Iran Cyber Security and Artificial Intelligence (civilian and military)

[jauk]

This thread discusses all AI related topics such as AGI, machine learning, neural networks, KKMs, chatbots, etc and their application to the Iranian military, industry, society, and government. @Persian Gulf Please make sticky. Thanks.

 

[Persian Gulf]

This thread discusses all AI related topics such as AGI, machine learning, neural networks, KKMs, chatbots, etc and their application to the Iranian military, industry, society, and government. @Persian Gulf Please make sticky. Thanks.

Good thread, done

 

[jauk]

https://twitter.com/x/status/1754771759176315051

 

[jauk]

The thread name is self descriptive.

 

[jauk]

Iran accelerates cyber ops against Israel from chaotic start - Microsoft On the Issues

Since Hamas attacked Israel in October 2023, Iranian government-aligned actors have launched a series of cyberattacks and influence operations (IO) intended to help the Hamas cause and weaken Israel and its political allies and business partners. Amid the rising potential of a widening war...

blogs.microsoft.com

 

[BHAN85]

First security advert: If you dont need internet dont use internet.

It has no sense when Iranian gas stations are hacked.

Second security advert: Wired connections set the security to physical level. Wireless connections are uncontrollable when you are not the manufacturer of the hardware and software.

 

[Hack-Hook]

First security advert: If you dont need internet dont use internet.

It has no sense when Iranian gas stations are hacked.

Second security advert: Wired connections set the security to physical level. Wireless connections are uncontrollable when you are not the manufacturer of the hardware and software.

they need internet , or they had to rewire all over Iran .
the security update is just use open source software instead of windows and all other spyware produced by your adversaries

 

[BHAN85]

they need internet , or they had to rewire all over Iran .
the security update is just use open source software instead of windows and all other spyware produced by your adversaries

It depends, if you dont need real time access, you dont need network to interconnect gas stations.
Just store use of customers and then exchange one time by week or something like that. The same with CCTV cameras, just store images locally and avoid external connected networks (like it happened in a Iran prison some time ago).

Sneakernet - Wikipedia

en.wikipedia.org

By the other side, proprietary software is a bad idea, yes, but open source is just a little less bad idea.

You think that all people who made open source in the west are innocent altruist people and a part of them are not undercovers who put backdoors as "bugs" in the software they made? and you can't read millions lines of code.

The best is keep it simple (homemade software with little amount of lines of code), avoid wireless (wifi, bluetooth, gsm) devices, and avoid internet when it's possible.

 

[BHAN85]

Video Shows Moment Iranian Prison Realizes It Was Hacked

Videos showed abuse at the notorious prison, including the beating of inmates.

www.vice.com

Really a prison needs real time cctv access from outside?

they can't storage images locally and send it to their superiors in hard disk drive one time by week or something like that?

 

[BHAN85]

The most important thing is connections of the device with outside world.

You can have a machine with one thousand trojans and backdoors and it doesnt matter if it's not connected to outside.

And if you need connections to outside, watch every single byte coming in and out.

Avoid TCP/IP stacks, code your own simple code, just the things you need, and own driver for USB 4G modem is a better option.

 

[Hack-Hook]

t

It depends, if you dont need real time access, you dont need network to interconnect gas stations.
Just store use of customers and then exchange one time by week or something like that. The same with CCTV cameras, just store images locally and avoid external connected networks (like it happened in a Iran prison some time ago).

hey need it , it determine usage and price of the fuel. well unless they use a different system that act differently but it would be a lot more expensive

By the other side, proprietary software is a bad idea, yes, but open source is just a little less bad idea.

You think that all people who made open source in the west are innocent altruist people and a part of them are not undercovers who put backdoors as "bugs" in the software they made? and you can't read millions lines of code.

there may be bug that will pointed out by community a lot faster , but back door , you and everybody there see the code , you can compile it yourself you can optimize it according to your need

 

[BHAN85]

t

hey need it , it determine usage and price of the fuel. well unless they use a different system that act differently but it would be a lot more expensive


there may be bug that will pointed out by community a lot faster , but back door , you and everybody there see the code , you can compile it yourself you can optimize it according to your need

Better open source software than proprietary foreign software.

But better proprietary software made in the own country than open source code.

And keeping things simpler better than millions lines of code, from the point of view of security, better simplicity and easy to see the code than run speed, compatibility or any other thing.

 

[Hack-Hook]

Better open source software than proprietary foreign software.

But better proprietary software made in the own country than open source code.

And keeping things simpler better than millions lines of code, from the point of view of security, better simplicity and easy to see the code than run speed, compatibility or any other thing.

again I believe an open source software the best way to go.
for example look at operating system , how many years it take to produce a functioning operating system. Windows, GNU/Linux, BSD, MacOs, Android. they are decade in development and they didn't even start from scratch , they were built over older OS like Unix and CP/M-86 no country have half a century time to build something new from scratch.
don't you think and open source available operating system , strip it of the part you don't need and modify it according to your needs is a lot better ?

 

[Persian Gulf]

U.S. conducted cyberattack on suspected Iranian spy ship​

The covert operation was intended to inhibit the ship’s ability to share intelligence with Houthi rebels who have been attacking cargo ships in the Red Sea.

WASHINGTON — The U.S. recently conducted a cyberattack against an Iranian military ship that had been collecting intelligence on cargo vessels in the Red Sea and the Gulf of Aden, according to three U.S. officials.

The cyberattack, which occurred more than a week ago, was part of the Biden administration’s response to the drone attack by Iranian-backed militias in Iraq that killed three U.S. service members in Jordan and wounded dozens of others late last month, the officials said.

U.S. conducted cyberattack on suspected Iranian spy ship

The covert operation was intended to inhibit the ship’s ability to share intelligence with Houthi rebels who have been attacking cargo ships in the Red Sea.

www.nbcnews.com

No comments from Iran / confirmation yet.

 

[BHAN85]

again I believe an open source software the best way to go.
for example look at operating system , how many years it take to produce a functioning operating system. Windows, GNU/Linux, BSD, MacOs, Android. they are decade in development and they didn't even start from scratch , they were built over older OS like Unix and CP/M-86 no country have half a century time to build something new from scratch.
don't you think and open source available operating system , strip it of the part you don't need and modify it according to your needs is a lot better ?

Like I said, I think the most vulnerable part is communications.

A full operating system without external communications, it doesnt matter how many backdoors it has, it's secure.

But when you use internet or wireless communications, it's another thing.

I remember one decade ago, a lot of "bugs" in OpenSSL (Open Source software) were discovered.

Heartbleed - Wikipedia

en.wikipedia.org

So, it's not a bad idea code your own encryption libs from scratch, addings mods to algorithms, avoiding standards, it's not a bad idea your own tcp/ip stack and make it incompatible with all software except your software, it's not a bad idea your own USB driver for a 4G modem, and so on.