5 ms·
> But have any of these extreme exploits ever been used in the wild? I suspect you're going to find out in 50 years when government documents (not inherently U
by AdamJacobMuller 4y ago
> But have any of these extreme exploits ever been used in the wild?
I suspect you're going to find out in 50 years when government documents (not inherently US gov) are declassified.
State level spying is the only thing I can think of where the value of the information is so high (making the effort of this kind of attack is worth it) and where there are many scenarios where the volume of highly valuable information is comparatively tiny.
Just as some very off the cuff examples of what I mean by the latter. We don't need to exfiltrate satellite photos of things (gigabytes of data), but, it could be very valuable to exfiltrate the metadata of what they are looking at (coordinates and time)
Also, exfiltrating information like names of sources or meeting points or other methods can be trivial amounts of data but finding even a single compromised person on our side would be immensely valuable!
I'm reminded of "The Thing": https://en.wikipedia.org/wiki/The_Thing_%28listening_device%29 https://en.wikipedia.org/wiki/The_Thing_%28listening_device%...
- moltude 4y agodidn't stuxnet jump into an air gaped system? I'm curious if there is significant difference between egress and ingress into air gaped systems.
- legalcorrection 4y agoI thought a thumbdrive was the attack vector for stuxnet.
- TedDoesntTalk 4y agoCorrect: https://www.theverge.com/2012/4/12/2944329/stuxnet-computer-virus-planted-israeli-agent-iran https://www.theverge.com/2012/4/12/2944329/stuxnet-computer-...
- SketchySeaBeast 4y ago> I'm curious if there is significant difference between egress and ingress into air gaped systems. I would expect so. I'm fairly certain there's a big difference between pulling fuzzy data out and figuring out what it means as opposed to trying to electromagnetically fling fuzzy data into a system that's not supposed to have information flung at it and having the system accept what you mean.