4 ms·
I worry about how nonchalantly researchers attribute these campaigns. They never tell you their methodology for their attribution, but it's always the attributi
by AndyMcConachie 3y ago
I worry about how nonchalantly researchers attribute these campaigns. They never tell you their methodology for their attribution, but it's always the attribution that non-technical people pay the most attention to.
Look at this article for example. The first two words are the attributed actor. Yet there is absolutely no way to prove it. Attribution on the Internet is really, really, really difficult. We don't know how difficult it is because we have no independent method to determine when we're right or wrong. And we would be foolish to think that attribution is never politically motivated.
- throwaway374208 3y agoCitlab partners with various private data brokers to obtain commercial security intelligence, you'll see them referenced within their reports at times. Based on this, I generally assume that their attribution is accurate. However, if you take a step back and view it objectively, it appears quite hypocritical, given the privacy-invasive origins of this intelligence.