Free Republic
Browse · Search
News/Activism
Topics · Post Article

Skip to comments.

Microsoft and industry partners seize key domain used in SolarWinds hack
ZDNET ^ | 12/15/2020 | Catalin Cimpanu

Posted on 12/19/2020 10:13:01 AM PST by linMcHlp

click here to read article


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-62 next last
To: RBW in PA

My question is what legal authority do private companies have to do this?


The forces may have bullied their way into putting the site into a sinkhole, because they could. The power created the authority.

My question is what recourse does the hacker have? Answer: zero


41 posted on 12/20/2020 5:38:47 AM PST by Loud Mime ("Now, go and do your duty before darkness covers the earth." Michael Uhlmann (1939 - 2019))
[ Post Reply | Private Reply | To 23 | View Replies]

To: GOPJ

Bill doesn’t have people anymore. He’s retired. Over a decade.


42 posted on 12/20/2020 5:46:15 AM PST by discostu (Like a dog being shown a card trick )
[ Post Reply | Private Reply | To 20 | View Replies]

To: linMcHlp

To steal a compliment from the 60’s space race...
You sir, are steely-eyed missileman! Thanks for the post.


43 posted on 12/20/2020 5:50:12 AM PST by USAF1985 (An armed population is a polite population...)
[ Post Reply | Private Reply | To 39 | View Replies]

To: linMcHlp

If a domain is taken over can’t they determine who initiated/created/owned it?


44 posted on 12/20/2020 8:03:33 AM PST by killermosquito (Buffalo, Detroit (and eventually France) is what you get when liberalism runs its course.)
[ Post Reply | Private Reply | To 1 | View Replies]

To: LuxAerterna
Am I the only person that suspects an insider agent was or is working for SolarWinds?

No. An insider bad actor or incompetence is always first on my list. Equifax got hacked because a server didn't get patched in a timely manner. I don't rule out that the Solarwind hack could be the mother of all hacks, but I doubt it...

45 posted on 12/20/2020 8:25:42 AM PST by EVO X
[ Post Reply | Private Reply | To 33 | View Replies]

To: discostu

I know - he goes around the world giving away money. And pontificating on global warming or whatever the newest liberal elite freak-out is.

If Bill Gates really wanted to help the world - he would accept a job protecting the United States from cyber attacks...(which would also help the world) ...

He could do like Trump did and accept the job for a dollar a year.,


46 posted on 12/20/2020 9:29:30 AM PST by GOPJ (If China let go a virus that primarily killed gays, would Madison Ave. still up Chinese in TV ads? )
[ Post Reply | Private Reply | To 42 | View Replies]

To: GOPJ

And why would you think the guy who was in charge of the company that made possibly the least secure OS ever should be put in charge of security?! They’ve spent most of the time since Gates hung it up redesigning Windows to work with security protocols that have been around for ages.


47 posted on 12/20/2020 9:32:48 AM PST by discostu (Like a dog being shown a card trick )
[ Post Reply | Private Reply | To 46 | View Replies]

To: killermosquito

“If a domain is taken over can’t they determine who initiated/created/owned it?”

Domain in question: avsvmcloud[.]com

The brackets, there, prevent a valid link action for the domain in question. If you want a successful link action in the following, then remove those brackets.

To learn about a domain, the following 2 websites provide a lot of information:

https://www.wmtips.com/tools/info/avsvmcloud[.]com

https://dnslytics.com/domain/avsvmcloud[.]com

At that last website, https://dnslytics.com/

In the left side region of your Internet browser window, notice under “Network information” . . . the ASN number.

That is the Autonomous System number. The ASN is assigned (by the Regional Internet Registry) to the organization that has the IP address for the domain in question. (Regional Internet Registries: https://www.nro.net/about/rirs/)

“[T]he organization” that has the IP address, is typically also the host of a multitude of domains (and other IP addresses) under its tent.

At the WebMaster Tips & Tools website (https://www.wmtips.com), you will find a lot of info, such as the WHOIS data. Scroll down, searching for “WHOIS” - there is a Domain WHOIS and an IP WHOIS.

Now, if you really want to know all that info from the 2 sources cited above, BE FOREWARNED:

The “authorites” are monitoring every query re the domain in question.

I would avoid searching at those 2 sources, on the domain in question.

Meanwhile, the history of the domain in question, is typically recorded; and “they” (probably by now, every government in the world, plus 10’s of thousands of affected Internet-connected organizations) will have the history.


48 posted on 12/20/2020 9:38:12 AM PST by linMcHlp
[ Post Reply | Private Reply | To 44 | View Replies]

To: minnesota_bound

“say giving up the power amounts to handing it over to countries like China and Russia” and others: Islamic jihad, Hate America First


49 posted on 12/20/2020 9:49:28 AM PST by linMcHlp
[ Post Reply | Private Reply | To 36 | View Replies]

To: dayglored

And the heck has allowed other hacks to be put in place without going into affect. Should be interesting to see what happens


50 posted on 12/20/2020 9:55:50 AM PST by Solson (Trump 2020!)
[ Post Reply | Private Reply | To 13 | View Replies]

To: LuxAerterna

Bribery, intimidation, insiders preferring convenience, and carelessness . . . are the usual suspects.

Caring less: Insiders give up enough clues, to what their password might be; or insiders outright give away their password.

That is one of the reasons that nobody should expose their lives to online forums. Because the bad actors collect information and assess The Top Ten most vulnerable insiders, every day. And the bad actors just wait for opportune moments.

*That* is the leading pry-bar that gets hackers into health care systems.

Every day, bad actors wait for network users to do something that leaves a door open.


51 posted on 12/20/2020 9:59:14 AM PST by linMcHlp
[ Post Reply | Private Reply | To 33 | View Replies]

To: dayglored; Swordmaker

At the end of this, do you see Solarwinds still having a client base? It’s not as if they’re the only game in town.


52 posted on 12/20/2020 3:04:57 PM PST by Zhang Fei (My dad had a Delta 88. That was a car. It was like driving your living room.)
[ Post Reply | Private Reply | To 10 | View Replies]

To: Zhang Fei; Swordmaker
I think it will depend on what the final forensic determination is regarding how SolarWinds' build process was compromised. If it was something they did wrong, that was against the rules, they're not going to look good. OTOH if it was something that "could happen to any company", i.e. they followed the rules and got hacked anyway, then they'll probably do okay, and the rules will take the hit, and get strengthened. The bad guys always have the advantage because they can always think of something you aren't defending against.

I can't predict which way it'll go, or maybe some third way....

53 posted on 12/20/2020 3:54:08 PM PST by dayglored ("Listen. Strange women lying in ponds distributing swords is no basis for a system of government."`)
[ Post Reply | Private Reply | To 52 | View Replies]

To: linMcHlp; GOPJ
Some people at WaPo know something about what is going on, but they are not likely to put the truth into their "news.."

Do you trust Pompeo or Ellen Nakashima?

54 posted on 12/20/2020 4:39:37 PM PST by ding_dong_daddy_from_dumas (Re-imagine the media!)
[ Post Reply | Private Reply | To 51 | View Replies]

To: ding_dong_daddy_from_dumas

“Do you trust Pompeo or Ellen Nakashima?”

Him - yes until yesterday.

Her - no.

Your link that you gave, is tied up between France, Russia, and Vietnam.


55 posted on 12/20/2020 5:35:18 PM PST by linMcHlp
[ Post Reply | Private Reply | To 54 | View Replies]

To: linMcHlp

Thanks. I also remember Pompeo claiming he agreed with the “17 intel agencies” “assessment” that Russia helped Trump in 2016. Trump moved him from CIA to State. After that he seemed to improve for a while, and in fact accomplished some impressive diplomatic missions. I don’t know, maybe he has a permanent flaw in domestic enemy recognition. Are the dirty spooks (I don’t think they are all bad) calling in an IOU or blackmailing?


56 posted on 12/20/2020 5:52:08 PM PST by ding_dong_daddy_from_dumas (Re-imagine the media!)
[ Post Reply | Private Reply | To 55 | View Replies]

To: ding_dong_daddy_from_dumas

Look for what Condor and Watson have in common.


57 posted on 12/20/2020 6:07:43 PM PST by linMcHlp
[ Post Reply | Private Reply | To 56 | View Replies]

To: linMcHlp

IBM?


58 posted on 12/20/2020 6:12:52 PM PST by ding_dong_daddy_from_dumas (Re-imagine the media!)
[ Post Reply | Private Reply | To 57 | View Replies]

To: ding_dong_daddy_from_dumas

Let’s say, that you are a wing commander based in South Korea. You walk into an assembly where pilots and crews are waiting for your briefing.

At the podium, you say to the men, “blue” - and then you leave the assembly.

Another senior officer takes over for the briefing.

One week later, at yet another briefing, the pilots and crewmembers are each asked to pickup “from that table,” a pencil, a piece of paper, and an envelope. All are asked to privately write down what they thought about “blue.”

61% write down almost exactly the same thing. The remaining thoughts begin to wander away from there, a few are “totally lost.”

At the next briefing, you assign to all crew chiefs, that task of making a formal report -— not of their assigned aircraft, but of the entire wing’s readiness. You tell the crew chiefs, “Yeah, I know, you’ve never done this - but try and do your best. Due one week from today.”

The next week arrives. Most of the chiefs have reports prepared; some do not. You collect the available readiness reports.

You pick 5 reports and one-at-a-time, order in the respective chiefs, where you then order them to remain silent about their contributions - when they see their reports posted.

At the following briefing, you point to the table with the 5 posted reports - copies stacked high, and you tell everybody to pick up 1 copy of each report.

Then you ask everybody, to write what they assess about the 5 reports, limiting their observations to “just 1 page.” All have 1 week to submit their observations.

You study these observations.

Because you are interested in knowing how much of the wing is on the same page.

And because, you are interested in knowing how efficient your men are, at reporting to you.

You need to know, where info flowing to you, is thorough and accurate vs. “really not telling the truth - though no ill will is involved.”

You need to know, where you need to look under the hood, open doors, barge into engineering spaces and wheel wells.

You need to make the effort to get good info from your wing, and know that you can get good info from those sending it.

You need to know where there is weakness about that, and GET OFF YOUR BUTT to go looking.

But paper processors who are most high, either don’t have the time, or do not make the time, or make that effort.

And thus, they are misled - a lot.


59 posted on 12/20/2020 6:32:32 PM PST by linMcHlp
[ Post Reply | Private Reply | To 56 | View Replies]

To: ding_dong_daddy_from_dumas

IBM Watson, yes.


60 posted on 12/20/2020 6:36:00 PM PST by linMcHlp
[ Post Reply | Private Reply | To 58 | View Replies]


Navigation: use the links below to view more comments.
first previous 1-2021-4041-6061-62 next last

Disclaimer: Opinions posted on Free Republic are those of the individual posters and do not necessarily represent the opinion of Free Republic or its management. All materials posted herein are protected by copyright law and the exemption for fair use of copyrighted works.

Free Republic
Browse · Search
News/Activism
Topics · Post Article

FreeRepublic, LLC, PO BOX 9771, FRESNO, CA 93794
FreeRepublic.com is powered by software copyright 2000-2008 John Robinson