We're all software engineers (OK, a lot of us are software engineers). As someone in the computer business, hackers always fascinate me. Admittedly, I'm not a hacker, not in the "break into a secure system and take control of it" sense of the word.
Today I saw this article (http://www.theguardian.com/technology/2013/oct/30/google-rep...). I'm sure you've seen similar ones recently, from large companies and other countries. When you think about companies like Yahoo and Google, you realize that we are talking about some very, very smart people. These are not easy companies to get into. Their interviews are designed to screen out all but the very best, the most elite programmers. And when you are basically the "go to website" for most of the known world, you spend a LOT of time on things like security, and tracking requests, etc. And let's be honest, Google and Yahoo are in the business of tracking other websites - it is their bread and butter. They understand it and know it.
So I ask myself - HOW? How did the government manage to find and acquire programmers so skilled, so elite, that they are even smarter than the Google and Yahoo guys tied together? Moreover, how did they manage to consistently hack them?
To my knowledge, there are two main ways to get into a system. The first is what most people assume - that's a brute force attack. Find a weakness in the system, exploit that weakness, break in and do what you can before pappa bear catches you and kicks you out. Not a very effective approach for long term information gathering, right? And once done, the exploit is usually addressed.
The other way is to get someone "on the inside" to help. Get them hired, and then get them to covertly build a "back door" for them, an easy way in. This too is way easier said than done on so many levels. I don't know about you, but there are several guys on my team, and when security changes are made, there are lots of people who are aware of it, and would likely see it. It would be tough for me to build a back door without someone seeing it being checked in. Or able to find it easily, even just "tripping over it".
But I digress. In order to hack Google, Yahoo, France, Germany, yada yada yada, you'd have to get an inside guy, a super-elite smarter-than-google type of hacker into every one of those places. They'd have to have elite hackers growing on a farm somewhere if nothing else, and then all the connections everywhere to secretly get them hired and into positions of security and power. HOW???
I just don't understand. I seems like a unrealistic task to me. Maybe that's why I'm a run of the mill engineer however... :)