Dissecting How Chinese Hackers Breached Verizon, AT&T and Lumen | WSJ

[@supernerd6983]

The title is "dissecting how..." and the whole video is some boomer in a suit saying "We don't know how."

[@druidsongevergreens]

Although that dude looks gen x, not boomer

[@BePositiveMindset]

Wow, a spoiler punchline. Thanks for ruining the video. Love the punchline though!! Expecting another 18 minutes of loyalty after "Well, we don't know." Is hilarious. 😂😂 And then... He repeats it. Noooo!!! 🤣🤣

[@JayDee-b5u]

Because it's a complete lie.

[@tekDtech]

LOL thanks xD

[@alfonzo7822]

Thanks for saving me 19 mins 😅

[@slusserjon]

It is almost like backdoors are a bad idea.

[@2livenoob]

Good idea for a hacker.

[@LeonelLimon-nj7tu]

ahauahag 😆

[@Dolph-fe2ks]

@@slusserjon wut

[@YouilAushana]

A good enough idea for you

[@cybersecuritydeclassified4793]

If they are insecure, sure.

[@robertp27march]

I created a report on patch levels for a company. May devices were vulnerable. A bit later devices were attacked. Simple response took care of the problem - report was deleted and person who created the report was fired.

[@YourFavoriteHacker8666]

“Reviewed and approved by everyone but you” -GitHub

[@OneManCanStopTheMotorOfWorld]

This is the "I'm sick and tired of boomers who can't code that preach to the rest of us about Cybersecurity" Button

[@oznerriznick2474]

Ohh boomer can code..boomer use AI..😂

[@YourFavoriteHacker8666]

Not what you’ll be saying when I make my own “temple os”

[@josephbosack4408]

With every Router and Switch having chips that are manufactured in China....its obvious that Chna would know exactly how to get in and reconfigure these devices.

[@yossarian451]

Another great reason to never use Huawei 5G equipment in any country.

[@YourFavoriteHacker8666]

Bro I put a usb in my Mac and all of a sudden I’ve spawned a new universe

[@feralmode]

it’s US three letter agencies that insist on backdoors. they’re fundamentally vulnerable to start with

[@KJUgrin]

Record profits means poor protection of networks & customer data. These corporations elude taxes but expect government protection of their systems. The system is broken. Corruption is endemic.

[@skatterbrainz]

When an org says "we don't know the original intrusion vector" for months and months after an event, the first indication should be a possible inside job.

[@swollenproperty8682]

When the cat is away mice will play

[@TheGrimSniper14]

Well there’s also the fact that APTs clean up their tracks pretty thoroughly after the initial intrusion so it’s really hard to tell because the initial intrusion only happens once. After that it’s just persistence and and exfiltration and since that’s continuous, it’s what’ll get detected

[@YourFavoriteHacker8666]

She don’t want a kitty she want a big Tom.

[@YourFavoriteHacker8666]

That sudo rm -rf tho

[@kennychad2821]

At what point do we say "this is an act of war."

[@GTFO_0]

Your government does exactly same and when u get if don't cry now

[@YourFavoriteHacker8666]

When he accepts the PvP invite on WoW.

[@rorytribbet6424]

Is it possible for us to get an interview on cybersecurity that’s audio is not absolutely jacked up??

[@Ef554rgcc]

is or isn't? I read this as "cyber security that is audio is absolutely jacked up".

[@BangBangBang.]

ever listened to a Defcon/Blackhat speech?

[@rorytribbet6424]

@@Ef554rgcc it’s possessive

[@Swampfox42]

That would involve technology

[@Ef554rgcc]

@@rorytribbet6424 There is no possessive for "that".

[@ronaldmarcks1842]

The problem is the disconnect between the Chinese people and "their" government, much like the disconnect between Emperor Donald Trump and "his" government.

[@WrathofGod666]

Investigators are still probing the origins of the Salt Typhoon attack and are exploring whether the intruders gained access to Cisco Systems routers. Hackers apparently exfiltrated some data from Verizon networks by reconfiguring Cisco routers, said one current and one former U.S. official familiar with the matter.

[@YourFavoriteHacker8666]

Do you think the ocean is salty because the sand don’t wave back?

[@mihaipreda4547]

The audio is atrocious. Was this recorded on a 3G mobile phone from 20 years ago?

[@skatterbrainz]

probably due to a Chinese traffic splitter impacting the audio feed. lol!

[@eygs493]

@@skatterbrainz he he h

[@jsacodes916]

👏😂

[@AdamBechtol]

Lol it was the only device that was safe.

[@intothebeyond8763]

From what he's saying it sounds like they had access from when they took the edge router out the box . It also sounds like they're cutting corners with security to have a faster network.

[@enthusiast1]

5:15 "... without going too deep into the tech weeds ..." No, please do go into the technical "weeds." Commentary aside, thanks for sharing the dialogue on this.

[@YourFavoriteHacker8666]

You’ve leveled up. You went from intern to da boss.

[@williamnemmers2583]

Pretty sure was a recent vulnerability discovered on Cisco routers and switches, probably wasn't patched. The real skill was in pivoting through the network undetected and living off the land.

[@YourFavoriteHacker8666]

If there was one networking company I would vouch for always it was Cisco. This makes me feel kinda sussy now. If Chinese hackers are doing that what about mossad, North Korea, the middle eastern hacking countries, and Russia? (I forgot most of their special hacking unit names but you get what I mean)

[@Suntas24]

Just curious - He explains attacks are mostly from peripherals. But these are all made in China, since the Multi-nationals want cost-free-coding-labour for CEO-management razor-sharp focus on bonuses for quarterly-profit-margin. No compromise. So peripherals have firm-ware also installed in same boxes coming from China. And OEM CMOS/BIOS is being flashed in China: Lets take scenario of 3 intermediate boxes (all flashed in China). Origin receiver changes a word "new" to "knew" , while sending it to other 2 boxes. The receivers change to back to "new". One receiver passing the extra "k" to say a smart-TV, while the other sends correct word "new" to destination. Smart-TV then passes the extra "k" to china when watching a kung-fu movie. So, what can the company IT-Secs do? One answer is to bring back final software load and critical component manufacture to friendly nations, and keeping rudimentary hardware manufacture over there. But, that means more tech jobs at home, but lesser management bonus, so disaster. Any better ideas?

[@robertdtorres5844]

The gate on that mic is driving me nuts…

[@cashworth1444]

yes random no name journalist please continue to cut off the expert. that's why we're all watching

[@cashworth1444]

@@mokusei99 regardless. he's the speaker

[@C-1-FRY]

No matter how secure your network is, there is always some big company or government agency that will expose all of your data.

[@YourFavoriteHacker8666]

Don’t forget nation state actors and people who think their the giga chad agent smith.

[@chriskiro]

Worried about Chinese hackers… can’t get the audio right

[@deadwingdomain]

Doom Doom Doom

[@JonnyWilson-rg3uv]

Our gov is providing backdoors to everything

[@mikefarrell6766]

Just like Facebook, only they can use that data

[@ProBallerJake7]

@@mikefarrell6766lol trust me, they love the data on your phone and your internet traffic much more (esp since it includes all social media data as well)

[@williamnemmers2583]

They know how, they're not going to advertise the method.

[@mikedonovan4434]

Cybersecurity best practices: DoD 8500 series certification for any individual that touches the network; firewalls containing white list of cyber security approved access devices; bare minimum access to admin passwords; frequent password changes; continuous monitoring of device access to network; weekly auditing of approved data access (i.e., match authorized database queries with actual queries).

[@YourFavoriteHacker8666]

Best practices? You might as well ask for them human rights too.

[@jrmayberry3536]

this interviewer is on the spectrum and his constant interruption is annoying

[@Axonjoz]

This should be getting a large amount of more attention than it’s receiving at the moment

[@jennysteves]

A better conversation or news release might

[@jansenyong4307]

Best Defence: Blame Others

[@stevesteve8098]

When the "Backdoor" is a student or work visa for one of your biggest enemies...

[@YourFavoriteHacker8666]

Are we talking personal or financial enemy?

[@yossarian451]

Another great reason to never use Huawei technology in the US.

[@cybersecuritydeclassified4793]

Here's the problem if any of you would like to listen. There are only two major NDR Network Detection and Response platforms. I work for one of them. Most enterprises can't afford NDR. Can AI driven NDR detect and respond. Yes....

[@danielshade710]

Basically this is a Wells Fargo stagecoach being robbed and the corporate line is: “ugh so sorry all your money got stolen. Can’t be helped and would cost a lot to run security with our stagecoaches. “ Like that would have worked….but today people are huh wha? What is theft?

[@YourFavoriteHacker8666]

Remble walks in with a smithon so now it’s a robbery.

[@Rich-sp8hd]

Version said they were not hacked . And that the outage was due to network failure from the hurricane

[@HowShouldIKnow6543]

lol

[@jason1440]

AT&T claimed it wasn't hacked also until they got caught paying a multi million dollar ransome.

[@ch4dderbox]

Was their spokesperson under oath when they said that?

[@YourFavoriteHacker8666]

“We’re not hacked “ also them: I think I’ll advertise non stop for a person I call an enemy free of charge.

[@gnagyusa]

19 minute video with zero useful information.

[@stereotimo]

FBI backdoor keys. What else would it be?

[@ProBallerJake7]

Exactly! Specifically “DCSNet”

[@jmanRossi]

Why not just run all these servers, routers, telco equipment on the same software we use for our voting machines since we're told it's not hackable?

[@ProBallerJake7]

Everything is hackable

[@sebastiaoedsonmacedo7950]

Misleading! If the guy says “we don’t know yet” how it was hacked, you can’t dissect it!

[@YourFavoriteHacker8666]

He’s basically that old dude when zuck was trying to explain privacy to congress.

[@yeahthatsalright]

Would anyone know if Microsoft being compromised meant that they were able to get into Microsoft Azure as well? Because if so, it means they would have access into military data.

[@greatestone4eva]

microsoft windows is the least secure operating system in the world and their software is equally as bad. i dont even apply to jobs with azure in the description.

[@ProBallerJake7]

Lol. The U.S. military has already been fully breached (cyber wise)

[@dandouglas5706]

Some of this telecom edge HW is super old and everyone in the company is afraid to replace or update them.

[@2manystories2tell43]

They got in thru the back doors that all of the ISPs Wifi routers, etc are required to have for law enforcement. This is what happens when you rail against end to end encryption.

[@zenithproject817]

Why isn't this everywhere this war in cyberspace???

[@rorytribbet6424]

2 reasons: Makes current admin look terrible and some politicians are afraid to be called racist for pointing out how evil and dangerous the Chinese government is…

[@Crown42]

​@@rorytribbet6424Lol, that's so true bro. We Americans are becoming a weak nation. ​

[@dabrams84]

It is everywhere. I constantly see it on social media and in the news and in podcasts and in newsletters via email.

[@BristolBerg]

@@Crown42like who are you 😂

[@jennysteves]

WSJ please upgrade your microphones and rearrange your chairs so that both interviewer and guest can communicate without craning their necks. Interviewer please don’t interrupt. This is vital information - please don’t undermine its presentation.

[@toma.3d]

WTH??? When is your birthday WSJ so i can buy you a good microphone as a birthday present???

[@YourFavoriteHacker8666]

Bro my packard bell stock mic is just fine tyvm.

[@Nicky-qo7of]

US Company I work for has been laying off good long time on-site employees but at same time hiring employees in new hub in China! Hope they know what they are doing! Curious how our US customers (product is only in US) feel about that or if they even care!

[@aaronthekinggamer1413]

first its the coronavirus and now this, what did we do to deserve this.

[@TesfayH]

That is why it is critical to monitor configuration changes via SNMP trap on all network/security change’s and alert .

[@markdouglas8073]

It is troubling that this expert, like most Americans speaking about China, still have not bothered to learn how to pronounce the communist leader’s name correctly. (It should sound like “she” not “zhee”).

[@ccengineer5902]

So why are we so friendly to this country? Money?

[@YourFavoriteHacker8666]

Because soon they’ll have created their own Os, financial system, society, system, whatever you want to call it. The intelligence curve and the way the way kids are taught will be progressed at higher rates since the initial tech boom.

[@rogerstarkey5390]

"They did to us what we would LOVE To do to them"? O....K

[@deparko]

How is this not a declaration of war? We are totally unprepared and seems like easy pickings

[@ProBallerJake7]

Because we’re reliant on them with all the offshoring

[@JD-lt7uv]

Any possibility we trained Chinese spies at our universities, hired them at these companies, and were compromised from the inside? 😂

[@zhang_han]

The problem is that the US older work force learned nothing from Japan rise, and still hold stereotypes about Chinese and their incapability of doing anything except copying. Like Japan in 1960s and 1970s, they started off by copying, but they also learned from that copying and then applied their learning like every other people to innovate. So long as racism causes the US work force to underestimate their competition, these sort of surprises will keep coming.

[@bubblebobble9654]

Nobody is surprised that the Chinese are becoming more capable. It's like being surprised that a deer walked in front of your car or waking up late for an airplane flight. Easy to predict, was still surprising.

[@BristolBerg]

The things is collecting mass data on the Chinese is quiet easy since the CCP compartmentalize its citizens to manage them. It goes both ways. The entire OS system china relies on comes from the US and you can't beat the house ultimately (if you gamble).

[@rogerstarkey5390]

💯

[@rogerstarkey5390]

@@BristolBerg BS

[@VectorSolutionsLLC]

Apple, Goldman Sachs Bank USA, Wells Fargo, AT&T, Arizona and California have some questions that need to be answered.

[@Edward-ry3st]

Interesting they do not know how MS was attacked.

[@Dolph-fe2ks]

This dude gave Obama a definitive, UH/UM, run for his money.

[@charlene756]

A cyberattack happened in December

[@tristan7216]

It's almost like manufacturing and programming all your critical security equipment in Shenzen to save on labor cost, and then outsourcing employment to sketchy foreign service firms that have North Koreans working for them, is not so good for US corporate IT security vis a vis Chinese intelligence.

[@tommyhunt1199]

reconfigure the router, wow, simply route around the firewall

[@bauttiet.h.u.g.5900]

Businesses have to leave China.

[@travish1853]

Wouldn't have anything to do with the multiple spy balloons doing signals analysis

[@michaelhunter3626]

Wasnt it bell labs that used the first honeypot???

[@MrBothandNether]

And the angry bot section blames:

[@greatmcluhansghost7134]

will anyone ever know if the hack was done through a combination of a.i. and clickbait?

[@JayDee-b5u]

Lies by wsj. More fearmongering. Da chineez. Enough with the fables already.

[@DonZenOfficial]

Huh weird I wonder if those Huawei cell towers have anything to do with it

[@avayu2289]

As an multi lingual Asian American (programming is a math language btw), our biggest national security risk is our DEI hiring. We need to get back to the fundamentals of MERIT. And educate our young people better in terms of skill sets.🧐 Incompetence is all around us!

[@itsvictoroyedeji]

😂😂

[@ProBallerJake7]

Ok, boomer.

[@YouMakeItHappen]

US Gov: build us backdoors Other people find those backdoors US Gov: [surprised Pikachu face]

[@JNET_Reloaded]

Saying takeaways when on about the Chinese is funny!

[@kristopherleslie8343]

Let him talk please

[@Erik-rp1hi]

Wow, China hit it out of the park. I'm impressed.

[@V4VestA]

You talk about this, but not the pager mass terrorist attack?

[@dannac_8888]

His voice sounds a little bit like Snowden; ( The sound, not necessarily the context).

[@davidfleming4052]

The better question may be how they leapfrogged in creativity? Before Whiteheadian thought came from Claremont, they wrre not creative. After 38MM students were exposed to prosess inquiry, amazing leapfrogging started.

[@ScentlessSun]

I remember seeing North Korean IP Addresses trying to hack into our network equipment when I worked at one of these companies.

[@escgoogle3865]

You will not get these 19min back. (Person who next door cube mate worked on a calea implementation.)

[@2livenoob]

Obessed with hacking or obssessed with hacking the US?

[@LeonelLimon-nj7tu]

Electron Resonance Imprint 🤓

[@45414]

Great interview. Appreciated the subject matter depth of Steven Rosenbush's questions.

[@CryptoShool101]

This software is incredibly intuitive. Thanks for the detailed explanation!

[@danpress7745]

Blah, blah, blah, hackers get in because someone Give them the keys. Companies need to fire those giving away the keys and some need prison time.

[@Ghana213]

Madam am here you waisted my bundle huh😢

[@ch4dderbox]

I wish Mr Rosenbush would stop smacking his lips while speaking. Hes great otherwise with his questions but thats really distracting

[@АлександрРусаков-в4с]

Wilson Jason Wilson Jennifer Lee Kimberly

[@M.K.386]

I've been trying to get somebody to help me for 2 years now and there's not one person out there that can help me.

[@biggestnate3]

Balloons? 😅

[@Lyle-In-NO]

OMG this guy on the left has got to go. Geesh

[@joMojojojo]

Can you at least mix the sound. Jesus 😂

[@cellcerocreates]

Devices To Cause Meshuggah?

[@Cursivex]

You can't even afford a microphone?

[@wynetsang]

Copycat is fun.

[@RajaSekhar-ik2dw]

Hardened Networks? That is a lot of funny BS.

[@davinxi5926]

Okay how about crowdsrike and election DNC

[@neogeoisie]

Both these guys don’t know what they’re talking about lol

[@GhibliJapanUsualLife]

Tuyệt chiêu này quá tuyệt vời!

[@Fondofmelobster]

Ok boomer

[@GTFO_0]

Cope bahahah😂😂😂

[@michellediamsaymendoza]

Maybe they feel guilty about Covid and maybe they won’t let us blame Donald John Trump too.