5 ms·
"by what it believed was a "state-sponsored actor.""
by justinv 10y ago
"by what it believed was a "state-sponsored actor.""
- patrickmn 10y agoThe de facto excuse to use when you get hacked these days. Who could possibly defend against an entire nation? And it's incredibly easy to "prove" that some Russian IP accessed your system at some point, therefore Putin is directly involved and no amount of security would've prevented him from getting in.
- dwightgunning 10y agoWould a hacker who claims unemployment benefits be considered state sponsored?
- hood_syntax 10y agoTruly food for thought...
- rawnlq 10y agoSidetracked: Can someone explain to me why there seem to be a culture of blackhat hacking from Russia? Do their CS degrees have mandatory advanced courses on how to exploit vulnerabilities for lulz? Not really even saying this in a mean way. Almost all top CS programs in the US have assignments on writing buffer overflow attacks and reverse engineering in their mandatory intro to systems course. But I don't seem to see them going off on their own to learn more sophisticated attacks and acutally using it in the real world. Why does russia seem to foster so many blackhats? Or is it just the proxies that are hosted there?
- prodigal_erik 10y agoMaybe it's just that the avails of theft and fraud are not limited by prevailing wages in your area, so are relatively a better deal?
- rezashirazian 10y agoI don't understand what difference it makes if it's state-sponsored or not. It seems like Yahoo's PR wants to switch focus to state-sponsored hacking and form a narrative around what's been in the news lately as opposed to Yahoo's incompetence. Also it's less embarrassing to get hacked by a whole nation than a few nerds in their basement.
- frandroid 10y agoIf you're a human rights activist with a Yahoo account and Russia or China stole these passwords, then your communications have a much higher chances to have been breached and spied upon than if say, a Russian gang got their hands on this and used accounts to spread more ransomware around.
- user5994461 10y agoIMO: State attack = a state steals the access and keep the breach secret for as long as they can [or until they get hacked themselves]. They use it for espionage and similar purposes Evil bad guy = all accounts and passwords are already available on blackmarket.com since Day+1 after the breach. They'll probably end up in a torrent within the next month. Evil bad guy sponsored by a state = Well, somewhere between the two. Hopefully the state ensures they get exclusive access and non disclosure.
- randomfool 10y agoOnce the accounts are for sale on the black market (they are), then the distinction between state and non-state is moot.
- andruby 10y agoDo you have a source? Has it been mentioned that these accounts are afor sale?
- MichaelApproved 10y ago> I don't understand what difference it makes if it's state-sponsored or not. > Also it's less embarrassing to get hacked by a whole nation than a few nerds in their basement. Seems like you understand just fine.