At least the report is short. As others have stated, it doesn't really lay out any new evidence to believe the Russian government was behind the hack. It lays o

At least the report is short. As others have stated, it doesn't really lay out any new evidence to believe the Russian government was behind the hack. It lays out information that almost looks like evidence, such as a list of usernames, but doesn't discuss how the information is relevant to anything. There is an assertion that three teams were involved, and that two teams communicated with each other, but no discussion of where this information comes from or why anyone should care how many teams there were. I get the feeling that there's a message for someone, but I'm certainly not the intended recipient. The advice on avoiding similar hacks in the future is a grab bag. Near the end it encourages using /etc/shadow on POSIX systems. I installed Linux on my personal computer in 1999. Since then, I've installed several Linux distributions, FreeBSD, OpenBSD, Plan 9, Inferno, etc. I can't remember any installation offering to store password hashes in /etc/passwd. Some of the advice is better, but not all of it is. I'm honestly disappointed. Perhaps this is a wake-up to somebody, but I would hope Sony's hack would have already served that purpose.