<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: Hunting the GhostNet Hacker</title>
	<atom:link href="http://www.thedarkvisitor.com/2009/04/hunting-the-ghostnet-hacker/feed/" rel="self" type="application/rss+xml" />
	<link>http://www.thedarkvisitor.com/2009/04/hunting-the-ghostnet-hacker/</link>
	<description></description>
	<lastBuildDate>Sat, 24 Dec 2011 19:52:10 +0000</lastBuildDate>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
	<generator>http://wordpress.org/?v=3.3.1</generator>
	<item>
		<title>By: Shanghai Scrap &#187; Far from Black and White: Mara Hvistendahl on China&#8217;s &#8216;Patriotic&#8217; Hackers</title>
		<link>http://www.thedarkvisitor.com/2009/04/hunting-the-ghostnet-hacker/comment-page-1/#comment-2637</link>
		<dc:creator>Shanghai Scrap &#187; Far from Black and White: Mara Hvistendahl on China&#8217;s &#8216;Patriotic&#8217; Hackers</dc:creator>
		<pubDate>Mon, 27 Apr 2009 08:58:43 +0000</pubDate>
		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=1441#comment-2637</guid>
		<description>[...] among a smaller, more knowledgeable group of researchers and reporters, a much different story was being told. And that story had nothing to do with the [...]</description>
		<content:encoded><![CDATA[<p>[...] among a smaller, more knowledgeable group of researchers and reporters, a much different story was being told. And that story had nothing to do with the [...]</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Nart Villeneuve</title>
		<link>http://www.thedarkvisitor.com/2009/04/hunting-the-ghostnet-hacker/comment-page-1/#comment-2512</link>
		<dc:creator>Nart Villeneuve</dc:creator>
		<pubDate>Tue, 14 Apr 2009 12:47:09 +0000</pubDate>
		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=1441#comment-2512</guid>
		<description>&lt;strong&gt;GhostNet &amp; CasperNet...&lt;/strong&gt;

DarkVisitor picked up on some information in the GhostNet report that we didn&#8217;t really focus on &#8212; the email addresses and other information in the domain name registration records &#8212; and were able to track down the owner of the email a...</description>
		<content:encoded><![CDATA[<p><strong>GhostNet &#38; CasperNet&#8230;</strong></p>
<p>DarkVisitor picked up on some information in the GhostNet report that we didn&#8217;t really focus on &#8212; the email addresses and other information in the domain name registration records &#8212; and were able to track down the owner of the email a&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Heike</title>
		<link>http://www.thedarkvisitor.com/2009/04/hunting-the-ghostnet-hacker/comment-page-1/#comment-2496</link>
		<dc:creator>Heike</dc:creator>
		<pubDate>Sat, 11 Apr 2009 13:01:29 +0000</pubDate>
		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=1441#comment-2496</guid>
		<description>&lt;em&gt;&quot;The fact that they hacked the Dali Lama is obviously the proof needed for anyone who has studied the practices of totalitarian intelligence agencies.&quot;&lt;/em&gt;

Motives are difficult to ascertain in these types of cases.  We&#039;ve had fairly well document cases of non-governmental groups attacking Japan, Taiwan, India, the US...etc, over political issues.

Many of the Chinese hackers organizations are fervent nationalist, they mirror Beijing on a host of issues.</description>
		<content:encoded><![CDATA[<p><em>&#8220;The fact that they hacked the Dali Lama is obviously the proof needed for anyone who has studied the practices of totalitarian intelligence agencies.&#8221;</em></p>
<p>Motives are difficult to ascertain in these types of cases.  We&#8217;ve had fairly well document cases of non-governmental groups attacking Japan, Taiwan, India, the US&#8230;etc, over political issues.</p>
<p>Many of the Chinese hackers organizations are fervent nationalist, they mirror Beijing on a host of issues.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: every1s0bvious</title>
		<link>http://www.thedarkvisitor.com/2009/04/hunting-the-ghostnet-hacker/comment-page-1/#comment-2488</link>
		<dc:creator>every1s0bvious</dc:creator>
		<pubDate>Sat, 11 Apr 2009 02:22:42 +0000</pubDate>
		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=1441#comment-2488</guid>
		<description>The fact that they hacked the Dali Lama is obviously the proof needed for anyone who has studied the practices of totalitarian intelligence agencies.

It is nice to see track backs and further evidence, but it is important to remember China is using these guys as plausible deniability, just as the Soviets and Soviet Bloc countries had proxies work for them. Though the Russkies were more suave and smart enough to actually use foreign groups sympathetic to their cause (or enemies of their enemies). 

I really don&#039;t think China&#039;s system, however, is not transparently vile to anyone... even to base terrorist groups.

They really need a democractic revolution.

It is sad to see a people killing themselves. Communism is not even Eastern.</description>
		<content:encoded><![CDATA[<p>The fact that they hacked the Dali Lama is obviously the proof needed for anyone who has studied the practices of totalitarian intelligence agencies.</p>
<p>It is nice to see track backs and further evidence, but it is important to remember China is using these guys as plausible deniability, just as the Soviets and Soviet Bloc countries had proxies work for them. Though the Russkies were more suave and smart enough to actually use foreign groups sympathetic to their cause (or enemies of their enemies). </p>
<p>I really don&#8217;t think China&#8217;s system, however, is not transparently vile to anyone&#8230; even to base terrorist groups.</p>
<p>They really need a democractic revolution.</p>
<p>It is sad to see a people killing themselves. Communism is not even Eastern.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jumper</title>
		<link>http://www.thedarkvisitor.com/2009/04/hunting-the-ghostnet-hacker/comment-page-1/#comment-2461</link>
		<dc:creator>jumper</dc:creator>
		<pubDate>Wed, 08 Apr 2009 12:17:47 +0000</pubDate>
		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=1441#comment-2461</guid>
		<description>@Ravi -

I updated the post with the original un-redacted QQ screenshot.  Rapidshare is a pain.</description>
		<content:encoded><![CDATA[<p>@Ravi -</p>
<p>I updated the post with the original un-redacted QQ screenshot.  Rapidshare is a pain.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ravi</title>
		<link>http://www.thedarkvisitor.com/2009/04/hunting-the-ghostnet-hacker/comment-page-1/#comment-2459</link>
		<dc:creator>Ravi</dc:creator>
		<pubDate>Wed, 08 Apr 2009 07:21:38 +0000</pubDate>
		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=1441#comment-2459</guid>
		<description>Great Job.
I would appreciate if the rapidshare link is posted again for me download the specific file (QQ) commented and posted by @friko.
My team  would like take this further and post the investigations details here and at 
http://www.linkedin.com/groups?gid=48066
(the Group name is computer and forensic tools.) we are discussing at the technical grass root level regarding the above subject and objective.
Thanks
ravi</description>
		<content:encoded><![CDATA[<p>Great Job.<br />
I would appreciate if the rapidshare link is posted again for me download the specific file (QQ) commented and posted by @friko.<br />
My team  would like take this further and post the investigations details here and at<br />
<a href="http://www.linkedin.com/groups?gid=48066" rel="nofollow">http://www.linkedin.com/groups?gid=48066</a><br />
(the Group name is computer and forensic tools.) we are discussing at the technical grass root level regarding the above subject and objective.<br />
Thanks<br />
ravi</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: jumper</title>
		<link>http://www.thedarkvisitor.com/2009/04/hunting-the-ghostnet-hacker/comment-page-1/#comment-2454</link>
		<dc:creator>jumper</dc:creator>
		<pubDate>Tue, 07 Apr 2009 00:38:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=1441#comment-2454</guid>
		<description>@friko,

Yep - that&#039;s it.  Let us know if you get in touch with him...</description>
		<content:encoded><![CDATA[<p>@friko,</p>
<p>Yep &#8211; that&#8217;s it.  Let us know if you get in touch with him&#8230;</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: friko</title>
		<link>http://www.thedarkvisitor.com/2009/04/hunting-the-ghostnet-hacker/comment-page-1/#comment-2452</link>
		<dc:creator>friko</dc:creator>
		<pubDate>Mon, 06 Apr 2009 20:00:30 +0000</pubDate>
		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=1441#comment-2452</guid>
		<description>here is the QQ

http://rapidshare.com/files/218231796/picture-1.png.html</description>
		<content:encoded><![CDATA[<p>here is the QQ</p>
<p><a href="http://rapidshare.com/files/218231796/picture-1.png.html" rel="nofollow">http://rapidshare.com/files/218231796/picture-1.png.html</a></p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Heike</title>
		<link>http://www.thedarkvisitor.com/2009/04/hunting-the-ghostnet-hacker/comment-page-1/#comment-2429</link>
		<dc:creator>Heike</dc:creator>
		<pubDate>Fri, 03 Apr 2009 20:10:59 +0000</pubDate>
		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=1441#comment-2429</guid>
		<description>Thanks! Corrected the image.  

One.of.those.days.</description>
		<content:encoded><![CDATA[<p>Thanks! Corrected the image.  </p>
<p>One.of.those.days.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: DarkTyphoon</title>
		<link>http://www.thedarkvisitor.com/2009/04/hunting-the-ghostnet-hacker/comment-page-1/#comment-2428</link>
		<dc:creator>DarkTyphoon</dc:creator>
		<pubDate>Fri, 03 Apr 2009 16:12:10 +0000</pubDate>
		<guid isPermaLink="false">http://www.thedarkvisitor.com/?p=1441#comment-2428</guid>
		<description>Um... I&#039;m pretty sure that lost33&#039;s QQ number is still visible in the window title of the masked image.  Might be wrong since I don&#039;t know what it was before you masked it.</description>
		<content:encoded><![CDATA[<p>Um&#8230; I&#8217;m pretty sure that lost33&#8242;s QQ number is still visible in the window title of the masked image.  Might be wrong since I don&#8217;t know what it was before you masked it.</p>
]]></content:encoded>
	</item>
</channel>
</rss>

