3 ms·
> As spring gave way to summer, bloggers and computer-security experts found evidence that the attack on RSA had come from China They never say what evidence,
by est 15y ago
> As spring gave way to summer, bloggers and computer-security experts found evidence that the attack on RSA had come from China
They never say what evidence, which is the most interesting part of the article. Does anyone have a more detailed description of how they identified it was China?
- sp_ 15y agoI worked on the technical side of the RSA attack analysis and not the attribution/political side but some guy on Twitter (https://twitter.com/yuange1975 https://twitter.com/yuange1975) who pretends to be Chinese has claimed responsibility for the RSA 0-day and some other high profile 0-day exploits on his Twitter feed in a way that makes him the credible original source of those exploits. I am sure the people on the attribution side dug deeper than this (for example they most likely tried to verify that this guy is really Chinese and not just pretend-Chinese) but I don't know anything about the non-technical side of things.
- est 15y agoThat's cool. Much better than the blah acticle. 袁哥 is actually a very skilled hacker and reputable in China. IIRC He works for NSFocus, NSFocus used to be the de facto operator of China's G.F.W., it was replace by another firm after a Taiwan spy issue. edit: http://jeffreycarr.blogspot.com/2011/06/18-days-from-0day-to-8k-rsa-attack.html http://jeffreycarr.blogspot.com/2011/06/18-days-from-0day-to...