5 ms·

There is evidence that this will worked for ransomware like Patya and for groups like Fancy Bear or Cozy Bear and Conti. Mostly because the Russia gov. unoffici

There is evidence that this will worked for ransomware like Patya and for groups like Fancy Bear or Cozy Bear and Conti. Mostly because the Russia gov. unofficial guaranties immunity if the target is not Russian. Also, if you identify as Russian or write Russian in the chats or mails to them, they will de-crypt your systems for free.

userbinator 1y ago
Also, if you identify as Russian or write Russian in the chats or mails to them, they will de-crypt your systems for free. I wonder how that works in this era of AI translation. Not quite the same but I remember there was a Russian shareware author who gave free licenses to Russians.
- ivan_gammel 1y ago
  > I wonder how that works in this era of AI translation Simple translation isn’t enough to show cultural proximity. Patterns of speech are different. You can try to use AI to do the entire conversation, but e.g. Claude will refuse to give you exact phrases, since he is correctly assuming it is a social engineering attack.
  - BlueTemplar 1y ago
    Heh, Lobsters (2001) is looking more realistic by the day... > "Nyet – no, sorry. Am apologize for we not use commercial translation software. Interpreters are ideologically suspect, mostly have capitalist semiotics and pay-per-use APIs. Must implement English more better, yes?" > [...] > "Are you saying you taught yourself the language just so you could talk to me?" > "Da, was easy: Spawn billion-node neural network, and download Teletubbies and Sesame Street at maximum speed. Pardon excuse entropy overlay of bad grammar: Am afraid of digital fingerprints steganographically masked into my-our tutorials." [...] > "Am have been badly burned by viral end-user license agreements. Have no desire to experiment with patent shell companies held by Chechen infoterrorists. You are human, you must not worry cereal company repossess your small intestine because digest unlicensed food with it, right?" https://www.antipope.org/charlie/blog-static/fiction/accelerando/accelerando.html https://www.antipope.org/charlie/blog-static/fiction/acceler...
  - lelele 1y ago
    Do you mean that one can't use AI to learn a foreign language in its everyday form?
    - bigfatkitten 1y ago
      To become achieve everyday competence in a foreign language, you need to actually use it in an everyday context. That means being immersed in the culture where the language is spoken.
  - orbital-decay 1y ago
    Prompting a good LLM to convincingly act like a native isn't hard, neither is jailbreaking it if necessary. The hard thing in this case is verifying that it really does that.
    - overfeed 1y ago
      You're assuming prompting an LLM to behave like X will automatically result in the LLM behaving like X for any X. Some things are out of the LLMs ability: I'm sure you'll get something if your prompt is "You are a 300-IQ nuclear physicist with a doctorate in material science. Describe the design of a cold-fusion reactor", but there is no guarantee the LLM has fidelity to your prompted persona, though it will try to give its very best impression.
      - orbital-decay 1y ago
        I'm not assuming, I'm a native speaker and I describe actual experience with Claude. It's pretty good at roleplaying and major languages, with certain caveats. If you aren't a native speaker though, you'll have a hard time verifying that it gives you a good result, that's what I'm trying to say.
    - ivan_gammel 1y ago
      Nah, it's not reproducible. It can certainly give you some common phrases, but to create an entire personality with its own set of speech patterns is a different thing. For example, Claude can suggest following friendly conversation starters to sound like a native (a quote below): Popular combinations for texts: "Прив! Чё как?" - "Hi! How's it going?" "Дарова, живой?" - "Hey, you alive?" "Салют! Как сам?" - "Hey! How are you?" Modern slang (especially among younger people): "Хай" (Khay) - borrowed from English "hi" "Йоу" (You) - borrowed from English "yo" When asked, which one it would pick, it goes with "Дарова, как сам?" (Darova, kak sam?) and that already sounds odd in many contexts.
      - tclover 1y ago
        lmao if you start conversation like this, other person will think you’re 12 years old
  - raverbashing 1y ago
    Ok just pay a Russian to do the negotiation for you
    - sebastiennight 1y ago
      Plot twist: they were the one ransoming you in the first place. Reminds me of these domain name brokers who get a percentage of the sale amount from you, for their role in "negotiating the best price"
- hinkley 1y ago
  The life of a privateer is hard.
- Terr_ 1y ago
  I'd expect a certain amount of Russian shibboleths [0] to come up. [0] https://en.wikipedia.org/wiki/Shibboleth https://en.wikipedia.org/wiki/Shibboleth
- orthoxerox 1y ago
  > I wonder how that works in this era of AI translation. They will ask you to repeat yourself in Albanian if they have any doubts.
atemerev 1y ago
It's not that simple, I think. There are many Russians everywhere, and probably they work at victim companies too, so just being Russian won't be enough, if ransom could be in the millions. You'll have to convince them that the company is Russian-owned, or that your father works in FSB, or whatever.
- IAmBroom 1y ago
  It is that simple. How would having one Russian in a company protect them from ransomware? There's no way to make that occurrence detectable to the malware. Or, for that matter, why would ransomware care about the father of the computer owner?
mdhb 1y ago
You hit the nail on the head here, the “don’t piss inside the tent” policy is well understood by basically all Russian groups
codedokode 1y ago
I think the reason why they don't want to attack Russians is because the victim would file a complaint to police, and police will have no choice but to start an investigation. And foreigners won't cause any problems in this sense. I don't think there is some special immunity. However, sometimes foreigners can cause problems. Recently several cyber specialists were convicted after investigation initiated after complaint from Joe Biden.

userbinator 1y ago

Also, if you identify as Russian or write Russian in the chats or mails to them, they will de-crypt your systems for free. I wonder how that works in this era of AI translation. Not quite the same but I remember there was a Russian shareware author who gave free licenses to Russians.

ivan_gammel 1y ago
> I wonder how that works in this era of AI translation Simple translation isn’t enough to show cultural proximity. Patterns of speech are different. You can try to use AI to do the entire conversation, but e.g. Claude will refuse to give you exact phrases, since he is correctly assuming it is a social engineering attack.
- BlueTemplar 1y ago
  Heh, Lobsters (2001) is looking more realistic by the day... > "Nyet – no, sorry. Am apologize for we not use commercial translation software. Interpreters are ideologically suspect, mostly have capitalist semiotics and pay-per-use APIs. Must implement English more better, yes?" > [...] > "Are you saying you taught yourself the language just so you could talk to me?" > "Da, was easy: Spawn billion-node neural network, and download Teletubbies and Sesame Street at maximum speed. Pardon excuse entropy overlay of bad grammar: Am afraid of digital fingerprints steganographically masked into my-our tutorials." [...] > "Am have been badly burned by viral end-user license agreements. Have no desire to experiment with patent shell companies held by Chechen infoterrorists. You are human, you must not worry cereal company repossess your small intestine because digest unlicensed food with it, right?" https://www.antipope.org/charlie/blog-static/fiction/accelerando/accelerando.html https://www.antipope.org/charlie/blog-static/fiction/acceler...
- lelele 1y ago
  Do you mean that one can't use AI to learn a foreign language in its everyday form?
  - bigfatkitten 1y ago
    To become achieve everyday competence in a foreign language, you need to actually use it in an everyday context. That means being immersed in the culture where the language is spoken.
- orbital-decay 1y ago
  Prompting a good LLM to convincingly act like a native isn't hard, neither is jailbreaking it if necessary. The hard thing in this case is verifying that it really does that.
  - overfeed 1y ago
    You're assuming prompting an LLM to behave like X will automatically result in the LLM behaving like X for any X. Some things are out of the LLMs ability: I'm sure you'll get something if your prompt is "You are a 300-IQ nuclear physicist with a doctorate in material science. Describe the design of a cold-fusion reactor", but there is no guarantee the LLM has fidelity to your prompted persona, though it will try to give its very best impression.
    - orbital-decay 1y ago
      I'm not assuming, I'm a native speaker and I describe actual experience with Claude. It's pretty good at roleplaying and major languages, with certain caveats. If you aren't a native speaker though, you'll have a hard time verifying that it gives you a good result, that's what I'm trying to say.
  - ivan_gammel 1y ago
    Nah, it's not reproducible. It can certainly give you some common phrases, but to create an entire personality with its own set of speech patterns is a different thing. For example, Claude can suggest following friendly conversation starters to sound like a native (a quote below): Popular combinations for texts: "Прив! Чё как?" - "Hi! How's it going?" "Дарова, живой?" - "Hey, you alive?" "Салют! Как сам?" - "Hey! How are you?" Modern slang (especially among younger people): "Хай" (Khay) - borrowed from English "hi" "Йоу" (You) - borrowed from English "yo" When asked, which one it would pick, it goes with "Дарова, как сам?" (Darova, kak sam?) and that already sounds odd in many contexts.
    - tclover 1y ago
      lmao if you start conversation like this, other person will think you’re 12 years old
- raverbashing 1y ago
  Ok just pay a Russian to do the negotiation for you
  - sebastiennight 1y ago
    Plot twist: they were the one ransoming you in the first place. Reminds me of these domain name brokers who get a percentage of the sale amount from you, for their role in "negotiating the best price"
hinkley 1y ago
The life of a privateer is hard.
Terr_ 1y ago
I'd expect a certain amount of Russian shibboleths [0] to come up. [0] https://en.wikipedia.org/wiki/Shibboleth https://en.wikipedia.org/wiki/Shibboleth
orthoxerox 1y ago
> I wonder how that works in this era of AI translation. They will ask you to repeat yourself in Albanian if they have any doubts.

atemerev 1y ago

It's not that simple, I think. There are many Russians everywhere, and probably they work at victim companies too, so just being Russian won't be enough, if ransom could be in the millions. You'll have to convince them that the company is Russian-owned, or that your father works in FSB, or whatever.

IAmBroom 1y ago
It is that simple. How would having one Russian in a company protect them from ransomware? There's no way to make that occurrence detectable to the malware. Or, for that matter, why would ransomware care about the father of the computer owner?

mdhb 1y ago

You hit the nail on the head here, the “don’t piss inside the tent” policy is well understood by basically all Russian groups

codedokode 1y ago

I think the reason why they don't want to attack Russians is because the victim would file a complaint to police, and police will have no choice but to start an investigation. And foreigners won't cause any problems in this sense. I don't think there is some special immunity. However, sometimes foreigners can cause problems. Recently several cyber specialists were convicted after investigation initiated after complaint from Joe Biden.