Wednesday, March 12, 2014

Some recent experiences that seems similar to the malware article

NSA plans to use malware

Not surprising.

  I'd probably recommend that you pay attention to inter device accounts that you use.  For instance, a sign on on your smartphone, that is used with your home computer/laptop, with any tablet and so forth.  Paying attention means noticing things like this:  I suddenly go to a website (on my home computer/laptop) that does not have a record of my recent user sign up sign on, while another device (android) smartphone/tablet does have a record.  At least this seems the more obvious sign (that happened to me...after windows security patch update).  What happened, while the alleged website appeared to host a legitimate website for a popular game known as 'Grepolis' whose app incidentally I downloaded formally through Google Play for a given smartphone/tablet type device, had me sign up for the game which I did through such hardware.  I received an email link after signing up on my inter hardware gmail account which apparently was shown to be representing the company's game server.  Unwittingly instead of typing the game servers html address formally or using an alternate link direct method relative the email link, I would choose the email link which I suspect was a bogus proxy fake, made to look like the real one.  Once signed up through the fake server, generally I'd pull this server up likely having stored through search history and caching the fake address each time that I logged on the  given home computer's website address.  I played the game unwittingly for a couple of days without realizing this.  On the second day a typical windows security patch goes through with an added malicious malware removal tool added in the mix.  I noticed this at the time since I manually update windows often instead of waiting for it to update automatically.  After the given windows security update, after I appeared to go to the same address (assuming cached copy of the html link through the google search bar), I tried logging in with user id/password credentials but I receive a log in error message ('user information incorrect')  when I try to 'retrieve lost password' I receive a message 'user email not found'.  Thus, apparently the given game server suddenly claims that I am not there, with no given user record, while it appeared to show this a day before?!  But I am able to log in with the same credentials on my smartphone/tablet?!  What's the deal?!  To check game server site addressing, I cross checked site address formally using link directs through google search with a formal search on the string of the of the game's name...using this like and trying the procedure again for my given email for log on, yielded the same problems.  It seems on the one hand I couldn't log on suddenly on my laptop while I could on smartphone/tablet.

While formally, given the information that I've provided I couldn't rule out a number of potential other possibilities, it seems one possibility were there, namely, that someone may have run a proxy/fake copy of the game server.  I couldn't claim this were technically done by the NSA although I'd offer if the hack were somehow inserted either at point of service from Google Play, it were a piece of mal ware that existed on Google Play's end, or a number of other possibilities.  Google Play weren't offering compromised apps but my smartphone/tablet were entirely compromised, and I were accessing a proxy/fake of the Google Play store, or selectively the app from Google Play were cherry picked by already installed mal ware on my given tablet/smartphone...of course, other possibilities extending this logic without examination of code.

In any event, I couldn't formally indicate who were responsible although I might offer, that if this issue were relating to malware, it should seem sophisticated enough maybe less likely to be conducted operationally from 'lone wolf' kiddie hacks.

For this, I decided to start a 'compartmentalization' of my given log in accounts between hardware devices.  Namely, that I wouldn't not use a centralized account for any given hardware, but instead I would opt to use separate log ins for each device.  Why?!  One  for segregated accounts, at least, in this case, if you were concerned with compromising account data is less likely if you restrict a given account's accessing hardware.
Yes the downside to this method means not being able to use the smartphone/tablet for a home computer's facebook access if you truly want to keep your account credentials hardware segregated, and increasing probabilities that your account is safer.  Basically this goes to the mantra of old intel classification and security protocols.

Finally, while I couldn't argue this were the case, I'd offer the possibility that if this should be true possibly, it could be more then likely a reality.  Game server hosting is not new, it has been around...and generally if you were into popular MMO titles, there could be a possibility that you weren't playing on a game company's mmo server but instead on a proxy one...of course, it seems crazy to suggest in a way that copied social aspects of the game persistently appear to be much the same as in a legitimate game copy, but considering that artificial intelligence bots and scripts in part designed to mimic basic attribute data, could in theory be performed at little expense of the proxy hosting once code has been established, means potentially that any player in the future targeted and whose system were infected could be playing with A.I. bot replica's from a given real site game server...after who notices when a toon isn't saying much and just seems to be grinding along as usual with the crowd, or puts in a much to the expectations of others quip?  For example, when the role playing seems front end bad you might wonder whether something were up...like why is this toon talking like a military person in operations suddenly when they were acting all civilian before?!  By the way, creating artificial social intelligence systems should seem at least a bit more complicated...after all the old generation, running into walls and not apparently moving further without a cross check to movement obstructions seems an obvious to the more obvious bad a.i. design.  Thus I'd suggest if you thought when you heard certain types of malicious online behavior colluding representing some population demographic, I'd also caution with respect to the nature of this anecdotal informal sampling...you might not only be a Targeted individual on a system that seems to have any group serving a social agenda, it could be an entirely faked a.i. script in chats designed to make you think something that really weren't going on in fact at all.

No comments:

Post a Comment

Oblivion

 Between the fascination of an upcoming pandemic ridden college football season, Taylor Swift, and Kim Kardashian, wildfires, crazier weathe...