3 ms·
Cloudflare Hacked by Suspected State-Sponsored Threat Actor
- deleted 3y ago[deleted]
- Jtsummers 3y agohttps://news.ycombinator.com/item?id=39220528 https://news.ycombinator.com/item?id=39220528 - This seems to be a restatement/summary of the official writeup they put out a few days ago.
- jgrahamc 3y agoYes. There's nothing more in that article than what we said in the blog.
- dazc 3y agoLook again... 'Cloudflare Hacked by Suspected State-Sponsored Threat Actor' ___Security Week 'Thanksgiving 2023 security incident' ___Cloudflare
- jgrahamc 3y agoOne is the title of the blog post (which I was heavily involved in writing), the other is a title of a news article that summarizes the blog post.
- progbits 3y agoYou are replying to one of the authors of the original report...
- infinitecost 3y agoI reckon the implication is that the titles are different in a way that changes the flavor of the report substantially.
- dazc 3y agoI know, I was pointing out the alarming difference in choice of title.
- jgrahamc 3y agoCovered pretty extensively on Thursday when we blogged about it: https://news.ycombinator.com/item?id=39220528 https://news.ycombinator.com/item?id=39220528 Original blog is here: https://blog.cloudflare.com/thanksgiving-2023-security-incident/ https://blog.cloudflare.com/thanksgiving-2023-security-incid...
- dboreham 3y agoThreat actor is the new term for hacker.
- rvnx 3y agoand "nation-state" is the new "sophisticated sql injection"
- progbits 3y agoIt's always state sponsored: https://youtu.be/UawS3_iuHoA?t=378 https://youtu.be/UawS3_iuHoA?t=378
- steve_rambo 3y agoWhy not, maybe we can get the original meaning of the term hacker back at some point.
- wslh 3y agoA hacker is an individual or a hacker group. When a state is involved we can think more about the typical work of intelligence agencies and/or cyberwar.
- MattPalmer1086 3y agoThreat actor is a more generic term that covers all kinds of attackers. For example, it could be an insider who exploits existing privileges (no hacking involved). Or it could refer to a nation state or organised crime (not an individual).
- axpy906 3y agoWhat country? Article does not say.
- nonrandomstring 3y agoOne of the things that troubled me most in the vault 7 was the "attribution engineering toolkit". Some sophisticated stuff goes into not just crafting function, but what something looks like I am always sceptical... no, quite cynical, when a few days or hours after an incident someone pops up and says "It was the <Russians/Koreans/Chinese>" Perhaps one of the most potent payloads in some hacks, perhaps even the overarching motive, is to pin the action on someone or something. It raises the question, how much that really matters.