4 ms·

Funnily enough what you describe with balloons is still being done with USB sticks today: https://flashdrivesforfreedom.org/ https://flashdrivesforfreedom.org/

capableweb 4y ago
As they say on the website; "Many citizens have devices with USB ports and SD card slots", but more citizens have just eyes and no USB ports/SD card slots, so why not send balloons filled with flyers instead, to reach even more people?
- GekkePrutser 4y ago
  I watched a presentation of these guys at SHA2017 and someone asked the same thing. Here's the full presentation in case you're interested: https://media.ccc.de/v/SHA2017-120-hack_north_korea https://media.ccc.de/v/SHA2017-120-hack_north_korea As far as I recall their answer was that a USB drive can store much more. Video, entire books, etc. However leaflets are also done. Personally I don't know if it's worth the risk knowing that their local OS ("Red Star OS") can fingerprint files. But I guess they know what they're doing.
  - manholio 4y ago
    But then again, why would anyone connect their computer to the completely censored national LAN, only to be spied upon by the state?
    - netsharc 4y ago
      In my (lack of) knowledge of North Korea, I don't think most people even have computers, and it's not like the government's built infrastructure to just connect their computer to the LAN. (It's different if you're part of the government elite living in the compounds for sure...).
    - GekkePrutser 4y ago
      Because it will contain entertainment as well and it's the way to communicate with friends. Despite being censored, it's all they have.
  - cm2187 4y ago
    Fingerprinting files would be the least of my concerns. When you plug a USB stick, you potentially plug a keyboard and handover control of your computer to the stick.
    - capableweb 4y ago
      Most people in the western world wouldn't think twice before plugging in a found USB stick into their own computer because they are curious, people simply don't know the risk. I'm sure even fewer people in North Korea know basic computer hygiene.
      - wowokay 4y ago
        Idk it’s basic workplace trading now, I think most people plugging in a random usb here are at least doing it in an isolated VM or something.
        gbear605 4y ago
        In a isolated VM? No way. Most people don’t know what a VM is. Hopefully most people wouldn’t plug a random USB into their computer, but I suspect that (# of people who would plug in a random USB) > (# of people who know about VMs)
        dmurray 4y ago
        Even among the people who "know about VMs" how many of them could confidently plug in a physical device to a physical machine and be sure that it was somehow isolated to the VM? I must have a dozen ways to run VMs here, but I couldn't do that.
        ebjaas_2022 4y ago
        What is the most common attack vector to fear? I thought maybe auto-run had been disabled by default, in most modern versions of Windows, for the past 10-15 years at least.

capableweb 4y ago

As they say on the website; "Many citizens have devices with USB ports and SD card slots", but more citizens have just eyes and no USB ports/SD card slots, so why not send balloons filled with flyers instead, to reach even more people?

GekkePrutser 4y ago
I watched a presentation of these guys at SHA2017 and someone asked the same thing. Here's the full presentation in case you're interested: https://media.ccc.de/v/SHA2017-120-hack_north_korea https://media.ccc.de/v/SHA2017-120-hack_north_korea As far as I recall their answer was that a USB drive can store much more. Video, entire books, etc. However leaflets are also done. Personally I don't know if it's worth the risk knowing that their local OS ("Red Star OS") can fingerprint files. But I guess they know what they're doing.
- manholio 4y ago
  But then again, why would anyone connect their computer to the completely censored national LAN, only to be spied upon by the state?
  - netsharc 4y ago
    In my (lack of) knowledge of North Korea, I don't think most people even have computers, and it's not like the government's built infrastructure to just connect their computer to the LAN. (It's different if you're part of the government elite living in the compounds for sure...).
  - GekkePrutser 4y ago
    Because it will contain entertainment as well and it's the way to communicate with friends. Despite being censored, it's all they have.
- cm2187 4y ago
  Fingerprinting files would be the least of my concerns. When you plug a USB stick, you potentially plug a keyboard and handover control of your computer to the stick.
  - capableweb 4y ago
    Most people in the western world wouldn't think twice before plugging in a found USB stick into their own computer because they are curious, people simply don't know the risk. I'm sure even fewer people in North Korea know basic computer hygiene.
    - wowokay 4y ago
      Idk it’s basic workplace trading now, I think most people plugging in a random usb here are at least doing it in an isolated VM or something.
      - gbear605 4y ago
        In a isolated VM? No way. Most people don’t know what a VM is. Hopefully most people wouldn’t plug a random USB into their computer, but I suspect that (# of people who would plug in a random USB) > (# of people who know about VMs)
        dmurray 4y ago
        Even among the people who "know about VMs" how many of them could confidently plug in a physical device to a physical machine and be sure that it was somehow isolated to the VM? I must have a dozen ways to run VMs here, but I couldn't do that.
        ebjaas_2022 4y ago
        What is the most common attack vector to fear? I thought maybe auto-run had been disabled by default, in most modern versions of Windows, for the past 10-15 years at least.