3 ms·
Judging by what Boeing said (but could just be damage control I guess), it doesn't seem like you're that lucky: > Elements of Boeing's parts and distribution b
by capableweb 3y ago
Judging by what Boeing said (but could just be damage control I guess), it doesn't seem like you're that lucky:
> Elements of Boeing's parts and distribution business recently experienced a cybersecurity incident
Sounds like boring data for the curious mind, unless logistics is your vice.
- civilitty 3y agoVery boring. Most of the files are MSSQL database backups according to trid, mostly for random Citrix, Ivanti, and so on services. I'm still downloading data.zip and boeing.com.7z to see if there's anything juicy there (also unlikely) That said, I'm learning a lot about digital forensics
- neilv 3y agoWhat are the ethical guidelines here? Some victim has been violated by a criminal, with the breaking in and stealing and threats, but doesn't further violation happen when others pile onto that? Also, isn't the threat of releasing the information that the victim will be further violated by others if the information is released, and so those others could arguably be seen as enforcers for the criminal threat?
- mainpassathome 3y agoi bet you pay for all your digital media
- neilv 3y agoLike most people, I generally try to do the right thing. My ideas of what's the right thing, and how determined I am about it, change over time. One reason for change is receiving new information, or realizing a different way of looking at a situation.
- midasuni 3y agoI bet you pay rent
- genewitch 3y agoI lay 3 for 2 they use airmon-ng and squat.
- civilitty 3y agoNo idea but the ethics of this are fascinating. At first I was on the side of absolute freedom especially since I'm just satisfying a personal curiosity but this has led me down a rabbit hole of leaks where I'm not so sure. The ethics of using any of this information commercially is murky at best. A group called ALPHV (who AFAICT was responsible for the MGM resort outage) even makes an API available and indexes their leaks so users can search through them and download individual files. One particular leak for the 3-D Engineering Corporation caught my eye - I can see a bunch of Solidworks parts and assemblies from just a quick glance of the file list. I'm betting there's some ITAR violating files in there which makes me feel icky. Any serious leak from Boeing could contain stuff that's actually relevant to natsec. That said, we are talking about Boeing here, which was recently responsible for negligently killing hundreds of people. I'm inclined to say "fuck their right to confidentiality."
- neilv 3y ago> That said, we are talking about Boeing here, which was recently responsible for negligently killing hundreds of people. I'm inclined to say "fuck their right to confidentiality." Lose their right to confidentiality wrt public interest independent investigation of the 737 MAX 8 and/or other possible wrongdoing/dysfunction? Or lose their right to confidentiality just in general, as a kind of mob justice lite? In both cases, how clearly can we distinguish logical reasonings in pursuit of justice, and convenient rationalization for something we wanted to do anyway?
- lazide 3y agoIf you’re asking if ‘Bad people’ get the same empathy as anyone else, then of course not. Always been that way.
- idontknowwhynot 3y agoIt may seem like boring data at first, but that kind of data is gold mine for hackers seeking to learn about Boeing internals and partners to enhance their social engineering attacks (people's name, methods of authentication, software used, password policy etc)
- capableweb 3y agoYes, but the context was information that would be useful for curious minds (that wanna, lets say build their own jet engine). For that purpose, these documents don't seem all that useful.