3 ms·
I agree that this is possible, but I too would like to see them explain precisely how they narrowed it down to a single workstation in a building full of workst
by avn2109 9y ago
I agree that this is possible, but I too would like to see them explain precisely how they narrowed it down to a single workstation in a building full of workstations, and then how they mapped a workstation to a human.
A comment downthread suggests that he logged into a real-name service from the same IP without a VPN. This too is possible, but I find it at least somewhat surprising that an intelligence service doesn't prohibit logging in to real-name services from State computers.
For example, some civilian employers prohibit this, even when they provably have nothing to hide.
- ramphastidae 9y agoAre you really expecting the NSA to publish 0-days they are actively exploiting for intelligence gathering operations? :)
- dragonwriter 9y agoOr, even worse, expecting other involved intel agencies to reveal HUMINT sources that were used to narrow the identification once technical means got them something past the VPN exit?
- gwern 9y agoThere's a lot of possibilities. Remember how the Dutch hacked Cozy Bear's security cameras? One could do a lot with info like that, and it seems unlikely that those were the only vulnerable cameras, since that's not usually how IoT ('the S stands for Secure') stuff works.