4 ms·

Apparently Dutch intel had pretty deep access into the Russian systems. Going so far as even screenshotting people's faces as they appear on their security came

Apparently Dutch intel had pretty deep access into the Russian systems. Going so far as even screenshotting people's faces as they appear on their security cameras. Read this article; an in depth analasys directly from source.: https://www.volkskrant.nl/media/dutch-agencies-provide-crucial-intel-about-russia-s-interference-in-us-elections~a4561913/ https://www.volkskrant.nl/media/dutch-agencies-provide-cruci... Seriously, everyone here will find this a fascinating read. It's almost like a thriller. From the article: Using so-called command and control servers, digital command centres, the Russians attempt to establish a connection to the malware in the Department, in order to request and transfer information. The Americans, having been told by the Dutch where the servers are, repeatedly and swiftly cut off access to these servers, followed each time by another attempt by the Russians. It goes back and forth like this for 24 hours. Afterwards, sources tell CNN that this was 'the worst hack attack ever' on the American government. The Department has to cut off access to the e-mail system for a whole weekend in order to upgrade the security. Luckily, the NSA was able to find out the means and tactics of their attackers, deputy director of the NSA Richard Ledgett states at a discussion forum in Aspen in March 2017. 'So we could see how they were changing their methods. That's very useful information.' On the authority of intelligence services, American media write that this was thanks to a 'western ally'. Eventually, the Americans manage to dispel the Russians from the Department, but not before Russian attackers use their access to send an e-mail to a person in the White House.

redlum1 9y ago
Here is the English version of that article: https://www.volkskrant.nl/media/dutch-agencies-provide-crucial-intel-about-russia-s-interference-in-us-elections~a4561913/ https://www.volkskrant.nl/media/dutch-agencies-provide-cruci...
- apexalpha 9y ago
  Didn't know there was an English translation. Would've been better to submit this link.
the-dude 9y ago
Almost sounds too good to be true.
Maarten88 9y ago
I'm actually impressed by our AIVD. Being Dutch, I always assumed our intelligence service were sheep in a world of wild animals; SAP consultants among elite hackers. This shows I was wrong, they seem to be actually competent and doing good work. Maybe I'll even rethink my opinion on the dragnet surveillance law that we will be voting on...
- rollulus 9y ago
  A few years ago I participated in the AIVD's cyber challenge. It involved reverse engineering an executable, spotting a flaw in the (custom) crypto algorithm which made it brute-forcable and then finally going to some train station where a final clue was hidden. After that, we, the people who solved the puzzle (5 or 6 iirc) were invited to the AIVD offices for a chat with the authors and a bit of PR and a tour through the museum (during which the big boss offered jobs (whispering) to a few of us). I was impressed by their skills, never expected that from government people really.
  - Doxin 9y ago
    Have you had a look at the AIVD christmas puzzle as well? You can still download them for previous years. It's about what you'd expect if you ask a group of cryptographers to come up with crossword-style puzzles. It's all very challenging.
- davedx 9y ago
  I checked their website this morning and they're hiring too. :)
- jacquesm 9y ago
  AIVD is very impressive. It is nowhere near as well funded as foreign intelligence services but they are at the top of their game. That should not change your opinion on the dragnet surveillance though, especially because that will simply increase the size of the haystack with the same number of needles and so will take attention away from things that urgently require it. Dragnet surveillance is a net negative when you are resource constrained. Another Dutch official entity that has my admiration is the anti-child porn division, they are quite capable and deal with some of the worst stuff the internet has to offer.
wepple 9y ago
To be honest, this is very standard tradecraft to security folks. If this kind of thing is interesting, I’d recommend a read of Kim Zetters “countdown to zero day” about stuxnet. A piece of malware potentially as old as 2005, but an order of magnitude more sophisticated than what’s being described with the DNC
bpicolo 9y ago
> For years, Painter was responsible for America's cyber policy. He resigned last August. "We'd never expected that the Russians would do this, attacking our vital infrastructure and undermining our democracy." Is he just lying in the worst attempt to cover ass, or is he actually just that bad at his job?

redlum1 9y ago

Here is the English version of that article: https://www.volkskrant.nl/media/dutch-agencies-provide-crucial-intel-about-russia-s-interference-in-us-elections~a4561913/ https://www.volkskrant.nl/media/dutch-agencies-provide-cruci...

apexalpha 9y ago
Didn't know there was an English translation. Would've been better to submit this link.

the-dude 9y ago

Almost sounds too good to be true.

Maarten88 9y ago

I'm actually impressed by our AIVD. Being Dutch, I always assumed our intelligence service were sheep in a world of wild animals; SAP consultants among elite hackers. This shows I was wrong, they seem to be actually competent and doing good work. Maybe I'll even rethink my opinion on the dragnet surveillance law that we will be voting on...

rollulus 9y ago
A few years ago I participated in the AIVD's cyber challenge. It involved reverse engineering an executable, spotting a flaw in the (custom) crypto algorithm which made it brute-forcable and then finally going to some train station where a final clue was hidden. After that, we, the people who solved the puzzle (5 or 6 iirc) were invited to the AIVD offices for a chat with the authors and a bit of PR and a tour through the museum (during which the big boss offered jobs (whispering) to a few of us). I was impressed by their skills, never expected that from government people really.
- Doxin 9y ago
  Have you had a look at the AIVD christmas puzzle as well? You can still download them for previous years. It's about what you'd expect if you ask a group of cryptographers to come up with crossword-style puzzles. It's all very challenging.
davedx 9y ago
I checked their website this morning and they're hiring too. :)
jacquesm 9y ago
AIVD is very impressive. It is nowhere near as well funded as foreign intelligence services but they are at the top of their game. That should not change your opinion on the dragnet surveillance though, especially because that will simply increase the size of the haystack with the same number of needles and so will take attention away from things that urgently require it. Dragnet surveillance is a net negative when you are resource constrained. Another Dutch official entity that has my admiration is the anti-child porn division, they are quite capable and deal with some of the worst stuff the internet has to offer.

wepple 9y ago

To be honest, this is very standard tradecraft to security folks. If this kind of thing is interesting, I’d recommend a read of Kim Zetters “countdown to zero day” about stuxnet. A piece of malware potentially as old as 2005, but an order of magnitude more sophisticated than what’s being described with the DNC

bpicolo 9y ago

> For years, Painter was responsible for America's cyber policy. He resigned last August. "We'd never expected that the Russians would do this, attacking our vital infrastructure and undermining our democracy." Is he just lying in the worst attempt to cover ass, or is he actually just that bad at his job?