ware of mine of being malware & had to remove it (reduced to zero threat in the end) on my passing all 21 of their then questions for removal (This was upon the advice of an attorney John Lowe of Hiscock & Barclay in a conversation with him regarding it on the telephone that I take their test for removal).
So, I did so, & I passed the 21 questions, & the "alleged threat" was downrated, BUT, should have been removed totally: It wasn't.
APK
P.S.=> CA's reputation IS questionable: CA accounting scandals the SEC got onto them for + they WERE found guilty... apk
I'm going to continue using the Host File Engine. Your software is well written, functional. The Host File Engine performs exactly as promised by mmell
his hosts program is actually pretty good by xenotransplant
I've never tried to belittle (APK's) work, I've flat out said it's good by BronsCon
take a look at the APK hosts file engine by SuperKendall
APK is kinda right. I've tried his hosts file generating software. It works by bmo
I like your host file system by Karmashock
I find your hosts file admirable by vel-ex-tech
his hosts tool is actually useful for those cases in which one does indeed want to locally block stuff outright while consuming minimum system resources by alexgieg
* Recommended & hosted by Malwarebytes' hpHosts!
APK
P.S.=> You can try put down my doing well but you never will manage the above & you KNOW it, UNIDENTIFIABLE "ne'er-do-well" troll loser... apk
I'm going to continue using the Host File Engine. Your software is well written, functional. The Host File Engine performs exactly as promised by mmell
his hosts program is actually pretty good by xenotransplant
I've never tried to belittle (APK's) work, I've flat out said it's good by BronsCon
take a look at the APK hosts file engine by SuperKendall
APK is kinda right. I've tried his hosts file generating software. It works by bmo
I like your host file system by Karmashock
I find your hosts file admirable by vel-ex-tech
his hosts tool is actually useful for those cases in which one does indeed want to locally block stuff outright while consuming minimum system resources by alexgieg
* Recommended & hosted by Malwarebytes' hpHosts!
APK
P.S.=> You can try put down my doing well but you'll never manage the above yourself & you KNOW it, UNIDENTIFIABLE "ne'er-do-well" troll loser... apk
Nah man gotta push that speed to keep the oil workers getting that black gold.
See my subject: Impersonating me lets me know you can't validly technically prove me wrong on hosts & my program!
* :)
(Get your head examined, whacko - you're not only LOSING but you're also LOSING IT!)
APK
P.S.=> I must've really, Really, REALLY "torn you apart" before that you're SO BUTTHURT you'd stoop to IMPERSONATING ME & failing (even others noticed it in replies to your sorry whacko butthurt ass)... apk