4 ms·

I’ve seen these things, including large DDoS attacks from both sides, black hat and white hat. I’ve also been recruited by Cyber Command, NSA, etc. The one thin

I’ve seen these things, including large DDoS attacks from both sides, black hat and white hat. I’ve also been recruited by Cyber Command, NSA, etc. The one thing that rings true is that governments and corporations vastly overestimate the capabilities of nation states, and vastly underestimate the capabilities of unaffiliated hacking groups and individuals. Most of the cutting edge InfoSec work is being done in OSS and the public domain. The Snowden NSA leaks, although ancient history at this point, confirmed a lot of this for me. The only exception would be where the government can flex muscle in low tech applications they can throw money or legal resources at (MiTM/interception, obsolete tech like SCADA) but otherwise I’ve never been been impressed.

vmception 6y ago
And if you arent RPCing into a random Russian computer 5 minutes after browsing darknet markets, what are you doing aside from being discriminated against by captcha’s all day? I would not trust any declaration of “state sponsored hack” and it is a distinction that doesn't really matter but causes more harm than good
Godel_unicode 6y ago
>...obsolete tech like SCADA... ...wow. you're aware that "obsolete tech" is what basically all critical infrastructure uses, right? The world is bigger than FAANG webapps...
- nobody9999 6y ago
  >>...obsolete tech like SCADA... >...wow. you're aware that "obsolete tech" is what basically all critical infrastructure uses, right? The world is bigger than FAANG webapps... Wow! 2010 called. They want their ideas about what makes the world go back.[0] That's just crazy talk. Everyone knows that hardware has been completely deprecated. It's all clouds. Mostly cumulo-nimbus, in fact. Power plants, chip fabs, heavy machinery, machine tools, factory automation and logistics systems are completely obsolete and never, ever used anymore. Because there's cloudiness, hardware is just a waste of money and space, which is why we can stack 600MB of js libraries on top of each other so we can have the browser render an opaque 40x40px box. [0] https://en.wikipedia.org/wiki/Poe%27s_law https://en.wikipedia.org/wiki/Poe%27s_law (Please refer to the above link reference to resolve any confusion.)
  - HexagonalKitten 6y ago
    It's the hardware that's the problem so we should have an fpga cloud so you can run whatever hardware you want. What would make that 600MB of javascript secure would be to auto-generate a random CPU architecture and recompile your server to run on it!
    - openfinch 6y ago
      Stop it, you're giving Amazon ideas.
_kbh_ 6y ago
Id hazard a guess that unaffiliated hacking groups don't have the same capability as the following codewords protect. FORBORNE PENDLETON PIEDMONT They all seem to suggest some level of breakthrough with regards to cryptography, including public key cryptography.

vmception 6y ago

And if you arent RPCing into a random Russian computer 5 minutes after browsing darknet markets, what are you doing aside from being discriminated against by captcha’s all day? I would not trust any declaration of “state sponsored hack” and it is a distinction that doesn't really matter but causes more harm than good

Godel_unicode 6y ago

>...obsolete tech like SCADA... ...wow. you're aware that "obsolete tech" is what basically all critical infrastructure uses, right? The world is bigger than FAANG webapps...

nobody9999 6y ago
>>...obsolete tech like SCADA... >...wow. you're aware that "obsolete tech" is what basically all critical infrastructure uses, right? The world is bigger than FAANG webapps... Wow! 2010 called. They want their ideas about what makes the world go back.[0] That's just crazy talk. Everyone knows that hardware has been completely deprecated. It's all clouds. Mostly cumulo-nimbus, in fact. Power plants, chip fabs, heavy machinery, machine tools, factory automation and logistics systems are completely obsolete and never, ever used anymore. Because there's cloudiness, hardware is just a waste of money and space, which is why we can stack 600MB of js libraries on top of each other so we can have the browser render an opaque 40x40px box. [0] https://en.wikipedia.org/wiki/Poe%27s_law https://en.wikipedia.org/wiki/Poe%27s_law (Please refer to the above link reference to resolve any confusion.)
- HexagonalKitten 6y ago
  It's the hardware that's the problem so we should have an fpga cloud so you can run whatever hardware you want. What would make that 600MB of javascript secure would be to auto-generate a random CPU architecture and recompile your server to run on it!
  - openfinch 6y ago
    Stop it, you're giving Amazon ideas.

_kbh_ 6y ago

Id hazard a guess that unaffiliated hacking groups don't have the same capability as the following codewords protect. FORBORNE PENDLETON PIEDMONT They all seem to suggest some level of breakthrough with regards to cryptography, including public key cryptography.