Hacker News new | ask | show | jobs
by Starman_Jones 834 days ago
The cyberattacks which used the Marble framework were limited to those where a payload was delivered. Marble is comparable to mailing a bomb and putting a fake return address on the package.

For data exfiltration, which is like robbing a bank vault, you'll need more than a fake address. It's orders of magnitude more difficult to cover your tracks, and you only need to leave one clue behind to undo all that work.
1 comments
willcipriano 834 days ago
You don't think you can smuggle a few terabytes of traffic over the internet undetected?

For the US to have the capability to be aware of that they would have to be engaged in unconstitutional spying on US citizens. A thing they have claimed to have stopped doing.

"Trust us, we are lying"

P.S. this also means the feds have the ability to stop child sexual exploitation that takes place over the internet in its tracks but decided not to.

link
Starman_Jones 834 days ago
I think we're discussing different topics. The article headline says, "Microsoft confirms Russian spies stole source code, accessed internal systems." I interpreted your comment about vault 7 to imply that investigators (ie, MS & anyone that they asked to be involved) couldn't be certain this was Russia. I disagree with that; snuggling data leaves too many breadcrumbs. Your reply seems more focused on other parts of vault 7, and although I don't necessarily disagree with it, I'm not sure what you're trying to say here.

However, it's important to remember that FBI!=CIA!=NSA

link
willcipriano 834 days ago
> snuggling data leaves too many breadcrumbs

I can understand these breadcrumbs in detail. From easy stuff like TCP and DNS to the design patterns of the radiation hardened firmware running on the communication satellites.

I propose a blinded trial, give me a API with a few terabytes of data I'll have it accessed and the data moved to a third party. Then Microsoft can tell me who that person is right?

link