Russian Bank Server communicated with Trump Server

[_MeDotOrg]

Jersey Girl, ultimately I don't think it matters if the transmission was one way or reciprocal. The big pieces of data for me are the fact the first server shut down after the NYT contacted Alfa but before they contacted Trump, and when they set up the second server, Alfa bank was the first to contact it.

Now again, I have to admit my computer hacker diagnostic skills are nil, and if greater computer minds than mine have examined this data and can offer other conclusions, I will certainly read it. I'm certainly willing to acknowledge that we are not looking at gigantic streams of data. I'm not vying for the ldsfaqs/Bgood end of the pool, and especially in the era of 'fake news' I feel obligated to say that these collection of facts regarding packets of data do not automatically mean an improper relationship between Donald Trump and anyone in Russia.

[Guest]

Ok after reading both articles I have decided the author doesn't know squat about networking traffic nor protocols. Not even enough to tell a coherent story. The level of detail is: innuendo.

[_Some Schmo]

What I was remembering was the follow up article by the author: http://www.slate.com/articles/news_and_ ... ories.html

After reading it, I was convinced there was no there there.

Those counterarguments aren't bad, but I'm still skeptical. The one I found most compelling was why they wouldn't set up a more private arrangement (that didn't involve email) but that assumes that the tech guys they consulted knew the best way to handle that.

I will say, however, that if it weren't for all of the other Russia/Drumpf related stories these days, I'd agree with you that this could just be an anomaly. It just seems way too coincidental in the context of everything else concerning Russia.

[Guest]

If I want an exclusive communication between two host I set up an ssh tunnel and port forward the session through it.

The dns traffic is almost meaningless. Modern Web browser perform a dns forward lookup on every link in a page. Point your browser at Google news, look up a Russian news story and watch your Web browser send all kinds of dns requests resolving Russian servers.

Again dns traffic does not indicate a point to point connection. The resolution was done at the ISP level.

Continous dns traffic resolving Russians hosts in most environments is indicative of a compromised host with malware beaconing to a c&c server.

[_Some Schmo]

If I want an exclusive communication between two host I set up an ssh tunnel and port forward the session through it.

There you go; they should have consulted you.

Although, they were using a third party vendor for the server, so... yeah, I don't know what to think about all this. That would seem pretty careless.

[_Jersey Girl]

I will say, however, that if it weren't for all of the other Russia/Drumpf related stories these days, I'd agree with you that this could just be an anomaly. It just seems way too coincidental in the context of everything else concerning Russia.

That is the exact reason we need to follow up on whatever we are able to so we don't passively accept crap and go into a fog about it incase someone is gas lighting the public.

We need truth inasmuch as we're able to get it.

[_MeDotOrg]

Folks, I must apologize. After reading the follow up report I would not have posted the first article, especially without the caveats found in the second article.

Again, it's important to be accurate with information. So thank you Steelhead and Res Ipsa, for keeping the news accurate. There was one time a few months ago when I posted something about Trump that was overblown or incorrect, and honorentheos called me on it and I never apologized. So an belated mea culpa to honorentheos.

[_Jersey Girl]

It's okay, Me. This was yet another chance to sort through a report and we need to remember to keep doing that. A good exercise for us!

:-)