NSA tools leaked affecting up to 65% of wired desktops

https://theintercept.com/2017/04/14/leaked-nsa-malware-threatens-windows-users-around-the-world/ Choice quote fta: >"“This is as big as it gets,” Hickey said. “Nation-state attack tools are now in the hands of anyone who cares to download them…it’s literally a cyberweapon for hacking into computers…people will be using these attacks for years to come.”" He warned us first.

the collection of tools are on github now https://github.com/DonnchaC/cia-hacking-tool-archive Have fun if your into that kind of thing.

>>403 >threatens windows idiots happy me

>>403 The question is how do i prevent this soykaf from running on my machine?

>>535 Unplug the internets or unironically install gentoo

This reminds me the scene of Lord of War when the man with an only face give tons of weapons for Africans near where him' plane had landed. https://www.youtube.com/watch?v=mQgdZTgpczM In the long run, this will better for the security industry.

>>536 > unironically > Gentoo Pick one.

>>536 Install Gentoo is not enough, install Hardened Gentoo with Pax/Grsecurity kernel and C compiler level of hardening!

>>746 I picked both and now I've been running Funtoo for almost a year

>>762 This, and that's hardly enough. Gentoo won't solve your problems, you are in charge of that. Also this should probably be moved to /sec/

>>762 Why don't Install Alpine LInux in this case?

>>536 Realistically though, there are probably exploits that the NSA/CIA has on Linux, even with the pseudo-like security that PaX and other kernel modifications do. Might I remind you of Linux's TCP stack which had a huge CVE in 2016. Extending from non-kernel space issues, Linux has a load of badly written programs that still many people use, user space security on Linux is quite minimal, programs can interface each other with ease, and it does not require sudo. For a long time how Xorg was launched in most Linux systems posed a high security risk. Until there is a formally verified kernel that is sound proof in terms of security, (which there are, but they do not do much (for general computing), see most real-time oriented kernels), and user space applications which are by default no matter how badly written are safe in terms of security, then consider that any security you have can and will be broken eventually. (Assuming that the hardware is not backdoored, see RDRAND. Even a formally verified system would probably susceptible to hardware based attacks, "physical access total access.") It sort of goes with the saying, "your threat model is worthless given amount time and the right resources." That being said, Gentoo has more fine grained control, you start out with nothing and build your own stuff, but then again I doubt each time you install a package or there is an update you audit that package.

>>525 You shouldn't be. The impact that these news have affects you even if you don't windoze. This will shape the face of modern and future democracies as well as dictatorships. Ever wonder what a thought police like the gestapo could do with information like this? This tool is a weapon to surpass metal gear.

>>1082 >Green Is My Pepper Rms no longer remembers this, I sent him a birthday card with a gimpepper cake, and he asked me "what's the reason for the pepper?" and I told him about it being a brush in Gimp, and he replied with "thanks for explaining". If he remembered then would he have asked? "Green Is My Pepper" is now DEPRECATED pic is what I sent polite sage for off topic (sorry for off topic but I felt I needed to clear it up)

>>1842 He is autistic. Being a retard myself I know that we tend to forget 'irrelevant' information. Some memes are certainly not worth the mental space.

>>1082 >It sort of goes with the saying, "your threat model is worthless given amount time and the right resources." This is right, we know that every system can be broken (as of today). But what matters is the dragnet nature of these attacks. What this means is that data analysis can be used for a level of population control that has been unheard of up until now.

>>1842 I wonder if he knows that his emails are shared like that.

>>1842 too bad he didn't ask about lain

>>1847 >every system can be broken What about running somthing old and obscure? I know it might be able to be broaken, but they would maybe have to start from scratch - will the NSA keep obscure old hacks? OS2 warp? Amiga OS? etc. etc.

>>3486 >What about running somthing old and obscure? Using older systems probably raises the bar a lot, but if any of the 3-letter agencies is sufficiently interested, they can always determine exploits for imperfect software. Your only assured defense is a perfectly airgapped computer, where the only input is the keyboard and mouse, where you are assured that there are no hardware backdoors preinstalled, and where you can assertain with 100% confidence, every time you sit down t ouse the computer, that it hasn't been tampered with. >will the NSA keep obscure old hacks? Almost certainly. Storage is cheap, and government bureaucracies excel at record-keeping and storage. If they ever exploited a now-obsolete system, using the same exploit again is only a matter of having somebody dig it up from the archives.

>>3486 Of course, what >>1082 was talking about was the complexity of modern systems, and how it is always possible to exploit bugs in complex systems. In old enough computers, the software and hardware are simple enough that one person could potentially vet and understand the entire system. This would either demonstrate that there are no potential exploits, create a finite list of bugs that need to be patched, or leave you with a perfect understanding of what vulnerabilities you need to plan around.

>>3487 You would need to get the computer airgapped in a Faraday cage, since several research organizations developed ways to collect the EM radiation signatures of the pixel configurations for keys as they display characters on screen. The exploit serves as a remote keylogger and I think it works from up to several metres. I think what >>3486 Was askingis using an outdated system like windows 95 would reduce the likelyhood of being hacked. I woudl argue that this is probably the case for mainstream viruses that are optimized for xp/7/8/10, since creating viruses to run in all windows OS is moer time consuming than finding a zero day and attempting to exploit it before it gets patched. WHen money is an issue, the latter is the rule. Now a govt with an unlimited budget might as well find reverse compatible exploits, so it really depends on how secure you need to be, protect from scammers, not so hard, protect from alphabets (and alphabet company) very hard, especially with backdoored hardware

>>512 >Website has been reported as unsafe

>>3496 It is hilariously simple to write exploits for window 95 compared to writing exploits for e.g. windows 10.

>>1839 No, we are already living with thought police. If one is using linux than we are already trying to evading the thought police by making our thoughts encrypted.

>>3547 You don't even really need exploits for 95. http://i.imgur.com/rG0p0b2.gif

Why are people even thinking running an old system is somehow better. I hardly know anything about netsec and even I know older operating systems are probably the easiest thing to just google and find exploits for. Most netsec tutorials have you download an old operating system on a seperate computer to test and get a feel for exploiting/hacking.

>>1842 Maybe he was testing you because loads of kids send him hot meme pics with the pepper and dont even know where ut comes from.

Surely no harm can come from cloning the archive, I hope.