Slashdot Mirror
Group Linked To NSA Spy Leaks Threatens Sale of New Tech Secrets (reuters.com)
Hacker group Shadow Brokers, which has taken credit for leaking NSA cyber spying tools -- including ones used in the WannaCry global ransomware attack -- has said it plans to sell code that can be used to hack into the world's most used computers, software and phones. From a report on Reuters: Using trademark garbled English, the Shadow Brokers group said in an online statement that, from June, it will begin releasing software to anyone willing to pay for access to some of the tech world's biggest commercial secrets. In the blog post, the group said it was setting up a "monthly data dump" and that it could offer tools to break into web browsers, network routers, phone handsets, plus newer exploits for Windows 10 and data stolen from central banks. It said it was set to sell access to previously undisclosed vulnerabilities, known as zero-days, that could be used to attack Microsoft's latest software system, Windows 10. The post did not identify other products by name. It also threatened to dump data from banks using the SWIFT international money transfer network and from Russian, Chinese, Iranian or North Korean nuclear and missile programs, without providing further details.
It also threatened to dump data from banks using the SWIFT international money transfer network and from Russian, Chinese, Iranian or North Korean nuclear and missile programs, without providing further details.
Are they attempting to ensure that there's no safe harbor for them anywhere in the whole world? Seems like if one pisses off the USA, Russia, and China, that there's no country in the entire world that wouldn't give up these people to someone if their identities are uncovered.
This makes me wonder about the legitimacy of the claims, and if they're really from a group with this kind of power or if they're just someone trolling for teh lulz.
Do not look into laser with remaining eye.
to hunt them down and hose em down with machinegun fire
Politics is Treachery, Religion is Brainwashing
It's only a matter of time before some hair brained bureaucrat suggests blocking bitcoin transactions as a means to prevent criminals from funding themselves.
Considering their last attempt to sell such data was somewhat lacking in buyers, I'm curious why they don't just ring up WikiLeaks, get a semi-decent payday and be done with it.
Unless, of course, it's the intel agencies themselves playing the part of TSB seeing who they can reel in on their fishing expedition.
Everybody, and I mean everybody, knows that most of our computer systems totally and irredeemably suck to an overwhelming, extreme degree. They aren't made to not suck! There is near-unanimous consensus that the computer systems in most businesses, governments and other organizations are very insecure, from the smallest to the largest. The only reason they aren't penetrated routinely is that nobody cares enough to bother -- no, wait we know that's true. The only reason you aren't hearing about them being penetrated all the time, is that it goes undetected.
We know we are doing a totally awful job and this is not controversial. Nobody who doesn't work in a sales, says "our systems are secure."
And we aren't doing anything about it. Microsoft isn't even close to being out of business.
Maybe the whole thing getting more in-your-face is a good thing, not a bad thing. It's not like the degree of vulnerability has changed; it's just that the perps are more audacious and better publicized. Your bank's and employer's and government's systems were just as terrible a year ago. But now you're hearing about it all the time.
Good! I also think it's good that the president tweets. He should be a focus of attention.
Everybody ought to be coming up with ways to keep these disasters from happening again. And having it rubbed in your face every day, might be the only way we'll do what we need to. We otherwise aren't responsible enough to do the obvious things that need to be done. We are children, and until we clean up our rooms, it's all broccoli and no cookies for us.
Keep the horror show going.
Last time they pulled that stunt I think the bid went up to 3 or even 5 bitcoins.
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
You can be in favor of the death penalty for the US citizens who decided it was a good idea to facilitate these leaks and oppose the NSA's practices at the same time?
Any US citizen who was involved in this deserves to be regarded as the Internet version of the Rosenbergs if this really plays out.
Releasing exploits and sensitive data that harms the USA is understandable as the US government is just a pussy (and yes I live in the US). Piss on Russia or China and they may find there cohorts dead with their genitals in their mouths or polonium in their veins. Do you really think the Russian equivalent of Snowden would still be alive today????
Conservative, mod down for violating
The shadow brokers are hero's. They are showing how poor u.s. security is, and how useless and illegitimate the fbi, nsa, and cia are.
The things shadow brokers revealed were used on u.s. citizens by their government in secret.
> Using trademark garbled English,
I wonder if they translate and reverse their releases to help defeat style-analysis on what they write.
Your hair look like poop, Bob! - Wanker.
The NSA had the choice to either weaponize these exploits, or to help inoculate against them and thereby protect the US and its allies. They chose to weaponize them, which has been a direct assistance to enemies of the United States and its allies around the world, e.g, the recent UK NHS problems. That's not even getting into being a direct breach of the Constitution.
Is that not treason? Why are we not seeing those people brought to trial?
that is the one that screws them. Even bank notes tend to be all be uniquely numbered. The ability to trace monetary transactions is huge.
Is there any safe harbour when it comes to money? The banking system really represents One World Order, and wasn't WWII really all about this,
At the end of WWII as countries around the globe were being liberated or invaded, their monetary systems were being taken, fast forward to today and they are still taken. They managed to get a lot of continental Europe to accept one currency the Euro.
Bitcoin is heavily traced, that's how it works on the chain, laundering it just makes the tracing harder, as soon as someone tries to purchase something that will start to tie them to a physical being.
Perhaps they are thinking this way:
1. Mine Bitcoin
2. Launch Ransomware that demands Bitcoin / Sell ransomware that demands Bitcoin
3. Sell Bitcoin for profit due to higher demand.
So, they are looking to make on the sale of bitcoin, but not so much on the ransomed bitcoin. That would be a lot harder to trace and prove. They may not even sell, just looking to increase the profile of bitcoin for longer term gains.
See subject: THIS is your proof as to exactly HOW & WHY https://theintercept.com/2017/05/11/nyu-accidentally-exposed-military-code-breaking-computer-project-to-entire-internet/ via "Windsor Green"... there's some SECURITY INFO for you.
* Plus, the stupid LIBS used for https? Always break backward compatibility EVERY SINGLE F'ING TIME so when old model's found to be breakable (ala TLS & SSL)? They don't keep the same return types (common way to bust API's by shithead rookies) so that legacy apps can't use them right in THEIR code!
APK
P.S.=> It's TOTAL horseshit so WE AGREE here & mere "lip service" security-theater that is EASILY broken (especially by the NSA)... apk
this is just stupid armchair army-boy fantasy
In reality, Trump is gonna do jack shit about cyber-anything. He's too busy with the Washington Post up his ass nitpicking every move 24/7
I was just watching Pearl Harbor - not a great film, but it brought back to me that the greatest threat to these people is the sheer force of American willpower. The Japanese military machine tugged at the tail of a sleeping tiger, and they lived to regret it.
Well, America, it is time to hit back at those that seek to disrupt our way of life through these attacks. We are seeing just the beginning of this new warfare, but we need to hark back to the spirit that was awoken in us in 1941, and we need to hit them back 100 times over for every strike on us. We owe it to the Free World.
Stop spamming every comments section with this crap. There is probably another, better suited online platform to air out your creative brainfarts.
sudo rm -r -f --no-preserve-root /
It was more about logistics and dropping nuclear bombs than will power.
Like the attitude though, not just an eye for eye, an eye for a hundred eyes. Yeah, that pretty much ensures a blind human race for many generations.
"Oops, sorry, we thought that American Airlines plane full of passengers was the military aircraft used to ship in the US terrorists...our bad"
Trump is NOT really smart.
And of course such an action could put a target on the back of every american overseas
Brutality and killing has only ever resulted in MORE people being brutalised and killed, is never actually a solution.
yawn
If you're so scary smart, lets see Trump's taxes.
I figured they are going to piss off someone with some real money that's going to put a price on their heads. I wish I had the money to do it.
youusa people gonna die?
So I read the document provided and I can spare the rest of the community the work: The (insert three letter agency of choice here) have a supercomputer in the making or already ready that's a few 100 times faster than anything they had before and that can easily break 1024bit key encryption.
So switch to 4096bit and SHA256.
That's basically the gist of the document and the solution to this the-sky-is-falling problem. They have not broken https, they just threw more computing power against it. Which is pretty pointless when you have an asymmetric problem like encryption. By doubling my workload to encrypt, I can increase your workload to break by the tune of 10^10. All you have to do when you know your enemy is increasing its brute force computing power is to increase the key size, and unless something spectacular changes in the game, it more than nullifies his attempt.
Until recently I actually thought that you knew a thing or two about security...
We used to have a Bill of Rights. Now, with the rights gone, all we have left is the bill.
See subject: Enough so CIS Tool (highly esteemed) took fixes from me & I've got actual proof of it in programs for it alsoAPK Hosts File Engine 9.0++ SR-7 32/64-bit https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/ )
So - do you?
* Let's see it - let's see if you can "backup your bluster".
ANYONE CAN "TALK" boy... very FEW of us actually DO.
APK
P.S.=> You don't "get it" do you? IF it's NOT 'broken', then WHY DO LEGACY APPS USING SSL/TLS BREAK whenever one of them is pierced & they reissue new libs for it?? They change the return type (size most likely as you note) in the functions/procs wreaking havoc (that can be gotten around in THEIR OWN CODE you know - or maybe you don't know - being a LIMITED IN SCOPE mere MENIAL that you are apparently (security work = a joke buddy - guys like me make code fools like YOU merely USE, user))... apk
"The only place in the company that doesn't have a budget constraint is that area."
"Brutality and killing has only ever resulted in MORE people being brutalized and killed, is never actually a solution."
Spoken like a true, brainwashed, ignorant liberal... Apparently you failed history class. Here are a few highlights of the exact opposite: WW2 ended "new Socialist" Hitler's bid for world domination and extermination of around 8 million people of "lesser races", Korea stopped the brutalization and murder of millions of south Koreans (see what happened when the US failed in Vietnam and the millions of people brutalized and 7.5 million murdered there after we left http://rebirthofreason.com/Art... ), Desert Storm (the people of Kuwait were saved from brutalization and murder), even the crusades for all their faults, stopped the bloody, violent, imperialist expansion of Islam http://www.americanthinker.com... .
Trumps intelligence was underestimated by a lot of people, including you, apparently. How smart he actually is will be determined by his record.
Considering your own apparent lack of basic history, I suggest you may better use your time reading up on history so that in the future you can make a more reasonable argument.
If you disagree, please post your argument. (-1, Overrated) isn't your personal censorship tool for views you don't like