Private Servers: Trump Plus Alfa

Is there anything odd or suspicious about a secret communication channel between a long time Trump internet server and the the Russian Alfa Bank?

Franklin Foer in Slate:

The researchers had initially stumbled in their diagnosis because of the odd configuration of Trump’s server. “I’ve never seen a server set up like that,” says Christopher Davis, who runs the cybersecurity firm HYAS InfoSec Inc. and won a FBI Director Award for Excellence for his work tracking down the authors of one of the world’s nastiest botnet attacks. “It looked weird, and it didn’t pass the sniff test.” The server was first registered to Trump’s business in 2009 and was set up to run consumer marketing campaigns. It had a history of sending mass emails on behalf of Trump-branded properties and products. Researchers were ultimately convinced that the server indeed belonged to Trump. (Click here to see the server’s registration record.) But now this capacious server handled a strangely small load of traffic, such a small load that it would be hard for a company to justify the expense and trouble it would take to maintain it. “I get more mail in a day than the server handled,” Davis says.

“I’ve never seen a server set up like that.” Christopher Davis of the cybersecurity firm HYAS InfoSec Inc. That wasn’t the only oddity. When the researchers pinged the server, they received error messages. They concluded that the server was set to accept only incoming communication from a very small handful of IP addresses. A small portion of the logs showed communication with a server belonging to Michigan-based Spectrum Health. (The company said in a statement: “Spectrum Health does not have a relationship with Alfa Bank or any of the Trump organizations. We have concluded a rigorous investigation with both our internal IT security specialists and expert cyber security firms. Our experts have conducted a detailed analysis of the alleged internet traffic and did not find any evidence that it included any actual communications (no emails, chat, text, etc.) between Spectrum Health and Alfa Bank or any of the Trump organizations. While we did find a small number of incoming spam marketing emails, they originated from a digital marketing company, Cendyn, advertising Trump Hotels.”)

Spectrum accounted for a relatively trivial portion of the traffic. Eighty-seven percent of the DNS lookups involved the two Alfa Bank servers. “It’s pretty clear that it’s not an open mail server,” Camp told me. “These organizations are communicating in a way designed to block other people out.”

Earlier this month, the group of computer scientists passed the logs to Paul Vixie. In the world of DNS experts, there’s no higher authority. Vixie wrote central strands of the DNS code that makes the internet work. After studying the logs, he concluded, “The parties were communicating in a secretive fashion. The operative word is secretive. This is more akin to what criminal syndicates do if they are putting together a project.” Put differently, the logs suggested that Trump and Alfa had configured something like a digital hotline connecting the two entities, shutting out the rest of the world, and designed to obscure its own existence. Over the summer, the scientists observed the communications trail from a distance.

* * *There is more at the link.

Comments

Post a Comment

Popular posts from this blog

Anti-Libertarian: re-post

The most pointed critique of social security and liberalism in general is the libertarian critique. The problem with libertarians, for a liberal, is that we have too much in common. We both believe in individual rights, tolerance of individual differences, and dislike government prescription of religion. The basic difference, it seems to me, is the different answers we give to Cain's (with thanks to the Captain - my original version had the corpse asking the question!) famous question: "Am I my brother's keeper?" That's not really my basic bitch against the libertarians though. My real complaint is the same as my complaint against most religion - its premise is a fraud. For those who can't stand to wait for the punchline, I believe that trying to implement libertarian principles leads to tyranny or social disintegration. Demonstrating that takes some historical (and pre-historical) context. For all but the last 15,000 or so of the 100,000 years the human spec...
Read more

Uneasy Lies The Head

Uneasy lies the head that wears a crown ........... Shakespeare Henry IV, Part II. So it is with us and our slightly distant primate cousins , so it seems. A 9-year study of wild baboons in Kenya by Princeton University and the Institute of Primate Research may turn conventional assumptions of alphas males upside down. The study found that alpha males have high testosterone levels, which allows them to dominate other baboons, get access to more food, and attract better mates. This is expected. Surprisingly, though, the alpha males also have high levels of stress hormone glucocorticoid, which scientists measured from their feces samples. In fact, the stress of alpha baboons was on par with low-ranking baboons. The convention wisdom is that access to food and females provides life security and thus less stress for dominant males. Conversely, weak males who are constantly threatened by starvation and physical violence from stronger males are thought to be more stressed. The st...
Read more

We Call it Soccer

The US played its best, and maybe only good game of World Cup, but lost thanks to brilliant goalkeeping by the Swedish keeper and the bizarre method soccer uses to settle ties when three US stars could not put the ball on frame from the 12 yard spot.  At the end it came down to a blocked shot that spun in by maybe a couple of centimeters. Well, that's football - too much like life.   Which brings me to a modest proposal.  Replace the thirty minute overtimes with as many 7-player 15 minute periods as needed to settle it.  Scoring should be much easier with fewer players.
Read more