3 ms·

Way more likely US hacked Google way before China via insiders, networks, legal pressure, etc.; my response to watching the first episode: https://www.youtube.

Way more likely US hacked Google way before China via insiders, networks, legal pressure, etc.; my response to watching the first episode: https://www.youtube.com/watch?v=przDcQe6n5o https://www.youtube.com/watch?v=przDcQe6n5o ___________________ Links related to video: Tech Model Railroad Club - https://wikipedia.org/wiki/Tech_Model_Railroad_Club https://wikipedia.org/wiki/Tech_Model_Railroad_Club Operation Aurora - https://wikipedia.org/wiki/Operation_Aurora https://wikipedia.org/wiki/Operation_Aurora

yreg 4y ago
*Zeroth episode :)
ren_engineer 4y ago
can you really be hacked if you were a DARPA funded honey pot from day 1? I'd say the main reason Google and many of the other big tech companies haven't faced much effort from the US government to be broken up is because federal agencies love being able to get a bunch of info on people through a single subpoena
jspann 4y ago
Is that Spencer Grammer narrating the video? The narrator's voice sounds incredibly familiar.
O__________O 4y ago
Episode 2: Google Threat Analysis Group (TAG) - https://www.youtube.com/watch?v=N7N4EC20-cM https://www.youtube.com/watch?v=N7N4EC20-cM Summary: Google covers how they use Google’s web crawler to build a threat analysis database, then cover how they protect users from government backed attackers using phishing by providing two-factor authentication. Response: Strange, seems like offering end-to-end-encryption would likely protect more users from government backed snooping — but then I guess that would mean Google on was not able to snoop on billions of users. Links related to video: "Government backed attackers may be trying to steal your password" - https://www.google.com/search?q=%22government+backed+attackers+may+be+trying+to+steal+your+password%22&tbm=isch https://www.google.com/search?q=%22government+backed+attacke...
- markoman 4y ago
  Here's Episode 002 Detection and Response, released within the hour: https://www.youtube.com/watch?v=QZ0cpBocl3c https://www.youtube.com/watch?v=QZ0cpBocl3c Probably the best one yet.
  - O__________O 4y ago
    Thanks! _______________________ EP002: Detection and Response (3rd video) Summary: Covers Google’s Incident Response Team and targeted attacks against security experts. Links to topics mentioned in video: - https://wikipedia.org/wiki/Union_Fire_Company https://wikipedia.org/wiki/Union_Fire_Company - https://wikipedia.org/wiki/Incident_response_team https://wikipedia.org/wiki/Incident_response_team - https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/ https://blog.google/threat-analysis-group/new-campaign-targe... - https://blog.google/threat-analysis-group/update-campaign-targeting-security-researchers/ https://blog.google/threat-analysis-group/update-campaign-ta... _________________ Response: Targeted attacks and insider threats specifically for security professionals have been around forever. Fake profiles, trust-based pig back attacks, watering hole attacks, hack the hacker, honeypots, bribes, blackmail, break-ins, etc — aka hunting the keys to the kingdom. Prior examples: - https://www.latimes.com/archives/la-xpm-2000-sep-19-fi-23373-story.html https://www.latimes.com/archives/la-xpm-2000-sep-19-fi-23373... - https://www.cnet.com/news/privacy/google-china-insiders-may-have-helped-with-attack/ https://www.cnet.com/news/privacy/google-china-insiders-may-... - https://www.theverge.com/2014/2/24/5441386/ethical-hacking-organization-website-defaced-with-snowden-passport https://www.theverge.com/2014/2/24/5441386/ethical-hacking-o... - https://wikipedia.org/wiki/Vault_7 https://wikipedia.org/wiki/Vault_7 - https://www.businessinsider.com/fireeye-hacked-nation-state-red-team-fbi-2020-12 https://www.businessinsider.com/fireeye-hacked-nation-state-...
    - markoman 4y ago
      And now comes: EP003: Red Team https://www.youtube.com/watch?v=TusQWn2TQxQ https://www.youtube.com/watch?v=TusQWn2TQxQ (4th video, in 0th indexing) Things are getting interesting! The next video (004) is titled 'BUG HUNTERS'. I think it refers to bug bounty programs?
CobrastanJorji 4y ago
The U.S. certainly hacked Google. That was part of Snowden's reveal. Remember the NSA slide with a little map of Google's networking and a smiley face indicating the weak point (assuming one had an ally with a submarine and the capability to tap undersea fiber): https://www.washingtonpost.com/rf/image_404h/2010-2019/WashingtonPost/2013/10/30/Local/Images/GOOGLE-CLOUD-EXPLOITATION1383148810.jpg https://www.washingtonpost.com/rf/image_404h/2010-2019/Washi... I think there's a pretty good chance the China thing happened first, though. That was 2009, and I like to hope that Google didn't the NSA's activity for over five years.
- kbenson 4y ago
  My understanding from someone that worked there is that they were aware of it (if not with definitive proof of who) before Snowden, which is why they started their initiative to encrypt all datacenter-to-datacenter traffic.
  - kyrra 4y ago
    Googler, opinions are my own Btw, circa 2013 for those that are interested: https://www.theverge.com/2013/11/6/5072924/google-engineers-issue-fuck-you-to-nsa-over-surveillance-scandal https://www.theverge.com/2013/11/6/5072924/google-engineers-... From the WashingtonPost article on this, here's a TLDR: Google didn't use to encrypt traffic between datacenters, as the lines were wholly owned by Google, so they thought they had nothing to fear. Snowden reveled that the NSA had tapped some of these fiber lines, then reverse-engineered the network encoding for protos (it wasn't the same as GRPC now uses), and were using it to decode messages going between datacenters. This ended up speeding up an effort to encrypt all network traffic on Google's network.

yreg 4y ago

*Zeroth episode :)

ren_engineer 4y ago

can you really be hacked if you were a DARPA funded honey pot from day 1? I'd say the main reason Google and many of the other big tech companies haven't faced much effort from the US government to be broken up is because federal agencies love being able to get a bunch of info on people through a single subpoena

jspann 4y ago

Is that Spencer Grammer narrating the video? The narrator's voice sounds incredibly familiar.

O__________O 4y ago

Episode 2: Google Threat Analysis Group (TAG) - https://www.youtube.com/watch?v=N7N4EC20-cM https://www.youtube.com/watch?v=N7N4EC20-cM Summary: Google covers how they use Google’s web crawler to build a threat analysis database, then cover how they protect users from government backed attackers using phishing by providing two-factor authentication. Response: Strange, seems like offering end-to-end-encryption would likely protect more users from government backed snooping — but then I guess that would mean Google on was not able to snoop on billions of users. Links related to video: "Government backed attackers may be trying to steal your password" - https://www.google.com/search?q=%22government+backed+attackers+may+be+trying+to+steal+your+password%22&tbm=isch https://www.google.com/search?q=%22government+backed+attacke...

markoman 4y ago
Here's Episode 002 Detection and Response, released within the hour: https://www.youtube.com/watch?v=QZ0cpBocl3c https://www.youtube.com/watch?v=QZ0cpBocl3c Probably the best one yet.
- O__________O 4y ago
  Thanks! _______________________ EP002: Detection and Response (3rd video) Summary: Covers Google’s Incident Response Team and targeted attacks against security experts. Links to topics mentioned in video: - https://wikipedia.org/wiki/Union_Fire_Company https://wikipedia.org/wiki/Union_Fire_Company - https://wikipedia.org/wiki/Incident_response_team https://wikipedia.org/wiki/Incident_response_team - https://blog.google/threat-analysis-group/new-campaign-targeting-security-researchers/ https://blog.google/threat-analysis-group/new-campaign-targe... - https://blog.google/threat-analysis-group/update-campaign-targeting-security-researchers/ https://blog.google/threat-analysis-group/update-campaign-ta... _________________ Response: Targeted attacks and insider threats specifically for security professionals have been around forever. Fake profiles, trust-based pig back attacks, watering hole attacks, hack the hacker, honeypots, bribes, blackmail, break-ins, etc — aka hunting the keys to the kingdom. Prior examples: - https://www.latimes.com/archives/la-xpm-2000-sep-19-fi-23373-story.html https://www.latimes.com/archives/la-xpm-2000-sep-19-fi-23373... - https://www.cnet.com/news/privacy/google-china-insiders-may-have-helped-with-attack/ https://www.cnet.com/news/privacy/google-china-insiders-may-... - https://www.theverge.com/2014/2/24/5441386/ethical-hacking-organization-website-defaced-with-snowden-passport https://www.theverge.com/2014/2/24/5441386/ethical-hacking-o... - https://wikipedia.org/wiki/Vault_7 https://wikipedia.org/wiki/Vault_7 - https://www.businessinsider.com/fireeye-hacked-nation-state-red-team-fbi-2020-12 https://www.businessinsider.com/fireeye-hacked-nation-state-...
  - markoman 4y ago
    And now comes: EP003: Red Team https://www.youtube.com/watch?v=TusQWn2TQxQ https://www.youtube.com/watch?v=TusQWn2TQxQ (4th video, in 0th indexing) Things are getting interesting! The next video (004) is titled 'BUG HUNTERS'. I think it refers to bug bounty programs?

CobrastanJorji 4y ago

The U.S. certainly hacked Google. That was part of Snowden's reveal. Remember the NSA slide with a little map of Google's networking and a smiley face indicating the weak point (assuming one had an ally with a submarine and the capability to tap undersea fiber): https://www.washingtonpost.com/rf/image_404h/2010-2019/WashingtonPost/2013/10/30/Local/Images/GOOGLE-CLOUD-EXPLOITATION1383148810.jpg https://www.washingtonpost.com/rf/image_404h/2010-2019/Washi... I think there's a pretty good chance the China thing happened first, though. That was 2009, and I like to hope that Google didn't the NSA's activity for over five years.

kbenson 4y ago
My understanding from someone that worked there is that they were aware of it (if not with definitive proof of who) before Snowden, which is why they started their initiative to encrypt all datacenter-to-datacenter traffic.
- kyrra 4y ago
  Googler, opinions are my own Btw, circa 2013 for those that are interested: https://www.theverge.com/2013/11/6/5072924/google-engineers-issue-fuck-you-to-nsa-over-surveillance-scandal https://www.theverge.com/2013/11/6/5072924/google-engineers-... From the WashingtonPost article on this, here's a TLDR: Google didn't use to encrypt traffic between datacenters, as the lines were wholly owned by Google, so they thought they had nothing to fear. Snowden reveled that the NSA had tapped some of these fiber lines, then reverse-engineered the network encoding for protos (it wasn't the same as GRPC now uses), and were using it to decode messages going between datacenters. This ended up speeding up an effort to encrypt all network traffic on Google's network.