HACKED! Multiple Federal Agencies Including Treasury.

Page 4 - Seeking answers? Join the AnandTech community: where nearly half-a-million members share solutions and discuss the latest tech.

Exterous

Super Moderator
Jun 20, 2006
20,429
3,533
126
I don't think hardware, but it might prove very difficult to completely remove all the Russians decided to leave behind, once these idiots clicked "run" on the fake software updates God only knows what was installed and where it's been hidden. Complete system re-installs might be needed along with combing through databases with a fine toothed comb.

This wasn't fake software. It was legitimate vendor provided software so calling them idiots for installing doesn't make sense. Hell many standards, agreements, contracts require you install vendor updates within X days of release (usually in the 14-60 day range)
 
Reactions: zinfamous

blackangst1

Lifer
Feb 23, 2005
22,914
2,359
126
I don't think hardware, but it might prove very difficult to completely remove all the Russians decided to leave behind, once these idiots clicked "run" on the fake software updates God only knows what was installed and where it's been hidden. Complete system re-installs might be needed along with combing through databases with a fine toothed comb.

Thats..uh...not how this worked. At all.
 

Aikouka

Lifer
Nov 27, 2001
30,383
912
126
I doubt that I will assuage many fears, but I don't think this is nearly as bad as hearing things like "They hacked the guys that control the nukes!" will make it sound. From what I've read, access was achieved by essentially slipping a Trojan Horse into a vendor's software (firmware?) update. The first thing that comes to mind is that for this to even work or provide access, the vendor's devices must have external access available, which gives me one huge takeaway... these attacks were most likely only performed on unclassified networks.

Although, to be fair, there is still a lot of data available on unclassified networks. For example, there was the hack on OMB a few years back that caused many millions of people to have their PII (SSN, etc.) leaked. However, the point is that anything that's considered classified ought to have been out of reach... so long as things were DISA-compliant. So, if you're worried that the Russians stole the nuclear launch codes... relax.

How did this happen? My guess is that it relates to how much trust is allocated to third-party vendors in regard to unclassified networks. Where a closed network will generally require some sort of validation for all software being installed (unless the vendor has performed it up to the required level of scrutiny), more open networks just don't usually have these restrictions. The update from SolarWinds would be trusted because they're a valid vendor.

What will happen? My guess is that we're going to see far stricter controls placed on third-party vendors when it comes to provided software whether it be firmware or desktop-run software. Third-party vendors might also have more restrictions placed upon them in regard to DevOps and InfoSec practices, and if they fail to meet these, they won't even be allowed to bid on proposals or offer their services.
 

ch33zw1z

Lifer
Nov 4, 2004
37,968
18,283
146
Here is the Romney thing, he said it was 'stunning' for there to be no white house response to this


which it is.

Mitt aside, I think the last 4 years have shown us this is not ONLY not "stunning", but par for the course for this admin
 

Muse

Lifer
Jul 11, 2001
37,828
8,300
136
I doubt that I will assuage many fears, but I don't think this is nearly as bad as hearing things like "They hacked the guys that control the nukes!" will make it sound. From what I've read, access was achieved by essentially slipping a Trojan Horse into a vendor's software (firmware?) update. The first thing that comes to mind is that for this to even work or provide access, the vendor's devices must have external access available, which gives me one huge takeaway... these attacks were most likely only performed on unclassified networks.

Although, to be fair, there is still a lot of data available on unclassified networks. For example, there was the hack on OMB a few years back that caused many millions of people to have their PII (SSN, etc.) leaked. However, the point is that anything that's considered classified ought to have been out of reach... so long as things were DISA-compliant. So, if you're worried that the Russians stole the nuclear launch codes... relax.

How did this happen? My guess is that it relates to how much trust is allocated to third-party vendors in regard to unclassified networks. Where a closed network will generally require some sort of validation for all software being installed (unless the vendor has performed it up to the required level of scrutiny), more open networks just don't usually have these restrictions. The update from SolarWinds would be trusted because they're a valid vendor.

What will happen? My guess is that we're going to see far stricter controls placed on third-party vendors when it comes to provided software whether it be firmware or desktop-run software. Third-party vendors might also have more restrictions placed upon them in regard to DevOps and InfoSec practices, and if they fail to meet these, they won't even be allowed to bid on proposals or offer their services.
I'm weak on network security, but will offer that in the brief (3 minute?) NBC network national newscast last night I did hear them say that this didn't affect classified information, so your assessment appears accurate in that regard.
 

alien42

Lifer
Nov 28, 2004
12,668
3,066
136
I'm weak on network security, but will offer that in the brief (3 minute?) NBC network national newscast last night I did hear them say that this didn't affect classified information, so your assessment appears accurate in that regard.

James Clapper is on CNN saying the same but also laying out the types of information the hackers would still have access to and it's a scary list.
 
Last edited:

esquared

Forum Director & Omnipotent Overlord
Forum Director
Oct 8, 2000
23,778
4,964
146

VRAMdemon

Diamond Member
Aug 16, 2012
6,572
7,823
136
Trump’s silence was because he can’t figure out how it benefits him. He's easily confused, so the fact that the computer espionage he thought was happening at the polls was actually happening to him, his country and on his own turf, by the Russians he thought he was on good terms with. He realizes he has no idea what to do about it, and he can avoid the unpleasantness of national security breaches by actually just leaving January 20th. He's incapable of protecting anything other than his own interests because this threat is against the country instead of him. He cannot comprehend any briefings on the espionage given to him. Or his aides have simply not briefed him. He’s totally preoccupied with the fake election fraud coverage. He is so self absorbed mentally, he doesn't realize his bravado does nothing to deter high tech invasions. He’s a cult member of his own cult.
 
Feb 4, 2009
34,699
15,941
136
Microsoft says it is Russia.


Say what you will about MS but they’re pretty good at shutting this stuff down once it is known.
 

Dave_5k

Golden Member
May 23, 2017
1,650
3,200
136
Reactions: DarthKyrie
Dec 10, 2005
24,376
7,267
136

Lanyap

Elite Member
Dec 23, 2000
8,127
2,167
136
Meh, this is no bigly deal. The lamestream media is making it look worse to make me look bad.
 
Reactions: DarthKyrie
sale-70-410-exam    | Exam-200-125-pdf    | we-sale-70-410-exam    | hot-sale-70-410-exam    | Latest-exam-700-603-Dumps    | Dumps-98-363-exams-date    | Certs-200-125-date    | Dumps-300-075-exams-date    | hot-sale-book-C8010-726-book    | Hot-Sale-200-310-Exam    | Exam-Description-200-310-dumps?    | hot-sale-book-200-125-book    | Latest-Updated-300-209-Exam    | Dumps-210-260-exams-date    | Download-200-125-Exam-PDF    | Exam-Description-300-101-dumps    | Certs-300-101-date    | Hot-Sale-300-075-Exam    | Latest-exam-200-125-Dumps    | Exam-Description-200-125-dumps    | Latest-Updated-300-075-Exam    | hot-sale-book-210-260-book    | Dumps-200-901-exams-date    | Certs-200-901-date    | Latest-exam-1Z0-062-Dumps    | Hot-Sale-1Z0-062-Exam    | Certs-CSSLP-date    | 100%-Pass-70-383-Exams    | Latest-JN0-360-real-exam-questions    | 100%-Pass-4A0-100-Real-Exam-Questions    | Dumps-300-135-exams-date    | Passed-200-105-Tech-Exams    | Latest-Updated-200-310-Exam    | Download-300-070-Exam-PDF    | Hot-Sale-JN0-360-Exam    | 100%-Pass-JN0-360-Exams    | 100%-Pass-JN0-360-Real-Exam-Questions    | Dumps-JN0-360-exams-date    | Exam-Description-1Z0-876-dumps    | Latest-exam-1Z0-876-Dumps    | Dumps-HPE0-Y53-exams-date    | 2017-Latest-HPE0-Y53-Exam    | 100%-Pass-HPE0-Y53-Real-Exam-Questions    | Pass-4A0-100-Exam    | Latest-4A0-100-Questions    | Dumps-98-365-exams-date    | 2017-Latest-98-365-Exam    | 100%-Pass-VCS-254-Exams    | 2017-Latest-VCS-273-Exam    | Dumps-200-355-exams-date    | 2017-Latest-300-320-Exam    | Pass-300-101-Exam    | 100%-Pass-300-115-Exams    |
http://www.portvapes.co.uk/    | http://www.portvapes.co.uk/    |