Remix.run Logo
monerozcash 3 days ago

Curiously, the US Government has never made that allegation. There's significant circumstantial evidence to suggest that the US Government may not believe TSB to be Russian intelligence.

USG had no problem blaming Russian intelligence for many other things that were going on at the same time, but they never tied TSB to that bigger picture.

Given what we know about the likes of Hal Martin, there's little reason to believe that only Russian intelligence could have been behind the shadow brokers leaks. In fact, there were rather suspiciously timed twitter DMs written by Hal Martin within minutes of TSB releasing NSA files.

However Marcy Wheeler does argue rather convincingly that Hal Martin's twitter account may have been hacked by TSB in an effort to frame him.

A curious OSINT detail about Hal Martin is that he was using the email address teamtao999@gmail.com on fling.com while looking for women interested in fetishes and group sex. The email address is a reference to the tailored access operations team within the NSA.

His twitter account (@HAL_999999999) created in 2010, also referenced TAO2 in it's avatar at the time of the TSB leaks. It's unclear for how long that was the case, as it was changed later on and there are no archives. Interestingly, he also used to be fairly active on the infosec twitter between 2011 and early 2016 and is featured in tweet chains with many fairly prominent individuals.

His OPSEC wasn't very good, it's perfectly possible he was compromised by some random person.

Edit #89: Okay, I'll throw in one more detail. Very interestingly, it was allegedly Kaspersky who turned in Hal Martin to the NSA after he tried to approach them over twitter. This might seem like a big deal right now, but at the time it wasn't. Russian cybersecurity companies used to be quite happy to work with their western counterparts and law enforcement shortly after this incident when among others Ruslan Stoyanov from Kaspersky was charged with (and later convicted of) treason for allegedly giving information to an American researcher.

throwawayq3423 3 days ago | parent [-]

> Curiously, the US Government has never made that allegation.

Why would they? It was a deeply embarrassing event for them.

monerozcash 2 days ago | parent [-]

It was deeply embarassing for them either way, not figuring out where the leak originated from is much more embarrassing though.

At the very least blaming Russian intelligence would have tied right in with all the other election related hacking allegations.

Also, I think you may overestimate just how embarrassing this is relatively. USG regularly announces that they got owned, is the NSA getting owned worse than OPR getting owned? Maybe not.

throwawayq3423 2 days ago | parent [-]

> would have tied right in with all the other election related hacking allegations.

That's not how it works. There is no coordinated messaging campaign across agencies against adversarial nations.

It might seem that way based on media reports, but there isn't.

monerozcash 2 days ago | parent [-]

FBI would be the primary agency investigating TSB leaks, so no need for a coordinated messaging campaign.

If the FBI believed that TSB was Russian intelligence, it is perhaps somewhat surprising that it's not mentioned in the Mueller report.

We also still don't know how Hal Martin was related to TSB, the timing of the messages sent from his twitter account to Kaspersky (who apparently reported him to the NSA!) does pretty directly tie him to the TSB.

throwawayq3423 2 days ago | parent [-]

The FBI would still need to coordinate with the NSA for an investigation and public declaration of findings, neither would be in the interest of the NSA to cooperate for.

And the Mueller report was specifically scoped down to not include anything outside of the 2016 presidential election. I don't know why you keep going back to that.