4 ms·

During Operation Aurora the Chinese hacked into the FBI backdoor built into GMail by Google and used it to gather information about intelligence operations bein

During Operation Aurora the Chinese hacked into the FBI backdoor built into GMail by Google and used it to gather information about intelligence operations being performed by the United States against Chinese nationals [citation needed]

deleted 11y ago
[deleted]
themeek 11y ago
"operation aurora fbi backdoor" https://www.google.com/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=operation%20aurora%20fbi%20backdoor https://www.google.com/webhp?sourceid=chrome-instant&ion=1&e...
- meowface 11y ago
  Hmm, I don't think you're totally right. >Former government officials with knowledge of the breach said attackers successfully accessed a database that flagged Gmail accounts marked for court-ordered wiretaps. To me it sounds like Gmail was compromised, and during the compromise, the attackers identified a database containing information that was of great intelligence value to them. This database does not appear to have been the vector that allowed the attackers to get in, nor was it a "backdoor". I suspect the attackers also had access to many, many other databases. It's certainly possible the primary intended goal of the breach was to access this information (for counter-intelligence purposes), but it's not how they actually got in, nor did it help them get in.
  - themeek 11y ago
    Continue to read. You will find that this was the target of the operation. It was not the vector that allowed them to get in (not soley). It is usually the case that a successful breach gives very wide access, so I would suspect this as well. I think you'll find that on the whole I am right. That the system was there for US intelligence and the Chinese were there for counter-espionage and that the backdoor allowed the Chinese used the system to access email information that they would have had to compromise a different way to get - thus their getting access through a back door.
    - meowface 11y ago
      There are a lot of security analysts who say the target of the operation was indeed that database, and there's certainly a good chance of that, but still, it's definitely not the same as a backdoor.
      - themeek 11y ago
        I'm afraid this is heading the direction of 'let's define a backdoor'. What remains true is that China targeted a system built for the FBI to get unencrypted access to GMail systems and customer data that did not require 'front door' access. Many people here would call a service run for the FBI without oversight or a lengthy and transparent approval process with the requirement for a warrant a backdoor. We don't have to call it that if you don't like - I think the terminology is not so important for the point. I will leave the semantic discussion to whether such a system constituted a 'front door' or a 'back door' to folks who enjoy such deliberations. Ultimately I hope that readers see how hacking of 'side systems' built for intelligence agencies to make full data requests have been used to gain access to the larger systems they connect - in the spirit of the original thread.
        magicalist 11y ago
        > Many people here would call a service run for the FBI without oversight or a lengthy and transparent approval process with the requirement for a warrant a backdoor Er, what? No one would call it a front or back door. If someone gets root access to my machine and uses that to get access to data on my machine, that data was not the entry point. The phrase "without oversight or a lengthy and transparent approval process with the requirement for a warrant" shows what a red herring this is.
        themeekforgotpw 11y ago
        Right, but if there is a system to access your machine without your usual creds and that system gets hacked, that's backdoor access. You can say - the system for US intelligence is like 'another account' or a 'second root' and is known to Google and so it is not a backdoor - but is that really within the spirit of the discussion? If you didn't understand that this was a separate system with separate access data, specifically for law enforcement requests, then that should clear it up. If not we can go over semantics a ton but I don't like those games (everyone loses [time]).

deleted 11y ago

[deleted]

themeek 11y ago

"operation aurora fbi backdoor" https://www.google.com/webhp?sourceid=chrome-instant&ion=1&espv=2&ie=UTF-8#q=operation%20aurora%20fbi%20backdoor https://www.google.com/webhp?sourceid=chrome-instant&ion=1&e...

meowface 11y ago
Hmm, I don't think you're totally right. >Former government officials with knowledge of the breach said attackers successfully accessed a database that flagged Gmail accounts marked for court-ordered wiretaps. To me it sounds like Gmail was compromised, and during the compromise, the attackers identified a database containing information that was of great intelligence value to them. This database does not appear to have been the vector that allowed the attackers to get in, nor was it a "backdoor". I suspect the attackers also had access to many, many other databases. It's certainly possible the primary intended goal of the breach was to access this information (for counter-intelligence purposes), but it's not how they actually got in, nor did it help them get in.
- themeek 11y ago
  Continue to read. You will find that this was the target of the operation. It was not the vector that allowed them to get in (not soley). It is usually the case that a successful breach gives very wide access, so I would suspect this as well. I think you'll find that on the whole I am right. That the system was there for US intelligence and the Chinese were there for counter-espionage and that the backdoor allowed the Chinese used the system to access email information that they would have had to compromise a different way to get - thus their getting access through a back door.
  - meowface 11y ago
    There are a lot of security analysts who say the target of the operation was indeed that database, and there's certainly a good chance of that, but still, it's definitely not the same as a backdoor.
    - themeek 11y ago
      I'm afraid this is heading the direction of 'let's define a backdoor'. What remains true is that China targeted a system built for the FBI to get unencrypted access to GMail systems and customer data that did not require 'front door' access. Many people here would call a service run for the FBI without oversight or a lengthy and transparent approval process with the requirement for a warrant a backdoor. We don't have to call it that if you don't like - I think the terminology is not so important for the point. I will leave the semantic discussion to whether such a system constituted a 'front door' or a 'back door' to folks who enjoy such deliberations. Ultimately I hope that readers see how hacking of 'side systems' built for intelligence agencies to make full data requests have been used to gain access to the larger systems they connect - in the spirit of the original thread.
      - magicalist 11y ago
        > Many people here would call a service run for the FBI without oversight or a lengthy and transparent approval process with the requirement for a warrant a backdoor Er, what? No one would call it a front or back door. If someone gets root access to my machine and uses that to get access to data on my machine, that data was not the entry point. The phrase "without oversight or a lengthy and transparent approval process with the requirement for a warrant" shows what a red herring this is.
        themeekforgotpw 11y ago
        Right, but if there is a system to access your machine without your usual creds and that system gets hacked, that's backdoor access. You can say - the system for US intelligence is like 'another account' or a 'second root' and is known to Google and so it is not a backdoor - but is that really within the spirit of the discussion? If you didn't understand that this was a separate system with separate access data, specifically for law enforcement requests, then that should clear it up. If not we can go over semantics a ton but I don't like those games (everyone loses [time]).