full-disclosure - Re: Pro US government hackerganda

lists.openwall.net		lists / announce owl-users owl-dev john-users john-dev passwdqc-users yescrypt popa3d-users / oss-security kernel-hardening musl sabotage tlsify passwords / crypt-dev xvendor / Bugtraq Full-Disclosure linux-kernel linux-netdev linux-ext4 linux-hardening linux-cve-announce PHC
Open Source and information security mailing list archives

Hash Suite: Windows password security audit tool. GUI, reports in PDF.

[<prev] [next>] [<thread-prev] [thread-next>] [day] [month] [year] [list]

Date: Fri, 14 Sep 2007 01:41:40 +0000 (UTC)
From: jf <jf@...glingpointers.net>
To: "J. Oquendo" <sil@...iltrated.net>
Cc: full-disclosure <full-disclosure@...ts.grok.org.uk>
Subject: Re: Pro US government hackerganda

> 1) 10 - 20 terabytes? Undetected? What a marvelous feat. What kind of
> connection did they have to do this without being detected since they
> bbviously they went undetected for at minimum, 10 terabytes of data
> according to this quote. Who was watching logs? Were they asleep at the
> wheel too a-la 9/11 pseudointelligence agencies. Maybe China borrowed
> Peter Lothberg's mothers backbone to do this
> (http://slashdot.org/articles/07/07/12/1236231.shtml)

You're suffering from a logical falicy, I worked in that arena (albeit it
a different agency) in incident response for quite some time, while I find
the number somewhat high, it's not unreasonable, if you broke into $lots
of workstations and servers on a regular basis and downloaded everything
that ended in extensions like .pdf, .eml, .doc, et cetera, it wouldn't
take that long to get up to very high numbers. This is exactly what has
occurred and makes your assertion that of ignorance and presumption.

> 2) Notice how the remainder of the quote was left off? Here it is in
> full: ÿÿChina has downloaded 10 to 20 terabytes of data from the NIPRNet
> (DODÿÿs Non-Classified IP Router Network),ÿÿ  Funny NIPRnet is unimportant
> information in fact a majority of it can be found via
> www.google.com/unclesam

You again fall victim to foolish ignorance and presumption, just because a
red network isn't connected, doesn't mean a yellow network isn't. I can't
speak for DoD in that sense, I just know how it works in other agencies.
Furthermore, with ratings like SBU/et cetera, and lots of it, you can gain
valueable intelligence by combining all of it.

> Outside of this play on words in all honesty if the US government gets
> its information stolen then they deserve it. What the hell am I paying
> uber taxes for outside of the War in Vietnam2k.

Morality is no place for politics, and the insistence of it being there
has been a fatal flaw in US strategy since WWI, if we had been more
insistent on the balance of power and such at the end of WWI there may not
have been a WWII, and if we had been more strategic in the ending stages
of WWII, there very well may not have been a cold war as we know it,
either way though, it's not my desire to get into a political debate.

everything else you said either is irrelevent or steps outside the realms
of sane discussion.

_______________________________________________
Full-Disclosure - We believe in it.
Charter: http://lists.grok.org.uk/full-disclosure-charter.html
Hosted and sponsored by Secunia - http://secunia.com/