3 ms·
I have moved to the left on this sort of issue after there was no high level official response or remediation after the Snowden revelations. I think many peopl
by grandalf 10y ago
I have moved to the left on this sort of issue after there was no high level official response or remediation after the Snowden revelations. I think many people fail to grasp how vulnerable we are to surveillance and propaganda. I have not seen any elected officials offer any reasonable reassurance or even accept accountability for what appear to be excesses. This suggests to me either fear or complicity, either of which are pretty bad news.
I think your questions contain the assumptions for my answer:
A state sponsored intelligence agency has the sophistication to forge the IOCs (or not to). Russia has a state sponsored intelligence agency. Therefore, the IOCs would not have been found unless the state sponsored agency responsible for the leak wanted them found. Thus if the data was leaked by Russia, it would have been accountable only if being held accountable offered a strategic benefit.
I have not yet observed any strategic benefit to Russia doing this. In fact, unless the hypothetical smoking gun is so significant that it will harm the very likely election of HRC to the presidency (and that was deemed beneficial), I find it unlikely that Russia would have been willing to risk the significant harm in diplomacy caused by being caught meddling in a US election.
So I think the hack was either done by a less sophisticated group (likely Russian) or by a different state sponsored group who chose to leave the trail pointing to Russia. Considering that escalated US/Russia tensions will amount to Billions in appropriations, there is clearly a financial incentive for stewing the conflict. There is also a dedicated interest group in the US that has tried to nudge the US into more direct conflict with Russia over the Ukraine, etc. But the surprising factor has been how readily Clinton's campaign jumped into finger pointing.
I do not see how it possibly benefits Clinton (or her diplomatic core in 2017) to engage Russia in finger pointing and accusations of meddling in a US election. If a response was warranted, it should (in my opinion) have been measured, and it should have come from president Obama, and the issue should not have become a rallying cry for HRC's campaign. It's absurd and unprecedented for a candidate who does not hold office to levy such serious accusations at a foreign government. If accusations are warranted there is an existing group of officials whose job it is to deal with it.
The first version of the Russia finger pointing story didn't really get legs and was not vetted by any named/credible infosec experts. The second round was, by the firms you mention, and I believe at least one official made a statement confirming the suspicion of Russian involvement.
So there is some unknown motive for HRC deciding to circumvent the proper diplomatic method of resolving something as serious as election tampering by a foreign country. I doubt it amounts simply to trying to leverage the news cycle in a beneficial way, or even misdirection. It seems like too big a risk, one that a former Secretary of State would be abundantly cognizant of, especially if it really was Russia and some retaliatory action would need to be taken in the near future.
I think there is room for exploration of the various motives that other state actors might have had for leaking the docs, but my guess is that the goal is to get the information into public view so that it cannot be used against HRC later after she's elected. Only if the leaked information ends up containing an election-risking smoking gun will it be plausible to believe that a state actor released the information to harm HRC.
- grandalf 10y ago@tptacek I had about 30 seconds of battery left when I typed the parent, so there are a few minor typos, but I'm very curious to hear your thoughts on it.
- tptacek 10y agoYep, I know I owe you a response; you posted just as I was going out for the evening last night. :)
- tptacek 10y agoIt's certainly possible that the infosec apparatus of the USG government, at its highest levels, could forge a compromise of the DNC. They have the requisite intelligence to leave the right trial of breadcrumbs to trick firms like Crowdstrike. But I don't think it's very plausible. Break this down a bit: * Possibility 1: The NSA/CIA/DHS deliberately attack the Democratic National Committee --- a black-letter crime --- and deliberately create a fraudulent attribution to Russia. In the process, they reveal unflattering secrets about the party of the government still in power, and generate fodder for one of the most volatile Presidential elections in recent history. Plausibility rating: HIGHLY IMPROBABLE. * Possibility 2: The attack isn't instigated by the US government, but rather some group of randos who the USG finds convenient to frame for the attack. Since the attribution work is performed simultaneously by US federal law enforcement and multiple attribution firms, a conspiracy must be generated between the firms (who are unanimous in their opinion) and law enforcement --- and, since the act of framing Russia is both deliberate and highly strategic, probably the executive branch of the US government at the highest levels. This is technically possible to accomplish, but would represent the most sophisticated and ambitious conspiracy undertaken by the US government in the last 50 years. Plausibility rating: EVEN LESS PROBABLE. * Possibility 3: Both the USG and the attribution firms believe in good faith that they have a firm attribution to Russia. But they're wrong. For example, perhaps Russia seeded the last generation of their attack tools to a bunch of randos in Eastern Europe. Problem: tools, implants, and exploits are important IOCs, but they aren't the only ones, and the attribution depends on some IOCs that can't be seeded --- previously used staging servers and command and control systems. Plausibility rating: SLIGHTLY MORE PLAUSIBLE BUT STILL IMPROBABLE. * Possibility 4: As bystanders we don't have a clear enough understanding of Russia's M.O. to gauge their intent. We agree broadly that Russia is highly competent and capable, and that this is a high-profile attack, so it's unlikely that they were just too dumb to set up fresh staging servers. So Russia is comfortable with the world knowing they're doing this; in addition to hamfistedly manipulating the election and supporting their favorite candidate --- we know Trump is their favorite candidate, they just filed a complaint to the U.N. to that effect!!! --- they're also communicating something to the US about their willingness to sow chaos and exploit it to their own ends. Plausibility rating: SUBJECTIVE.