3 ms·
The difference is, Rob Graham isn't going to compromise the box and use it to mask the origin of future scans and malware attacks.
by opendais 12y ago
The difference is, Rob Graham isn't going to compromise the box and use it to mask the origin of future scans and malware attacks.
- munin 12y agoWill he? What about the tens of thousands of other people that can run that tool? What about people that can type queries into SHODAN? Why are they not problems? If you don't think that you government should spy, that's fine, a lot of very respectable people have had this opinion over the course of human history. I just don't buy the remediation story, at all.
- opendais 12y ago> Will he? What about the tens of thousands of other people that can run that tool? What about people that can type queries into SHODAN? Why are they not problems? You seem to conveniently ignore the fact they are doing this with the intent to exploit. Its cute and all but honestly, anyone who is going to do that then seek to compromise a box is a problem. Its the intent of compromising the box that is the issue, not simply scanning. Did you not RTFA? "The covert infrastructure includes so-called Operational Relay Boxes (ORBs), which are used to hide the location of the attacker when the Five Eyes launch exploits against targets or steal data (Figure 18). Several times a year, the spy club tries to take control of as many machines as possible, as long as they are abroad. For example, in February 2010 twentyfour spies located over 3000 potential ORBs in a single work day (Figure 19). However, going over the port scan results provided by HACIENDA was considered too laborous (Figure 20), so they programmed their OLYMPIA system to automate the process (Figure 21). As a result, the spies brag that they can now locate vulnerable devices in a subnet in less than five minutes (Figure 22)."
- colordrops 12y agoHow do you know that?