14 ms·
It definitely should not be considered evidence by anyone credible. Attribution requires more than just some snippets of traffic and metadata. Here is a pretty
by willstrafach 9y ago
It definitely should not be considered evidence by anyone credible. Attribution requires more than just some snippets of traffic and metadata.
Here is a pretty interesting presentation from the Snowden leaks regarding attribution of Chinese CNE (Warning: TS/SI content): https://www.eff.org/files/2015/02/03/20150117-spiegel-byzantine_hades_-_nsa_research_on_targets_of_chinese_network_exploitation_tools.pdf https://www.eff.org/files/2015/02/03/20150117-spiegel-byzant...
- mediocrejoker 9y agoWhat is TS/SI content?
- jwn 9y agoTop Secret/Sensitive Information
- bradknowles 9y agoThat’s not what SI means.
- AnimalMuppet 9y agoThat's twice in the same minute that you've replied "That's not what SI means" (to two different definitions, so you have to be right at least once). But it would be more useful if you would supply what you think the correct definition is, rather than making us guess (or making us grovel before your superior knowledge, which is not really the point of HN).
- vetrom 9y agoPoster probably meant to say TS/SCI: Top Secret/Security Compartmentalized Information. Part of the contract involved in getting a U.S. government security clearance assigns you liability for exposure to any TS/SCI, even if you were not the publisher. Therefore if you're subject to one of those contracts, you generally (almost always?) want to avoid reading these leaks like the plague.
- mediocrejoker 9y agoThanks. Is it safe to assume the original link (to the hive8 page on wikileaks) is under a similar clearance?
- willstrafach 9y agoHive is SECRET//NOFORN when attributable to CIA, if I understand correctly.
- GCU-Empiricist 9y agoAssuming it's TS/SCI: it's a highly classified and compartmentalized type of US classified material. Generally if you hold a clearance you don't want to access those links on a work computer, because DOD/DOI still consider it "contaminating" and unclassified system with classified material even if the material has been leaked to the public.
- willstrafach 9y agoInformation classified at the “Top Secret” level and in the “Special Intelligence” SCI compartment. I was trying to be courteous to any readers with an active security clearance, as viewing such material may require them to report the incident.
- bradknowles 9y agoThat’s not what SI means.
- willstrafach 9y agoIt is, though. > (U) Definition: Special Intelligence, or SI, Is a sensitive compartmented information (SCI) control system designed to protect technical and Intelligence Information derived from the monitoring of foreign communications signals by other than the intended recipients. The SI control system protects SI-derived Information and information relating to SI activities, capabilities, techniques, process and procedures. Page 80 here: https://fas.org/sgp/othergov/intel/capco_reg_v6-0.pdf https://fas.org/sgp/othergov/intel/capco_reg_v6-0.pdf