tag:blogger.com,1999:blog-4088979.post1558439714646470382..comments2023-10-16T06:06:25.012-04:00Comments on TaoSecurity Blog: You Down with APT?Richard Bejtlichhttp://www.blogger.com/profile/13512184196416665417noreply@blogger.comBlogger11125tag:blogger.com,1999:blog-4088979.post-40092477471982429462010-04-06T10:08:10.158-04:002010-04-06T10:08:10.158-04:00Well, that's great if you think "Aurora&q...Well, that's great if you think "Aurora" is relevant to advanced persistent threat. Recent revelations have confirmed that McAfee didn't know what it was doing and others who based research on their work followed poor leads.Richard Bejtlichhttps://www.blogger.com/profile/13512184196416665417noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-46162657647231628212010-04-06T09:55:43.616-04:002010-04-06T09:55:43.616-04:00I was collecting a lot of information regarding th...I was collecting a lot of information regarding the Aurora incident for my work, and thought it would be a waste of time not to share it with others who could also use the same information for further investigation as most information was open source and non-confidential.<br /><br />Apparently a lot of people understood the point, as 300+ people joined, and I got a lot of positive feedback. <br /><br />The group contains technical reports, news stories, translated Chinese materials to show Chinese reactions on the incident, and so on.<br /><br />What's the point of not sharing information, and not trying to make the life of others who need similar information easier by putting it all together, whether that's on a blog, on twitter, or in a linkedin group ?freedomfileshttps://www.blogger.com/profile/03866714690105867097noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-47410651512431317852010-04-06T08:46:33.585-04:002010-04-06T08:46:33.585-04:00Niels, if you're sharing "public informat...Niels, if you're sharing "public information which can be found on the web," what's the point?Richard Bejtlichhttps://www.blogger.com/profile/13512184196416665417noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-14013745111884234562010-04-06T08:25:03.777-04:002010-04-06T08:25:03.777-04:00Richard:
"That's hilarious. Yeah, let...Richard:<br /><br />"That's hilarious. Yeah, let's share what we know with a faceless LinkedIn group!"<br /><br />I've created the group, and use it to share non-confidential information regarding the Aurora incident.<br /><br />I don't understand your reaction - everything in the group is public information which can be found on the web, and there's nothing shady about it.<br /><br />Kind regards,<br />Niels Groeneveldfreedomfileshttps://www.blogger.com/profile/03866714690105867097noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-65299245182038041762010-01-26T07:24:39.242-05:002010-01-26T07:24:39.242-05:00That's hilarious. Yeah, let's share what ...That's hilarious. Yeah, let's share what we know with a faceless LinkedIn group!Richard Bejtlichhttps://www.blogger.com/profile/13512184196416665417noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-42539178415013499702010-01-26T01:43:34.036-05:002010-01-26T01:43:34.036-05:00Someone started an "Operation Aurora" Li...Someone started an "Operation Aurora" LinkedIN group. Maybe some good unclassified information will be shared there?<br /><br />http://www.linkedin.com/groups?home=&gid=2677290&trk=anet_ug_hmSecurity4allhttps://www.blogger.com/profile/09433979568731690987noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-34491216515555102022010-01-26T01:41:59.092-05:002010-01-26T01:41:59.092-05:00This comment has been removed by the author.Security4allhttps://www.blogger.com/profile/09433979568731690987noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-7470644763787304242009-07-15T05:20:47.596-04:002009-07-15T05:20:47.596-04:00This comment has been removed by a blog administrator.Matthew Tripphttps://www.blogger.com/profile/05211881935174715199noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-25007046921901371742009-07-11T11:24:26.537-04:002009-07-11T11:24:26.537-04:00Yeah you know me.Yeah you know me.*Redacted* CIRThttps://www.blogger.com/profile/11742634218830259164noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-69363411422640727212009-07-11T08:13:49.478-04:002009-07-11T08:13:49.478-04:00Their should be a better unclassified information ...<i>Their should be a better unclassified information sharing forum to help spread the word (tools, techniques and recent findings). -R</i><br /><br />Just out of curiosity, better than what? With all of the resources available, what could be done better? What would you recommend?H. Carveyhttps://www.blogger.com/profile/08966595734678290320noreply@blogger.comtag:blogger.com,1999:blog-4088979.post-70768478238908933262009-07-11T07:50:14.960-04:002009-07-11T07:50:14.960-04:00NDA's and Clearances tend to reduce the amount...NDA's and Clearances tend to reduce the amount of information that can be shared about APT. Their should be a better unclassified information sharing forum to help spread the word (tools, techniques and recent findings). -RAnonymousnoreply@blogger.com