Slashdot Mirror
Legal Hack Back Lets You Go After Attackers In Your Network (csoonline.com)
itwbennett writes: Security startup Cymmetria has a new offering for customers: "legal hack back." The hack back tools have been added to the company's MazeHunter deception technology and will enable "tracking down the attack servers and wiping data originally stolen from their servers, probing the attack infrastructure for weaknesses to exploit, disabling the systems controlling malware, looking for information about the attackers to use in attribution, and launching distributed denial-of-service attacks to slow down criminal operations," but security teams are restricted to taking these actions on systems within their organizations, writes Fahmida Rashid in CSO Online. "Legal hack back via MazeHunter is more than traditional incident response because the organization can run a payload on the infected machine to engage with the attacker even before the forensics part of the investigation is complete," said Gadi Evron, founder and CEO of Cymmetria.
...And assuming it cannot be sometimes very sensitive, why do you need to hack back your own machine ? Pull the Lan cord, re-image it, at worst copy essential document, et voila.
C. Sagan : A demon haunted world:
http://www.amazon.com/gp/product/0345409469/
visit randi.org
Black ICE
Better still, trick them into 'hacking back' at the NSA. Laughs all around.
John McAfee 'It was like that time I hired that Bangkok prostitute; to do my taxes, while I fucked my accountant'
Legal hack back via MazeHunter is more than traditional incident response because the organization can run a payload on the infected machine to engage with the attacker even before the forensics part of the investigation is complete
Well, that might be enough for some primitive folks, but for folks expecting American Defense Quality, I want a system that will attack the hackers before they even think about hacking.
Yeah, sure, you haven't done anything yet, and you are still innocent, but the NSA/CIA/FBI AI models say you WILL be guilty sooner or later, so we might as well take you out right now.
Schroedinger's Brexit: The UK is both in and out of the EU at the same time!
I run a hosting company which houses tens of thousands of servers and one of my customer machines is compromised. This malware hacks another company who has this HackBack(TM) service which then hacks back into my customer machine and begins to probe my network for weakness. My IDS detects this which launches its own HackBack(TM) service into this other company. Who sees me attacking and launches another HackBack(TM) attack.
2002 called, they want their lazy worms back
... we want it to be? ... the CEO saw it in a movie? ... the check is in the mail?
Inquiring minds want to know.
http://hoaxes.org/weblog/comme...
#DeleteFacebook
Legal Hack Back Lets You Pursue Attackers In Your Network
and starts sending attacks outbound because of a desktop computer getting infected, some end user will then be allowed to then hack back at the DOD? Interesting.
But if its my network who is gonna press charges.
Just sayin
that these lamers actually have customers at all.
In a fictional movie script setting.
Will that ip always point to a 8/16, early 32 bit desktop computer at home in real time?
In terms of a user's home desktop 8/16/32 bit computer with, dial up modem, big HD storage, a set ip for hours and dial up isp ip range.
The interesting person uses their home ISP account to get into to a computer network and slowly move files back to their own home computer over hours.
Logs show a clear moment of files from the network to a home computer ISP account.
The skill level for a home computer to send a few commands to third party fast computer and fast network?
A fast network and computer system would then be used to archive all the files. No files would be connected to the home computer until later.
The third party network has the storage, CPU, fast compressing applications so all the home computer finally has to download is a few select files after reading, sorting, decrypting if needed, compressing.
Was it a real home computer or the security services staging server... The fictional movie got lots more fun...
Domestic spying is now "Benign Information Gathering"
Because this is HACKING the HACKERS with HACKS. That's why.
You have now read the entire substance of the thing. You are up-to-date.
Indeed. The words "false", "flag" & "lawsuit" spring immediately to mind.
Confucius say, "Find worm in apple - bad. Find half a worm - worse."
What if they get smart (which they will) and immediately take the data and store it off site.
1. You may get into trouble if the 'attacker' is actually not at fault.
2. This is a GREAT new attack that the attackers will soon learn to take over, and in which the tools will attack your own networks. ROFLMAO.
See subject: Your host here vowed he "put me out" https://slashdot.org/comments.pl?sid=8727633&cid=51475843/ but he hasn't managed it - why?
I blow by scripts (it's THAT simple) & change my origin point (but I am NOT harming anyone - shit, FAR from it, protecting others via APK Hosts File Engine 9.0++ SR-7 32/64-bit https://www.google.com/search?... [google.com] & of course, he FEARS that - he lives off ads).
* I am NEVER in the same place... & I am NOT hurting anyone (if anything I HELP others, freely)!
PROOF -> https://it.slashdot.org/comments.pl?sid=11269397&cid=55427015/ the irresistable force & immovable object @ once = me.
APK
P.S.=> Try HIT a "moving target" & even IF you could "Zero In" on me? Good luck getting thru an armored TANK of a system I have going here, lol - no joke... apk
InfoSec ideas from Ghost in the Shell.
See subject & https://it.slashdot.org/comments.pl?sid=11269397&cid=55427359/
* :)
APK
P.S.=> "... 'JET! With the wind in your hair of a 1000 places, climb in back & let's go for a ride in the SkYYYyyy..." via APK Hosts File Engine 9.0++ SR-7 32/64-bit https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/ ... apk
See subject & APK Hosts File Engine 9.0++ SR-7 32/64-bit https://www.google.com/search?hl=en&source=hp&biw=&bih=&q=%22APK+Hosts+File+Engine%22+and+%22start64%22&btnG=Google+Search&gbv=1/
Ads/script/malware rob speed/security/privacy/bandwidth.
Hosts add speed (via hardcodes/adblocks), security (vs. bad sites/malware/poisoned dns), reliability (vs. dns down), & anonymity (vs. dns requestlogs/trackers).
Less power/cpu/ram + IO use vs. DNS/routers/addons/antivirus + less security bugs/complexity & faster vs. addons/routers/remote dns!
Avoids DNSChangers in routers/IP settings & dns redirect (99.999% of ISP DNS != patched vs. it) + DNS tracking & lighten DNS load & resolve faster from local RAM!
* Via what u NATIVELY have in a FASTER kernelmode IP stack!
APK
P.S. - Safe https://www.virustotal.com/en/file/e01211ca36aa02e923f20adee0a3c4f5d5187dc65bdf1c997b3da3c2b0745425/analysis/1433430542/ (self checking code vs. infection of program built-in it)
Don't get all religious on us APK. We like you just the way you were.
... WORM (Write Once, Read Manytimes).
And a question: How does the targetted entity discern between a hack-back and a downright hack ? Are we going to use something like the "evil" bit, but than in reverse -- like a "righteous indignation" -bit perhaps ?
Mind you, fighting a legal hack-back may be considered unlawfull ...
Personally this hack-back idea sounds like a run for wasting huge ammounts of money, with the hack vs anti-hack companies (the few already present and the numorous ones which will pop up within shortly) laughing all the way to the bank.
Hmm, as a new variant of the lawyer profession I guess: Nobody likes them, they bleed you dry, but you can't live without them ...
1st, I knew attempts @ passing bills like this into law were coming. Cryptominers & this? No thanks. Moving target changing address keeps me safer along w/ cutting script + cookie bs & using hosts files for the rest.
* Hack back my ass - they've been hacking US for years in malwares in ads & scripts, lol!
APK
P.S.=> Folks like myself aren't hacking back - we're literally defending ourselves thus... apk
Dunning-kruger at work here.
And this is illegal is nigh all places to hack outside. The story is about hacking and gathering information INSIDE your own network.
C. Sagan : A demon haunted world:
http://www.amazon.com/gp/product/0345409469/
visit randi.org
Why don't you learn to write intelligible English?
Some people consider a port scan "hacking". But there is no exact definition of a port scan, some companies have reported port scans that only involved one port. In one example, that was the FTP port.
I'm pretty sure the same fascist sysadmin that decided that one connection attempt on the FTP port is a hacking attempt would be among the first to get this hack back system.
Now imagine that the poor guy who mistyped the FTP server IP address is on some corporate network (who else would use that old FTP crap nowadays), behind another hack back system.
From one mis-typed IP address to two companies having their data destroyed in a matter of minutes.
Basically a smaller version of what everybody was worrying about back when the US and USSR was practicing mutually assured destruction. One exercise mistaken for a real attack or one satellite or passenger plane mistaken for a missile - or even sunlight: https://en.wikipedia.org/wiki/Stanislav_Petrov
Whipslash also did scripts vs. my posting direct links to my hosts program! If that's not 'hacking me' what is? All I, a long-time regular user here LONG BEFORE he bought /., does to get that?
Post when hosts are effective vs. various threats etc. (they are a LOT) & about my work creating hosts files from reputable sources for their data & get accused of 'spamming'? WTF!
* Yet /. PIMPS google or linux stuff along w/ OpenSORES wares ALL DAY LONG (but "that's ok", right?).
APK
P.S.=> Lastly: See subject & what you spewed unidentifiable worm? You project that about yourself, not I... apk
instead of companies hiring folks who actually know what they're doing, they'll tell someone to run this. And the next thing you know, the person who doesn't actually know what's going on will "fix" it so it includes anyone attacking them, and then someone's mother or grandmother, whose machine was compromised by malware that they had no clue about, will suddenly be toast, all their emails, and writings and pictures of their kids gone. And they won't have a clue what happened.