5 ms·

The results are that someone got into Podesta's gmail for some few days. The pros use methods that allow them to keep long term access and which keep you from

by Natsu 10y ago

The results are that someone got into Podesta's gmail for some few days. The pros use methods that allow them to keep long term access and which keep you from knowing that you have been hacked to begin with. Look at the NSA's TAO catalog for examples of how the pros work. You can wipe your servers and still be hacked. I don't seriously believe that the NSA is out there sending phishing emails. They're too busy using ECHELON to hunt down sysadmins who are using their social media accounts, then taking over from there.

ganoushoreilly 10y ago
The right tool for the right job.
deleted 10y ago
[deleted]
facetube 10y ago
No, the results are that the United States is deep shit, having just elected a serial liar and sexual offender with a little nudge from Russia and Comey. The damage Trump can do is potentially infinite. It's incalculable. If you're Putin, there's never been a bigger payoff for such little effort.
rahrahrah 10y ago
The results of getting into "Podesta's gmail for some days" is you take the elections. But no, you think it's smarter getting into some nobody sysadmin's social media accounts. Got it.
- Natsu 10y ago
  The first statement is not in evidence. It's amazing how many people believe both that nothing was in there, but also that it swung the election. As opposed to, say, the connections between Hillary's top aide, Huma, and the infamous Anthony Wiener coming to light. Or do you know him better as "Carlos Danger"? Did the Russians also make her avoid any campaign stops in the (not so) "blue firewall"? Or what about when Michael Moore put out a speech that could be chopped in half and turned into a Trump ad? Or what about when they insisted that Hillary's health was perfect, then everyone saw this? https://www.youtube.com/watch?v=9zYthqiLs_I https://www.youtube.com/watch?v=9zYthqiLs_I You can say the polls only took a dive in the last week, but if you really look at them, most polls were oversampled in the Democrat's favor the whole time. There were legitimate reasons they did this in expectations of Obama-like results, but in the end the results speak for themselves. But yes, the sysadmins hold the keys to the kingdom. Why get one lousy email when you can get the email server via the sysadmin? And every other server. If you just want one person, there are better ways than noisy phishing attacks. Everyone knows that Podesta's email was phished, not many people realize he also lost his cell phone in a DC cab...
nl 10y ago
The NSA spearphished North Korea http://securityaffairs.co/wordpress/32592/intelligence/nsa-compromised-systems-north-korea.html http://securityaffairs.co/wordpress/32592/intelligence/nsa-c...
- Natsu 10y ago
  That was an email with a malicious attachment that appeared legit which did nothing obvious to compromise the system. Podesta got an email saying that "someone has your password" and pointing at the IP Address: 134.249.139.239, allegedly in the Ukraine[1]. I can see your point, but one attack is a lot quieter than the other. The usual goal is that they don't know they've been compromised so you retain access over a long period of time, rather than triggering all the alarms. [1] https://wikileaks.org/podesta-emails/emailid/34899 https://wikileaks.org/podesta-emails/emailid/34899
  - nl 10y ago
    Sure, there different levels of phishing, depending on the sophistication of the opposition. The GCHQ attacks on Belgacom[1] had a phishing component, but I suspect most people here would have fallen for them too. [1] https://theintercept.com/2014/12/13/belgacom-hack-gchq-inside-story/ https://theintercept.com/2014/12/13/belgacom-hack-gchq-insid...
    - Natsu 10y ago
      I'm having trouble finding the phishing there? There's a mention of QUANTUM INSERT replacing pages with malicious copies, but that appears to be a man-in-the-middle attack of some kind unless I'm completely misreading it. It also took them quite long to figure out what was going on.
      - nl 10y ago
        Yes, you are probably right. I mis-remembered it as a spearphishing attack using a fake LinkedIn login. Technically I guess it kind of is a fake LinkedIn login, but I think I'd be stretching the definition a fair bit...

by Natsu 10y ago

ganoushoreilly 10y ago

The right tool for the right job.

deleted 10y ago

[deleted]

facetube 10y ago

No, the results are that the United States is deep shit, having just elected a serial liar and sexual offender with a little nudge from Russia and Comey. The damage Trump can do is potentially infinite. It's incalculable. If you're Putin, there's never been a bigger payoff for such little effort.

rahrahrah 10y ago

The results of getting into "Podesta's gmail for some days" is you take the elections. But no, you think it's smarter getting into some nobody sysadmin's social media accounts. Got it.

Natsu 10y ago
The first statement is not in evidence. It's amazing how many people believe both that nothing was in there, but also that it swung the election. As opposed to, say, the connections between Hillary's top aide, Huma, and the infamous Anthony Wiener coming to light. Or do you know him better as "Carlos Danger"? Did the Russians also make her avoid any campaign stops in the (not so) "blue firewall"? Or what about when Michael Moore put out a speech that could be chopped in half and turned into a Trump ad? Or what about when they insisted that Hillary's health was perfect, then everyone saw this? https://www.youtube.com/watch?v=9zYthqiLs_I https://www.youtube.com/watch?v=9zYthqiLs_I You can say the polls only took a dive in the last week, but if you really look at them, most polls were oversampled in the Democrat's favor the whole time. There were legitimate reasons they did this in expectations of Obama-like results, but in the end the results speak for themselves. But yes, the sysadmins hold the keys to the kingdom. Why get one lousy email when you can get the email server via the sysadmin? And every other server. If you just want one person, there are better ways than noisy phishing attacks. Everyone knows that Podesta's email was phished, not many people realize he also lost his cell phone in a DC cab...

nl 10y ago

The NSA spearphished North Korea http://securityaffairs.co/wordpress/32592/intelligence/nsa-compromised-systems-north-korea.html http://securityaffairs.co/wordpress/32592/intelligence/nsa-c...

Natsu 10y ago
That was an email with a malicious attachment that appeared legit which did nothing obvious to compromise the system. Podesta got an email saying that "someone has your password" and pointing at the IP Address: 134.249.139.239, allegedly in the Ukraine[1]. I can see your point, but one attack is a lot quieter than the other. The usual goal is that they don't know they've been compromised so you retain access over a long period of time, rather than triggering all the alarms. [1] https://wikileaks.org/podesta-emails/emailid/34899 https://wikileaks.org/podesta-emails/emailid/34899
- nl 10y ago
  Sure, there different levels of phishing, depending on the sophistication of the opposition. The GCHQ attacks on Belgacom[1] had a phishing component, but I suspect most people here would have fallen for them too. [1] https://theintercept.com/2014/12/13/belgacom-hack-gchq-inside-story/ https://theintercept.com/2014/12/13/belgacom-hack-gchq-insid...
  - Natsu 10y ago
    I'm having trouble finding the phishing there? There's a mention of QUANTUM INSERT replacing pages with malicious copies, but that appears to be a man-in-the-middle attack of some kind unless I'm completely misreading it. It also took them quite long to figure out what was going on.
    - nl 10y ago
      Yes, you are probably right. I mis-remembered it as a spearphishing attack using a fake LinkedIn login. Technically I guess it kind of is a fake LinkedIn login, but I think I'd be stretching the definition a fair bit...