La Russia si infiltra nelle comunicazioni militari ucraine. Un consulente militare ucraino ha affermato che la Russia è riuscita a infiltrarsi nelle comunicazioni militari ucraine fingendosi soldati ucraini utilizzando un’app per dispositivi mobili e ha invitato le truppe a rimanere vigili.
https://www.kyivpost.com/post/36567
di RoninSolutions
8 commenti
Be very careful what you say and to who and the means of communication.
Please be on guard. Speak carefully
Considering how shit Russian commsec is I’d imagine a lot of chicken feed is going on. Fill the enemy full of useless garbled information from “real” units.
I’d be surprised if Ukraine isn’t playing some games with Russians tapping their comms and them intentionally knowing feeding them shit. US and Brit intelligence agencies throwing parties watching gullible Zs fall for it.
Russians merely follow orders without thinking, it’s what I would do in Ukraine’s place.
It would be naive to think we were not doing the same to the Zs too, probably finding or figuring how where the leaks are from Zs comms. I really hope 5 Eyes is giving them a hand.
Spies gonna spy. Let’s hope Zs get filled with shit Sigint.
Just a quick opsec refresher:
newb001> How do you do, fellow Ukrainians? <== not the problem
unfortunateson> Oh hi, didn’t see you enter the chat. <== not the problem
newb001> Those Russians tho, it’s pretty bad out there, huh? <== not the problem
unfortunateson> Yeah but we’ll kick their asses in the end. <== not the problem
wickedwitch> That’s right, hang tough and we will win. <== not the problem
newb001> We need more HIMARS tho right? Anyone seen one lately? Coords? **<== problem starts here**
unfortunateson> …
wickedwitch> …
Pawn to Queens Bishops 4, I repeat, Pawn to Queens Bishop 4…
You could have so much fun with this!
I don’t know how to deal with it when these bastards get physical access to a soldier’s phone, either when he’s captured or killed. Maybe there’s some app that can start deleting apps on Android based on a set of volume clicks (for example) or a timer?
Without knowing too much about signal, telegram, whatsapp, …
There is also Threema
https://threema.ch/en/messenger-comparison
“… Open source … Corporate solution available …”
This both could make it possible to have servers exclusively for the Ukrainian army.
Okay, the link is their own ad
At least it could be verfiied/checked/evaluated.
In general the infiltration affects software
and this can be changed easier than dedicated comms hardware.
The communication platform (whatsapp, matrix, threema, signal, telegram, fucking discord or slack) is largely not relevant here, to be honest.
Basically: don’t trust random strangers, verify identity offline of your contacts, use the security features such as “safety numbers”, and for inviting into group chats have a vouching system – where multiple people have to vouch for someone and that they verified identity in real life before they are added.
There are neat technical solutions such as “web of trust” that can help with establishing who vouches for who/who trusts who, but those systems are completely fucking unusable currently and even technically skilled people hate them.