Post

I love how the cybersecurity community consensus on this story is generally that the company deserved getting compromised for being so abusive and intrusive to their workers. www.tomshardware.com/tech-ind... Monitoring keystroke latency is an ADA complaint waiting to happen.

tomshardware.comNorth Korean infiltrator caught working in Amazon IT department thanks to lag — 110ms keystroke input raises red flags over true locationA barely perceptible keystroke delay was the smoking gun that led to the uncovering of a malign imposter.

361 reposts1.2K likes

I remember years ago a company had password detection software that judged based on inter-key latency. The presenter showed it worked for him, and even with the right password, no one else could log in. His assistant only had three fingers, and he could login with his password. Don't know...

Myself and some coworkers were trying to figure out what technical solution would actually give amazon keyboard latency, like which combination of technologies could reliably tell you there's input lag somewhere along the chain to even be used as a security metric.

How do they measure the delay? You know when the keystroke comes in, but you never know when the key was pressed, so what's the starting point for comparing laggy to non-laggy?

Possibly a statistical analysis of keyboard use across whole company. Looking for differences and outliers yielded some sort of delay The delay probably is from the delay of video to NK & human input back as received by endpoint Maybe periodical screenshots helped with stimulus and response timing

But then why does the remote session generate a huge latency? Surely it's not carrying through the timestamps from the input at the far end? (because what would the target do with that?)

exactly! lag between what and what? it’s not like people’s work consists of seeing their screen light up green and then pressing a key as fast as possible, and at least my keyboard doesn’t timestamp every keypress. but maybe Amazon’s remote desktop software does 🤷

While the official story is input lag, I’ve doubts that’s how they caught the guy. It is, without a doubt, the story I’d say to keep the actual method confidential, though.

the Confederacy while long dead never had its culture extinguished- largely the result of a weak-willed north that was unwilling to rule with an iron fist and properly crush the south. the Soviet Union is not yet long dead, however has had its ideology crushed by the newfound far-right Russian state

The article also suggests they're using also cultural linguistics analysis, another self-inflicted wound waiting to happen. I can only assume their cost/benefit analysis tells them it's cheaper and easier to pay off the mistakes.

Yeah, I probably wouldn't have recommended they go into that level of detail. Just that they caught one is enough. Say they discovered the remote access software or something. I don't think they deserve to get compromised - but they deserve to be called out on their shenanigans.

Im so tired of all that spy vs spy shit Im not afraid of "enemy" countries. therefore, I don't want to give all my money and rights to the corporations who own our politicians This us vs them bullshit shoulda died during Covid, but no, apparently putin controlls literally every government 🙃

He just controls Trump. Everyone likes to forget about the Nukes Russia has. You can't just waltz in and remove him. You have to strangle him out and force his own cronies to kill him for survival.

Oh he just controls trump does he? Your insight is impressive share some with the red scare crowd here in germany or Britain where I keep hearing that all the craziest right wingers keep going in and out of Russian embassies and putin connected dinner parties and so on and so forth

Which other Nations President/Chancellor is controlled by him outside of the clearly obvious of Belarus, Georgia, and the like? Just Trump to my knowledge. Having minions isn't the same as owning an actual Leader of a Nation.

The employees are notified of company monitoring policies before they start working. They don't have to work for companies that do such monitoring to prevent and stop industrial espionage, theft, and sabotage by malign cyber actors like independent criminal hackers, China, the DPRK, Iran, etc.