3 ms·
> The interesting thing about attribution is it flips the infamous "attacker's edge" around. Q: Do we think that anyone in North Korea, never mind anyone in po
by logifail 6y ago
> The interesting thing about attribution is it flips the infamous "attacker's edge" around.
Q: Do we think that anyone in North Korea, never mind anyone in power in North Korea, cares whether some group in the West "attributes" another alleged hack to them?
> forensic investigators often only need to discover one mistake to start pulling on threads and pivoting
Would that be the forensic investigators who can't actually disclose their evidence of the "mistake" because it might help the adversary?
- meowface 6y ago>Q: Do we think that anyone in North Korea, never mind anyone in power in North Korea, cares whether some group in the West "attributes" another alleged hack to them? Possibly. It's true that they may just not care at all. But it's difficult to know how they work and think internally. >Would that be the forensic investigators who can't actually disclose their evidence of the "mistake" because it might help the adversary? It would be the investigation/research team and whoever's leading them who would be making that decision. But, basically, yes.