The basic flaws I'd mention are: - Multiple state actors (or well-funded non-state actors) likely compromised the emails. - A state actor could also have fake

The basic flaws I'd mention are: - Multiple state actors (or well-funded non-state actors) likely compromised the emails. - A state actor could also have faked the "trail" that points to Russia. - The rest of the evidence is circumstantial. Sure, if we pretend we live in a pre-stuxnet, script kiddie sort of world, this was likely a high level state sponsored attack, but it seems preposterous that a state actor would be so sloppy: If you were Putin wishing to try to use spearfishing to get access to specific accounts, you would not source that work to groups that were known to work with your government. You'd set up a fake Nigerian operation so that if found it would look like the email address had been randomly chosen from a list of many used by some Nigerian person to try to scam a few thousand dollars. This is not akin to thinking three or four moves ahead, it's simply thinking one move ahead.