4 ms·

> Those clues, they surmised, could have come from access to the OPM data, possibly shared by the Chinese, or some other way, say former officials. Why would t

by rdtsc 7y ago

> Those clues, they surmised, could have come from access to the OPM data, possibly shared by the Chinese, or some other way, say former officials. Why would the Chinese do that? Here is this treasure trove of information why share it with anyone. But I do see the Chinese being hacked by the Russians scenario after they figured out the Chinese had that kind of info.

mlyle 7y ago
> Here this treasure trove of information why share it with anyone. China could have viewed the potential damage to an adversary (the US) to be smaller than any disadvantage it incurred itself by sharing. Or China could have seen a small cost to itself in sharing, and a large gain to Russia, offering the opportunity to bargain for other things.
caseysoftware 7y ago
There are numerous reasons. - The simplest but least likely is money. Reselling some portions of the data or even running it as a "Go Fish" service is immensely valuable. - The more likely scenario is an enemy of my enemy situation where the value of screwing up US operations is useful to a) show you have the power or b) build a more amicable relationship with Russia. But realistically, all of that was probably unnecessary. Google Robin Sage and check out how much sensitive information people share entirely by accident OR that is not sensitive by itself but when combined with other aspects can become weaponized. That's why whenever anyone says "none of this data was classified!" it's an almost meaningless statement. None of us understand what missing puzzle piece will put it all together. * Both my wife and I were included in the breach. When the new broke, I wrote it up here: https://caseysoftware.com/blog/why-this-security-breach-is-worse-than-all-the-others-combined https://caseysoftware.com/blog/why-this-security-breach-is-w...
- caseysoftware 7y ago
  On the "but none of the data was classified!" part, a colleague made this video to make it a little more concrete: https://www.youtube.com/watch?v=nbgQ1V2BLEs https://www.youtube.com/watch?v=nbgQ1V2BLEs
- stef25 7y ago
  > Robin Sage Surprised that on the Wikipedia page there's no mention of anyone trying to do a reverse image search of the profile picture which is claimed to be of a porn star. Often quicker & easier than browsing almuni pages etc.

by rdtsc 7y ago

mlyle 7y ago

> Here this treasure trove of information why share it with anyone. China could have viewed the potential damage to an adversary (the US) to be smaller than any disadvantage it incurred itself by sharing. Or China could have seen a small cost to itself in sharing, and a large gain to Russia, offering the opportunity to bargain for other things.

caseysoftware 7y ago

There are numerous reasons. - The simplest but least likely is money. Reselling some portions of the data or even running it as a "Go Fish" service is immensely valuable. - The more likely scenario is an enemy of my enemy situation where the value of screwing up US operations is useful to a) show you have the power or b) build a more amicable relationship with Russia. But realistically, all of that was probably unnecessary. Google Robin Sage and check out how much sensitive information people share entirely by accident OR that is not sensitive by itself but when combined with other aspects can become weaponized. That's why whenever anyone says "none of this data was classified!" it's an almost meaningless statement. None of us understand what missing puzzle piece will put it all together. * Both my wife and I were included in the breach. When the new broke, I wrote it up here: https://caseysoftware.com/blog/why-this-security-breach-is-worse-than-all-the-others-combined https://caseysoftware.com/blog/why-this-security-breach-is-w...

caseysoftware 7y ago
On the "but none of the data was classified!" part, a colleague made this video to make it a little more concrete: https://www.youtube.com/watch?v=nbgQ1V2BLEs https://www.youtube.com/watch?v=nbgQ1V2BLEs
stef25 7y ago
> Robin Sage Surprised that on the Wikipedia page there's no mention of anyone trying to do a reverse image search of the profile picture which is claimed to be of a porn star. Often quicker & easier than browsing almuni pages etc.