2 ms·
Whoa, never thought of that, but blackhats certainly will. If they get one celebrity, they could get all their friends. I predict a second one of these https:
by ck2 11y ago
Whoa, never thought of that, but blackhats certainly will.
If they get one celebrity, they could get all their friends.
I predict a second one of these https://wikipedia.org/wiki/2014_celebrity_photo_hack https://wikipedia.org/wiki/2014_celebrity_photo_hack
Ironically this time iphone users will be protected.
- 13 11y agoProbably has engineering challenges past what you would normally face, which thankfully makes a 1B device botnet a little unrealistic. I can't imagine how you'd even begin to control such a thing, just a sequential numerical list of the clients is 4GB. Scary prospect though.
- endymi0n 11y agoNot too far off. There's your discovery layer: https://en.wikipedia.org/wiki/Kademlia https://en.wikipedia.org/wiki/Kademlia C&C: http://www.reddit.com/r/netsec/comments/2pmmfu/using_the_blockchain_as_a_cc_for_a_botnet/ http://www.reddit.com/r/netsec/comments/2pmmfu/using_the_blo... Persistence Layer: https://github.com/cockroachdb/cockroach https://github.com/cockroachdb/cockroach Dissemination Layer: https://en.wikipedia.org/wiki/Gossip_protocol https://en.wikipedia.org/wiki/Gossip_protocol Sprinkle in some AES and public / private keys for verification and you're done. Sequential list isn't needed. (well, all the robust & stealthy large systems engineering together with the low level exploit knowledge is probably a little too much for one person to pull it off, but for a Hacking Team or nation sized actor it's quite doable)
- Jare 11y agoThe bot can call home to ask if/when more infections are desired, so the attack can elastically adapt to remain viable and not overwhelm the resources it needs.
- deleted 11y ago[deleted]