3 ms·
So my assumption is that spies in foreign countries would periodically visit these websites to receive coded instructions in the news updates? And maybe they m
by CSMastermind 3y ago
So my assumption is that spies in foreign countries would periodically visit these websites to receive coded instructions in the news updates?
And maybe they made the websites tailored to the individual asset's interests so it looks less suspicious when they visit?
Meaning if your source is a huge star wars nerd you make a star wars fan site for them to check out?
Presumably there's no way for the source to send information back through these websites right?
- nneonneo 3y agoThe Reuters story (https://www.reuters.com/investigates/special-report/usa-spies-iran/ https://www.reuters.com/investigates/special-report/usa-spie...) made this more explicit: there was a password field on the site, poorly disguised as a search feature, that would open a chat box when the right password was entered, into which the source could enter messages. On many of these sites, the password is validated by a bit of obfuscated JavaScript, which then loads a Java applet implementing the actual chat window.
- figassis 3y agoWow, these guys really did not give a damn about informants. That is some high school level amateur work. Sequential ips, password field, I wonder if they even used ssl. If they did, likely some US affiliated vendor.
- DanAtC 3y agoAnyone with better skills is in the private market making a lot more money.
- cirosantilli 3y agoYeah. They just didn't have the patience to setup separate ranges for each of their ~900 sites. It's quite sad.