4 ms·

This Twitter analysis on the FAQ is worth following: https://twitter.com/pwnallthethings/status/748482142968156160 https://twitter.com/pwnallthethings/status/74

This Twitter analysis on the FAQ is worth following: https://twitter.com/pwnallthethings/status/748482142968156160 https://twitter.com/pwnallthethings/status/74848214296815616...

Kristine1975 10y ago
That's mostly conjecture. No facts, just observations that might be true or not.
rdtsc 10y ago
All guessing of course, but disagree with the insinuation it points to Russians still. - Rambo is not just a lame attempt at sprinkling in an American cultural reference. It is exactly what an Easter European boy in his 30s would have been looking up to back in the day. - Other than just Russian security services can find translators. English speaking / translating ability is not a rare, expert-only domain. Could have asked a friend. I guess at the end of the day, nobody likes to be hacked by a random loner guy. It feels more validating to be targeted by KGB's successor. As it explains away the security failures -- "Well these people torture and kill, should be glad we only got hacked by them, could have been a lot worse ...".
ryanlol 10y ago
This guy is saying some really ridiculous things For example: https://twitter.com/pwnallthethings/status/748524348818989057 https://twitter.com/pwnallthethings/status/74852434881898905... No, not every fixed security issue gets a CVE. Not even 1% of them. This is why while auditing a target you'll try to get a copy of the software version they run, and any newer versions to identify patched bugs. https://twitter.com/pwnallthethings/status/748524954845581312 https://twitter.com/pwnallthethings/status/74852495484558131... There's really no inconsistency here, "non-public" generally means "not very well audited" Why is it that .ru intelligence is even pegged as a likely candidate here? Literally nothing pointing towards them, you don't have to be an intelligence agency to pop some DNC boxes.

This Twitter analysis on the FAQ is worth following: https://twitter.com/pwnallthethings/status/748482142968156160 https://twitter.com/pwnallthethings/status/74848214296815616...

Kristine1975 10y ago

That's mostly conjecture. No facts, just observations that might be true or not.

rdtsc 10y ago

All guessing of course, but disagree with the insinuation it points to Russians still. - Rambo is not just a lame attempt at sprinkling in an American cultural reference. It is exactly what an Easter European boy in his 30s would have been looking up to back in the day. - Other than just Russian security services can find translators. English speaking / translating ability is not a rare, expert-only domain. Could have asked a friend. I guess at the end of the day, nobody likes to be hacked by a random loner guy. It feels more validating to be targeted by KGB's successor. As it explains away the security failures -- "Well these people torture and kill, should be glad we only got hacked by them, could have been a lot worse ...".

ryanlol 10y ago

This guy is saying some really ridiculous things For example: https://twitter.com/pwnallthethings/status/748524348818989057 https://twitter.com/pwnallthethings/status/74852434881898905... No, not every fixed security issue gets a CVE. Not even 1% of them. This is why while auditing a target you'll try to get a copy of the software version they run, and any newer versions to identify patched bugs. https://twitter.com/pwnallthethings/status/748524954845581312 https://twitter.com/pwnallthethings/status/74852495484558131... There's really no inconsistency here, "non-public" generally means "not very well audited" Why is it that .ru intelligence is even pegged as a likely candidate here? Literally nothing pointing towards them, you don't have to be an intelligence agency to pop some DNC boxes.