Trump has ~91k files in the data
https://pbs.twimg.com/media/GomVrWxWMAA5S-_?format=jpg&name=...
[edit] site down - reddit link to the 10tb
https://www.reddit.com/r/worldnews/comments/1k0h9uu/anonymou...
Also x link to data
https://pbs.twimg.com/media/GomVrWxWMAA5S-_?format=jpg&name=...
[edit] site down - reddit link to the 10tb
https://www.reddit.com/r/worldnews/comments/1k0h9uu/anonymou...
Also x link to data
Somehow feels like a great way to get a bunch of people to download a rar with a zero day
https://blog.google/threat-analysis-group/government-backed-...
I also do not understand how Anonymous would sift through 10TB to confirm the validity of the claims.
So the vulnerability is not in WinRAR, but rather in the ShellExecute windows code that desperately tries to find something else to run when asked to execute a file that does not exist.
As my security officer says at $dayJob, "having a security hole there for thirty years does not make it somehow less of a security hole".
Don't just download it on your windows home pc with your private data of course.
An unknown threat, potentially from the supposed nation-state target itself, has a very high risk.
I'm not versed in creating ultra-sterile lab conditions -- things can escape VMs, escape your network, nothing is impossible. Do I instead bring it to my employers systems and let them take the risk? And to what benefit, when I can just wait?
We are experts on HN. If we don't do it, others with less knowledge might or not might.
And no, a archive file doesn't just include a zero day. A zero day is very valuable.
AWS is expensive, in my mind, because of stuff like this. They don't want you to nirror it on aws, so egress is expensive. The $/GB/month storage fees it'll cost to store this while exploring it is not cheap, either. And once you have an idea of the data you want to move out of the gap, you want to process /extract it quickly (because of $/GB/Month costs...)
I just thought about a spare machine I have with a 12TB spindle and an SSD not plugged into a network.
I understand how to airgap, and unless something can magically worm it's way through HDMI that's probably how I'd get data out, just to be annoying to everyone. To be fair.
Its not necessarily about storing it longerm, its about 'looking into it'.
I don't get the Airgap thing though at all. There is a very minimal chance that this contains a zero day. The idea of a zero day is, that you can attack systems and you sell it to people who have high profile targets or systems.
Some random person downloading leaked data, everyone can download, is not a real target for a zero day.
And a zero day which breaks random unpacking tools and your vm/system, would be worth even more.
I suppose it is a bit hard to find hardware without integrated wifi these days. Maybe taking a sbc (pi or whatever) and wrapping it in tinfoil would work?
I'm aware I'm being cautious to the point of paranoia, but anything with the Russian gov is just not something I feel like learning about the hard way, even if I think I'm able to make such a safe environment
That's the size column in WinRAR (left of the Compressed column). Is it by coincidence also the number of files?
Also yes, that's the file size column. Uncompressed left, compressed right. It's a directory but the screenshot doesn't say how many files it contains.