2 ms·

Ok.. I appreciate how the FBI assisted in cleaning our routers/ip's. But is this story possibly alluding to the fact that the FBI did NOT disclose the potentia

by mkatx 3y ago

Ok.. I appreciate how the FBI assisted in cleaning our routers/ip's. But is this story possibly alluding to the fact that the FBI did NOT disclose the potential 0 days used in these attacks in accordance with responsibile disclosures, and instead is likely retaining these zero days for their own use?

rasz 3y ago
Because those arent 0 days. Those routers/doorbells/fridges will never receive updates. I wonder if the OG Mirai minecraft server wars botnet hackers working for FBI now were part of this task force. Original story https://www.wired.com/story/mirai-botnet-minecraft-scam-brought-down-the-internet/ https://www.wired.com/story/mirai-botnet-minecraft-scam-brou... Fantastic follow up https://www.wired.com/story/mirai-untold-story-three-young-hackers-web-killing-monster/ https://www.wired.com/story/mirai-untold-story-three-young-h...
- mkatx 3y ago
  Thanks for the follow up. Dunno if I missed it in the article, but I did not notice it specifying if the attack was via 0 day or not, that's why I speculated the possibility. Where did you read that they are not 0 days?
  - rasz 3y ago
    Im speculating based on the Mirai story. Botnet like that doesnt just use one vulnerability. Later Mirai variants pack over 100 attack vectors gathered/traded on malware forums, almost none are ever 0days.
    - mkatx 3y ago
      Makes sense, thanks!