Slashdot Mirror
Hacker Group Leaks 'NSA's Top Secret Arsenal of Digital Weapons' (vice.com)
Hacker group 'The Shadow Brokers', which last year allegedly released top-secret tools that the National Security Agency had used to break into the networks of foreign governments and other espionage targets, today said it is disappointed with President Donald Trump, and released more such alleged tools. From a report on Motherboard: On Saturday, The Shadow Brokers, a hacker or group of hackers that has previously dumped NSA hacking tools, released more alleged exploits. The group published a password for an encrypted cache of files they distributed last year. "Be considering this our form of protest," the group wrote in a rambling, politically loaded rant published on Medium. Back in August, The Shadow Brokers released a number of exploits stolen from the NSA. Many of these affected hardware firewalls, from companies such as Cisco and Juniper. At the time, the group also dumped another cache allegedly containing more hacking tools, and said they would release the corresponding password to the winner of a bitcoin auction. That fund-raising effort was ultimately unsuccessful, and The Shadow Brokers claimed they were calling the whole thing off in January. But now, anyone can unlock the auction data dump. (Motherboard confirmed that the password did indeed decrypt the original auction file). In a series of tweets, Edward Snowden said, "NSA just lost control of its Top Secret arsenal of digital weapons; hackers leaked it. 1) https://github.com/x0rz/EQGRP 2) For those who have never heard of the hacker group behind today's leak of NSA's cyberweapons, last year's story."
He adds, "quick review of the ShadowBrokers leak of Top Secret NSA tools reveals it's nowhere near the full library, but there's still so much here that NSA should be able to instantly identify where this set came from and how they lost it. If they can't, it's a scandal."
He adds, "quick review of the ShadowBrokers leak of Top Secret NSA tools reveals it's nowhere near the full library, but there's still so much here that NSA should be able to instantly identify where this set came from and how they lost it. If they can't, it's a scandal."
They'll be sooorry.
Maybe Snowden is pissed because this stuff didn't sell and Uncle Sam didn't offer any hush money.
Omg all the funding that these guys get from tax money and they are basically a bunch of simple script kiddies lol /. can take on these college loosers, when dunk and one hand tied behind their backs. Now I really don't feel safe here in the USA, these are the people looking out for our safety we are all f*ed!!!
The more I find the more these governments seem like a big fucking joke, I think the readers of
"Security researchers are still going through the files, but many of the exploits appear to be used for attacking older or little-used system."
-- TechCrunch
Isn't it already assumed that if you buy closed source, you can be hacked by the government? Hell, it'd be fairly easy for a CPU to have a hidden instruction set that allows privilege escalation, although it's less likely for something like that to be implemented as a single discovery would fuck the US IT industry.
And that for every piece of code that is released into the wild - intentionally or unintentionally - all you win is a false sense of security as there are already way more complex exploits / backdoors still under wraps.
I'm sure this will have a Mass Effect...
NSA/"Deep State" leaks its expired weapons to assist in the attempt to overblow the 'outrage' that 'Trump's own supporters' have against this apparent policy flip-flop.
How is this a protest in any way? What does one have to do with the other, and would the relation, if it exists, be understandable to the average person?
Why is the media assisting this organization's nonsensical narrative that this is a protest?
Too long; didn't read: BULLSHIT!
Maybe they should make an offer to Taylor Huddleston.
The Russians have won. They have made the world a cesspool of distrust, greed, fear and hate.
154 forks now! Keep forking, forking morons!
Or was it "Release the Kraken"? Brain not work. Too much crackin'.
The Russians have won. They have made the world a cesspool of distrust, greed, fear and hate.
...Russian government hacking code? Are they more loyal workers? Better at preventing leaks? Just strikes me as very odd that all leaks are American.
any 'legal' backdoor in crypto systems would be a terrible idea...
They're all binary executable files: WTF is getting forked, since there's no source code posted of any of this stuff?
The social idiots of github use the Fork button like a Like button. Never mind the fact that github has a Star button which works exactly like a Like button. The idiots push Fork anyway even if they have absolutely no intention of doing any work on a fork. Because github is full of stupid social idiots.
KNOCK KNOCK.....
and your right of course , its all bulshit old shit but sometimes old shit does have a use
not saying how i know
If you look at the political ramblings they posted, then you can see what they really are interested in:
- DO support the ideologies and policies of Steve Bannon, Anti-Globalism, Anti-Socialism, Nationalism, Isolationism
- Don’t care if your popular or nice, get er done, Obama’s fail, thinking he could create compromise. No compromise.
Anons need not reply. Questions end with a question mark.
why would nsa bother with hacking anything when they can have intel chips contain all of the snooping capabilities they ever need?
What can vendors of quality AV software and networks do?
Some sort of "other" secure computer on the final network out, apart from all the infected OS, junk hardware, junk big brand firewalls on random days?
How much is human collected? How much is just kept internally for later network collection after a human infected a system? Human placed? Network placed? Human collected or network collected. Human placed malware and later data is also collected by a human.
Should AV detection consider the idea that the owners and users with access are a real threat too? Not just something new up or down the network.
Physical access cant be stopped as the malware is inserted by an operative but AV could send a message back to its creators that something new and interesting was changed by the "owner". Start to phone home more details about every very secure system.
The infection cant be avoided thanks to lax physical access but changes can be gathered by AV.
Domestic spying is now "Benign Information Gathering"
Actual question. Has NSA actually done anything to secure the internet? Doesn't seem so.
They're Russian state hackers, clearly known, clearly identified. This is the same group of documents and actors related to DNC hack last year, and the actors there are all tied to Russia. Not just the hackers, but the intermediaries, ambassadors, and the group on Trump's side, Stone, Flynn, Cohen, Manasfort who interacted with them (e.g. emails connect Stone to the hacker, money trail links Manafort and Jared Kushner to Putin)*.
Which means that Putin has (had) all these zero day exploits, and you have to assess what damage COULD previously have been done with these exploits. All the passwords stolen, security protocols corrupted and so on. All those backdoors they put in, are effectively in the hands of Putin's hacker group.
So you need to think of this hack, not just "how WILL it affect security", but rather backdate it, and consider any secondary system compromised.
THAT MAY INCLUDE ALL WINDOWS PCs. Potentially that Windows fake auto update software might be on critical PCs courtesy of Putin's boys.
* Yeh yeh, there is no provable direct connection to Trump (well apart from his public spirited defense of Putin, political lies about the source of the hackers, even after he'd been shown the evidence, his financial connection to Alfa bank and Putin controlled VneshEconomBank....) but you can't specifically prove at the moment that Trump HIMSELF asked Russia for help hacking the Democrats, apart from that time he did it in front of the cameras.
True words. +1, would fork.
CLI paste? paste.pr0.tips!
You mean drunk. Also, it is spelled loser, with a single o. You should not post when you are drunk.
Check the dumped files, there are a lot of exploits for FreeBSD, Linux, Solaris*. I don't think CentOS and/or Ubuntu were spared from these exploits.
*I knew it, those people who are pushing for Linux and FreeBSD just desperately wanted to access your machines.
Because they do it for money and don't care about the product. What they do for fun on the weekend in their spare time is where the real tools are.
The NSA once allowed the Russians to conduct industrial espionage and planted information they wanted Russia to steal. 6 months later one of Russia's main oil pipelines blew up because the PLC and SCADA information they stole actually provided a RAT that the CIA used to sabotage key pumping stations.
Do you sincerly think that this was the sole unique time a US governmental agency tried to feed software with bugs planted in for the purpose to cause mayhem ?
And you are really persuaded that the USSR never ever had the slightest idea that they are receiving bogus software and never had an army of hacker for the sole purpose to review and clean such code ?
(Come on, you're speaking about the USSR - which has secret service at least as good as their western counter part, if not better. Do you *really* think that they could be bluffed so easily ? Were they still seaking to acquire red mercury until the end of the cold war ?)
(Said as the descendant of a hacker who did clean code of intentionally planted bugs, on the other side of the iron curtain. Not even Russia, but a small country. So even that small country was spending efforts to sanitized any piece of code received from the west, you can only guess what kind of efforts Russia was spending).
Plus, in the specific case of that explosion in Siberia the level of cause imputable to the CIA has been debunked.
Yes, CIA was attempting to feed bogus shit to the USSR in an attempt to cause mayhem (but as said above, this *was* probably a well known fact on the other side of the iron curtain).
But no, that peculiar explosion wasn't caused directly by CIA, but by the same cause that also caused other catastrophes like Tchernobyl : recklessness of the involved engineers.
(Pipeline is leaking ? Hey, why should we go investigate ? Just pump up the pressure to keep the gaz flowing ! Easy fix ! Also easy cause for a massive explosion)
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
Appropriate. 'Crackin' is cocaine free-based. And we all know that cocaine is 'the big lie'!
Perhaps this explains Trump et al...
Self-importance and self-indulgence is the root of ALL evil.
Delaying an executable is hacking? OK: now tell me what is it that I have that your antivirus cannot yet find. I cannot record music in any laptop since 2009 after one laptop BSoD crashed and was later robbed.
(hug)