Сделаем Америку снова великой! Trump - Russia megathread

[Skjellyfetti]

Question for you.

If an attack "originated" from outside Kiev - do you know that was the actual origin or the server they're routing through to mask their IP? How is the actual "origin" determined?

In the indictment they were able to determine the actual origin through server purchases. Seems it would be hard to identify the true origin just from server logs, but idk.

[Ibanez]

Question for you.

If an attack "originated" from outside Kiev - do you know that was the actual origin or the server they're routing through to mask their IP? How is the actual "origin" determined?

In the indictment they were able to determine the actual origin through server purchases. Seems it would be hard to identify the true origin just from server logs, but idk.

I read that about the server purchases, that's interesting. We do more detection and response, not so much the investigation of the attacker. That will get handed over to the Gov't if it's large scale like WannaCry.

In this case, we know the attack came from outside Kiev b/c the dumbshits didn't do a good job at spoofing their IP address or using a proxy server. Your nation state hacker is going to use Tor or some method of "onion routing" to mask their location. In that case, it's very difficult to trace. Damn near impossible. Plus the more advanced hackers are spoofing both their IP and Mac addresses. Russian hackers are extremely sophisticated. It's scary. But they aren't, in my experience, messing with the financial systems too much. They're messing with gov't and infrastructure like the electrical grid. The North Koreans are messing with banks, but they're toddlers compared to the Russians and make many mistakes and plenty of them have been caught in Vietnam, Cambodia,etc... so we pretty much know that attacks from there are the NorKors.

But to answer your question, with IP traceback tools and other forensics tools like FireEye, you can ping the attacking ip to see if it's really coming from its stated location. Then you can start following the digital trail.An IP address can tell you a lot(as well as all the packets that are coming from the attack). But you won't get an address, you'll get something that gives you some assurance that the attacker is from a certain region/area. The gov't has a lot of awareness as well, so we utilize that data. You have to wait for them to slip up, like forget to login to the VPN. Other attacks on other institutions..we use that data. We have AI that is constantly learning. FireEye, which brings data in from everywhere to help us better understand the threat landscape, known threats and existing threats.

Even when using a proxy server to obscure your location, traffic analysis can be used (this literally combs through the data of ISPs, among other things). There are cluster patterns that exist. There is a lot of unsupervised machine learning - AI, the computers are looking for anything, in real time. They might be searching for known and suspected protocols,for instance. But will be also look for outliers in normal behavior.

The "small time" hackers will boast about it on the dark web. All of this is monitored and they eventually make a mistake by either bragging about it, someone being angry with the hackers and reveals them or, as is often the case, they forget to login to Tor or the VPN before they start a hacking session or do something related.

There's a lot that goes and it takes time.

I should point out that, in what I've witnessed here in my current position most are hactivists, run of the mill cyber criminals or just some Anonymous punk trying to prove himself. Those are the guys not logging into to Tor or are boasting about it on Reddit (true story.)

I apologize for the length.

[Ibanez]

Fireeye is pretty damn cool.

[Ibanez]

What isn’t mentioned in the indictment is that, on one occasion, someone reportedly logged into the @Guccifer_2 Twitter account without connecting to a VPN service first, revealing their real IP address. “Working off the IP address,” the Daily Beast stated in March, “U.S. investigators identified Guccifer 2.0 as a particular GRU officer working out of the agency’s headquarters on Grizodubovoy Street in Moscow.”

https://theintercept.com/2018/07/18/mue ... n-hackers/


Dumb asses. They got lazy.

[css75]

Just curious, do you do a lot of online financial things?


Sent from my iPad using Tapatalk

Online bill pay? Buy from Amazon or eBay? PayPal/Venmo?

Yup. But it’s not the finances that get stolen. I haven’t had a debit or credit card stolen in 8 or 9 years. People have taken all my PII, have a fake DL made and used that to buy stuff in stores.




Sent from my iPhone using Tapatalk

That sucks, hope you get on top of that. I am real paranoid about stuff like that. Refuse to use PayPal and do very little online.


Sent from my iPad using Tapatalk

[houndawg]

To me it's already obvious from what's in the public record that there were people in the Trump campaign who were very willing to cooperate with anybody including the Russian government to get "opposition research" on Clinton and/or the Democratic Party. It's already obvious that they at least attempted to do it. I have no idea as to what would be considered illegal on the "collusion" front. But I don't think any reasonable person would be shocked if the Special Counsel ends up saying there was "collusion" of some sort involving people affiliated with the Trump campaign.

You mean getting dirt on political foes from foreign actors? Would that be collusion in your mind?

I think you had better hope that's not the definition - and it is doubtful Mueller will use that definition, either .... but if he does it will be a rebuke to more than just the Trump camp.

Why the obsession with collusion? You know how these things work - you start with a real estate deal and end with the President getting a blowjob. Or in Helsinki, with the President giving a blowjob...

[houndawg]

What isn’t mentioned in the indictment is that, on one occasion, someone reportedly logged into the @Guccifer_2 Twitter account without connecting to a VPN service first, revealing their real IP address. “Working off the IP address,” the Daily Beast stated in March, “U.S. investigators identified Guccifer 2.0 as a particular GRU officer working out of the agency’s headquarters on Grizodubovoy Street in Moscow.”

https://theintercept.com/2018/07/18/mue ... n-hackers/


Dumb asses. They got lazy.

Bet he isn't working in Moscow anymore.

[CID1990]

You mean getting dirt on political foes from foreign actors? Would that be collusion in your mind?

I think you had better hope that's not the definition - and it is doubtful Mueller will use that definition, either .... but if he does it will be a rebuke to more than just the Trump camp.

Why the obsession with collusion?

You might want to ask Jello that

I’m pretty sure that’s what this thread is supposed to be about

[Ibanez]

Online bill pay? Buy from Amazon or eBay? PayPal/Venmo?

Yup. But it’s not the finances that get stolen. I haven’t had a debit or credit card stolen in 8 or 9 years. People have taken all my PII, have a fake DL made and used that to buy stuff in stores.




Sent from my iPhone using Tapatalk

That sucks, hope you get on top of that. I am real paranoid about stuff like that. Refuse to use PayPal and do very little online.


Sent from my iPad using Tapatalk

It's an inconvenience these days. My credit will drop 25 points, i'll challenge it. A month later the collection and charges are removed and my credit will go back up the points I lost.

[Skjellyfetti]

I’m pretty sure that’s what this thread is supposed to be about

It's pretty all encompassing.

Mob connections, money laundering, FSB honeypots, cyber warfare, pornstars, Deep State conspiracies, and collusion. We cover it all in this megathread.

[CID1990]

I’m pretty sure that’s what this thread is supposed to be about

It's pretty all encompassing.

Mob connections, money laundering, FSB honeypots, cyber warfare, pornstars, Deep State conspiracies, and collusion. We cover it all in this megathread.

I see.

It seems to have morphed from collusion to all those other things

[SeattleGriz]

Tony Podesta given immunity? We'll see if that is true or not.

[Chizzang]

It's pretty all encompassing.

Mob connections, money laundering, FSB honeypots, cyber warfare, pornstars, Deep State conspiracies, and collusion. We cover it all in this megathread.

I see.

It seems to have morphed from collusion to all those other things

"Trump Russia mega thread..." seems like a pretty all encompassing title

[Skjellyfetti]

It's pretty all encompassing.

Mob connections, money laundering, FSB honeypots, cyber warfare, pornstars, Deep State conspiracies, and collusion. We cover it all in this megathread.

I see.

It seems to have morphed from collusion to all those other things

Nah.

It's always been all those things.

Fun fact: Cid1990 was the first person to bring up "collusion" in this thread.

[Chizzang]

Conservative pundit and last of the Right Wing Intellectuals with a conscience George Will
has an opinion: http://thehill.com/opinion/white-house/ ... with-putin

[Ibanez]

https://www.nytimes.com/2018/07/20/us/p ... -tape.html

President Trump’s longtime lawyer, Michael D. Cohen, secretly recorded a conversation with Mr. Trump two months before the presidential election in which they discussed payments to a former Playboy model who said she had an affair with Mr. Trump, according to lawyers and others familiar with the recording.

I thought Trump said he didn't know about the payment.

I guess the bigger story here is this - Cohen recorded conversations with the Trumpster. What else has he recorded?

[Skjellyfetti]

Lordy!

[Chizzang]

Nothing burger...

[Pwns]

http://www.azfamily.com/story/38694134/ ... etter-ties

Putin's puppet.

[DuckDuckGriz]

http://www.azfamily.com/story/38694134/ ... etter-ties

Putin's puppet.

The Trump administration decided that Ukraine's passage of a new national security law, signed by Ukrainian President Petro Poroshenko on July 5, met the requirements enshrined in the US legislation, thereby allowing the Pentagon to release the funds.

It's clear that Trump's Administration doesn't even see eye to eye with him - nor was he prepared for that comment in Helsinki this week, which is unimaginable, but it's not exactly like he just decided this out of the blue.

[houndawg]

I think that whatever Putin has on him has to be bigger than a pee tape to make him grovel so obsequiously....

[houndawg]

He's out because he lied and made team Trump look bad. There's also a chance the whole Russia-Trump connection has traction and they're now in full damage control.

So what's the over on the date of Putin's first White House visit?

This fall sometime?

[Ivytalk]

So what's the over on the date of Putin's first White House visit?

This fall sometime?

I have my sources...

[houndawg]

This fall sometime?

I have my sources...

didn't they just put her in jail...?

[Vidav]

This fall sometime?

I have my sources...

He is coming this fall. Excellent sources.