CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-29 Thread stan
Wikileaks released a document about an attack against CentOS / Rhel. https://wikileaks.org/vault7/#OutlawCountry Here's the text, there are some docs there also. OutlawCountry 29 June, 2017 Today, June 29th 2017, WikiLeaks publishes documents from the OutlawCountry project of the CIA that targe

Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-29 Thread Tom Horsley
On Thu, 29 Jun 2017 15:51:43 -0700 stan wrote: > My first take is that this doesn't represent a very serious threat. Do > you disagree? It depends. Is the CIA module part of the NSA authored selinux source code, so it is already in every system? :-). _

Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-29 Thread stan
On Thu, 29 Jun 2017 19:05:00 -0400 Tom Horsley wrote: > On Thu, 29 Jun 2017 15:51:43 -0700 > stan wrote: > > > My first take is that this doesn't represent a very serious > > threat. Do you disagree? > > It depends. Is the CIA module part of the NSA authored selinux > source code, so it is a

Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-29 Thread T.C. Hollingsworth
On Jun 29, 2017 3:52 PM, "stan" wrote: Wikileaks released a document about an attack against CentOS / Rhel. https://wikileaks.org/vault7/#OutlawCountry Here's the text, there are some docs there also. My first take is that this doesn't represent a very serious threat. Do you disagree? >

Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-29 Thread T.C. Hollingsworth
On Jun 29, 2017 4:06 PM, "Tom Horsley" wrote: It depends. Is the CIA module part of the NSA authored selinux source code, so it is already in every system? :-). SELinux is the last place I would sneak some nefarious code in. There are plenty of areas of the kernel that don't get looked at by s

Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-29 Thread William Oliver
On Thu, 2017-06-29 at 16:56 -0700, T.C. Hollingsworth wrote: > > Prerequisites(S//NF)  > > The target must be running a compatible 64-bit version of > CentOS/RHEL 6.x (kernel version 2.6.32). > This doesn't even work on Fedora. > Fedora kernels move too fast for them to keep up with binaries; they

Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-29 Thread JD
On 06/29/2017 04:51 PM, stan wrote: Wikileaks released a document about an attack against CentOS / Rhel. https://wikileaks.org/vault7/#OutlawCountry Here's the text, there are some docs there also. OutlawCountry 29 June, 2017 Today, June 29th 2017, WikiLeaks publishes documents from the Out

Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-29 Thread Walter H.
On 30.06.2017 00:51, stan wrote: Wikileaks released a document about an attack against CentOS / Rhel. https://wikileaks.org/vault7/#OutlawCountry Here's the text, there are some docs there also. My first take is that this doesn't represent a very serious threat. Do you disagree? if we were t

Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-29 Thread John Morris
On Thu, 2017-06-29 at 20:38 -0400, William Oliver wrote: > Personally, I assume that my computers are always on the verge of being > compromised. It's one of the things I like about fedora -- I always do > a clean install when a new version comes out, and I occasionally to a > clean reinstall mid

Thanks, everyone, for your comments Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-29 Thread stan
The consensus seems to agree with me, that this is a minor threat as threats go. I thought I was paranoid about security. But after the comments in this thread, I think maybe I'm not paranoid enough. That the IT security professionals are paranoid enough to cover their cameras? If they're that w

Re: Thanks, everyone, for your comments Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-29 Thread William Oliver
On Thu, 2017-06-29 at 19:34 -0700, stan wrote: > The consensus seems to agree with me, that this is a minor threat > as threats go. > > I thought I was paranoid about security.  But after the comments in > this > thread, I think maybe I'm not paranoid enough.  That the IT security > professionals

Re: Thanks, everyone, for your comments Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-30 Thread Gary Stainburn
On Friday 30 June 2017 03:59:59 William Oliver wrote: > The thing that amazes me about the Window and Mac worlds is that people > never seem to wipe their boxes. I know people who run their machines > for four or five years without ever doing a clean reinstall. I worked > at a place that ran Wind

Re: Thanks, everyone, for your comments Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-30 Thread William Oliver
On Thu, 2017-06-29 at 19:34 -0700, stan wrote: > The consensus seems to agree with me, that this is a minor threat > as threats go. > > I thought I was paranoid about security.  But after the comments in > this > thread, I think maybe I'm not paranoid enough.  That the IT security > professionals

Re: Thanks, everyone, for your comments Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-30 Thread Tom Horsley
On Thu, 29 Jun 2017 23:05:09 -0400 William Oliver wrote: > He was always amused > by all this firewall and virus detection stuff; it doesn't mean > anything when you have a keylogger, a warrant, a flashlight, and hands > on a box. Which is why you can get computer cases that are physically secure

Re: Thanks, everyone, for your comments Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-30 Thread Dave Ihnat
On Fri, Jun 30, 2017 at 08:53:07AM -0400, Tom Horsley wrote: > Which is why you can get computer cases that are physically > secured with keypads and locks and hardware records of when > case was opened, etc. (of course they get expensive :-). Eh, not so much; most business-class machines have BIO

Re: Thanks, everyone, for your comments Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-30 Thread Dave Ihnat
On Fri, Jun 30, 2017 at 09:40:30AM +0100, Gary Stainburn wrote: > However, I still have a number of WinXP machines running – through > necessity. I'm so sorry for you. I've gotten rid of all of them at my clients, through a mixture of software/hardware upgrades, or in the absolute worst cases run

Re: Thanks, everyone, for your comments Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-30 Thread Tim
Allegedly, on or about 29 June 2017, stan sent: > after the comments in this thread, I think maybe I'm not paranoid > enough. That the IT security professionals are paranoid enough to > cover their cameras? If they're that worried they're vulnerable, it's > a good bet I should be. :-) It's not

Re: Thanks, everyone, for your comments Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-06-30 Thread stan
On Sat, 01 Jul 2017 01:15:02 +0930 Tim wrote: > It's not as far-fetched as you might think. > > One day I noticed, while in the middle of browsing, that the "camera > is on" LED had lit up, though not noticing *when* it came on. I > wasn't doing anything nefarious, so somewhere in the midst o

Re: Thanks, everyone, for your comments Re: CIA Outlaw Country attack against CentOS / Rhel (and Fedora?) Is this credible?

2017-07-01 Thread Tim
Tim: >> One day I noticed, while in the middle of browsing, that the "camera >> is on" LED had lit up, though not noticing *when* it came on. I >> wasn't doing anything nefarious, so somewhere in the midst of a pile >> of ordinary websites I'd browsed through, one of them was a nosey >> parker.