5 ms·

It is PR. It makes them seem less incompetent if the attack was performed by a "state sponsored actor".

by dlandis 10y ago

meowface 10y ago
I agree, but the typical PR spin tends to be "a sophisticated adversary". It'd look bad to say an attack was state sponsored if you didn't have good reason to believe it, since that's a pretty specific accusation. My guess is they hired a firm that actually knows security - probably FireEye or Crowdstrike - and their analysts came to that conclusion.
- imron 10y ago
  > since that's a pretty specific accusation. No it's not. It's an entirely vague specification. Was it the Russians, the Chinese, the NSA? It's also something they'll never have to prove or verify so from a PR perspective it makes you look far less incompetent if you say 'state sponsored actor' instead of '17 year old high-schooler from Estonia'.
  - meowface 10y ago
    >It's also something they'll never have to prove or verify so from a PR perspective I disagree. In breaches like these, attribution discussion begins pretty quickly after the announcement. If researchers find evidence it was some script kiddie or a black hat group or whatever, that would embarrass Yahoo even more. If you don't know who the attacker is, you have nothing to lose by saying you were compromised by a sophisticated adversary in a targeted attack. You have more to lose by saying a nation-state attacked you if they actually didn't.
- dlandis 10y ago
  > It'd look bad to say an attack was state sponsored if you didn't have good reason to believe it Did you just say it would "look bad"? They just had one of the biggest data breaches in history..
  - meowface 10y ago
    It'd look worse if security researchers started poking holes in their story. (Which has happened before for other breaches.)
guelo 10y ago
It seems like the Hillary/Russia thing has everyone thinking, without any evidence, that it's always fake when a state actor is accused. I don't see any reason to doubt them, do people think that countries are not trying to hack into these systems?
breakingcups 10y ago
Exactly. I see no reason why a "state sponsored actor" would spend "millions" on hacking Yahoo, to turn around and sell the stolen data for $1200 on the black market.

It is PR. It makes them seem less incompetent if the attack was performed by a "state sponsored actor".

by dlandis 10y ago

It is PR. It makes them seem less incompetent if the attack was performed by a "state sponsored actor".

I agree, but the typical PR spin tends to be "a sophisticated adversary". It'd look bad to say an attack was state sponsored if you didn't have good reason to believe it, since that's a pretty specific accusation. My guess is they hired a firm that actually knows security - probably FireEye or Crowdstrike - and their analysts came to that conclusion.

imron 10y ago
> since that's a pretty specific accusation. No it's not. It's an entirely vague specification. Was it the Russians, the Chinese, the NSA? It's also something they'll never have to prove or verify so from a PR perspective it makes you look far less incompetent if you say 'state sponsored actor' instead of '17 year old high-schooler from Estonia'.
- meowface 10y ago
  >It's also something they'll never have to prove or verify so from a PR perspective I disagree. In breaches like these, attribution discussion begins pretty quickly after the announcement. If researchers find evidence it was some script kiddie or a black hat group or whatever, that would embarrass Yahoo even more. If you don't know who the attacker is, you have nothing to lose by saying you were compromised by a sophisticated adversary in a targeted attack. You have more to lose by saying a nation-state attacked you if they actually didn't.
dlandis 10y ago
> It'd look bad to say an attack was state sponsored if you didn't have good reason to believe it Did you just say it would "look bad"? They just had one of the biggest data breaches in history..
- meowface 10y ago
  It'd look worse if security researchers started poking holes in their story. (Which has happened before for other breaches.)

guelo 10y ago

It seems like the Hillary/Russia thing has everyone thinking, without any evidence, that it's always fake when a state actor is accused. I don't see any reason to doubt them, do people think that countries are not trying to hack into these systems?

breakingcups 10y ago

Exactly. I see no reason why a "state sponsored actor" would spend "millions" on hacking Yahoo, to turn around and sell the stolen data for $1200 on the black market.