8 ms·

Wait, Yahoo believes the data was stolen by a "state-sponsored actor"! If they have such evidence, why don't they explain so? To me it looks like a tactic to p

by soci 10y ago

Wait, Yahoo believes the data was stolen by a "state-sponsored actor"! If they have such evidence, why don't they explain so? To me it looks like a tactic to put the focus on the "noughty" government instead of themselves. Anyway, it will be an interesting read (if ever written) how Yahoo discovered they had been stolen and by who (what state?). Also, if "the state" is finally behind this, who will they prosecute till death? I bet it's the hacker :(

Lewisham 10y ago
a) Big US enterprises are under attack from state-sponsored actors on a daily basis, so it's not that weird. It's not like the NSA weren't caught with their hands in the cookie jar either. b) If you name the state you think is behind it, you better be ready for the diplomatic repercussions between the US government and the rogue state, as well as potentially stopping doing business in that state (see Google and China)
- soci 10y ago
  a) Can you point to an article were I can learn more about examples of big US corps being attacked by US sponsored actors? It's a quite interesting topic indeed.
  - jedberg 10y ago
    It's rarely written about, in part because the private companies don't want to share details. Buy a beer for someone who has worked security for a big firm and they can tell you all about it.
  - pquerna 10y ago
    Does NSA tapping Google's fiber count: http://www.bbc.com/news/world-us-canada-24751821 http://www.bbc.com/news/world-us-canada-24751821
  - peterkelly 10y ago
    NSA infiltrates links to Yahoo, Google data centers worldwide, Snowden documents say https://www.washingtonpost.com/world/national-security/nsa-infiltrates-links-to-yahoo-google-data-centers-worldwide-snowden-documents-say/2013/10/30/e51d661e-4166-11e3-8b74-d89d714ca4dd_story.html https://www.washingtonpost.com/world/national-security/nsa-i... We can assume that the US government is not the state-sponsored actor in the OP, because their attack has already been publicly known for some time. This one is probably China or Russia.
- nikcub 10y ago
  Here is my bookmarks folder for corporate hacks: http://www.rollingstone.com/feature/the-geeks-on-the-frontlines http://www.rollingstone.com/feature/the-geeks-on-the-frontli... http://www.vanityfair.com/news/2013/07/new-cyberwar-victims-american-business http://www.vanityfair.com/news/2013/07/new-cyberwar-victims-... https://www.technologyreview.com/s/507971/welcome-to-the-malware-industrial-complex/ https://www.technologyreview.com/s/507971/welcome-to-the-mal... http://www.nytimes.com/2013/01/31/technology/chinese-hackers-infiltrate-new-york-times-computers.html?hp&pagewanted=all http://www.nytimes.com/2013/01/31/technology/chinese-hackers... http://www.vanityfair.com/news/2011/09/chinese-hacking-201109?printable=true http://www.vanityfair.com/news/2011/09/chinese-hacking-20110... http://www.bloomberg.com/news/articles/2011-07-20/cyber-weapons-the-new-arms-race http://www.bloomberg.com/news/articles/2011-07-20/cyber-weap... http://fortune.com/sony-hack-part-1/ http://fortune.com/sony-hack-part-1/ http://fortune.com/sony-hack-part-two/ http://fortune.com/sony-hack-part-two/ http://fortune.com/sony-hack-final-part/ http://fortune.com/sony-hack-final-part/ http://www.theverge.com/2015/1/21/7861645/finfisher-spyware-let-bahrain-government-hack-political-activist http://www.theverge.com/2015/1/21/7861645/finfisher-spyware-... http://www.bloomberg.com/news/articles/2014-03-13/target-missed-warnings-in-epic-hack-of-credit-card-data http://www.bloomberg.com/news/articles/2014-03-13/target-mis... http://foreignpolicy.com/2013/11/19/stuxnets-secret-twin/ http://foreignpolicy.com/2013/11/19/stuxnets-secret-twin/ http://www.cbsnews.com/news/60-minutes-great-brain-robbery-china-cyber-espionage/ http://www.cbsnews.com/news/60-minutes-great-brain-robbery-c... http://www.wsj.com/articles/u-s-steel-accuses-china-of-hacking-1461859201 http://www.wsj.com/articles/u-s-steel-accuses-china-of-hacki... http://www.vanityfair.com/news/2011/09/chinese-hacking-201109 http://www.vanityfair.com/news/2011/09/chinese-hacking-20110... http://www.vanityfair.com/news/2011/09/operation-shady-rat-201109 http://www.vanityfair.com/news/2011/09/operation-shady-rat-2...

by soci 10y ago

Lewisham 10y ago

a) Big US enterprises are under attack from state-sponsored actors on a daily basis, so it's not that weird. It's not like the NSA weren't caught with their hands in the cookie jar either. b) If you name the state you think is behind it, you better be ready for the diplomatic repercussions between the US government and the rogue state, as well as potentially stopping doing business in that state (see Google and China)

soci 10y ago
a) Can you point to an article were I can learn more about examples of big US corps being attacked by US sponsored actors? It's a quite interesting topic indeed.
- jedberg 10y ago
  It's rarely written about, in part because the private companies don't want to share details. Buy a beer for someone who has worked security for a big firm and they can tell you all about it.
- pquerna 10y ago
  Does NSA tapping Google's fiber count: http://www.bbc.com/news/world-us-canada-24751821 http://www.bbc.com/news/world-us-canada-24751821
- peterkelly 10y ago
  NSA infiltrates links to Yahoo, Google data centers worldwide, Snowden documents say https://www.washingtonpost.com/world/national-security/nsa-infiltrates-links-to-yahoo-google-data-centers-worldwide-snowden-documents-say/2013/10/30/e51d661e-4166-11e3-8b74-d89d714ca4dd_story.html https://www.washingtonpost.com/world/national-security/nsa-i... We can assume that the US government is not the state-sponsored actor in the OP, because their attack has already been publicly known for some time. This one is probably China or Russia.
nikcub 10y ago
Here is my bookmarks folder for corporate hacks: http://www.rollingstone.com/feature/the-geeks-on-the-frontlines http://www.rollingstone.com/feature/the-geeks-on-the-frontli... http://www.vanityfair.com/news/2013/07/new-cyberwar-victims-american-business http://www.vanityfair.com/news/2013/07/new-cyberwar-victims-... https://www.technologyreview.com/s/507971/welcome-to-the-malware-industrial-complex/ https://www.technologyreview.com/s/507971/welcome-to-the-mal... http://www.nytimes.com/2013/01/31/technology/chinese-hackers-infiltrate-new-york-times-computers.html?hp&pagewanted=all http://www.nytimes.com/2013/01/31/technology/chinese-hackers... http://www.vanityfair.com/news/2011/09/chinese-hacking-201109?printable=true http://www.vanityfair.com/news/2011/09/chinese-hacking-20110... http://www.bloomberg.com/news/articles/2011-07-20/cyber-weapons-the-new-arms-race http://www.bloomberg.com/news/articles/2011-07-20/cyber-weap... http://fortune.com/sony-hack-part-1/ http://fortune.com/sony-hack-part-1/ http://fortune.com/sony-hack-part-two/ http://fortune.com/sony-hack-part-two/ http://fortune.com/sony-hack-final-part/ http://fortune.com/sony-hack-final-part/ http://www.theverge.com/2015/1/21/7861645/finfisher-spyware-let-bahrain-government-hack-political-activist http://www.theverge.com/2015/1/21/7861645/finfisher-spyware-... http://www.bloomberg.com/news/articles/2014-03-13/target-missed-warnings-in-epic-hack-of-credit-card-data http://www.bloomberg.com/news/articles/2014-03-13/target-mis... http://foreignpolicy.com/2013/11/19/stuxnets-secret-twin/ http://foreignpolicy.com/2013/11/19/stuxnets-secret-twin/ http://www.cbsnews.com/news/60-minutes-great-brain-robbery-china-cyber-espionage/ http://www.cbsnews.com/news/60-minutes-great-brain-robbery-c... http://www.wsj.com/articles/u-s-steel-accuses-china-of-hacking-1461859201 http://www.wsj.com/articles/u-s-steel-accuses-china-of-hacki... http://www.vanityfair.com/news/2011/09/chinese-hacking-201109 http://www.vanityfair.com/news/2011/09/chinese-hacking-20110... http://www.vanityfair.com/news/2011/09/operation-shady-rat-201109 http://www.vanityfair.com/news/2011/09/operation-shady-rat-2...