4 ms·

Nvidia hackers leak employee credentials

17 points by zikohh 5y ago

dado3212 5y ago
Passwords for what? Their personal Nvidia accounts? Who cares, aren’t their emails public with legal LinkedIn scraping anyways? [1]. https://en.m.wikipedia.org/wiki/HiQ_Labs_v._LinkedIn https://en.m.wikipedia.org/wiki/HiQ_Labs_v._LinkedIn
- zikohh 5y ago
  over 70k employee email addresses and NTLM password hashes
  - dado3212 5y ago
    Again employee emails are public. And NLTM password hashes for what?
    - zikohh 5y ago
      Sorry you're right it is unclear from this article see this > The Have I Been Pwned breach-notification service allows people to enter an email address to find out if it has been included in most data leaks. A check of email addresses of four Nvidia employees showed all of them were included in last week's Lapsus$ dump. https://arstechnica.com/information-technology/2022/03/cybercriminals-who-breached-nvidia-issue-one-of-the-most-unusual-demands-ever/ https://arstechnica.com/information-technology/2022/03/cyber...
eternityforest 5y ago
This hack is a bad idea in 50 different ways. Not only will it make the public associate FOSS and hackers, it literally will attract more hackers to the scene. Like, actual black hats. We don't need them. They're just going to drag Linux down with time wasting Kali script kidded questions, harass people with rm -rf pranks, and generally their best to turn it into a cyberpunk UNIXlike fragmented tinkering OS again, and try to stuff coins in all our apps. There's lots of great security professionals. There may be even legitimate uses for black hat hacking. This seems so poorly though out it will only interest the jerks. The code files are untouchable. Who in the mainstream FOSS scene would risk the legal nightmare of looking at them? NVIDIA is probably not going to comply with requests. They likely see it as negotiating with terrorists. And the intent is to bypass hash rate restrictions. NVIDIA drivers exist on Linux already. If I was the type who could afford to be using an NVIDIA card, I'd rather have closed drivers than no official working drivers, or no card at all because miners bought them all.
- twoxproblematic 5y ago

17 points by zikohh 5y ago

Passwords for what? Their personal Nvidia accounts? Who cares, aren’t their emails public with legal LinkedIn scraping anyways? [1]. https://en.m.wikipedia.org/wiki/HiQ_Labs_v._LinkedIn https://en.m.wikipedia.org/wiki/HiQ_Labs_v._LinkedIn

zikohh 5y ago
over 70k employee email addresses and NTLM password hashes
- dado3212 5y ago
  Again employee emails are public. And NLTM password hashes for what?
  - zikohh 5y ago
    Sorry you're right it is unclear from this article see this > The Have I Been Pwned breach-notification service allows people to enter an email address to find out if it has been included in most data leaks. A check of email addresses of four Nvidia employees showed all of them were included in last week's Lapsus$ dump. https://arstechnica.com/information-technology/2022/03/cybercriminals-who-breached-nvidia-issue-one-of-the-most-unusual-demands-ever/ https://arstechnica.com/information-technology/2022/03/cyber...

eternityforest 5y ago

This hack is a bad idea in 50 different ways. Not only will it make the public associate FOSS and hackers, it literally will attract more hackers to the scene. Like, actual black hats. We don't need them. They're just going to drag Linux down with time wasting Kali script kidded questions, harass people with rm -rf pranks, and generally their best to turn it into a cyberpunk UNIXlike fragmented tinkering OS again, and try to stuff coins in all our apps. There's lots of great security professionals. There may be even legitimate uses for black hat hacking. This seems so poorly though out it will only interest the jerks. The code files are untouchable. Who in the mainstream FOSS scene would risk the legal nightmare of looking at them? NVIDIA is probably not going to comply with requests. They likely see it as negotiating with terrorists. And the intent is to bypass hash rate restrictions. NVIDIA drivers exist on Linux already. If I was the type who could afford to be using an NVIDIA card, I'd rather have closed drivers than no official working drivers, or no card at all because miners bought them all.

twoxproblematic 5y ago