3 ms·
The Reuters story (https://www.reuters.com/investigates/special-report/usa-spies-iran/ https://www.reuters.com/investigates/special-report/usa-spie...) made thi
by nneonneo 3y ago
The Reuters story (https://www.reuters.com/investigates/special-report/usa-spies-iran/ https://www.reuters.com/investigates/special-report/usa-spie...) made this more explicit: there was a password field on the site, poorly disguised as a search feature, that would open a chat box when the right password was entered, into which the source could enter messages. On many of these sites, the password is validated by a bit of obfuscated JavaScript, which then loads a Java applet implementing the actual chat window.
- figassis 3y agoWow, these guys really did not give a damn about informants. That is some high school level amateur work. Sequential ips, password field, I wonder if they even used ssl. If they did, likely some US affiliated vendor.
- DanAtC 3y agoAnyone with better skills is in the private market making a lot more money.
- cirosantilli 3y agoYeah. They just didn't have the patience to setup separate ranges for each of their ~900 sites. It's quite sad.