5 ms·
It seems to me that a more interesting question than "how did the malware get there?" is "why are they telling us that they found it?" Presumably the default t
by hugh3 15y ago
It seems to me that a more interesting question than "how did the malware get there?" is "why are they telling us that they found it?"
Presumably the default thing to do under these circumstances would be to shut up about it, so the fact that they're broadcasting it to the whole world must mean something. In any case I wouldn't take any of the details at face value -- e.g. do they really not have any idea where it came from, or are they feigning ignorance in the hopes of lulling their opponent into a false sense of security?
- jarrett 15y agoMaybe they anticipated a leak and wanted to get out in front of the story.
- Pyrodogg 15y agoBecause someone leaked it. > “We keep wiping it off, and it keeps coming back,” says a source familiar with the network infection, one of three that told Danger Room about the virus. “We think it’s benign. But we just don’t know.” The end of the article says they asked for an official response and were stonewalled. > The Air Force declined to comment directly on the virus. “We generally do not discuss specific vulnerabilities, threats, or responses to our computer networks, since that helps people looking to exploit or attack our systems to refine their approach,” says Lt. Col. Tadd Sholtis, a spokesman for Air Combat Command, which oversees the drones and all other Air Force tactical aircraft. “We invest a lot in protecting and monitoring our systems to counter threats and ensure security, which includes a comprehensive response to viruses, worms, and other malware we discover.” 'The military' doesn't want anyone to know; some individuals inside do.
- roc 15y agoOr the military staff is leaking this to motivate the higher-up who green-lit the contract to exert some pressure, because they have unfortunately-little direct power themselves.
- Pyrodogg 15y agoI don't think that is really an 'or' case. Either someone with authority to disclose makes an official statement or someone lacking that authority leaks it.
- roc 15y agoI was speaking to the possible motivation for the leak. I certainly didn't intend my reply as a counterpoint to the "if it's not official it's a leak" point.
- hugh3 15y agoAn unauthorized leak out of a secretive program disclosing a major vulnerability? That sounds very court-martialable. Especially considering the presumably small number of people who would know about it, and hence the high probability of the leaker getting caught, I find it hard to imagine anyone would risk it, let alone what their motivation for doing so would be. And especially not three different people. Nope, I don't think the USAF leaks anything like this unless it means to.
- rdl 15y agoThey announced the big "jihad on all USB drives" back in 2009. There were factory shinkwrapped USB drives for sale on base which came pre-loaded with viruses; people would buy those, mark them as Secret, put them on SIPRnet, and then machines would be infected. It was lulztastic, actually. I think once something hits a large enough scale, they announce it; it's the easiest way to communicate to the affected DoD community (military, contractors, etc.), at which point it is basically public knowledge.
- bostonvaulter2 15y agoWow, that's crazy. Do you have a link for that?
- rdl 15y agohttp://www.google.com/search?gcx=w&sourceid=chrome&ie=UTF-8&q=USB+drive+infection+dod#sclient=psy-ab&hl=en&source=hp&q=USB+drive+infection+dod+bagram+market&pbx=1&oq=USB+drive+infection+dod+bagram+market&aq=f&aqi=&aql=&gs_sm=e&gs_upl=34019l36373l0l36476l14l10l0l0l0l0l305l1764l0.6.2.1l9l0&bav=on.2,or.r_gc.r_pw.,cf.osb&fp=de4ce0a5d4a08049&biw=1024&bih=619 http://www.google.com/search?gcx=w&sourceid=chrome&i... http://www.scmagazineus.com/militarys-ban-of-usb-thumb-drives-highlights-security-risks/article/121326/ http://www.scmagazineus.com/militarys-ban-of-usb-thumb-drive... http://www.navytimes.com/news/2008/11/military_thumbdrives_computerworm_112108w/ http://www.navytimes.com/news/2008/11/military_thumbdrives_c... http://www.dailytech.com/Pentagon+Lifts+Ban+on+Thumb+Drives+Adds+a+Few+Caveats/article17747.htm http://www.dailytech.com/Pentagon+Lifts+Ban+on+Thumb+Drives+... http://threatpost.com/en_us/blogs/thumb-drive-attack-2008-compromised-classified-us-networks-082610 http://threatpost.com/en_us/blogs/thumb-drive-attack-2008-co... http://www.military-information-technology.com/mit-home/66-mit-2008-volume-12-issue-11/539-flash-drive-security.html http://www.military-information-technology.com/mit-home/66-m... http://fedtechmagazine.com/article.asp?item_id=352 http://fedtechmagazine.com/article.asp?item_id=352
- falcolas 15y agoIt's a leak, not an official comment. The official comment about the incident from the story is: “We generally do not discuss specific vulnerabilities, threats, or responses to our computer networks, since that helps people looking to exploit or attack our systems to refine their approach,” says Lt. Col. Tadd Sholtis, a spokesman for Air Combat Command, which oversees the drones and all other Air Force tactical aircraft. “We invest a lot in protecting and monitoring our systems to counter threats and ensure security, which includes a comprehensive response to viruses, worms, and other malware we discover.”
- CWuestefeld 15y agoPerhaps. But in modern politics, diplomacy, etc., intentional strategic "leaks" are a common practice, for many reasons.
- angstrom 15y agoAnd considering how kindly they looked on some of the mundane stuff revealed by wiki leaks debacle...I'd definitely assume this intentional.