I am not at all impressed with this article, it strikes me as another piece that simply summarizes information leaked by the US government or someone at one of

I am not at all impressed with this article, it strikes me as another piece that simply summarizes information leaked by the US government or someone at one of the intelligence organizations. They say "the NSA has linked the North Korean government..." then tell us the assessment was not made public, that it is inconclusive, and that the NSA has declined to comment. "One agency..." supposedly has a "building block for this assessment but they are not named. I understand that the government would like to protect their sources, but I don't think we should simply take them at their word. In my opinion, this piece is doing exactly that. What little concrete data I've managed to gather is all circumstantial, I've seen nothing that point to any sort of technical "smoking gun". Maybe I am paranoid, but my concern is that this finger pointing at foreign governments does nothing but generate fear. When the legislature finally introduces a bill to defeat encryption across the board, they'll have widespread support and everyone who argues against it will be painted as some kind of imbecile. All of the sudden, the largest tech companies in the country will be accused of wanting to aid and abet North Korea and Russia. And security doesn't materially improve. The assessment Reality Winner released isn't much better than these articles, but at least it's more straightforward and the means to the end were clearly disclosed. Yet no one is talking about putting training in place at the companies involved (to defeat phishing or social engineering attacks via phone or email) or source code audits (even private is better than nothing). It's infuriating.