WikiLeaks Vault 7

[miguel]

The only completely secure electronic device is one that is not and has never been connected to the internet

The only REALLY secure electronic device is one that isn't plugged in.

 

[1DOWN4UP]

I thought it was only legal for only the MSM to look at all of this LeekyWeeks.....

 

[Expat]

Yeah - the tools don't seem to be part of the actual package, just the documentation.

Now... if you have a d/l for the tools, that'd be a hot ticket.

It would also go from 500 Mb to hundreds of Gigabytes. But I am sure many if not most of them are readily available if you know where to look. Most of this stuff was a few years old already and many of the vulnerabilities that were exploited by this stuff, already patched. Although I am sure they have new vulnerabilities that they are exploiting today.

 

[ArcadiaGP]

If, for some reason, you use a modern Mac computer, here you go.

https://wikileaks.org/ciav7p1/cms/page_21561431.html

Mac OS X EFI implant which uses an EFI driver stored on the EFI system partition to provide persistence to an arbitrary kernel implant. Unremovable.

Edit: And a video covering some of the Vault 7 leak

https://www.youtube.com/watch?v=D6BdaoyJe-Q

 

[T.Lex]

It would also go from 500 Mb to hundreds of Gigabytes. But I am sure many if not most of them are readily available if you know where to look. Most of this stuff was a few years old already and many of the vulnerabilities that were exploited by this stuff, already patched. Although I am sure they have new vulnerabilities that they are exploiting today.

It looks to me like they had some solid internally developed tools. Some of them built on the black market stuff, but the internal builds leveraged the undocumented zero day vulns, I think.

There are also code snippets and pseudo code methodologies to help train new haxxors.

 

[KLB]

It looks to me like they had some solid internally developed tools. Some of them built on the black market stuff, but the internal builds leveraged the undocumented zero day vulns, I think.

There are also code snippets and pseudo code methodologies to help train new haxxors.

They probably had access to information not accessible in the wild as well.

 

[ArcadiaGP]

They probably had access to information not accessible in the wild as well.

Had people working within the companies to guarantee backdoor access.

 

[ArcadiaGP]

Brief and super-informed video... how to tell if you're vulnerable to the CIA hacks.

[video=youtube;w4-eJL1jjVQ]https://www.youtube.com/watch?v=w4-eJL1jjVQ&feature=youtu.be[/video]

 

[91FXRS]

Brief and super-informed video... how to tell if you're vulnerable to the CIA hacks.

[video=youtube;w4-eJL1jjVQ]https://www.youtube.com/watch?v=w4-eJL1jjVQ&feature=youtu.be[/video]

 

[BugI02]

[virtual teal] Beginning to see 'news' outlets spin this as 'wikileaks released these exploits/hacking tools' or 'what wikileaks has revealed will allow skilled individuala to fill in the blanks and replicate the exploits/ tools' all the while very much down-playing that the tools/exploits are already in the wild with full code due to carelessness of CIA. MSM helping one of their sources with damage control? [end virtual teal]

 

[T.Lex]

Yeah, I also saw a MSM reference to the "release of CIA malware." No. It isn't malware. Its state-sponsored hacking.

 

[KLB]

I saw a report saying how this release puts us more at risk now, because the terrorists now know how to stop from getting hacked by us.

 

[T.Lex]

I saw a report saying how this release puts us more at risk now, because the terrorists now know how to stop from getting hacked by us.

Actually, in that sense, it would be a serious disruption of their communications. These tools basically confirm that any device that is or has been on the market since the mid-2000s is hackable.

I guess there's no evidence that sat phones are part of that, but that's more NSA work than CIA.

If they try to use the internet for anything, it is at risk of being intercepted.

I think this would even apply to steganography. The tools and methods suggest they are able to get root access to connected computers, and could track what happens on those computers. They'd basically have access to the data before it was encrypted into the host file.

They'd have to have an air-gapped set of computers, not connected to the internet, and bring data to them on a thumb drive (which would be vulnerable) or other media like a CD/DVD or SD card, I guess, and hope that the media didn't contain the CIA's code.

 

[ArcadiaGP]

WikiLeaks pledges to release software code of CIA hacking tools to tech firms

 

[GodFearinGunTotin]

Actually, in that sense, it would be a serious disruption of their communications. These tools basically confirm that any device that is or has been on the market since the mid-2000s is hackable.

I guess there's no evidence that sat phones are part of that, but that's more NSA work than CIA.

If they try to use the internet for anything, it is at risk of being intercepted.

I think this would even apply to steganography. The tools and methods suggest they are able to get root access to connected computers, and could track what happens on those computers. They'd basically have access to the data before it was encrypted into the host file.

They'd have to have an air-gapped set of computers, not connected to the internet, and bring data to them on a thumb drive (which would be vulnerable) or other media like a CD/DVD or SD card, I guess, and hope that the media didn't contain the CIA's code.

I heard a report yesterday warning people that plug their phones in to charge them in public may be susceptible to hacking because the cord acts as an antenna, etc. Next thing you'll know is that even connecting your computer onto the electrical grid provides a way in to get the information.

 

[Trigger Time]

And the people on ingo that said this **** was going on were laughed at and made fun of for wearing tin foil hats. Who's laughing/crying now?
still trust your government?

 

[BugI02]

Ask The Finn

 

[bwframe]

Why would any sane person think that connecting to any network of other computers would involve privacy?

 

[bwframe]

Pam Anderson can?t get enough of ?sexy? Julian Assange | Page Six

 

[BugI02]

*.*