Idea no.3: IT and other Tech solutions for Pakistan

[ps3linux]

I am into Cyber Security affairs...things are in very bad shape.... We are on top of the list of the most vulnerable countries. regarding APT attacks on Pak infrastructure, currently, we are unable to detect such attacks or can't mitigate the risks associated with it. Pakistan badly missing few foundation steps such as CERT & incident reporting etc. The overall cyber policy is being developed for years.

The global cybersecurity ranking is issued on annual basis and according to the latest report, I am quoting here as:


Unfortunately, Pakistan lags behind in terms of cybersecurity, so much so that it’s included in the bottom 10 according to a report. A recent study conducted by Comparitech has revealed that Pakistan ranks 7th among the countries having the worst cybersecurity. The study has gathered data from different sources including Kaspersky, the Global Strategies Index, and the Global Security Index (ITU).

The study took into account the percentage of mobile phones infected with malware, the percentage of attacks by crypto miners, the percentage of computers affected by cyber attacks, and how up-to-date a country’s legislation is regarding cybersecurity among other indicators.

Japan (60) has been ranked as the most secure country for all indicators. Pakistan’s neighbors India and Bangladesh are ranked at 14 and 6 respectively.

Source: https://www.comparitech.com/blog/vpn-privacy/cybersecurity-by-country/

I thought the situation is bad, I mean crashing into root of servers is one thing but this much insecure is beyond words, and telnet attacks drang.. Financial malware, IoT and Crypto I understand the reasons for IoT and Crypto but first one is beyond understanding and comprehension and we are are not talking about sovereign state originated attacks like TajMahal, these are bare basic crap malwares use to make them as pranks.

 

[Ghazwa-e-Hind]

I don't think our military has expertise in cyberwarfare.

In 2019 they banned personnel from using social media which should have been done decade ago.

NSA and other agencies have links in Hardware manufacturing companies. The have bribed them to plant hardware based backdoors, they cannot be detected easily. We can only get rid of them by building our own hardware to prevent ourselves from snooping. In Zardari's era, the NSA had full access to Pakistan's telecommunication servers, all our call records, cellular data was within their reach.

 

[ps3linux]

I don't think our military has expertise in cyberwarfare.

In 2019 they banned personnel from using social media which should have been done decade ago.

NSA and other agencies have links in Hardware manufacturing companies. The have bribed them to plant hardware based backdoors, they cannot be detected easily. We can only get rid of them by building our own hardware to prevent ourselves from snooping. In Zardari's era, the NSA had full access to Pakistan's telecommunication servers, all our call records, cellular data was within their reach.

Right but the point is its beyond the capability of military only, it has to be different system even under military command. In unit 8200 they pick kids with the right aptitude right out of high schools, there a large reverse brain drain involved as well. There are of course lot of professionals, PhDs, Americans are the leader here but Chines too have the same model lot of civilian under military control, Iraninas are decade ahead of us in this area, indians, russian, germans, pommies hell north korean are doing better than us in cybersecurity and cyber intelligence gathering.

Hardware although could help but development of an advanced/sophisticated cyber intel gathering platform (hardware/software) is not so difficult, honestly over the years no of pakistanis on the dark net is increasing steadily. While most of them are just novices but some are very very good, impressive should be more like it, and coming from someone like me its a big compliment.

We have to start now, as the Chinese say journey of a 1000 miles start from a single step.

 

[zulu]

@ps3linux finally its good to see your post regarding this topic rem when i said to u in your introduction ? hope u make some permanent threads regarding this btw whats the situation in private sector in PAkistan about cyber security services providers ???few years back when i was in game there was none so means lot of scope

Hazrat that is blessing in disguise

The have bribed them to plant hardware based backdoors

 

[NA71]

Right but the point is its beyond the capability of military only, it has to be different system even under military command. In unit 8200 they pick kids with the right aptitude right out of high schools, there a large reverse brain drain involved as well. There are of course lot of professionals, PhDs, Americans are the leader here but Chines too have the same model lot of civilian under military control, Iraninas are decade ahead of us in this area, indians, russian, germans, pommies hell north korean are doing better than us in cybersecurity and cyber intelligence gathering.

Hardware although could help but development of an advanced/sophisticated cyber intel gathering platform (hardware/software) is not so difficult, honestly over the years no of pakistanis on the dark net is increasing steadily. While most of them are just novices but some are very very good, impressive should be more like it, and coming from someone like me its a big compliment.

We have to start now, as the Chinese say journey of a 1000 miles start from a single step.

Cyber warfare domain has now being recognized as forth dimension and appropriately addressed by Russia/USA/China/North Korea/Iran/Australia. These countries have developed full spectrum Cyber warfare capabilities (Both defensive & offensive). They can take down targeted Tele-infrastructures ...disrupt utility supplies or even shutdown satellite link in no time.

The very impressive of of above is Iran...in no time they sensed the need of the cyber domain and asked their hackers to come forward for national cause. with shortest possible time they formed a formidable cyber force ...the result was US drone RQ-170 Sentinel was downed by Iranians through Cyber attack. (ref:https://www.globalresearch.ca/israeli-intelligence-report-us-drone-downed-by-iran-cyber-attack/28114)

Now come to Pakistan, we have been a regular target of moderate to high Cyber attacks mainly by USA and India. Last year massive attack on our banking system was reported worldwide, In early 2002-2005 our Mobile phone networks were compromised for years by British e-Spy (GCHQ) and stolen tons of subscribers data...we never knew it ...it was made public after that cyber op terminated. (https://tribune.com.pk/story/908732...-access-almost-any-internet-user-in-pakistan/)

The story of our incompetency goes on ...our own people from USA/UK have tried to rescue us but we have no time for this domain...because it is not important. Our FIA Cyber branch is super active to deal this threat. Just see our current IT ministry being run by MBBS.

For you guys...the very first recognized cyber security firm was FIREEYE established in USA and one of the founding member is our own chap Mr. Asher Aziz in 2004 (just google) it was so huge success that this firm quickly was nominated as consultants for USA-NSA.

The Fire Eye was the first firm which introduced the idea of Cyber Real-time Threat Map ..Known as Cyber Radar....which is used by many including NSA.

your can check its limited version at https://www.fireeye.com/cyber-map/threat-map.html

now many more companies are offering this mapping service.

Hope one day we will have some thing like Pak Cyber Division (Russian call it Cyber Troops)

I don't think our military has expertise in cyberwarfare.

In 2019 they banned personnel from using social media which should have been done decade ago.

NSA and other agencies have links in Hardware manufacturing companies. The have bribed them to plant hardware based backdoors, they cannot be detected easily. We can only get rid of them by building our own hardware to prevent ourselves from snooping. In Zardari's era, the NSA had full access to Pakistan's telecommunication servers, all our call records, cellular data was within their reach.

No we have started to do preliminary work ... very basic defensive capabilities...in cyber domain offensive capability work like Nuclear deterrent which we don not have.

 

[Sully3]

people in the know, know that nearly 90% of pakistani banks customer user data was avalible to buy on the dark web 2/3 months ago. ive never seen a breach of data so big in my life, banks are targetted but to target the all the banks in the country sucessfully means pakistan cyber security is non exsistent.

also i dont know why we are expecting better cyber security from pak, these jokers cant even hack accounts of PTM drama baazi so protecting user data from world class hackers is another thing.

 

[NA71]

people in the know, know that nearly 90% of pakistani banks customer user data was avalible to buy on the dark web 2/3 months ago. ive never seen a breach of data so big in my life, banks are targetted but to target the all the banks in the country sucessfully means pakistan cyber security is non exsistent.

also i dont know why we are expecting better cyber security from pak, these jokers cant even hack accounts of PTM drama baazi so protecting user data from world class hackers is another thing.

Only tip of the ice burg....you can imagine what if they managed to break into our defense data link. Every thing that is connected to central data network...your air situation, your GPS Links, i can not elaborate much....could be compromised...


In my above post I forgot to mention the Top Cyber Force believed to be Israelis ...First Cyber warfare weapon named STUXNET designed by Israelis with CIA ...That caused Havoc in Iran.....

 

[ps3linux]

@ps3linux finally its good to see your post regarding this topic rem when i said to u in your introduction ? hope u make some permanent threads regarding this btw whats the situation in private sector in PAkistan about cyber security services providers ???few years back when i was in game there was none so means lot of scope

Hazrat that is blessing in disguise

Thanks brother I would love to have this thread sticky, you know this topic/subject is way above your normal user so I was testing the waters before I post anything on the topic, you see the kind of people we are talking about you cant get them off the rack, most of the people I have come across over my years of explorations are misfits of society with zero or no social life, Aspergers, socially inept, Sociopaths with odd habits, for this kind of people to survive in the corporate sector or public sector its pretty challenging, most retards with zero or no skills good with social skills, contacts end up in key positions. They learn a few jargon from the net or social gathering and that's it that how they grow. Although I do know a few in corporate sector which are really good at it. But some of the kids I see coming up from various cities are absolutely stunning in their skills, they have a real knack for this kind of stuff.

Highlighted ones end up with black ops, rest real good ones distributed among different services including NSA.

Cyber warfare domain has now being recognized as forth dimension and appropriately addressed by Russia/USA/China/North Korea/Iran/Australia. These countries have developed full spectrum Cyber warfare capabilities (Both defensive & offensive). They can take down targeted Tele-infrastructures ...disrupt utility supplies or even shutdown satellite link in no time.

The very impressive of of above is Iran...in no time they sensed the need of the cyber domain and asked their hackers to come forward for national cause. with shortest possible time they formed a formidable cyber force ...the result was US drone RQ-170 Sentinel was downed by Iranians through Cyber attack. (ref:https://www.globalresearch.ca/israeli-intelligence-report-us-drone-downed-by-iran-cyber-attack/28114)

Now come to Pakistan, we have been a regular target of moderate to high Cyber attacks mainly by USA and India. Last year massive attack on our banking system was reported worldwide, In early 2002-2005 our Mobile phone networks were compromised for years by British e-Spy (GCHQ) and stolen tons of subscribers data...we never knew it ...it was made public after that cyber op terminated. (https://tribune.com.pk/story/908732...-access-almost-any-internet-user-in-pakistan/)

The story of our incompetency goes on ...our own people from USA/UK have tried to rescue us but we have no time for this domain...because it is not important. Our FIA Cyber branch is super active to deal this threat. Just see our current IT ministry being run by MBBS.

For you guys...the very first recognized cyber security firm was FIREEYE established in USA and one of the founding member is our own chap Mr. Asher Aziz in 2004 (just google) it was so huge success that this firm quickly was nominated as consultants for USA-NSA.

The Fire Eye was the first firm which introduced the idea of Cyber Real-time Threat Map ..Known as Cyber Radar....which is used by many including NSA.

your can check its limited version at https://www.fireeye.com/cyber-map/threat-map.html

now many more companies are offering this mapping service.

Hope one day we will have some thing like Pak Cyber Division (Russian call it Cyber Troops)



No we have started to do preliminary work ... very basic defensive capabilities...in cyber domain offensive capability work like Nuclear deterrent which we don not have.

Great share although I have known it for years, if top ten cybersecurity expert are to be listed NSA, Units8200, Russian, Ukranian, Pommies, Chinese, North Korean, may be Indian and definitely Iranians will be on list. Hell I started using computers when C64 was a monster, only twice have I come across real tough opponent the latest was an Iranian girl, kept me up for one whole night. For an average hacker should would run circles around a dozen or so guys.

NSA/Unit 8200 developed programs for identifying potential candidates decades ago now they absolute masters in this. Followed by russian, chinese. Iranians started a decade or so ago now they are really in the game.

See this type of people you cant find through NTS or any aptitude test including ISSB. We need to have a sovereign platform for it even the school near DHA2 Isb or the the old signals one in lalkurti-rwp could be good one as x-men academy, initially few kids and a few elder ones should be recruited. Problems is such individual will not be forthcoming its like chicken and hen dilemma, authorities would have to beg and plead such individuals and from there may be seek some expertise from Russian particular and the Chinese

people in the know, know that nearly 90% of pakistani banks customer user data was avalible to buy on the dark web 2/3 months ago. ive never seen a breach of data so big in my life, banks are targetted but to target the all the banks in the country sucessfully means pakistan cyber security is non exsistent.

also i dont know why we are expecting better cyber security from pak, these jokers cant even hack accounts of PTM drama baazi so protecting user data from world class hackers is another thing.

If you listen to these retards talking they would seem to look like they know everything and you are just an idiot. While working for a big bank put one such idiot by demonstrating how to get root access with a shitty computer in less than 10 minutes. So if the data of Pakistani banks was (I say some new data has been recently been put up recently) for sale it no wonder. In a system which looks at your degree and the awarding institution first and never at your real skills its no big deal.

@zulu , @NA71 , @Sully3 you know we are not looking for programmers/necessarily rather the reverse of it, people who could think outside the platform as observers and can find ways to get in.

iOS and PS4 along Win10 are the most secure platforms and android/chrome are not spywares. LOL.

 

[zulu]

@ps3linux tag them too @baqai @R Wing .come on buddy u know the rule if u cant put 14-16 hours an day for years u cant be any good its not an job its passion so yah sociopath least u can expect to hear as here some one said it right u can't expect elite of elites to found easily already they earning so much second its against the code working for any institution esp govts.if u ppl start any good idea or should i give u one ?why not thinking to start one by yourself?lots of scope also working for defence industry and private sector.Just providing solution or selling demand not only national also can sell international and get experience,exposure and remittance to Pakistan??
About Pakistani banks ??i was sitting outside bank and was getting very good wifi signals from bank routers so tell me what anyone can do with it if just know basics ??

 

[ps3linux]

@ps3linux tag them too @baqai @R Wing .come on buddy u know the rule if u cant put 14-16 hours an day for years u cant be any good its not an job its passion so yah sociopath least u can expect to hear as here some one said it right u can't expect elite of elites to found easily already they earning so much second its against the code working for any institution esp govts.if u ppl start any good idea or should i give u one ?why not thinking to start one by yourself?lots of scope also working for defence industry and private sector.Just providing solution or selling demand not only national also can sell international and get experience,exposure and remittance to Pakistan??
About Pakistani banks ??i was sitting outside bank and was getting very good wifi signals from bank routers so tell me what anyone can do with it if just know basics ??

Sir chicken and hen, most of the guys I know in the corporate world and I would guess even @NA71 would x6 digit salary, if I were to think about it it is sophistication and huge cash outlays, does need sovereign platform. I m no nadeem ghouri (Netsol)

About banks man if the idiot decision makers think that sophisticated IT guys requirement is right at the proverbial in terms of priority that's what you get. Its normally one junior IT guy for 60 odd branches, or one junior operations officer doing the job, and it is mostly installing, microshit windows, running scripts, installing printer scanner.

 

[zulu]

thats y i post an question regarding bank its difference between any good network expert/programmer and hacker mentality yah giving up 6 figure salary not easy for everyone but u said yourself thinking outside box

 

[NA71]

The current trend is Cyber Security Experts are top ranked salary earners. In Pakistan New computer graduates taking courses of SOC/CISSP/CISA and find there way out of Pakistan. Pakistan is dominated by People who think "there is no difference between Type writer and computer machine". The very first step is cyber security is " realization & threat perception".

Our raw concept is cyber security is "anti virus system" thats need to be changed. CNIC/NADRA data was available on CDs for sale in Multan...last year. Can you imagine the level of Data Breach ? but its all ok if we tend to ignore it.

Sir chicken and hen, most of the guys I know in the corporate world and I would guess even @NA71 would x6 digit salary,

Sir I am already.....Alhamdolillah.

I just wanna request our decision makers to give this issue much needed attention. We are still using most vulnerable windows version in critical places.(as reported). If you do quick research, windows and MS office, oracle, adobe etc all have zero days vulnerabilities (intentionally fabricated). Intel processors have some nasty features that can be exploited...long list.

one can build defense line if he knows the threat ... we are currently in denial phase.

 

[scionofPakwattan]

I don't think our military has expertise in cyberwarfare.

In 2019 they banned personnel from using social media which should have been done decade ago.

NSA and other agencies have links in Hardware manufacturing companies. The have bribed them to plant hardware based backdoors, they cannot be detected easily. We can only get rid of them by building our own hardware to prevent ourselves from snooping. In Zardari's era, the NSA had full access to Pakistan's telecommunication servers, all our call records, cellular data was within their reach.

If thats the case, it would be safe to assume that they still have that access.

 

[zulu]

Maat dil jaoalo bhai few years backed i applied as family pushed""kiya har waqt computer par lagty rehty hu earn some "" i asked in company in Karachi they offered come as data operator.DATA ENTRY OPERATOR ??? now its over 9-10 years quitting game was in it back from 1993 bulletin board service time
ok gave u idea now giving u project u all know how stingray works and how easy to design one with commercially available SDR cards but if any way can get or replicate Karstan Nohl work and implement it with it just imagine how much leverage it will give our intelligence agencies (sell as defence industry products ) esp these days everyone uses a lot and love to store all their data on cell phone (like its safe as vault god bless them ) Bhai business ka business kuch Pakistan ka bhi faida .All up to you guys esp after 27th Feb i m sure you all are charged up like SQ.Ldr Hassan Siddiqui and expert in your field like him @ps3linux @NA71 @baqai @R Wing @Sully3 you are more capable to come up better ideas and do it much much more than i can imagine

"there is no difference between Type writer and computer machine".

 

[NA71]

Maat dil jaoalo bhai few years backed i applied as family pushed""kiya har waqt computer par lagty rehty hu earn some "" i asked in company in Karachi they offered come as data operator.DATA ENTRY OPERATOR ??? now its over 9-10 years quitting game was in it back from 1993 bulletin board service time
ok gave u idea now giving u project u all know how stingray works and how easy to design one with commercially available SDR cards but if any way can get or replicate Karstan Nohl work and implement it with it just imagine how much leverage it will give our intelligence agencies (sell as defence industry products ) esp these days everyone uses a lot and love to store all their data on cell phone (like its safe as vault god bless them ) Bhai business ka business kuch Pakistan ka bhi faida .All up to you guys esp after 27th Feb i m sure you all are charged up like SQ.Ldr Hassan Siddiqui and expert in your field like him @ps3linux @NA71 @baqai @R Wing @Sully3 you are more capable to come up better ideas and do it much much more than i can imagine

Hahaha well said....man Hassan Siddique is ghazi.....and Akhon ka tara......May Allah bless him and his team.

I am no expert just trying to learn ...

Just give you hint....develop your own operating system based on Linux .....India is doing it for last couple of years...no more windows. specially for Govt./Military usage.