NSA Gen. Ret. Keith Alexander to Banksters: "we’re going to have a 9/11 in cyberspace"

originally posted by: greyhat
a reply to: bobs_uruncle

Dave, thx, i did my first DRBD pair around 2008, i understand the technical part quite well.

The server is not the biggest problem. How do we keep root from doing bs?

Yeah, I hear ya, once I have root access that's it, it's all over. I actually did an exploit test contract for what was the second largest porn portal in North America, it took me less than 15 minutes to get all of the passwords and root access to 347 servers and 117 client machines, plus the CEO's laptop and access to his offshore accounts (he foolishly left it hooked up to the network thinking he was secure LOL, surprisingly porn was making him about 15mil a month net). BTW, I actually have a pair of encrypted BRBD gateway/sync client/servers here for mains/backup encrypted communications that were intended for the banking sector from a contract I was looking at doing.

There is a way to protect root access, but probably not a good idea to let that cat out of the bag. Let's keep the playing field level for now between the government/banksters and the hackers ;-)

Cheers - Dave

originally posted by: Craninalbliss
please please.... wipe out The Chase bank Mortgage Financial Directory !!!!!

With the luck we mere mortals have the only data that would be lost is our payment history

"Sir, we have no record of you paying your mortgage over the last 10 years. Please remit payment of $65,000 and $500,000 in late charges or we will be forced to foreclose."

a reply to: Lipton

Yes .. but mere mortals have to keep at least 7 yrs worth of bank statements for the IRS [unlike the IRS 6months worth of emails ] ... and those are physical copies!

So as long as us mere mortals have at least 7 yrs worth of physical paperwork copies of financial transactions with the bank then they don't have to worry about the banks being hacked.

originally posted by: DietJoke
So as long as us mere mortals have at least 7 yrs worth of physical paperwork copies of financial transactions with the bank then they don't have to worry about the banks being hacked.

Yes, but it takes to much time to type billions of records back into a banks database after a massive data loss.

There is no infrastructure for this kind of manual recovery. Nowhere.

Initially I was as skeptical as most on this thread by the Generals comments, due to the nature and situation of war it is not the most trustworthy of professions. But it has got me thinking about how the US dollar is going to respond as there is a growing global shift from its reserve currency status. The fears of hyperinflation as USD notes return home from overseas nations is just one of many risks facing the US economy, there are others.

So what does the Military Industrial Complex do when the risks outweigh the situation? They take the lead with a first strike policy. So as a powerful industrialist you can see that the economy is about to tank, by setting of the economic collapse instead of waiting for its natural fall it does provide some immediate advantage of the unfortunate situation that is about to unfold. You can shift your stocks and assets into more stable forms to weather the economic storm, profit with the advent of martial law, further strip away individual rights and rebuild the next currency to be even more profitable for the select few.

I found the reference to 9/11 very suitable, an inside job to take further control.

originally posted by: bobs_uruncle
There is a way to protect root access, but probably not a good idea to let that cat out of the bag.

Of cause, i know them to. The problem is that even with perfect patch management someone must have the right to apply these patches and check the results. If some evil hacker takes over this account you are finished for some time.

If a business is recovering fast enough to survive is a question of luck. We are not living in that good old times anymore where you could call some guys and ask them for some days patience...

originally posted by: kwakakev
So what does the Military Industrial Complex do when the risks outweigh the situation? They take the lead with a first strike policy. So as a powerful industrialist you can see that the economy is about to tank, by setting of the economic collapse instead of waiting for its natural fall it does provide some immediate advantage of the unfortunate situation that is about to unfold. You can shift your stocks and assets into more stable forms to weather the economic storm, profit with the advent of martial law, further strip away individual rights and rebuild the next currency to be even more profitable for the select few.

I found the reference to 9/11 very suitable, an inside job to take further control.

Thats it. If the old elites think that crash is inevitable, they will pull the emergancy brake in order to make shure they are in the pole position in the next economic race.

The "new economy" crash in 2000 was patched by 9/11. This time in case of a full reset they need to make shure they control critical corporate shares, the remaining physical material stocks, they need to anihilate baby boomers pensions and they need to get rid of any evidence of their criminal acts, jail after an economic crash would be no fun.

originally posted by: kwakakev
So what does the Military Industrial Complex do when the risks outweigh the situation? They take the lead with a first strike policy. ...
I found the reference to 9/11 very suitable, an inside job to take further control.

If one reads between the lines in Alexander Gostevs article "Agent.btz: a source of inspiration?" he seems to tell us that the Operation Olympics Games Flame-Team has already prepared a false flag pseudo-russian trojan copy of the old Agent.BTZ trojan named "Turla" aka "Snake" or "Uroburos".

www.securelist.com...
Wapo about flame


They already did a test run in Belgium, copying Ukraine crisis docs from a gov server there in order to be able to present some "great evidence" in the next powerpoint party.

www.lesoir.be...

The Bank of England has a cyber-attack toolkit now!

"CREST has helped develop the new accreditation standards for CBEST penetration testing, based on the already stringent standards for assessing the capabilities, policies and procedures that CREST member companies have to achieve. CREST president Ian Glover, said: “CBEST tests have been designed to replicate the behaviours of serious threat actors, assessed by Government and commercial intelligence providers as posing a genuine threat to important financial institutions."

itsecurityguru.org...

It was partially build by BAE Systems. (see article)

These are the same guys warning us about the "russian cyber-warriors".

"Suspected Russian spyware Turla targets Europe, United States On Friday, Britain's BAE Systems Applied Intelligence - the cyber arm of Britain's premier defense contractor - published its own research on the spyware, which it called "snake.""

www.reuters.com...


But never mind, the NSA will save your banks! Together with Keiths Ironnet team!

"Adm. Mike Rogers, the director of the National Security Agency and commander of the U.S. Cyber Command, said Tuesday that he met June 23 with Homeland Security Secretary Jeh Johnson and FBI Director James Comey to discuss “what can we do collectively between our organizations to help build that partnership, to help the U.S. government apply its capabilities to support the broader civil sector that’s out there.”"

c4isrnet.com...

originally posted by: greyhat

itsecurityguru.org...

It was partially build by BAE Systems. (see article)

Funny, the BAE references from the article were removed.

But never mind, i found some copies...

"Bank of England works with CREST to deliver cyber-security framework

...BAE Systems Applied Intelligence, through its membership of the Council of Registered Ethical Security Testers (CREST) has played an active part in developing the CBEST intelligence-led cyber security assessment framework"

www.bobsguide.com...
archive.today...

NATO gets ready to nuke on cyber...

"Jamie Shea, deputy assistant secretary general for emerging security challenges, told ZDNet: "For the first time we state explicitly that the cyber realm is covered by Article 5 of the Washington Treaty, the collective defence clause. We don't say in exactly which circumstances or what the threshold of the attack has to be to trigger a collective NATO response and we don't say what that collective NATO response should be.

"This will be decided by allies on a case-by-case basis, but we established a principle that at a certain level of intensity of damage, malicious intention, a cyber attack could be treated as the equivalent of an armed attack."

The new policy has been approved by NATO defence minister and will be endorsed at its Wales summit in September."

www.zdnet.com...