Comments on: Chaos Computer Club cracks Germany's illegal government malware, a trojan that spies on your PC and lets anyone off the street hijack it http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html Brain candy for Happy Mutants Sat, 25 May 2013 14:48:00 +0000 hourly 1 http://wordpress.org/?v=3.4.1 By: radioman http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1241052 radioman Wed, 12 Oct 2011 20:20:00 +0000 http://boingboing.net/?p=122617#comment-1241052 »You can just use the client with Mac to control the infected Windows PC's that have the actual trojan running on them.« That is right: The client is for Mac OS X, the trojan is for Windows. -> http://youtu.be/h0ix1Rn6rXY »You can just use the client with Mac to control the infected Windows PC’s that have the actual trojan running on them.«

That is right: The client is for Mac OS X, the trojan is for Windows.

-> http://youtu.be/h0ix1Rn6rXY

]]> By: t3kna2007 http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239691 t3kna2007 Tue, 11 Oct 2011 16:58:00 +0000 http://boingboing.net/?p=122617#comment-1239691 > If so, wouldn't the fact that 'anyone' can get > into this system mean that .. all evidence > related to computers with this malware > is no longer admissible? No, because that would make sense, and that's not how things work.  You're thinking of a different planet. > If so, wouldn’t the fact that ‘anyone’ can get
> into this system mean that .. all evidence
> related to computers with this malware
> is no longer admissible?

No, because that would make sense, and that’s not how things work.  You’re thinking of a different planet.

]]> By: videobored http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239671 videobored Tue, 11 Oct 2011 16:40:00 +0000 http://boingboing.net/?p=122617#comment-1239671 Ummmmmmm..... buttr cola. Ummmmmmm….. buttr cola.

]]> By: Udont http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239611 Udont Tue, 11 Oct 2011 15:21:00 +0000 http://boingboing.net/?p=122617#comment-1239611 I sincerely hope that I read the sarcasm in that correctly. I sincerely hope that I read the sarcasm in that correctly.

]]> By: Draxlith http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239522 Draxlith Tue, 11 Oct 2011 12:35:00 +0000 http://boingboing.net/?p=122617#comment-1239522 Does German law take into account chain of custody like US law? If so, wouldn't the fact that 'anyone' can get into this system mean that chain of custody is broken, and all evidence related to computers with this malware is no longer admissible? I hope so, because that would be amazing Does German law take into account chain of custody like US law? If so, wouldn’t the fact that ‘anyone’ can get into this system mean that chain of custody is broken, and all evidence related to computers with this malware is no longer admissible? I hope so, because that would be amazing

]]> By: ffabian http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239497 ffabian Tue, 11 Oct 2011 11:13:00 +0000 http://boingboing.net/?p=122617#comment-1239497 Specifically the German Supreme Court allowed the use of Trojans only to spy on communications made with the PC (VOIP, Chat, Email) and only to prevent crimes that endanger human lifes. Any other data  on the infected Computer is protected and not allowed to be spied on but the discovered Trojan has the capability to do more:  upload stuff, making screenshots, access built-in webcams etc  - in short: do stuff it's not allowed to do.  The important question is: Was the Trojan used and for what? Specifically the German Supreme Court allowed the use of Trojans only to spy on communications made with the PC (VOIP, Chat, Email) and only to prevent crimes that endanger human lifes. Any other data  on the infected Computer is protected and not allowed to be spied on but the discovered Trojan has the capability to do more:  upload stuff, making screenshots, access built-in webcams etc  – in short: do stuff it’s not allowed to do.  The important question is: Was the Trojan used and for what?

]]> By: wildemar http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239476 wildemar Tue, 11 Oct 2011 10:33:00 +0000 http://boingboing.net/?p=122617#comment-1239476 How is this "evidence for the case for using open source"? The authorities didn't even admit to having that piece of software in the first place. How is this “evidence for the case for using open source”? The authorities didn’t even admit to having that piece of software in the first place.

]]> By: Cowicide http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239422 Cowicide Tue, 11 Oct 2011 08:17:00 +0000 http://boingboing.net/?p=122617#comment-1239422 Right, I guess it would be more boring to simply show the dll code, etc. - Using a Mac Client to attack PCs goes in line with other stuff I've, er... witnessed... but you usually don't see this stuff in mainstream news like this.. haha... ok, I'll stop here. Right, I guess it would be more boring to simply show the dll code, etc. – Using a Mac Client to attack PCs goes in line with other stuff I’ve, er… witnessed… but you usually don’t see this stuff in mainstream news like this.. haha… ok, I’ll stop here.

]]> By: Cowicide http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239420 Cowicide Tue, 11 Oct 2011 08:14:00 +0000 http://boingboing.net/?p=122617#comment-1239420 Ok, that's what I thought.  That's what is meant by "Client". Ok, that’s what I thought.  That’s what is meant by “Client”.

]]> By: Thomas Heimann http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239408 Thomas Heimann Tue, 11 Oct 2011 07:54:00 +0000 http://boingboing.net/?p=122617#comment-1239408 It's not entirely correct that "The German supreme court banned the use of trojans to spy on German citizens in 2008.". Instead, the court tried to distinguish between "good" and "bad" trojans; a distinction which does not work in real life. Thanks to the CCC - you're doing an extraordinary job. It’s not entirely correct that “The German supreme court banned the use of trojans to spy on German citizens in 2008.”. Instead, the court tried to distinguish between “good” and “bad” trojans; a distinction which does not work in real life. Thanks to the CCC – you’re doing an extraordinary job.

]]> By: Fabian Giesen http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239382 Fabian Giesen Tue, 11 Oct 2011 06:56:00 +0000 http://boingboing.net/?p=122617#comment-1239382 That's a screenshot of the Command & Control interface the CCC created by reverse engineering the Trojan. We don't know what the "official" C&C interface looks like, it wasn't leaked or anything - this was done by analyzing an infected machine. (Or, more precisely, by analyzing its hard drive) That’s a screenshot of the Command & Control interface the CCC created by reverse engineering the Trojan. We don’t know what the “official” C&C interface looks like, it wasn’t leaked or anything – this was done by analyzing an infected machine. (Or, more precisely, by analyzing its hard drive)

]]> By: retepslluerb http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239380 retepslluerb Tue, 11 Oct 2011 06:53:00 +0000 http://boingboing.net/?p=122617#comment-1239380 The screenshot you are seeing  is the interface remote control program, written by the CCC guys  to demonstrate that they were able to hijack the Trojan. Don't know why they did that on a Mac, probably because the logger itself seems to be windows only? The screenshot you are seeing  is the interface remote control program, written by the CCC guys  to demonstrate that they were able to hijack the Trojan.

Don’t know why they did that on a Mac, probably because the logger itself seems to be windows only?

]]> By: Fabian Giesen http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239377 Fabian Giesen Tue, 11 Oct 2011 06:50:00 +0000 http://boingboing.net/?p=122617#comment-1239377 There's no such thing as a class action lawsuit in German law. There’s no such thing as a class action lawsuit in German law.

]]> By: corydodt http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239376 corydodt Tue, 11 Oct 2011 06:44:00 +0000 http://boingboing.net/?p=122617#comment-1239376 Come on, now. Do the responsible thing, and use this malware to pwn the government to fix the problem. They've given you the technology fix you need, already. Just alter the constitution to make it unconstitutional and start issuing warrants for the arrest of the people responsible. (I'm sure you can find their identities through the use of the same malware.) Come on, now.

Do the responsible thing, and use this malware to pwn the government to fix the problem. They’ve given you the technology fix you need, already. Just alter the constitution to make it unconstitutional and start issuing warrants for the arrest of the people responsible. (I’m sure you can find their identities through the use of the same malware.)

]]> By: Cowicide http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239375 Cowicide Tue, 11 Oct 2011 06:40:00 +0000 http://boingboing.net/?p=122617#comment-1239375 The funny thing is I checked out the binaries and they are for Windows, not Mac.  But the screenshot shows a Mac interface.  Is this some kind of joke or am I missing something here? Or maybe the deal is the client is for Mac OS X and it doesn't infect the Mac at all. You can just use the client with Mac to control the infected Windows PC's that have the actual trojan running on them. The funny thing is I checked out the binaries and they are for Windows, not Mac.  But the screenshot shows a Mac interface.  Is this some kind of joke or am I missing something here?

Or maybe the deal is the client is for Mac OS X and it doesn’t infect the Mac at all. You can just use the client with Mac to control the infected Windows PC’s that have the actual trojan running on them.

]]> By: Antinous / Moderator http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239368 Antinous / Moderator Tue, 11 Oct 2011 06:34:00 +0000 http://boingboing.net/?p=122617#comment-1239368 Oliver, Please stop putting extra line breaks at the end of your comments. Oliver,

Please stop putting extra line breaks at the end of your comments.

]]> By: Oliver Schmieding http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239366 Oliver Schmieding Tue, 11 Oct 2011 06:32:00 +0000 http://boingboing.net/?p=122617#comment-1239366 this is actually rather sad. as of this morning, the bavarian minister for internal affairs (it's his responsibility to keep stuff like this from happening) has entered a state of active denial and has last been seen sputtering erratic monosyllabic nonsense into any available microphone -  the little software gem is not some blunder, but A BREACH OF OUR CONSTITUTION. it's pretty much a TSHTF situation. oh, and meanwhile in the "clowns to the left of me, jokers to the right" department, speakers for both the german police union and the union for german policemen demand that from now on only officially certified software shall be used for black ops. *sigh* this is actually rather sad.
as of this morning, the bavarian minister for internal affairs (it’s his responsibility to keep stuff like this from happening) has entered a state of active denial and has last been seen sputtering erratic monosyllabic nonsense into any available microphone - 

the little software gem is not some blunder, but A BREACH OF OUR CONSTITUTION.

it’s pretty much a TSHTF situation.

oh, and meanwhile in the “clowns to the left of me, jokers to the right” department,
speakers for both the german police union and the union for german policemen
demand that from now on only officially certified software shall be used for black ops.

*sigh*

]]> By: mike http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239367 mike Tue, 11 Oct 2011 06:32:00 +0000 http://boingboing.net/?p=122617#comment-1239367 They published the binaries, not the source code. They published the binaries, not the source code.

]]> By: andygates http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239355 andygates Tue, 11 Oct 2011 06:07:00 +0000 http://boingboing.net/?p=122617#comment-1239355 Smells like class action lawsuit time. Smells like class action lawsuit time.

]]> By: Haz 0 http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239322 Haz 0 Tue, 11 Oct 2011 05:28:00 +0000 http://boingboing.net/?p=122617#comment-1239322 Another piece of evidence for the case for using open source. Share your knowledge! Another piece of evidence for the case for using open source. Share your knowledge!

]]> By: Doran http://boingboing.net/2011/10/10/chaos-computer-club-cracks-germanys-illegal-government-malware-a-trojan-that-spies-on-your-pc-and-lets-anyone-off-the-street-hijack-it.html#comment-1239319 Doran Tue, 11 Oct 2011 05:26:00 +0000 http://boingboing.net/?p=122617#comment-1239319 At least we can be confident that this kind of malware would never EVER be used by the U.S. government. At least we can be confident that this kind of malware would never EVER be used by the U.S. government.

]]>