Hacker News Reader

Hacker News

Comment by deepnet | Hacker News Reader

Full thread

deepnet

Trump has ~91k files in the data

https://pbs.twimg.com/media/GomVrWxWMAA5S-_?format=jpg&name=...

[edit] site down - reddit link to the 10tb

https://www.reddit.com/r/worldnews/comments/1k0h9uu/anonymou...

Also x link to data

https://x.com/YourAnonFrench_/status/1912099907038572980

View on HN

I'll happily wait for someone else to open that archive and let us know whats in the folder.

Somehow feels like a great way to get a bunch of people to download a rar with a zero day

Yes, an example:

https://blog.google/threat-analysis-group/government-backed-...

I also do not understand how Anonymous would sift through 10TB to confirm the validity of the claims.

> Instead of bailing out, ShellExecute proceeds to call “shell32!ApplyDefaultExts” which iterates through all files in a directory, finding and executing the first file with an extension matching any of the hardcoded ones: “.pif, .com, .exe, .bat, .lnk, .cmd”.

So the vulnerability is not in WinRAR, but rather in the ShellExecute windows code that desperately tries to find something else to run when asked to execute a file that does not exist.

As my security officer says at $dayJob, "having a security hole there for thirty years does not make it somehow less of a security hole".

So always wait for others to do something?

Don't just download it on your windows home pc with your private data of course.

In some cases, yes.

An unknown threat, potentially from the supposed nation-state target itself, has a very high risk.

I'm not versed in creating ultra-sterile lab conditions -- things can escape VMs, escape your network, nothing is impossible. Do I instead bring it to my employers systems and let them take the risk? And to what benefit, when I can just wait?

Cloud VM. Costs you a dollar per hour and has fast download speed.

We are experts on HN. If we don't do it, others with less knowledge might or not might.

And no, a archive file doesn't just include a zero day. A zero day is very valuable.

Fair enough, my morning brain didn't think cloud, though i guess one could argue you're still passing off the risk onto someone else. Either way, its not my expertise

> I'm not versed in creating ultra-sterile lab conditions -- things can escape VMs, escape your network, nothing is impossible.

I suppose it is a bit hard to find hardware without integrated wifi these days. Maybe taking a sbc (pi or whatever) and wrapping it in tinfoil would work?

You could always cut the pcb lines if you want that guarantee.

I'm aware I'm being cautious to the point of paranoia, but anything with the Russian gov is just not something I feel like learning about the hard way, even if I think I'm able to make such a safe environment

How 18.84GB file is 10TB?

Probably mostly text, which is highly compressible.

> Trump has ~91k files in the data

That's the size column in WinRAR (left of the Compressed column). Is it by coincidence also the number of files?

Judging by the OP's profile, we should be happy that the "AI" managed to recognize a number :)

I am not an LLM [edit] ( as far as I know ;-), but thanks for the profile crit I probably should tidy it up.

Yep, the safe assumption with a profile like that is that it's something automated.

Also yes, that's the file size column. Uncompressed left, compressed right. It's a directory but the screenshot doesn't say how many files it contains.

Thank you German is not my strong point

Can't say I speak German, but at the top there is a Grose: nnn.nnn.nn.nn bytes.

Reply on news.ycombinator.com