{"id":16651,"date":"2013-08-06T12:17:11","date_gmt":"2013-08-06T19:17:11","guid":{"rendered":"http:\/\/www.intego.com\/mac-security-blog\/?p=16651"},"modified":"2017-06-30T11:56:21","modified_gmt":"2017-06-30T18:56:21","slug":"torsploit-ip-address-is-owned-by-government-contractor","status":"publish","type":"post","link":"https:\/\/www.intego.com\/mac-security-blog\/torsploit-ip-address-is-owned-by-government-contractor\/","title":{"rendered":"Torsploit IP Address Is Owned By Government Contractor?"},"content":{"rendered":"

\"Torsploit\"<\/a><\/p>\n

So apparently this is the week I get to harp on the necessity of reading news with a soup\u00e7on of skepticism. Are you ready for a little dissection of some hyperbolic claims of certainty that the Feds were behind the Tor exploit? Because here it comes!<\/p>\n

Yesterday, I said that we might never know for certain<\/a> who was behind the attack on Tor. Partly I say this because we\u2019re basing guesses right now on where data is being sent, not where the code originated. That\u2019s mostly because that\u2019s all the info we have right now. But the other part of it is that we can\u2019t say for certain that the data is entirely trustworthy. If it\u2019s sending to a government address, is that to create fear and throw blame on the government? If we found out it did in fact originate from a machine owned by the NSA, can we be certain that the machine wasn\u2019t compromised? Most of these questions can\u2019t (or likely won\u2019t) conclusively be answered.<\/p>\n

As it turns out, we also can\u2019t be so sure<\/a> that a government contractor does in fact own the IP where the data is going. Some popular tools will over-simplify data, and if we don\u2019t double-check it, we could get some potentially misleading (if very sensational) data. Yes \u2013 it could still be a government contractor, but it could also be a pwned corporate machine, for instance.<\/p>\n

I don\u2019t know exactly how or where one should draw the line in terms of believing sensational news (the NSA revelations certainly threw me for a loop<\/a>!) and I imaging this line will differ from one person to the next. But it\u2019s a good idea to remember that the information we get in the early stages of an event are often more sensational than accurate.<\/p>\n","protected":false},"excerpt":{"rendered":"

So apparently this is the week I get to harp on the necessity of reading news with a soup\u00e7on of skepticism. Are you ready for a little dissection of some hyperbolic claims of certainty that the Feds were behind the Tor exploit? Because here it comes! Yesterday, I said that we might never know for […]<\/p>\n","protected":false},"author":6,"featured_media":16657,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[5],"tags":[52,289,569,571],"class_list":["post-16651","post","type-post","status-publish","format-standard","has-post-thumbnail","category-security-news","tag-exploit","tag-government","tag-tor","tag-torsploit"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t