Comment by BoiledCabbage | Hacker News Reader

Comment by BoiledCabbage | Hacker News Reader

None of the following is confirmed, but I keep seeing articles online hinting around this, or implying this. Essentially it sounds like is known in classified circles that Kaspersky works closely with and supports Russian Intelligence (FSB).

It seems while the US knew about this it had a spy within Kaspersky and was their source for finding out what they were up to. The accused spy was arrested by the FSB recently so likely the US no longer is willing to take on the risk of allowing Kaspersky to run on us govt machines. Marco Rubio appeared to hint at some classified info about known govt risks of dealing with Kaspersky. Additionally the second link mentions Kaspersky is moving into protecting critical infrastructure, which seems notable giving the sudden frequency of mentions of the weakness of US infrastructure to network attack.

The problem with classified security stuff is you never find out the full story. Only bits and pieces around the edges of it. It's almost never in their best interest to reveal the depths of what they know because it exposes their methods and awareness.

https://www.cbsnews.com/news/russia-treason-fsb-spies-kasper...

Earlier article on then working with the FSB.

https://www.bloomberg.com/news/articles/2017-07-11/kaspersky...

>> Essentially it sounds like is known in classified circles that Kaspersky works closely with and supports Russian Intelligence (FSB).

I have never understood why this is a shocking revelation.

FSB is russia version of CIA/NSA. Every single US technology company works with the CIA/NSA as they are required to by law, every company in any other nation is going to work with their government as required by law

If you are in the UK you will be working with GCHQ/MI5, if you are in the US it will be NSA/CIA, if you are in Russia it will be FSB, etc

You're making a very big leap from 'Russia arrested someone and charged him with treason' to 'That person was actually a US spy' and even 'The arrest of this person who was actually a US spy is the driver behind a particular US policy'. We just don't have any reasonable insight into why Russia arrests people and what, if anything, they're guilty of.

> We just don't have any reasonable insight into why Russia arrests people

In the actual article link it quotes Russian govt. officials saying they arrested them for treason, and for giving secrets to a US Intelligence Agency that wasn't the CIA.

I do appreciate skepticism in response to claims, but please do read through the article first before contesting.

Of course that's what the Russian officials said, but who knows how accurate that is or what might be omitted from that statement?

If I were a rude person unburdened by the site guidelines, I'd suggest you read the comment you're replying to before grumping about who's read the article.

As I'm not, though - my point was the current Russian regime is not constrained by niceties like the rule of law and accusing enemies, real or perceived, of being nefarious agents of a foreign power is their favourite thing. So 'this guy was an American spy' is already a fairly shaky foundation, 'the arrest of this particular guy caused this change in US policy' is a reach bordering on baseless speculation. We just don't have any good way of knowing how much or any of this is true.

Wasn't that individual the person who supplied information in the Steele Report?

There was also this article a few days ago about an intentional CIA backdoor in Microsoft products that Kaspersky was plugging:

https://theunhivedmind.com/news/2017/09/12/us-explodes-after...

Never heard of that site. Any reputable site reporting in this that we can trust?

This has analysis of the kernel bug:

https://breakingmalware.com/documentation/windows-pssetloadi...

And this details the workaround:

https://breakingmalware.com/documentation/windows-pssetloadi...

What I'd like to know (and lack the ability to figure out for myself) is whether other antivirus products implement the same kind of workaround as Windows Defender, i.e., calling FltGetFileNameInformationUnsafe etc.

Seeing as this site calls HIV a myth, the holocaust a hoax, 9/11 a nuclear test, and the Jewish religion a Satanic cult... I don't think it is _super_ trust worthy.

Upvoted. My bad.

I'm not gonna completely judge a site based on it's links. But that site is pretty putrid on the links it displays. It doesn't exactly lend credence to it.

A sampling:

The Holocaust Hoax Exposed

The Synagauge of Satan

9/11 Nuclear Demolition

The HIV Myth

Adolf Hitler Greatest Untold Story

I upvoted you.

My apologies.

Reply on news.ycombinator.com