Slashdot Mirror
Hacker Group Leaks 'NSA's Top Secret Arsenal of Digital Weapons' (vice.com)
Hacker group 'The Shadow Brokers', which last year allegedly released top-secret tools that the National Security Agency had used to break into the networks of foreign governments and other espionage targets, today said it is disappointed with President Donald Trump, and released more such alleged tools. From a report on Motherboard: On Saturday, The Shadow Brokers, a hacker or group of hackers that has previously dumped NSA hacking tools, released more alleged exploits. The group published a password for an encrypted cache of files they distributed last year. "Be considering this our form of protest," the group wrote in a rambling, politically loaded rant published on Medium. Back in August, The Shadow Brokers released a number of exploits stolen from the NSA. Many of these affected hardware firewalls, from companies such as Cisco and Juniper. At the time, the group also dumped another cache allegedly containing more hacking tools, and said they would release the corresponding password to the winner of a bitcoin auction. That fund-raising effort was ultimately unsuccessful, and The Shadow Brokers claimed they were calling the whole thing off in January. But now, anyone can unlock the auction data dump. (Motherboard confirmed that the password did indeed decrypt the original auction file). In a series of tweets, Edward Snowden said, "NSA just lost control of its Top Secret arsenal of digital weapons; hackers leaked it. 1) https://github.com/x0rz/EQGRP 2) For those who have never heard of the hacker group behind today's leak of NSA's cyberweapons, last year's story."
He adds, "quick review of the ShadowBrokers leak of Top Secret NSA tools reveals it's nowhere near the full library, but there's still so much here that NSA should be able to instantly identify where this set came from and how they lost it. If they can't, it's a scandal."
He adds, "quick review of the ShadowBrokers leak of Top Secret NSA tools reveals it's nowhere near the full library, but there's still so much here that NSA should be able to instantly identify where this set came from and how they lost it. If they can't, it's a scandal."
"Security researchers are still going through the files, but many of the exploits appear to be used for attacking older or little-used system."
-- TechCrunch
Maybe they should make an offer to Taylor Huddleston.
The Russians have won. They have made the world a cesspool of distrust, greed, fear and hate.
...Russian government hacking code? Are they more loyal workers? Better at preventing leaks? Just strikes me as very odd that all leaks are American.
why would nsa bother with hacking anything when they can have intel chips contain all of the snooping capabilities they ever need?
What can vendors of quality AV software and networks do?
Some sort of "other" secure computer on the final network out, apart from all the infected OS, junk hardware, junk big brand firewalls on random days?
How much is human collected? How much is just kept internally for later network collection after a human infected a system? Human placed? Network placed? Human collected or network collected. Human placed malware and later data is also collected by a human.
Should AV detection consider the idea that the owners and users with access are a real threat too? Not just something new up or down the network.
Physical access cant be stopped as the malware is inserted by an operative but AV could send a message back to its creators that something new and interesting was changed by the "owner". Start to phone home more details about every very secure system.
The infection cant be avoided thanks to lax physical access but changes can be gathered by AV.
Domestic spying is now "Benign Information Gathering"
Not entirely, Guciffer 2.0 has confirmed his contact was a whistleblower in the DNC, namely Seth Rich. This ties in with Craig Murray's assertations that the DNC leaks were an inside job and that he was the recipient for information from an individual in the DNC. Seth Rich's murder still remains unsolved.
Link: http://g-2.space/sr/index.html
This is rather fresh information, so I am not surprised you did not know. Unfortunately, I can only post as AC at this time.
Seems *possible* they might, at some point, have leaked warnings to infraguard type people who would patch certain holes quietly... They also released a secure version of linux... centos or ubuntu or something
I had a sucky sig.
True words. +1, would fork.
CLI paste? paste.pr0.tips!
Should be hanged for treason.
Intel ME - mother of all backdoors
There is no 'Deep State' that term was coined by Russian Trolls.
The NSA once allowed the Russians to conduct industrial espionage and planted information they wanted Russia to steal. 6 months later one of Russia's main oil pipelines blew up because the PLC and SCADA information they stole actually provided a RAT that the CIA used to sabotage key pumping stations.
Do you sincerly think that this was the sole unique time a US governmental agency tried to feed software with bugs planted in for the purpose to cause mayhem ?
And you are really persuaded that the USSR never ever had the slightest idea that they are receiving bogus software and never had an army of hacker for the sole purpose to review and clean such code ?
(Come on, you're speaking about the USSR - which has secret service at least as good as their western counter part, if not better. Do you *really* think that they could be bluffed so easily ? Were they still seaking to acquire red mercury until the end of the cold war ?)
(Said as the descendant of a hacker who did clean code of intentionally planted bugs, on the other side of the iron curtain. Not even Russia, but a small country. So even that small country was spending efforts to sanitized any piece of code received from the west, you can only guess what kind of efforts Russia was spending).
Plus, in the specific case of that explosion in Siberia the level of cause imputable to the CIA has been debunked.
Yes, CIA was attempting to feed bogus shit to the USSR in an attempt to cause mayhem (but as said above, this *was* probably a well known fact on the other side of the iron curtain).
But no, that peculiar explosion wasn't caused directly by CIA, but by the same cause that also caused other catastrophes like Tchernobyl : recklessness of the involved engineers.
(Pipeline is leaking ? Hey, why should we go investigate ? Just pump up the pressure to keep the gaz flowing ! Easy fix ! Also easy cause for a massive explosion)
"Sufficiently advanced satire is indistinguishable from reality." - [Tips: 1DrYakQDKCQ6y52z6QbnkxHXAocMZJE61o ]
Appropriate. 'Crackin' is cocaine free-based. And we all know that cocaine is 'the big lie'!
Perhaps this explains Trump et al...
Self-importance and self-indulgence is the root of ALL evil.
Delaying an executable is hacking? OK: now tell me what is it that I have that your antivirus cannot yet find. I cannot record music in any laptop since 2009 after one laptop BSoD crashed and was later robbed.
They created SELinux and a set of military cryptography standards that differs from the civilian ones, strongly suggesting that the civilian ones are weak. That's all I can think of. They've certainly done a lot to damage the security of the Internet.
"When information is power, privacy is freedom" - Jah-Wren Ryel