14 ms·
Hackers ransack Citrix, make off with 6TB+ of emails, biz docs, secrets
- salimmadjd 8y agoThe evidence that points to Iran comes from a company named, Resecurity. But there are some odd stuff about this company. 1 - their CEO has no real linkedIn history [1] 2 - they revenue and employment went off the chart just in 2 quarters [2] 3 - very unclear how they came to this assessment. Especially now that US government is looking for excuses (real or fabricated) to make a case for war with Iran, I look at these evidence with some skepticism. Am I being over-cynical here? 1 - https://www.linkedin.com/in/charles-yoo-365201165/ https://www.linkedin.com/in/charles-yoo-365201165/ 2 - https://www.zoominfo.com/c/resecurity-inc/353866377 https://www.zoominfo.com/c/resecurity-inc/353866377 edit - formating.
- Nasrudith 8y agoGiven an absence of even other vague data like 'exfiltrated data IP addresses were registered as Iranian' (not conclusive proof in itself given that the end devices could have been compromised) I'd say there is reason to be skeptical until they can provide more evidence.
- deleted 8y ago[deleted]
- keyme 8y agoI don't have a LinkedIn page, or any other social media for this matter. Does that make me a non-trusrworthy person now? This is horrible. (I don't disagree with your other points).
- appleiigs 8y agoAccording to 2 companies I interviewed with: Yes. I was pissed because if they didn't trust my resume, why even interview me and waste my time.
- kevin_thibedeau 8y agoYou dodged two bullets. Consider yourself lucky.
- SamReidHughes 8y agoYes, basically. For example, I've used LinkedIn to double check whether I should trust that an online watch buyer is a real person.
- rakoo 8y agoAre you the CEO of a company that works in computer security, where fame is probably more important than in other fields?
- deathhand 8y agoFame does not equal trust. While there may not be any security through obsecurity it is a barrier. As for being a trusted CEO at a certain point its about who you know and who knows you. Do you think the NSA employees all have social media profiles?
- raesene9 8y agoFame doesn't equal trust, but if someone with no public background starts claiming to have been in the NSA/MI6/FSB/whatever, why would you believe them?
- deleted 8y ago[deleted]
- deleted 8y ago[deleted]
- rakoo 8y agoFame doesn't equal trust, but trust over time does create recognition (perhaps fame is a bit too strong). My claim is that if no one can vouch for you, how can I trust you?
- komali2 8y agoTo be fair, conceptually the concept of a CEO of a security company with no social media presence at all is not surprising, speaking from my experience with people in this field.
- z3t4 8y agoThis is often overlooked. If your kid wants to work in security it will be hard to get a job if his/her info and history can be found on social media.
- totallybro 8y agowe live in a society.
- peter_retief 8y agoI also dont have a LinkedIn page, quite amusing that people find that a problem
- draugadrotten 8y agoTLDR; in some jobs, you can't have social media accounts. I have some contact with cybersec in Europe and it is very common that cybersec professionals in gov and mil positions do not have any social media accounts under their own name, and certainly not linkedin. Social media makes you too much of a target and reveals too much about your org. When promoted to a public-facing position the person then suddenly "appears" from nowhere and the media profile has as little information as possible. Real professionals use those accounts only from designated computers, and if you are high ranking enough (head of...) in fact never use them at all, but rather have someone else using them for you. All in the name of keeping your own actions and locations away from the curious.
- hopler 8y agoDoes the entire org appear out of nowhere? No. MI5, CIA, Stasi, etc have been quite public about their existence.
- laurentl 8y agoKnowing the organization exists and knowing that someone specifically works the organization are two different things. In fact, this is the defining characteristic of any secret organization (governmental or otherwise: CIA, Stasi, KKK (in the 50s)...) that wants to project power: we exist, we are everywhere but you don’t know who we are.
- DyslexicAtheist 8y agothe point is that there is a LinkedIn page. But all employees are directors or VP's - not a single engineer that works at Rsecurity. Unlikely that they are a front to a US operation. But very likely that it's a start-up that leverages the currently toxic climate in order to get themselves in the news. Making half baked attribution claims is a perfect way to do so. One might even say that not doing so would be leaving money on the table.
- plicense 8y ago+1, I also recently deleted my LinkedIn profile. Taking LinkedIn profile as a sign of authenticity is indeed horrible.
- mcintyre1994 8y agoSlightly less cynical explanation, could it be a parallel construction type thing? Something like: The FBI (or whoever) have espionage on whichever groups and heard data from Citrix being discussed, but they don’t want to reveal that espionage so they reveal it through Resecurity.
- DyslexicAtheist 8y agoI wouldn't rule it out completely but both Hanlon's and Occam's razor would point against it. More likely that it's just another cybersec company that has found a way to newsjack itself into a position of fame via premature attribution.
- TTPrograms 8y agoWtf is this "zoominfo" site that, upon clicking "Read More", tries to drive-by download an exe onto my computer? What is this, 2002?
- Rychard 8y agoWow, I read the EULA-thing for that executable. > I Agree to the Terms of Service and Privacy Policy I understand that I will receive a subscription to Zoominfo Community Edition at no charge in exchange for downloading and installing the ZoomInfo which, among other features involves sharing my business contacts as well as headers and signature blocks from emails that I receive. It's effectively malware though at least they display it up-front, which is more than can be said for most.
- technion 8y agoI've looked over their website and I'm confused about what they actually do. They are "trusted by leading Fortune 500 corporations" apparently (with logos for Microsoft and Amazon), but the entire "Interested in our solutions" section is a sign up form. What am I signing up for? It's unusual for a company to barely try to promote their products.
- stormbeard 8y agoThey’re most famous for their hypervisor and virtualized desktop software.
- crispyambulance 8y agoYes, it makes you wonder, how does a small company pop into existence straight into class-A office space in downtown LA, and within the span of what? two years? claims to have done business with a dozen or so heavyweight companies. And what is their web presence? Vague, inscrutable C-suite-speak about security, and one blockbuster claim in the Citrix break. At some point, Occam's razor will favor that this company is having its strings pulled by some larger entity that doesn't want to be revealed.
- tyingq 8y agoThe address "555 West 5th St, Los Angeles, California" has a WeWork space in it.
- 2arrs2ells 8y agoAgreed that something seems off. Generous interpretation - they're brand new (first Tweet 2/13/2019, first blog 2/19/2019). Would love to know if those logos & awards are legit (quick search of the awards makes some look like pay to win).
- technion 8y agoThe FAQ page: How Can I Improve my Chances of Receiving an Award? One answer is: Sponsor the Cybersecurity Excellence Awards There's a voting scheme, but the FAQ does state: The popular vote will only be considered if two or more nomination are tied for an award
- TaylorAlexander 8y agoIt’s absolutely reasonable to be critical of any accusations that “Iran did it” or any other nation that the US considers enemies. Didn’t our security ministers claim North Korea was behind the Sony hacks when Obama was in office? We were never given any proof, so it’s impossible to verify... When you consider the way we lie on international affairs, all statements our government makes must be considered suspect. This is not unique to the US by the way, so treat your own state similarly.
- silpol 8y agothere is one small nuisance here - if we start to treat all governments equally skeptic, we should also "fry live" all large corporations too.
- cbluth 8y agoHow did we come to this imbalance?
- mmjaa 8y agoState secrecy being used as an excuse for violence. A truly free people keep no secrets.
- killjoywashere 8y agoTruly free people are free to keep all the secrets they want.
- edoo 8y agoGood catch, that is called a 3 letter agency front.
- _pdp_ 8y agoThere is almost no information about this company. I did a passive recon and this is what I've got: https://recon.secapps.com/f/EMh9 https://recon.secapps.com/f/EMh9
- deathhand 8y agoThat's a really cool service. Thanks for sharing.
- raverbashing 8y agoYou can hide your linkedin history from people that are not connected to you (or your whole profile). It's a privacy option.
- eikxyz 8y ago1 Resecurity's wordpress site has directory listing turned on. Most content on the website seems to have been uploaded in february. 2 The services that does the press releases looks suspicious. 3 The second service also looks suspicious 4 Golden Bridge Silver and Gold Award winners... Anyone heard of this? Seems they sell thophies [1] https://resecurity.com/wp-content/uploads/ https://resecurity.com/wp-content/uploads/ [2] https://www.prnewswire.com/news-releases/resecurity-names-ian-cook-as-strategic-adviser-300705772.html https://www.prnewswire.com/news-releases/resecurity-names-ia... [3] https://www.businesswire.com/news/home/20190226005414/en/Resecurity-Recognized-Cybersecurity-Excellence-Awards-Forensics-Risk/ https://www.businesswire.com/news/home/20190226005414/en/Res... [4] https://goldenbridgeawards.com/store/ https://goldenbridgeawards.com/store/ Looks like a fish, smells like a fish
- kristianc 8y agoWhat's suspicious about PR Newswire / Business Wire? They're the industry standard wire tools in Public Relations. The Golden Bridge trophies seem to be available to buy if you've won.
- hopler 8y agoOnly fake awards sell trophies. they give the award to everything and make money in trophy sales. See also SuperDoctors, Who's Who, and pay to publish journals with no peer reviews.
- laurentl 8y agoI don’t know specifically about Golden Bridge but I have been on the receiving end of other trophy clearinghouses: we were notified we had won a whatever of the year award without even applying for it and that we could purchase the actual trophy for a very reasonable price. Basically these companies’ business is selling overpriced crystal trinkets.
- kristianc 8y agoAs have I, it's a fairly common racket. However, rights to a trophy / rights to use the logo etc are also sold by perfectly legitimate awards too.
- EGreg 8y agoWe said North Korea was behind the SONY hack. We said Assad is bombing his own people with chemical weapons, which would make zero strategic sense considering he was already winning with conventional weapons and that was literally the only way to invite the wrath of the international community We said Saddam had WMDs And so on. So the word of the intelligence community for many would come with a huge grain of salt. Meanwhile the Saudis are getting lots of weapons from the USA and we barely report anything they do in Yemen. They bombed a schoolbus full of children. Kashoggi was supposed to have had evidence they used chemical weapons. The exported salafist ideology and financed Al Qaieda, which attacked the USA on our own soil, but in declassified docs we learn the FBI helped escort families of the hijackers back to Saudi Arabia. The FBI under both Mueller and Comey blocked the families of 9/11 victims from getting information on Saudis. The 9/11 commission found it was systematically lied to by the army, and considered referring the matter to the justice department but ran out of time and was never renewed. Meanwhile a firefight in Benghazi has had 10 commissions. Our foreign policy is simply crazy. We help Mujahideen in Afghanistan oust the Soviets, who were bringing rights and education to women as they had done in Uzbekistan decades earlier etc. Then after 9/11 we came back and occupied the country ourselves, and fought the Taliban for years, in order to — wait for it — help women and secular people the same as the Soviets were doing. And now we are leaving having spent trillions and the Taliban is gonna take over. Smart? We help install Saddam, give him weapons against Iran, then fight him, then remove him and install an Iran-allied Shiite government. Despite spending trillions in our pentagon (which are never accounted for), we somehow “forget” to put locks our humvees and tanks and Saddam’s sunni baathist forces take them and defect to ISIS. Somehow the Sunnis ALWAYS wind up with American weapons and the Socialists and Shiites are funded by Iran to defend themselves against Sunni insurgents. Is this a coincidence?
- mmjaa 8y agoIt is truly a shame that you are being downvoted, presumably by Americans too terrified of their own shame for participating in the acts you've described. But the truth survives downvotes. HN is probably not (yet) the right audience for these kinds of truth - but no matter the discouragement, please continue to seek the truth about Americas involvement in these heinous, disgusting human rights abuses. Yemen is a disaster of American making and is reason enough, alone, to dissuade any assumption of moral authority by those who consider the USA the worlds mightiest cop, when it should be recognised, nearly exclusively, as a criminal thug pandering to other criminal thug states. In spite of the downvotes, know and recognise that there are people in the HN scene who do not stand idly by, ignorant of what is being done in the name of Americans around the world. The support of the Saudi Arabian terrorist regime by the USA will not long stand unacknowledged!
- mmjaa 8y agoWe most definitely need to see real evidence in these kinds of cases. It is not enough to be told 'the experts say it is so' - the case must be made public. Too many times we are led into disaster and tragedy by secrets.
- sametmax 8y agoGiven the history of states to lie and manipulate to get into war, and since the USA proved to be particularly ok with it during the last decades, I'd say being cynical should be the default mode for this kind of analysis. If you are wrong, you are being over protective about peace, so what ?
- lern_too_spel 8y agoNeither the US government nor Citrix have implicated Iran. Resecurity came out of the woodwork contacting media companies about its supposed research after Citrix posted a brief statement explaining the FBI had notified it of a breach.
- lern_too_spel 8y agoThe same company also blamed a hack in Australia on Iran, which the Australian government does not agree with. https://www.itwire.com/security/86141-iran-or-china-competing-claims-about-actor-behind-parliament-hack.html https://www.itwire.com/security/86141-iran-or-china-competin...
- jonodubs 8y agoAnd to add to it, their facebook page only has 20 likes. Their first post is dated 14 feb 2019 with over 10,000 engagement (likes, reactions), while their post the next day has only 1 like. Also their fan club looks to be mainly from Thailand (not english speakers from the profile names). Definitely a few red flags.
- beepboopbeep 8y agoThe text on the site alone is a red flag. It might as well be Latin gibberish. And the "awards" aren't linked to anything. Some of them are just silly, like this one: https://resecurity.com/wp-content/uploads/2019/02/award-4.png https://resecurity.com/wp-content/uploads/2019/02/award-4.pn... which was apparently uploaded last month...
- AchoosRazor 8y agoFounded in 1989, Citrix provides SaaS to most of the Fortune 500, with $3B revenue. Is your theory is that they either destroyed their company (and risked their careers of perhaps 8K employees), because a few fringe actors in the current administration asked them to help pin this on Iran? Or is your theory that the US government sent 6TB of data on most of the Fortune 500 companies to an adversary, all to justify some conflict? Note: While oil and perceived geopolitical threats have been misused to start wars, I'm unaware that cyber now ranks at that level. Else, we'd treat DPRK hacking the same as missile testing. Your evidence is that the CEO is not sufficiently networked on linkedin, and their revenue has changed (after the largest tax cut for US corps in world history). Honestly, I'm at a loss for words. I suggest exercise, a healthy diet, and reflection. What you've suggested based on this evidence alone is--and I don't use this word lightly--unhinged and unhealthy. I do believe there is reason to be skeptical of US policy towards Iran. I do not think the US government could convince a 3B revenue company to destroy itself (just think of the shareholder lawsuits), all out of naive patriotic loyalty.
- pandalicious 8y agoLooks like the Iran connection came from a guy with a history of opportunistically jumping in on big security news stories: https://mobile.twitter.com/imdeaconblues/status/1105046806222782466 https://mobile.twitter.com/imdeaconblues/status/110504680622...
- hestefisk 8y ago“Threat actors”. What’s wrong with the word “perpetrator” or simply “criminal”?
- xyzzy123 8y ago“Threat actor” is super vague but more specific than the words you proposed. https://en.m.wikipedia.org/wiki/Threat_actor https://en.m.wikipedia.org/wiki/Threat_actor I agree the jargon isn’t great, I’ve seen “attacker” and “malicious user” used in pentest reports and neither of those seems quite right either.
- doitLP 8y agoAlso, they aren’t technically criminals if the attackers are state-sponsored and conducting an act of war. “Threat-actor” seems exactly like the type of legalese a government relies on when crafting the story around its own retaliation or justification for future aggression. I think it’s just entered the lexicon when talking about these types of incidents.
- buttcoinslol 8y agoI agree, there are no criminals at the nation-state level, only other actors.
- anigbrowl 8y agoBecause increasingly state actors are involved and it's not simple crime.
- jMyles 8y agoI don't think that's the reason; if someone who happens to be employed by a government commits a crime in their jurisdiction, they're still a perpetrator and a criminal. "Threat actor" is actually more specific; it refers to someone behaving in a threatening manner without regard to their legal status or jurisdiction.
- 8y ago
- ehnto 8y agoCompromise feels almost inevitable. Perhaps the idea that we can keep data protected and accessible at the same time using complex software is folly? Systems get more and more complex, security measures layer on top, patching over holes as they are found. But we are never in front of the cat and mouse game by necessity, only ever behind. So it must be that compromise is inevitable. I wouldn't put personal data I am not willing to lose online or on an intranet at all anymore. No amount of money and engineering seems to be able to keep up, and companies prove over and over that they are negligent, naive, or simply a few steps too far behind.
- afterburner 8y agoNow extend that to voting systems too... not just folly, but criminal insanity.
- jaabe 8y agoI work with digitisation in the public sector of Denmark. We’ve digitised our elections, but we’ve digitised the part that makes sense, the registration you do before you’re handed you ballot. In the old days, we used to have big books where you’d get crossed off after you were identified. This naturally takes a lot of time, so today we print a little bar code on the piece of paper that we mail every adult citizen at every election. This means that we can scan you instead of manually crossing you off in a book. We still have queues at prime time, but they are 10-15 minutes instead of two hours. The actual voting is done with paper, so that there is a paper trail. This is the only thing that makes sense. Especially when you look at the business side of things. We reduce the hassle for citizens (our customers of sorts) and we maintain security. Sure we could provide results faster if we counted votes digitally, and you could frankly also provide a paper trail if the machine printed you vote, but does speed of counting really matter? Financially digital vote counting would be insanely more expensive, because public IT systems are insanely expensive and paying staff a little extra to count votes isn’t. I mean, the registration system is really expensive as well, but at least it benefits the citizens, so that is a reasonable sacrifice to us. But digital voting? That’s as you put it, insane. It’s not a democratic process if you don’t have the physical votes and a system which makes sure they aren’t tampered with.
- w-ll 8y agohaveibeenpwned could/should make a browser extension that tell you if the site your on has been pwned
- ComodoHacker 8y agoHIBP isn't about pwned sites. It's about leaked credentials. The source of leaked data on HIBP isn't verifiable in most cases.
- fastball 8y agoNope. https://haveibeenpwned.com/PwnedWebsites https://haveibeenpwned.com/PwnedWebsites
- ComodoHacker 8y agoOK, so there's a Yahoo! breach from 2012. Should I not visit Yahoo now? Also please note the '?' marks for unverified sources.
- Dahoon 8y agoDo you have a better solution than not using a service? Not using it is like voting with your wallet. So yes, I would say stay away from yahoo. Where do we draw a line otherwise? It is the same boat as "I don't like Facebook collecting data on me but I'll still use their service".
- ComodoHacker 8y agoYes, it's in the same boat, we (almost) all do it with Google. I don't know where to draw a line, but I don't think a single data breach, even minor one, should mean a death sentence to business. Maybe some sort of audit/certification should be mandatory after breach.
- fastball 8y ago
- cow9 8y agoShares of Citrix is down after report of hack: https://www.cnbc.com/2019/03/08/citrix-tumbles-on-report-of-unauthorized-access-fbi-investigation.html https://www.cnbc.com/2019/03/08/citrix-tumbles-on-report-of-...
- freehunter 8y agoBut still higher than they were Dec 24th 2018. Actually higher than they were at any point prior to April 2018. Because the market knows that major security breaches that will have long-lasting impact on the victims involved will ultimately have no impact on the company that was breached.
- gesman 8y ago>> Earlier today, Citrix chief information security officer Stan Black gave his company's side of the story. He said that, as of right now, Citrix does not know exactly which documents the hackers obtained nor how they got in... Ouch. The winner of "The worst position to be in today".
- citrixshady 8y agoAnd, IMO, they've known about it since January when they abruptly forced password resets on every ShareFile user. I use ShareFile for secure delivery of documents containig DOB, SSN, AGI, ... No notice from Citrix ShareFile to its customers about a breach yet, though. Thanks.
- Nasrudith 8y agoBrute forcing weak passwords? Someone is doing something horribly wrong here on several levels. At the very least anything online of any importance should have rate limits if not locking for repeated password attempts. For servers themselves allowing password logins is inexcusably bad. It is considered a bit overzealous by most but I believe that passwords should have been done away with a long time ago in favor of cryptographic keypair logins - we have already found the "2FA" in practice like emails and cellphone text messages not an adequate replacement. I'm aware there are other problems with storing your keys and loss but I believe that is a better approach for anything that needs security. I wish I could get my bank accounts to use key based logins.
- allworknoplay 8y agoTotally agree. My guess — and it’s obviously nothing more than that — is that they don’t fully know yet, but it might seem better and easier to solve than the alternative that there’s very little organizations in this position can ever actually do to prevent sophisticated attacks.
- ComodoHacker 8y agoThe fact they were unaware about the breach until FBI told them says much. It's not that easy to exfiltrate 6TB of data unnoticed if you have any IDS (automated or just manual) in place.
- laumars 8y agoHaving an IDS in place means jack shit if you don’t have skilled personnel managing it. Depressingly often, these things are installed as part of a box ticking exercise to pass an audit or meet another form of compliance. however they never get set up right from the outset or the security professionals who were there leave and never get replaced. In this case, if they’re talking about infrastructure available on the public internet with password only authentication then I’d wager any skilled professionals they may or may not have had, had already left. Because no security minded engineer would have okayed that practice. Which means even if they did have an IDS, I’m highly doubtful that would have been managed properly either.
- chx 8y agoCitrix... mention that to any Hungarian programmer roughly my age and you will likely receive a long string of swearing because the incredibly buggy central system necessary to sign up for courses and exams was only accessible via the Citrix ICA client and back in the second half of the 90s that, in itself, was a huge source of problems beyond the server app not being particularly high quality especially on Linux which was rather important because at this time practically all sane IT students were running Linux to access the Internet (remember, we are talking pre-Windows 2000).
- Scoundreller 8y agoSounds like any university Reg system.
- acdha 8y agoThe amazing part to me is that it still sucks: it’s 2019 and random hangs requiring a full session restart are still a daily occurrence, and I recently measured keystroke latency at 130+ms over a LAN. That’s much worse than using X11 over SSH ever was.
- taurath 8y agoIt’s been pretty much a law of software for me that once an app is primarily business to business and gets traction in the Fortune 500 expect the functionality to stay the exact same or become worse over the next 10 years
- sbhn 8y agoA country under certain sanctions, especially in regards to encryption, is easy to middle man. Iran computers are probably the most easy to hack and plant evidence on if they depend on US operating systems and network suppliers.
- komali2 8y agoIt says they had to find out from the FBI. At least theoretically, how does the FBI find out? (unless someone knows the actuality and is willing to share? Didn't see anything in the article)
- mirimir 8y agoThe FBI finds out from the NSA. Gotta have deniability for the NSA. Given that it's a military agency, with ~no overt domestic role.
- citrixshady 8y agoNot so sure about that. I use ShareFile for secure document delivery and they forced a password reset with stricter requirements in January, the month after the first breach, and two months before the FBI notification. No notice of breached documents to its customers yet.
- detaro 8y agoAlmost as if they didn't force the reset because of the breach, but because of the reason they gave back then?
- jarym 8y ago“Resecurity also said it warned Citrix on December 28...” And then: “Citrix, meanwhile, said it took action – launching an internal probe and securing its networks – after hearing from the FBI earlier this week.” Putting aside the fact this security company seems to have never been heard of before; Citrix’s appears to have buried their heads in the sand until the Feds came knocking. If it’s true that the company was tipped off in December then the ‘I know nothing’ defence is truly shocking.
- sidcool 8y agoI am not very well informed. How serious is this?
- tcd 8y agoAbout as serious as Equifax.
- sidcool 8y agoThat's quite serious.
- fencepost 8y agoDepending on what was obtained, very serious and with potential for ongoing problems. If this impacted their software development, it could include source for current and older but still in use products, which could potentially be analyzed looking for potential exploits. It may include internal bug trackers that may include information on unpatched exploits or on exploits quietly patched only as part of updates and so potentially still in the wild. Heck, it may include some of their internal product security testing information and whatever might be in that. An awful lot of large companies and healthcare systems now have Citrix portals available to the world rather than having annoying-to-manage-and-support VPN connections - are there undisclosed vulnerabilities in any of those? Even going outside the technical side, if there's sensitive HR information they may have materials that can be leveraged for blackmail purposes to attempt to maintain long-term access. And all of that is just talking about the Citrix remote access piece that I still think of when I hear the name. There's also XenApp/XenDesktop for virtualization, the ShareFile sharing site that others have mentioned, their endpoint management product, etc. There might even be holdover stuff - what would a copy of out-of-date source code to GoToMyPC be worth? A lot will depend on the ability of whoever got it to capitalize on it, but assuming this was indeed a nation expect that they'll be able to spend at least some resources.
- ccnafr 8y agoAh, The Register lifting another story from another news outlet. The original report came from NBC: https://www.nbcnews.com/politics/national-security/iranian-backed-hackers-stole-data-major-u-s-government-contractor-n980986 https://www.nbcnews.com/politics/national-security/iranian-b... Which The Register didn't bother to credit. I swear, this site is now no worse than an Indian blog. Every site online credited NBC except these "journalism experts" (to be red clickbait-loving, content thieving d-bags)
- wetha7 8y ago>> Which The Register didn't bother to credit. I swear, this site is now no worse than an Indian blog. That seems uncalled for. Are Indian blogs (as opposed to non-Indian blogs) known for this kind of thing?
- ccnafr 8y agoYes
- jeroenhd 8y agoI assume there's tons of Indian blogs that are just fine, but for some reason most of the time I see blog posts without any depth but full of buzz words being spammed around, they're written by someone from India (and less often Pakistan). Now it could be that this is just purely because because there's more Indian blogs, making the percentage of spam blogs higher, or because there's three or four people spamming their useless blogs everywhere, but I do hesitate to click blogs with the .in TLD these days. Probably just a few assets ruining for the whole group, but in my circle Indian blogs do tend to have a bad rep.
- therealx 8y agoWhere's the dump?
- waterside81 8y agoPotentially stupid question but in instances of hacks, how do companies know for sure what was and wasn't taken?
- ASalazarMX 8y agoThey don't, they just try their best to reconstruct the attack with whatever "footprints" the perpetrators left, along with any independent logging they might have in place. It's a little nightmare because it's rare to give absolute certainty.
- citrixshady 8y agoCitrix sent all of our clients an email saying their passwords were invalidated and everyone needed to set a new one (with stricter requirements) in January.... We use ShareFile as a client portal for secure document delivery. Shady.
- drilldrive 8y agoAt this point, it is (or should be) absolutely clear that password security is a top priority for everyone nowadays. The only solution that I have heard of is password managers, but what if such companies are hacked like this one? I am curious if we will eventually recommend randomly generating passwords per website and keeping them under lock and key (physically so such as in a safe).
- spappal 8y agoI would be interested in knowing how cyber warfare and cyber espionage are viewed from a perspective of diplomacy or power play between nations (or corporations). Does anyone know of interesting articles?
- joveian 8y agoIt has been a while since I read it but the first thing that came to mind is this talk by Dan Geer (who is closely connected to US intelligence agencies): http://geer.tinho.net/geer.blackhat.6viii14.txt http://geer.tinho.net/geer.blackhat.6viii14.txt
- openloop 8y agoBwahahaha
- eddywebs 8y agofake news ?