Comments on: Pundit calls for development of magical anti-Wikileaks computer virus http://boingboing.net/2010/12/07/pundit-calls-for-dev.html Brain candy for Happy Mutants Sat, 25 May 2013 12:19:00 +0000 hourly 1 http://wordpress.org/?v=3.4.1 By: DWittSF http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-961034 DWittSF Wed, 30 Nov -0001 00:00:00 +0000 #comment-961034 Julian, I beg you, DO NOT CLICK ON THE FREE IPAD AD! Julian, I beg you, DO NOT CLICK ON THE FREE IPAD AD!

]]> By: Anonymous http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960780 Anonymous Wed, 30 Nov -0001 00:00:00 +0000 #comment-960780 Jeff Goldblum's skull.exe can ruin any computer, just like those aliens that were using OSX. Jeff Goldblum’s skull.exe can ruin any computer, just like those aliens that were using OSX.

]]> By: Brendon J. Wilson http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960781 Brendon J. Wilson Wed, 30 Nov -0001 00:00:00 +0000 #comment-960781 Alright, so maybe he's mildly confused about the exact mechanism this might be achieved, but the vitriol loaded on him here is uncalled for. There are a variety of completely realistic and feasible ways you could achieve the goal he outlines, or at least come sufficiently close to make a lot of government people very happy. A drive-by-download was identified above as one way, but that would require compromising WikiLeak's own servers - not impossible, especially if you consider that the complexity of Stuxnet indicates it was likely a state-sanctioned attack (4 zero-day exploits used in that attack). One only has to look at the challenges the banking industry faces with attacks on their online customer portals for an idea of other ways an attack might be perpetrated. Spear-phishing, man-in-the-browser attacks, poisoned local DNS settings, and even good ol' social engineering attacks would all be good ways to either render users unable to visit WikiLeaks or even install software capable of monitoring and severely punishing those who attempt to download WikiLeaks docs. I'm not suggesting this would be an all-encompassing way to achieve the goal. However, when you consider that millions of people's machines are parts of illicit botnets without their knowledge, you can't completely disregard the possibility that there exist some means to achieve a large part of his stated goal by infecting a large number of users' machines in a fashion that rendered them incapable of browsing, downloading, or storing Wikileaks documents. He may be somewhat ill-informed for not knowing exactly how it might be achieved, but I expect BoingBoing readers to at least show some of their usual imagination and recognize he's not completely off target. Alright, so maybe he’s mildly confused about the exact mechanism this might be achieved, but the vitriol loaded on him here is uncalled for.

There are a variety of completely realistic and feasible ways you could achieve the goal he outlines, or at least come sufficiently close to make a lot of government people very happy. A drive-by-download was identified above as one way, but that would require compromising WikiLeak’s own servers – not impossible, especially if you consider that the complexity of Stuxnet indicates it was likely a state-sanctioned attack (4 zero-day exploits used in that attack).

One only has to look at the challenges the banking industry faces with attacks on their online customer portals for an idea of other ways an attack might be perpetrated. Spear-phishing, man-in-the-browser attacks, poisoned local DNS settings, and even good ol’ social engineering attacks would all be good ways to either render users unable to visit WikiLeaks or even install software capable of monitoring and severely punishing those who attempt to download WikiLeaks docs.

I’m not suggesting this would be an all-encompassing way to achieve the goal. However, when you consider that millions of people’s machines are parts of illicit botnets without their knowledge, you can’t completely disregard the possibility that there exist some means to achieve a large part of his stated goal by infecting a large number of users’ machines in a fashion that rendered them incapable of browsing, downloading, or storing Wikileaks documents.

He may be somewhat ill-informed for not knowing exactly how it might be achieved, but I expect BoingBoing readers to at least show some of their usual imagination and recognize he’s not completely off target.

]]> By: Mark http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960790 Mark Wed, 30 Nov -0001 00:00:00 +0000 #comment-960790 He's gonna hack the Gibson so he can back trace you. He’s gonna hack the Gibson so he can back trace you.

]]> By: Graham Anderson http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960795 Graham Anderson Wed, 30 Nov -0001 00:00:00 +0000 #comment-960795 Surely the voice of the computer would be Majel Roddenberry? Surely the voice of the computer would be Majel Roddenberry?

]]> By: MrJM http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960796 MrJM Wed, 30 Nov -0001 00:00:00 +0000 #comment-960796 Don't you people understand? The Internet is not something that you just dump something on. It's not a big truck. Don’t you people understand?

The Internet is not something that you just dump something on.

It’s not a big truck.

]]> By: brielle http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960806 brielle Wed, 30 Nov -0001 00:00:00 +0000 #comment-960806 I see someone's been watching reruns of 24 and CSI... I stopped watching 24 after getting tired of hearing such classic phrases like "He's using static NAT mapping in the global Internet routing tables to hack the Internet!" I see someone’s been watching reruns of 24 and CSI…

I stopped watching 24 after getting tired of hearing such classic phrases like “He’s using static NAT mapping in the global Internet routing tables to hack the Internet!”

]]> By: Anonymous http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-961338 Anonymous Wed, 30 Nov -0001 00:00:00 +0000 #comment-961338 A virus would get detected by all of the infallible anti-virus programs everyone is running. We should detonate nuclear devices above every major city in the world so the EMP would destroy any Wikileaks viewing device! A virus would get detected by all of the infallible anti-virus programs everyone is running. We should detonate nuclear devices above every major city in the world so the EMP would destroy any Wikileaks viewing device!

]]> By: igpajo http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960828 igpajo Wed, 30 Nov -0001 00:00:00 +0000 #comment-960828 I was thinking today that there's no way to stop or delete the stuff that's already out there, but how hard would it be for someone to create something that corrupts that encrypted "nuclear option" file that has been downloaded thousands of times. You know the Gov'ment's got people trying to crack that thing. Could they fake a release of keycode in an effort to trick the folks who want to open that thing into running it instead. But instead of opening the file, it destroys it. I have no idea what if what I'm talking about is possible or not, am on the fence as to whether it would be a moral thing or not to release some fake key, just curious to know if something like that might be possible. Probably wouldn't be worth the effort because the first person to try it would spread the word and it would become ineffective almost immediately. I was thinking today that there’s no way to stop or delete the stuff that’s already out there, but how hard would it be for someone to create something that corrupts that encrypted “nuclear option” file that has been downloaded thousands of times. You know the Gov’ment’s got people trying to crack that thing. Could they fake a release of keycode in an effort to trick the folks who want to open that thing into running it instead. But instead of opening the file, it destroys it.
I have no idea what if what I’m talking about is possible or not, am on the fence as to whether it would be a moral thing or not to release some fake key, just curious to know if something like that might be possible.
Probably wouldn’t be worth the effort because the first person to try it would spread the word and it would become ineffective almost immediately.

]]> By: Cowicide http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960831 Cowicide Wed, 30 Nov -0001 00:00:00 +0000 #comment-960831 Yeah, that won't make the situation worse with Anonymous.... http://boingboing.net/submit/2010/12/4chan-rushes-to-wikileaks-defense-forces-swiss-banking-site-offline.html Yeah, that won’t make the situation worse with Anonymous….

http://boingboing.net/submit/2010/12/4chan-rushes-to-wikileaks-defense-forces-swiss-banking-site-offline.html

]]> By: Boba Fett Diop http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960840 Boba Fett Diop Wed, 30 Nov -0001 00:00:00 +0000 #comment-960840 ...and when you least expect it, Jeff Goldblum! …and when you least expect it, Jeff Goldblum!

]]> By: bjacques http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-961359 bjacques Wed, 30 Nov -0001 00:00:00 +0000 #comment-961359 That's it! Throw vitriol at Julian's monitor! I saw Superman take out a PC by putting his fist through the monitor. Alternatively, take Wikileaks to Internet Court and file a writ of cybernetic estoppel. Damn, I wish I could remember the rest of that quote. That’s it! Throw vitriol at Julian’s monitor! I saw Superman take out a PC by putting his fist through the monitor.

Alternatively, take Wikileaks to Internet Court and file a writ of cybernetic estoppel. Damn, I wish I could remember the rest of that quote.

]]> By: jgs http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-961361 jgs Wed, 30 Nov -0001 00:00:00 +0000 #comment-961361 This rubbish was being propagated by NPR this morning, quoting some guy said to be at the National Academy of Sciences. This rubbish was being propagated by NPR this morning, quoting some guy said to be at the National Academy of Sciences.

]]> By: Amandaraqs http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-961620 Amandaraqs Wed, 30 Nov -0001 00:00:00 +0000 #comment-961620 Question one: Who on the planet hasn't ALREADY gotten the insurance file? (And for the more paranoid among us, who hasn't already copied it to a half dozen flash drives?) So even if a worm were released, how would it affect those who already have the file encased in carbonite and hidden in a safe deposit box? Question two: What he's advocating is illegal. The Post accepts Mastercard & Visa for subscriptions. Why have the credit card companies not yanked the Post's ability to process credit card transactions for subscriptions? Question one: Who on the planet hasn’t ALREADY gotten the insurance file? (And for the more paranoid among us, who hasn’t already copied it to a half dozen flash drives?)

So even if a worm were released, how would it affect those who already have the file encased in carbonite and hidden in a safe deposit box?

Question two: What he’s advocating is illegal. The Post accepts Mastercard & Visa for subscriptions. Why have the credit card companies not yanked the Post’s ability to process credit card transactions for subscriptions?

]]> By: llamatron http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960617 llamatron Wed, 30 Nov -0001 00:00:00 +0000 #comment-960617 Jeff Goldblum has the necessary skills. I've seen him do it... he's awesome. Jeff Goldblum has the necessary skills. I’ve seen him do it… he’s awesome.

]]> By: Anonymous http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960622 Anonymous Wed, 30 Nov -0001 00:00:00 +0000 #comment-960622 This guy is full of enough $h*t to clog the tubes that have been leaking the Wikis. This guy is full of enough $h*t to clog the tubes that have been leaking the Wikis.

]]> By: Jake0748 http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960623 Jake0748 Wed, 30 Nov -0001 00:00:00 +0000 #comment-960623 People who don't know what they are talking about should just STFU. Sorry... I don't know what I'm even talking about. So let me amend it to "People who don't even TRY to understand what they are talking about should REALLY STFU. People who don’t know what they are talking about should just STFU.

Sorry… I don’t know what I’m even talking about. So let me amend it to “People who don’t even TRY to understand what they are talking about should REALLY STFU.

]]> By: user23 http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960625 user23 Wed, 30 Nov -0001 00:00:00 +0000 #comment-960625 Thiessen should employ the most powerful virus of all, Delete System32...just typing it gives me chills. He should start by testing it on his own PC. Thiessen should employ the most powerful virus of all, Delete System32…just typing it gives me chills. He should start by testing it on his own PC.

]]> By: Jake0748 http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960626 Jake0748 Wed, 30 Nov -0001 00:00:00 +0000 #comment-960626 IOW... Wikileaks seems to be the latest scapegoat/ whipping-boy. If we can somehow remove them everything will be ok. PUKE. IOW… Wikileaks seems to be the latest scapegoat/ whipping-boy. If we can somehow remove them everything will be ok.

PUKE.

]]> By: Bryson http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960627 Bryson Wed, 30 Nov -0001 00:00:00 +0000 #comment-960627 I think you missed the part where the screen becomes a pixellated image of a skull and crossbones, and then the skull starts laughing. That part is important. I think you missed the part where the screen becomes a pixellated image of a skull and crossbones, and then the skull starts laughing. That part is important.

]]> By: lolbrandon http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960629 lolbrandon Wed, 30 Nov -0001 00:00:00 +0000 #comment-960629 That movie sounds awesome. What's it called? That movie sounds awesome. What’s it called?

]]> By: Xenu http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960631 Xenu Wed, 30 Nov -0001 00:00:00 +0000 #comment-960631 So many problems with this idea -- different operating systems, browsers, etc. Stuxnet just dealt with one platform and targeted one piece of software. So many problems with this idea — different operating systems, browsers, etc. Stuxnet just dealt with one platform and targeted one piece of software.

]]> By: ColHapablap http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-961400 ColHapablap Wed, 30 Nov -0001 00:00:00 +0000 #comment-961400 True, while this is a stupid idea, it is at least technically possible. The same thing happened recently with the popular ProFTPD source code, which was replaced with a compromised version including a backdoor. If they could hack the Wikileaks servers (wherever they may be...), they could replace the cables with infected files that exploit vulnerabilities in Adobe Reader, Windows, Linux, etc. to just brick a person's system. Again, this idea is neither good nor practical, but it's at least feasible, (probably) unbeknownst to him. True, while this is a stupid idea, it is at least technically possible. The same thing happened recently with the popular ProFTPD source code, which was replaced with a compromised version including a backdoor. If they could hack the Wikileaks servers (wherever they may be…), they could replace the cables with infected files that exploit vulnerabilities in Adobe Reader, Windows, Linux, etc. to just brick a person’s system. Again, this idea is neither good nor practical, but it’s at least feasible, (probably) unbeknownst to him.

]]> By: CLAVDIVS http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960637 CLAVDIVS Wed, 30 Nov -0001 00:00:00 +0000 #comment-960637 That screenplay needs to be written. That screenplay needs to be written.

]]> By: turn_self_off http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-963711 turn_self_off Wed, 30 Nov -0001 00:00:00 +0000 #comment-963711 Type cookie, you idiot... Type cookie, you idiot…

]]> By: Anonymous http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960642 Anonymous Wed, 30 Nov -0001 00:00:00 +0000 #comment-960642 All this talk is so silly. They say kill Assange, as if hes the only guy involved. They say "shut down the site" as if its not already copied on dozens of mirrors and P2P networks. They don't understand the internet. They are from such a linear-authoritarian-frequentist perspective they can't understand that this cannot be stopped. They don't understand that there already freely available and easy to use tools like TOR and Freenet which make it impossible to censor information from people who seriously seek it. Its also sad that we have an age where the olds in the MSM don't understand the internet at all. Its such a ludicrous kind of ignorance today. Its the equivalent of not knowing how a telephone works or how the post office works. All this talk is so silly. They say kill Assange, as if hes the only guy involved. They say “shut down the site” as if its not already copied on dozens of mirrors and P2P networks. They don’t understand the internet. They are from such a linear-authoritarian-frequentist perspective they can’t understand that this cannot be stopped. They don’t understand that there already freely available and easy to use tools like TOR and Freenet which make it impossible to censor information from people who seriously seek it.

Its also sad that we have an age where the olds in the MSM don’t understand the internet at all. Its such a ludicrous kind of ignorance today. Its the equivalent of not knowing how a telephone works or how the post office works.

]]> By: jimh http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960643 jimh Wed, 30 Nov -0001 00:00:00 +0000 #comment-960643 George, I saw a very interesting movie the other night. It was called "The Net". It starred that girl from "The Bus". George, I saw a very interesting movie the other night. It was called “The Net”. It starred that girl from “The Bus”.

]]> By: Anonymous http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960644 Anonymous Wed, 30 Nov -0001 00:00:00 +0000 #comment-960644 Hey, let's just ignore the fact that producing software designed to do what he describes is illegal and incredibly unethical [if anyone other than a government makes it]. I don't feel like I should be able to say this seriously, but: FUCKING FASCISTS! Hey, let’s just ignore the fact that producing software designed to do what he describes is illegal and incredibly unethical [if anyone other than a government makes it].

I don’t feel like I should be able to say this seriously, but: FUCKING FASCISTS!

]]> By: Michael Smith http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-961157 Michael Smith Wed, 30 Nov -0001 00:00:00 +0000 #comment-961157 <i>So many problems with this idea -- different operating systems, browsers, etc. Stuxnet just dealt with one platform and targeted one piece of software.</i> <p>The other problem is called Julian. He may be lacking in people skills but he knows how to keep information secure. So many problems with this idea — different operating systems, browsers, etc. Stuxnet just dealt with one platform and targeted one piece of software.

The other problem is called Julian. He may be lacking in people skills but he knows how to keep information secure.

]]> By: Anonymous http://boingboing.net/2010/12/07/pundit-calls-for-dev.html#comment-960652 Anonymous Wed, 30 Nov -0001 00:00:00 +0000 #comment-960652 Poor Julian Sands. He was great in Warlock. Poor Julian Sands. He was great in Warlock.

]]>