Disgraced former FBI agent Peter Strzok was fired this week for his bias against President Donald Trump in a series of text messages to his former lover — but that wasn’t the only reason he was fired.
According to investigative journalist Sara Carter, Strzok was also caught lying under oath in his appearance before Congress regarding the wiretap of Trump Tower.
Carter quoted a former FBI supervisory special agent and other insiders at the bureau, who said the anti-Trump text messages were just the beginning of Strzok’s bad behavior.
“Strzok was under oath before Congress and he made statements that appeared to be false and refused to answer some questions, but he was going to get just a slap on the wrist. There is absolutely no wiggle room when it comes to lack of candor in the FBI … unless you’re [a Senior Executive Service],” the FBI insider reportedly told Carter. “Strzok’s firing went well beyond texting about Trump.”
“Strzok would have also been involved in the handling of the [Trump Tower wiretap] application to the [Foreign Intelligence Surveillance Court],” Carter reported. Strzok was “well aware that he was lying by deception when they did not include the information on who paid for the dossier and [that] Bruce Ohr was back-channeling information for a discredited source.”
Ohr was the 4th highest ranking member of the Department of Justice under former President Barack Obama.
According to House Intelligence Committee chairman Devin Nunes, Ohr was feeding information about then-Republican candidate Trump’s campaign to foreign intelligence agents, who reported this information back to the FBI… so the Obama administration could legally apply for a wiretap of Trump Tower.
According to this top FBI insider, the Obama loyalists knew what they were doing was dirty — but they didn’t think they’d get caught.
“Strzok knew they were not putting the application in the right context,” the FBI insider told Carter. “If there was the slightest doubt if that application was not 100 percent true, then that application would not go forward.”
Strzok had reportedly confided in his mistress during this time that he was looking for a “pretext” to investigate Trump during the campaign, so he could find “derogatory” information about him and his team.
In the debunked Steele dossier, he seemed to have gotten exactly what he needed.
5G is coming…..
Security researchers at Check Point Software Technologies have discovered a new attack vector against the Android operating system that could potentially allow attackers to silently infect your smartphones with malicious apps or launch denial of service attacks.
Dubbed Man-in-the-Disk, the attack takes advantage of the way Android apps utilize ‘External Storage’ system to store app-related data, which if tampered could result in code injection in the privileged context of the targeted application.
It should be noted that apps on the Android operating system can store its resources on the device in two locations—internal storage and external storage.
Google itself offers guidelines to Android application developers urging them to use internal storage, which is an isolated space allocated to each application protected using Android’s built-in sandbox, to store their sensitive files or data.
However, researchers found that many popular apps—including Google Translate itself, along with Yandex Translate, Google Voice Typing, Google Text-to-Speech, Xiaomi Browser—were using unprotected external storage that can be accessed by any application installed on the same device.
How Android Man-in-the-Disk Attack Works?
Similar to the “man-in-the-middle” attack, the concept of “man-in-the-disk” (MitD) attack involves interception and manipulation of data being exchanged between external storage and an application, which if replaced with a carefully crafted derivative “would lead to harmful results.”
For instance, researchers found that Xiaomi web browser downloads its latest version on the external storage of the device before installing the update. Since app fails to validate the integrity of the data, the app’s legitimate update code can be replaced with a malicious one.
“Xiaomi Browser was found to be using the External Storage as a staging resource for application updates,” the researchers said in a blog post.
“As a result, our team was able to carry out an attack by which the application’s update code was replaced, resulting in the installation of an alternative, undesired application instead of the legitimate update.”
In this way, attackers can get a man-in-the-disk position, from where they can monitor data transferred between any other app on the user’s smartphone and the external storage and overwrite it with their own malicious version in order to manipulate or crash them.
The attack can also be abused to install another malicious app in the background without the user’s knowledge, which can eventually be used to escalate privileges and gain access to other parts of the Android device, like camera, microphone, contact list, and more.
Man-in-the-Disk Attack Video Demonstrations
Check Point researchers also managed to compromise files and crash Google Translate, Google Voice-to-Text, and Yandex Translate because those apps also failed to validate the integrity of data used from the Android’s external storage.
Among the apps that Check Point researchers tested for this new MitD attack were Google Translate, Yandex Translate, Google Voice Typing, LG Application Manager, LG World, Google Text-to-Speech, and Xiaomi Browser.
Google, which itself doesn’t follow its security guidelines, acknowledged and fixed some affected applications and is in the process of fixing other vulnerable apps as well, Check Point said.
Besides Google, the researchers also approached the developers of other vulnerable applications as well, but some, including, Xiaomi declined to fix the issue, according to the researchers.
“Upon discovery of these application vulnerabilities, we contacted Google, Xiaomi, and vendors of other vulnerable applications to update them and request their response,” Check Point researchers said.
“A fix to the applications of Google was released shortly after, additional vulnerable applications are being updated and will be disclosed once the patch is made available to their users, while Xiaomi chose not to address it at this time.”
The researchers stressed they only tested a small number of major applications and therefore expect the issue affects a more significant number of Android apps than what they explicitly noted, leaving millions of Android users potentially vulnerable to cyber threats.