3 ms·

I don't think that's what these researchers are saying. I think they are saying more along the lines of: "Hutchins has shown that he is a security researcher th

by jxcole 9y ago

I don't think that's what these researchers are saying. I think they are saying more along the lines of: "Hutchins has shown that he is a security researcher through his work on wannacry. As a security researcher, he probably has researched other problems as well, possibly including Kronos. The fact that he was arrested with little to no evidence could be showing that the DOJ is willing to arrest people who have copies of virus source code on their computers, even if they only accessed it for research purposes. In fact he may have updated Kronos code or written some part of Kronos as part of research to validate a hypothesis or test a theory. Such actions are ordinary actions for researchers, so this puts at risk most computer security research across the world."

watty 9y ago
>> The fact that he was arrested with little to no evidence... Do you really think they are loosely tying Marcus to Kronos with little to no evidence? Why go through all the trouble? Just because they haven't shared evidence in a sealed case doesn't mean they have no evidence. It's safe to assume there is evidence and it'll be interesting to see what it is.
Ajedi32 9y ago
> The fact that he was arrested with little to no evidence How do you know what evidence does or doesn't exist? The case hasn't even been brought to trial yet.
mnarayan01 9y ago
I think this is also an argument with potential (at least when presented as here, i.e. without excessive reference to WannaCry), but I think you need to either have a decent amount of affirmative evidence against him having sold Kronos or to wait at least several days before using the DOJ's absence of presented evidence as evidence of absence. W.r.t. the latter, I'm not saying that the DOJ should have had him arrested if it lacks serious evidence of his guilt. I'm saying that his arrest has happened; it's too late to stop it. The question is whether it should have happened, and, since we're highly unlikely to be able to change anything within a few days, it seems like it makes sense to wait a few days before asserting that the DOJ lacked evidence to support the arrest if only to avoid poising the well. If it turns out that they didn't have any evidence, then the arrest was a problem which needs to have consequences. But I think being over-eager at this point greatly lowers the probability of there being any such consequences.

by jxcole 9y ago

watty 9y ago

>> The fact that he was arrested with little to no evidence... Do you really think they are loosely tying Marcus to Kronos with little to no evidence? Why go through all the trouble? Just because they haven't shared evidence in a sealed case doesn't mean they have no evidence. It's safe to assume there is evidence and it'll be interesting to see what it is.

Ajedi32 9y ago

> The fact that he was arrested with little to no evidence How do you know what evidence does or doesn't exist? The case hasn't even been brought to trial yet.

mnarayan01 9y ago

I think this is also an argument with potential (at least when presented as here, i.e. without excessive reference to WannaCry), but I think you need to either have a decent amount of affirmative evidence against him having sold Kronos or to wait at least several days before using the DOJ's absence of presented evidence as evidence of absence. W.r.t. the latter, I'm not saying that the DOJ should have had him arrested if it lacks serious evidence of his guilt. I'm saying that his arrest has happened; it's too late to stop it. The question is whether it should have happened, and, since we're highly unlikely to be able to change anything within a few days, it seems like it makes sense to wait a few days before asserting that the DOJ lacked evidence to support the arrest if only to avoid poising the well. If it turns out that they didn't have any evidence, then the arrest was a problem which needs to have consequences. But I think being over-eager at this point greatly lowers the probability of there being any such consequences.