6 ms·

Am I the only one who thinks this is well intentioned but kind of silly? I don’t know a lot about this space, but I don’t know especially how many skills trans

Am I the only one who thinks this is well intentioned but kind of silly? I don’t know a lot about this space, but I don’t know especially how many skills translate from offense to defense. Is this basically just a call for folks to turn in their 0days and access or something? Seems wt least marginally more useful than trying to train up a bunch of script kiddies to fight GRU…

pueblito 5y ago
I think this is just to provide cover for US offensive cyber operations
- Aeolun 5y ago
  If you have the gov on your side they can become honorary ukrainian citizens overnight.
waffle_maniac 5y ago
Be careful when going outside. A cyber attack might be in progress! But what actually would be good cyber warfare is hacking Putin’s family. Notoriously private and says his family is off limits and he never talks about them. I’m sure his kids aren’t normal like he claims.
- HWR_14 5y ago
  John Oliver found his daughters dance/gymnastic performance and aired it a few years ago as part of something. For the daughter of a billionaire dictator, John Oliver made her sound fairly normal.
  - sofixa 5y ago
    Do you have a link or name or number of the episode? > For the daughter of a billionaire dictator, John Oliver made her sound fairly normal Most people are fairly normal :) Not every rich powerful kid goes full Uday Hussein.
    - HWR_14 5y ago
      I was able to find the number of the episode! It was S04E02, which would have been the episode on Putin. Which I guess makes sense.
giantg2 5y ago
Going on the offense can create problems for the aggressor, drawing resources away from their attack. That said, the law in most places isn't going to allow/support this. It could maybe even interfere with state sponsored operations. It would be interesting to see a sort of privateer license in this space. If I remember correctly, Russia pretty much doesn't care about people violating cyber laws in Russia so long as the victims are in other countries.
- javajosh 5y ago
  >It would be interesting to see a sort of privateer license in this space. It's a good idea, which has come up in the (relatively) recent past, although not specifically in the cyber domain. https://en.wikipedia.org/wiki/Letter_of_marque#21st-century_American_reconsideration_of_letters_of_marque https://en.wikipedia.org/wiki/Letter_of_marque#21st-century_...
freedomben 5y ago
They're not requesting script kiddies, and they're not asking for a bunch of vigilantes. They want applications: > "Ukrainian cybercommunity! It's time to get involved in the cyber defense of our country," the post read, asking hackers and cybersecurity experts to submit an application via Google docs, listing their specialties, such as malware development, and professional references. You'd be amazed at how well offensive skills translate to defense. Some of the best blue-teamers are former red-teamers. If you don't have offensive skills, it's very easy to overlook things, especially when it comes to pivoting and exploit chaining.
- rainonmoon 5y ago
  Also if you're a diligent red teamer, you're investigating the impact of your attacks to understand the noise you're generating. That's fundamental to evasion and persistence. Easy to deploy the same knowledge in a defensive context.
- merlincorey 5y ago
  > asking hackers and cybersecurity experts to submit an application via Google docs, listing their specialties, such as malware development, and professional references. So it's effectively a free honey pot for Russia to get information on Ukranian cyber security professionals and a free pass to infiltrate them?
  - GekkePrutser 5y ago
    Considering the state officials that are publicly speaking about it, no. But it sure is disingenuous using something as low sec like Google docs. At least get people to submit it via GPG or something...
    - deleted 5y ago
      [deleted]
    - dannyw 5y ago
      They'll get free vetting from the CIA.
steve76 5y ago
HWR_14 5y ago
It's a request to submit your resume (which can be as simple as any malware or exploit you created) for cyber offense or cyber defense. If you can help secure Ukrainian government systems they want you and if you can install malware in the Russian's tech they want you.
qbasic_forever 5y ago
This seems extremely silly, if for no other reason I would bet 75% of the applicants will be Russian agents/intelligence officers applying to learn intel or mess up the operations.

pueblito 5y ago

I think this is just to provide cover for US offensive cyber operations

Aeolun 5y ago
If you have the gov on your side they can become honorary ukrainian citizens overnight.

waffle_maniac 5y ago

Be careful when going outside. A cyber attack might be in progress! But what actually would be good cyber warfare is hacking Putin’s family. Notoriously private and says his family is off limits and he never talks about them. I’m sure his kids aren’t normal like he claims.

HWR_14 5y ago
John Oliver found his daughters dance/gymnastic performance and aired it a few years ago as part of something. For the daughter of a billionaire dictator, John Oliver made her sound fairly normal.
- sofixa 5y ago
  Do you have a link or name or number of the episode? > For the daughter of a billionaire dictator, John Oliver made her sound fairly normal Most people are fairly normal :) Not every rich powerful kid goes full Uday Hussein.
  - HWR_14 5y ago
    I was able to find the number of the episode! It was S04E02, which would have been the episode on Putin. Which I guess makes sense.

giantg2 5y ago

Going on the offense can create problems for the aggressor, drawing resources away from their attack. That said, the law in most places isn't going to allow/support this. It could maybe even interfere with state sponsored operations. It would be interesting to see a sort of privateer license in this space. If I remember correctly, Russia pretty much doesn't care about people violating cyber laws in Russia so long as the victims are in other countries.

javajosh 5y ago
>It would be interesting to see a sort of privateer license in this space. It's a good idea, which has come up in the (relatively) recent past, although not specifically in the cyber domain. https://en.wikipedia.org/wiki/Letter_of_marque#21st-century_American_reconsideration_of_letters_of_marque https://en.wikipedia.org/wiki/Letter_of_marque#21st-century_...

freedomben 5y ago

They're not requesting script kiddies, and they're not asking for a bunch of vigilantes. They want applications: > "Ukrainian cybercommunity! It's time to get involved in the cyber defense of our country," the post read, asking hackers and cybersecurity experts to submit an application via Google docs, listing their specialties, such as malware development, and professional references. You'd be amazed at how well offensive skills translate to defense. Some of the best blue-teamers are former red-teamers. If you don't have offensive skills, it's very easy to overlook things, especially when it comes to pivoting and exploit chaining.

rainonmoon 5y ago
Also if you're a diligent red teamer, you're investigating the impact of your attacks to understand the noise you're generating. That's fundamental to evasion and persistence. Easy to deploy the same knowledge in a defensive context.
merlincorey 5y ago
> asking hackers and cybersecurity experts to submit an application via Google docs, listing their specialties, such as malware development, and professional references. So it's effectively a free honey pot for Russia to get information on Ukranian cyber security professionals and a free pass to infiltrate them?
- GekkePrutser 5y ago
  Considering the state officials that are publicly speaking about it, no. But it sure is disingenuous using something as low sec like Google docs. At least get people to submit it via GPG or something...
  - deleted 5y ago
    [deleted]
  - dannyw 5y ago
    They'll get free vetting from the CIA.

steve76 5y ago

HWR_14 5y ago

It's a request to submit your resume (which can be as simple as any malware or exploit you created) for cyber offense or cyber defense. If you can help secure Ukrainian government systems they want you and if you can install malware in the Russian's tech they want you.

qbasic_forever 5y ago

This seems extremely silly, if for no other reason I would bet 75% of the applicants will be Russian agents/intelligence officers applying to learn intel or mess up the operations.