4 ms·

Trump has ~91k files in the data https://pbs.twimg.com/media/GomVrWxWMAA5S-_?format=jpg&name=900x900 https://pbs.twimg.com/media/GomVrWxWMAA5S-_?format=jpg&nam

Trump has ~91k files in the data https://pbs.twimg.com/media/GomVrWxWMAA5S-_?format=jpg&name=900x900 https://pbs.twimg.com/media/GomVrWxWMAA5S-_?format=jpg&name=... [edit] site down - reddit link to the 10tb https://www.reddit.com/r/worldnews/comments/1k0h9uu/anonymous_releases_10tb_of_leaked_data_exposing/mne3ad7/ https://www.reddit.com/r/worldnews/comments/1k0h9uu/anonymou... Also x link to data https://x.com/YourAnonFrench_/status/1912099907038572980 https://x.com/YourAnonFrench_/status/1912099907038572980

petee 1y ago
I'll happily wait for someone else to open that archive and let us know whats in the folder. Somehow feels like a great way to get a bunch of people to download a rar with a zero day
- bgwalter 1y ago
  Yes, an example: https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/ https://blog.google/threat-analysis-group/government-backed-... I also do not understand how Anonymous would sift through 10TB to confirm the validity of the claims.
  - deleted 1y ago
    [deleted]
  - Rygian 1y ago
    > Instead of bailing out, ShellExecute proceeds to call “shell32!ApplyDefaultExts” which iterates through all files in a directory, finding and executing the first file with an extension matching any of the hardcoded ones: “.pif, .com, .exe, .bat, .lnk, .cmd”. So the vulnerability is not in WinRAR, but rather in the ShellExecute windows code that desperately tries to find something else to run when asked to execute a file that does not exist. As my security officer says at $dayJob, "having a security hole there for thirty years does not make it somehow less of a security hole".
- deleted 1y ago
  [deleted]
- Sonnigeszeug 1y ago
  So always wait for others to do something? Don't just download it on your windows home pc with your private data of course.
  - petee 1y ago
    In some cases, yes. An unknown threat, potentially from the supposed nation-state target itself, has a very high risk. I'm not versed in creating ultra-sterile lab conditions -- things can escape VMs, escape your network, nothing is impossible. Do I instead bring it to my employers systems and let them take the risk? And to what benefit, when I can just wait?
    - Sonnigeszeug 1y ago
      Cloud VM. Costs you a dollar per hour and has fast download speed. We are experts on HN. If we don't do it, others with less knowledge might or not might. And no, a archive file doesn't just include a zero day. A zero day is very valuable.
      - petee 1y ago
        Fair enough, my morning brain didn't think cloud, though i guess one could argue you're still passing off the risk onto someone else. Either way, its not my expertise
        genewitch 1y ago
        Passing the risk for a price. AWS is expensive, in my mind, because of stuff like this. They don't want you to nirror it on aws, so egress is expensive. The $/GB/month storage fees it'll cost to store this while exploring it is not cheap, either. And once you have an idea of the data you want to move out of the gap, you want to process /extract it quickly (because of $/GB/Month costs...) I just thought about a spare machine I have with a 12TB spindle and an SSD not plugged into a network. I understand how to airgap, and unless something can magically worm it's way through HDMI that's probably how I'd get data out, just to be annoying to everyone. To be fair.
close04 1y ago
> Trump has ~91k files in the data That's the size column in WinRAR (left of the Compressed column). Is it by coincidence also the number of files?
- nottorp 1y ago
  Judging by the OP's profile, we should be happy that the "AI" managed to recognize a number :)
  - deepnet 1y ago
    I am not an LLM [edit] ( as far as I know ;-), but thanks for the profile crit I probably should tidy it up.
    - nottorp 1y ago
      Yep, the safe assumption with a profile like that is that it's something automated. Also yes, that's the file size column. Uncompressed left, compressed right. It's a directory but the screenshot doesn't say how many files it contains.
      - deepnet 1y ago
        Thank you German is not my strong point
        nottorp 1y ago
        Can't say I speak German, but at the top there is a Grose: nnn.nnn.nn.nn bytes.
LANcaster 1y ago
How 18.84GB file is 10TB?
- jijijijij 1y ago
  Probably mostly text, which is highly compressible.

petee 1y ago

I'll happily wait for someone else to open that archive and let us know whats in the folder. Somehow feels like a great way to get a bunch of people to download a rar with a zero day

bgwalter 1y ago
Yes, an example: https://blog.google/threat-analysis-group/government-backed-actors-exploiting-winrar-vulnerability/ https://blog.google/threat-analysis-group/government-backed-... I also do not understand how Anonymous would sift through 10TB to confirm the validity of the claims.
- deleted 1y ago
  [deleted]
- Rygian 1y ago
  > Instead of bailing out, ShellExecute proceeds to call “shell32!ApplyDefaultExts” which iterates through all files in a directory, finding and executing the first file with an extension matching any of the hardcoded ones: “.pif, .com, .exe, .bat, .lnk, .cmd”. So the vulnerability is not in WinRAR, but rather in the ShellExecute windows code that desperately tries to find something else to run when asked to execute a file that does not exist. As my security officer says at $dayJob, "having a security hole there for thirty years does not make it somehow less of a security hole".
deleted 1y ago
[deleted]
Sonnigeszeug 1y ago
So always wait for others to do something? Don't just download it on your windows home pc with your private data of course.
- petee 1y ago
  In some cases, yes. An unknown threat, potentially from the supposed nation-state target itself, has a very high risk. I'm not versed in creating ultra-sterile lab conditions -- things can escape VMs, escape your network, nothing is impossible. Do I instead bring it to my employers systems and let them take the risk? And to what benefit, when I can just wait?
  - Sonnigeszeug 1y ago
    Cloud VM. Costs you a dollar per hour and has fast download speed. We are experts on HN. If we don't do it, others with less knowledge might or not might. And no, a archive file doesn't just include a zero day. A zero day is very valuable.
    - petee 1y ago
      Fair enough, my morning brain didn't think cloud, though i guess one could argue you're still passing off the risk onto someone else. Either way, its not my expertise
      - genewitch 1y ago
        Passing the risk for a price. AWS is expensive, in my mind, because of stuff like this. They don't want you to nirror it on aws, so egress is expensive. The $/GB/month storage fees it'll cost to store this while exploring it is not cheap, either. And once you have an idea of the data you want to move out of the gap, you want to process /extract it quickly (because of $/GB/Month costs...) I just thought about a spare machine I have with a 12TB spindle and an SSD not plugged into a network. I understand how to airgap, and unless something can magically worm it's way through HDMI that's probably how I'd get data out, just to be annoying to everyone. To be fair.

close04 1y ago

> Trump has ~91k files in the data That's the size column in WinRAR (left of the Compressed column). Is it by coincidence also the number of files?

nottorp 1y ago
Judging by the OP's profile, we should be happy that the "AI" managed to recognize a number :)
- deepnet 1y ago
  I am not an LLM [edit] ( as far as I know ;-), but thanks for the profile crit I probably should tidy it up.
  - nottorp 1y ago
    Yep, the safe assumption with a profile like that is that it's something automated. Also yes, that's the file size column. Uncompressed left, compressed right. It's a directory but the screenshot doesn't say how many files it contains.
    - deepnet 1y ago
      Thank you German is not my strong point
      - nottorp 1y ago
        Can't say I speak German, but at the top there is a Grose: nnn.nnn.nn.nn bytes.

LANcaster 1y ago

How 18.84GB file is 10TB?

jijijijij 1y ago
Probably mostly text, which is highly compressible.