6 ms·

Can you provide a source please? Edit: I was downvoted for kindly asking for a source?

by mowenz 9y ago

ryanlol 9y ago
https://www.crowdstrike.com/blog/bears-midst-intrusion-democratic-national-committee/ https://www.crowdstrike.com/blog/bears-midst-intrusion-democ... At this point it's essentially impossible to make a credible claim that Russia did not compromise the DNC network. At best you could try to argue that they weren't the only ones to do so, but that feels like grasping at straws.
- mowenz 9y ago
  I have seen this and also the criticisms of it. I am not understanding what exactly is the definitive proof here, can you help me understand? To be fair, the criticisms were that they were hired by the DNC after the DNC dragged their feet on giving the FBI access. For some reason they gave this firm the right of way. The original report has also since been revised and had portions retracted... So it wasn't a gold standard of evidence to begin with. To be fair there are many respectable people (who are strongly anti-Trump) questioning this[1]. 1-https://theintercept.com/2016/12/14/heres-the-public-evidence-russia-hacked-the-dnc-its-not-enough/ https://theintercept.com/2016/12/14/heres-the-public-evidenc...
  - ryanlol 9y ago
    >I am not understanding what exactly is the definitive proof here, can you help me understand? There's no definitive proof, there's evidence. This is as definitive as it gets, we've got a report by some of the best people in the field that's also been corroborated by the US DHS. I'm sure this is far better evidence than anything that exists to the contrary, people get convicted on shakier grounds every day. It is not disputable that DNC servers were infected by Russian government malware.
    - mowenz 9y ago
      Why is it definitive? Are you able to help me understand that? Was the initial report they retracted more or less definitive? Remember the Iraq War was also started with lies corroborated by the US Gvt and the courts did not pose an obstacle to it... I dont care if men eith epilletes tell me so. I want to see the proof.
      - ryanlol 9y ago
        >Was the initial report they retracted more or less definitive? At this point you're just trolling. >The company removed language that said Ukraine's artillery lost 80 percent of the Soviet-era D-30 howitzers, which used aiming software that purportedly was hacked. Instead, the revised report cites figures of 15 to 20 percent losses in combat operations, attributing the figures to IISS.
        mowenz 9y ago
        Hey, hey now, I am kindly asking a reasonable question, and I and others are raising reasonable concerns and now you started to slinging mud. Do you actually have any technical facts to substantiate your "as definitive as it gets" statement? Because slinging mud makes you look unreasonable in my eyes and I'd like to know what facts stand behind your argument.
    - micheljones 9y ago
      > It is not disputable that DNC servers were infected by Russian government malware. Because the signatures of 'Russian government malware' were found? Same signatures we recently found CIA can (and does) easily fake?
      - openasocket 9y ago
        Did we? Care to cite a source? I'd be very surprised if anyone can fake IOCs and signatures well enough to fool an analyst.
    - shard972 9y ago
  - trowway21 9y ago
    The FBI has still not been given access to the server... Comey just testified to that fact last week. They were stonewalled. They went to crowdstrike instead, eventually, who retracted the the only actual evidence which supported their claims just recently. Crowdstrike retracted upon the internet discovering the relevant dns records were most likely spoofed. Dare you to not refuse to read through this.... https://weaponizedautism.wordpress.com/2017/04/09/trump-dns-logs-fabricated/ https://weaponizedautism.wordpress.com/2017/04/09/trump-dns-...
  - micheljones 9y ago
    Crowdstrike has been wrong before and has some sketchy connections that are summed up nicely in the article here: http://archive.is/CogZx http://archive.is/CogZx The founder of Crowdstrike, Dimitri Alperovitch is a Senior fellow at the Atlantic Council. The Atlantic Council is funded by a guy named Victor Pinchuk who is a Ukrainian (and dislikes Russia), and he donated $25 million to the Clinton Foundation. (story found here: http://archive.is/DUtMN http://archive.is/DUtMN ). Furthermore (read the first link) the DHS report about the DNC hack given after a FOIA request amounted to TWO PAGES with information anyone could have googled from the internet. If you just look at the wikipedia for the Atlantic Council ( https://en.wikipedia.org/wiki/Atlantic_Council https://en.wikipedia.org/wiki/Atlantic_Council ) it states several members have left the organization to work for the Obama Administration including Susan Rice. Susan Rice as you all know illegally unmasked members of the Trump campaign to hinder his presidency. Finally I believe this article is very important: http://archive.is/DUtMN http://archive.is/DUtMN it shows the cozy relationship Victor Pinchuk had with the Clinton state department.
  - openasocket 9y ago
    That criticism is really lacking. The biggest evidence is that it was an X-agent variant that used a known APT 28 IP address as its C2. The author's argument about APT groups wanting to switch IP addresses around as quickly as possible doesn't make sense. If you're using an IP-address-based C2 you want to hold onto it for as long as possible, because the second you give it up you lose the ability to control all your malware. Reusing infrastructure is very common, and is not at all a sign "sloppiness" as the author claims. APT groups generally don't care if you can correlate their different attacks, because it doesn't actually affect them. And having a complete separation of all your infrastructure for every attack is time consuming and has a serious burden of effort that limits the pace at which you can attack, all for very little gain. Infrastructure gets reused all the damn time, as does malware, and even certificates. Source: I'm a member of the security research community.
- trowway21 9y ago
  You realize that crowdstrike retracted the report? They were called out by some kids on the internet and got some media coverage, Feinstein commented the next morning, regretfully admitting crowdstrike, the only evidence they had, had to retract, here is the 'hard evidence.' https://weaponizedautism.wordpress.com/2017/04/09/trump-dns-logs-fabricated/ https://weaponizedautism.wordpress.com/2017/04/09/trump-dns-...
  - openasocket 9y ago
    You're talking about a different report, about the presence of X-agent in Ukrainian artillery. And it wasn't a full retraction, it was just a correction, which did not undermine the key points. https://www.crowdstrike.com/wp-content/brochures/FancyBearTracksUkrainianArtillery.pdf https://www.crowdstrike.com/wp-content/brochures/FancyBearTr... The correction had to do with mis-representing the number of troops killed, it did not dispute that an X-agent variant was found on the artillery.
- micheljones 9y ago
  http://www.zerohedge.com/news/2017-03-28/something-stinks-here-crowdstrike-revises-retracts-parts-explosive-russian-hacking-r http://www.zerohedge.com/news/2017-03-28/something-stinks-he...
- shard972 9y ago
  I think ill wait till a government agency can corroborate this, considering the current political climate I don't think you can trust a the conclusions of a hired company.
- letmein 9y ago
  lol Crowdstrike is a total joke. Everything they do is to cover up the horrible truth. DNC, Podesta and Hillary's got totally fucking pwnd by NSA's stolen virus arsenal. They were the Shadowbrokers very first target. The whole "muh Russia" narrative is a big fat lie to cover for NSA's ass blowing in the wind. Because what would happen if folks discovered it was NSA's direct fault for the election getting rigged on both sides? NSA has gone so far in their extremism that now they can't let anyone blame them for their actual fuck ups that endanger all of us. The weirdest thing about Guccifer isn't what he did, nor how he did it, nor why, but that he's is still, today, tweeting in public, mocking NSA, which I know they know, and yet they do nothing. I won't tell you who. If you're smart, you'll find him. He loves puzzles, and he's the best I've ever seen at it. Think of it as a meritocracy. If you're worthy, you'll figure it out on your own and join the club. The real story behind Guccifer is why NSA covered up for Guccifer. I don't know if Guccifer the Shadowbroker is ex-NSA or even active NSA, but whoever he is, there is no way to separate what he did from what NSA did. Think I'm larping? Then why do I have screenshots of Podesta's Gmail password reset 3 months before it happened, and the Clinton Foundation's Exchange admin panel and the CMS for their backup vendor? Everything Crowdstrike has said is laughably wrong. They're so shitty at cyber they deserve to get popped like Sony. Maybe it already happened, who knows? ;) Crowdstrike won't exist in less than 2 years. You'll see.

Can you provide a source please? Edit: I was downvoted for kindly asking for a source?

by mowenz 9y ago

Can you provide a source please? Edit: I was downvoted for kindly asking for a source?

https://www.crowdstrike.com/blog/bears-midst-intrusion-democratic-national-committee/ https://www.crowdstrike.com/blog/bears-midst-intrusion-democ... At this point it's essentially impossible to make a credible claim that Russia did not compromise the DNC network. At best you could try to argue that they weren't the only ones to do so, but that feels like grasping at straws.

mowenz 9y ago
I have seen this and also the criticisms of it. I am not understanding what exactly is the definitive proof here, can you help me understand? To be fair, the criticisms were that they were hired by the DNC after the DNC dragged their feet on giving the FBI access. For some reason they gave this firm the right of way. The original report has also since been revised and had portions retracted... So it wasn't a gold standard of evidence to begin with. To be fair there are many respectable people (who are strongly anti-Trump) questioning this[1]. 1-https://theintercept.com/2016/12/14/heres-the-public-evidence-russia-hacked-the-dnc-its-not-enough/ https://theintercept.com/2016/12/14/heres-the-public-evidenc...
- ryanlol 9y ago
  >I am not understanding what exactly is the definitive proof here, can you help me understand? There's no definitive proof, there's evidence. This is as definitive as it gets, we've got a report by some of the best people in the field that's also been corroborated by the US DHS. I'm sure this is far better evidence than anything that exists to the contrary, people get convicted on shakier grounds every day. It is not disputable that DNC servers were infected by Russian government malware.
  - mowenz 9y ago
    Why is it definitive? Are you able to help me understand that? Was the initial report they retracted more or less definitive? Remember the Iraq War was also started with lies corroborated by the US Gvt and the courts did not pose an obstacle to it... I dont care if men eith epilletes tell me so. I want to see the proof.
    - ryanlol 9y ago
      >Was the initial report they retracted more or less definitive? At this point you're just trolling. >The company removed language that said Ukraine's artillery lost 80 percent of the Soviet-era D-30 howitzers, which used aiming software that purportedly was hacked. Instead, the revised report cites figures of 15 to 20 percent losses in combat operations, attributing the figures to IISS.
      - mowenz 9y ago
        Hey, hey now, I am kindly asking a reasonable question, and I and others are raising reasonable concerns and now you started to slinging mud. Do you actually have any technical facts to substantiate your "as definitive as it gets" statement? Because slinging mud makes you look unreasonable in my eyes and I'd like to know what facts stand behind your argument.
  - micheljones 9y ago
    > It is not disputable that DNC servers were infected by Russian government malware. Because the signatures of 'Russian government malware' were found? Same signatures we recently found CIA can (and does) easily fake?
    - openasocket 9y ago
      Did we? Care to cite a source? I'd be very surprised if anyone can fake IOCs and signatures well enough to fool an analyst.
  - shard972 9y ago
- trowway21 9y ago
  The FBI has still not been given access to the server... Comey just testified to that fact last week. They were stonewalled. They went to crowdstrike instead, eventually, who retracted the the only actual evidence which supported their claims just recently. Crowdstrike retracted upon the internet discovering the relevant dns records were most likely spoofed. Dare you to not refuse to read through this.... https://weaponizedautism.wordpress.com/2017/04/09/trump-dns-logs-fabricated/ https://weaponizedautism.wordpress.com/2017/04/09/trump-dns-...
- micheljones 9y ago
  Crowdstrike has been wrong before and has some sketchy connections that are summed up nicely in the article here: http://archive.is/CogZx http://archive.is/CogZx The founder of Crowdstrike, Dimitri Alperovitch is a Senior fellow at the Atlantic Council. The Atlantic Council is funded by a guy named Victor Pinchuk who is a Ukrainian (and dislikes Russia), and he donated $25 million to the Clinton Foundation. (story found here: http://archive.is/DUtMN http://archive.is/DUtMN ). Furthermore (read the first link) the DHS report about the DNC hack given after a FOIA request amounted to TWO PAGES with information anyone could have googled from the internet. If you just look at the wikipedia for the Atlantic Council ( https://en.wikipedia.org/wiki/Atlantic_Council https://en.wikipedia.org/wiki/Atlantic_Council ) it states several members have left the organization to work for the Obama Administration including Susan Rice. Susan Rice as you all know illegally unmasked members of the Trump campaign to hinder his presidency. Finally I believe this article is very important: http://archive.is/DUtMN http://archive.is/DUtMN it shows the cozy relationship Victor Pinchuk had with the Clinton state department.
- openasocket 9y ago
  That criticism is really lacking. The biggest evidence is that it was an X-agent variant that used a known APT 28 IP address as its C2. The author's argument about APT groups wanting to switch IP addresses around as quickly as possible doesn't make sense. If you're using an IP-address-based C2 you want to hold onto it for as long as possible, because the second you give it up you lose the ability to control all your malware. Reusing infrastructure is very common, and is not at all a sign "sloppiness" as the author claims. APT groups generally don't care if you can correlate their different attacks, because it doesn't actually affect them. And having a complete separation of all your infrastructure for every attack is time consuming and has a serious burden of effort that limits the pace at which you can attack, all for very little gain. Infrastructure gets reused all the damn time, as does malware, and even certificates. Source: I'm a member of the security research community.
trowway21 9y ago
You realize that crowdstrike retracted the report? They were called out by some kids on the internet and got some media coverage, Feinstein commented the next morning, regretfully admitting crowdstrike, the only evidence they had, had to retract, here is the 'hard evidence.' https://weaponizedautism.wordpress.com/2017/04/09/trump-dns-logs-fabricated/ https://weaponizedautism.wordpress.com/2017/04/09/trump-dns-...
- openasocket 9y ago
  You're talking about a different report, about the presence of X-agent in Ukrainian artillery. And it wasn't a full retraction, it was just a correction, which did not undermine the key points. https://www.crowdstrike.com/wp-content/brochures/FancyBearTracksUkrainianArtillery.pdf https://www.crowdstrike.com/wp-content/brochures/FancyBearTr... The correction had to do with mis-representing the number of troops killed, it did not dispute that an X-agent variant was found on the artillery.
micheljones 9y ago
http://www.zerohedge.com/news/2017-03-28/something-stinks-here-crowdstrike-revises-retracts-parts-explosive-russian-hacking-r http://www.zerohedge.com/news/2017-03-28/something-stinks-he...
shard972 9y ago
I think ill wait till a government agency can corroborate this, considering the current political climate I don't think you can trust a the conclusions of a hired company.
letmein 9y ago
lol Crowdstrike is a total joke. Everything they do is to cover up the horrible truth. DNC, Podesta and Hillary's got totally fucking pwnd by NSA's stolen virus arsenal. They were the Shadowbrokers very first target. The whole "muh Russia" narrative is a big fat lie to cover for NSA's ass blowing in the wind. Because what would happen if folks discovered it was NSA's direct fault for the election getting rigged on both sides? NSA has gone so far in their extremism that now they can't let anyone blame them for their actual fuck ups that endanger all of us. The weirdest thing about Guccifer isn't what he did, nor how he did it, nor why, but that he's is still, today, tweeting in public, mocking NSA, which I know they know, and yet they do nothing. I won't tell you who. If you're smart, you'll find him. He loves puzzles, and he's the best I've ever seen at it. Think of it as a meritocracy. If you're worthy, you'll figure it out on your own and join the club. The real story behind Guccifer is why NSA covered up for Guccifer. I don't know if Guccifer the Shadowbroker is ex-NSA or even active NSA, but whoever he is, there is no way to separate what he did from what NSA did. Think I'm larping? Then why do I have screenshots of Podesta's Gmail password reset 3 months before it happened, and the Clinton Foundation's Exchange admin panel and the CMS for their backup vendor? Everything Crowdstrike has said is laughably wrong. They're so shitty at cyber they deserve to get popped like Sony. Maybe it already happened, who knows? ;) Crowdstrike won't exist in less than 2 years. You'll see.