10 ms·
The public /22 (1024 IPs) that is used by North Korea is widely known now, so it is bad form to assume the US is behind this attack. Heck, a 14 year old with a
by eyeareque 12y ago
The public /22 (1024 IPs) that is used by North Korea is widely known now, so it is bad form to assume the US is behind this attack. Heck, a 14 year old with a few bots could take down their whole country.
This outage won't hurt North Korea. At best it makes for a good head line to see the whole country offline. At worst this means that their elite citizens cannot access social networks or email outside of their country.
I really hope this isn't the doing's of the US government. You'd hope they could do better than this..
- unreal37 12y agoMost likely it's some 14 year old with a small bot network. Or they decided to unplug their router for a week or two to have a bit of a Christmas break from the hassle of maintaining it, since it doesn't harm them in any way.
- dev1n 12y agoIn support of the idea that it was in fact a 14 year old and not a nation this [1] was posted a few days ago on HN. [1]: https://news.ycombinator.com/item?id=8777226 https://news.ycombinator.com/item?id=8777226 edit: I do not mean that what the person who created that website is a 14 year old as it is a very thorough analysis. Just that with this type of information on the internet it is probably pretty easy to construct a bunch of bots to take out the country's connections to the outside world.
- raimondious 12y agoAlso, https://news.ycombinator.com/item?id=8777811 https://news.ycombinator.com/item?id=8777811
- sd8f9iu 12y agoI hope so too, and I doubt the US government's response will be cyber-warfare related. There's not much they can do in the first place, and it would be a petty tit-for-tat reprimand.
- digikata 12y agoOr this could be some kind of reverse false flag operation (a soccer flop?) to give NK a platform to escalate some other negotiation point...
- duaneb 12y agoOr it could be an actual false flag operation by the US to instigate something.... Something is very weird about their attitude towards north korea regarding this break in.
- krapp 12y agoThe US is not going to go to War with North Korea. So I don't know what they could 'instigate' that would be worth this much effort.
- politician 12y agoTechnically speaking, that's correct, one cannot begin something that is already ongoing.
- krapp 12y agoOops. Not going to go even more to war, then.
- cbd1984 12y agoYou know, it can't be a false flag until there's actually a flag. Has anyone claimed responsibility for doing this yet?
- kendallpark 12y agoI'd really like to know how the U.S. "knows" North Korea is responsible for the attack on Sony and if there's any credible link from U.S. government to this attack of North Korea. Goodness. It could be the same organization behind both. Instigation.
- otterley 12y agoThe FBI's summary analysis is here: http://www.fbi.gov/news/pressrel/press-releases/update-on-sony-investigation http://www.fbi.gov/news/pressrel/press-releases/update-on-so...
- skepxx 12y agoThere's certainly some missing evidence in the FBI report. Regarding the IP's used, please have a read here: http://krypt3ia.wordpress.com/2014/12/20/fauxtribution/ http://krypt3ia.wordpress.com/2014/12/20/fauxtribution/
- stevenrace 12y agoFWIW the CERT ('US Computer Emergency Readiness Team') report on the 19th [1] delves a bit deeper into the exploit methods. If you search for the MD5 hashes of the code you can find code snippets and incidents where such code was used in the past (hacking attempts at DHS, etc). Even though none of these were '0-days' or written by those with ties to NK, the attribution seems to be based on such code reuse. [1] https://www.us-cert.gov/ncas/alerts/TA14-353A https://www.us-cert.gov/ncas/alerts/TA14-353A
- foobarqux 12y agoThere is essentially no useful information in that summary which could be used to draw independent conclusions.
- onewaystreet 12y agoA) The NSA told them. B) The CIA told them. Pick one.
- Thaxll 12y agoYou really think that NK has only a /22? Obviously they have some Chinese blocks routed to them.
- eyeareque 12y agoBased on information here: http://nknetobserver.github.io/ http://nknetobserver.github.io/
- ErikRogneby 12y agoThat was a good read, thank you! If they are running Cisco up front I wonder it's possible their network was brought down by a zero-day exploit that only uncle sam knows about? (vs. a more mundate DDoS?)
- bilbo0s 12y ago"...Obviously they have some Chinese blocks routed to them..." Well not to put too fine a point on it... but if you are reliant on the Chinese... that's the same thing as not having blocks.
- s_q_b 12y agoWhat we could be seeing could be a very small part of a much larger operation. We could have bricked or infected their entire infrastructure (quite literally), and then DDoS'd it off the internet to: 1. Give the world a visible sign of response. 2. Perhaps trick the DPRK into believing this was the USA et al.'s real move.
- snowwrestler 12y agoCompared to the very real, physical threat to South Korea, the fate of a movie company is small potatoes to the U.S. government. What the U.S. needs most from North Korea is information; they're not going to burn exploits and vulnerabilities for a simple DDOS. If anything, they want North Korea to be more online, where it's easier for the NSA to collect information.