4 ms·
I might be naive but I still don't see a smoking gun. I realize in these situations it is hard to dig up unassailable evidence one way or the other. The autho
by jhou2 12y ago
I might be naive but I still don't see a smoking gun. I realize in these situations it is hard to dig up unassailable evidence one way or the other. The author seems to be making the assumption that the only party that would be interested in intelligence on joint US-South Korea military exercises would be North Korea. I would imagine that China, Russia and Japan might be interested as well. Disrupting South Korean banks could just as easily be the work of Chinese or South Korean hackers, right? I see a correlation, but not necessarily a causation.
- lern_too_spel 12y agoDisagree. If it were Chinese government hackers, the connections to the control servers would bear a similarity to the Aurora hack. Instead, the ROK and Sony hacks' control signatures look similar to each other and not to other known state-backed hacks. Additionally, the Korean locale would make no sense for a Russian hacker. There's no smoking gun revealed publicly, but the preponderance of available evidence points to the DPRK.
- AlyssaRowan 12y agoHave you analysed the malware? I didn't think they looked that similar, internally. The Korean locale is in the (public) rawdisk driver.
- mistermumble 12y agoAgree. The article's main argument is that the Sony attack is similar to one that happened last year -- but provides zero proof that the previous attack came from North Korea. And a key similarity between the two, according to the article, is the graphics left behind by the hackers: lime-green type on black background, with pictures of skulls. In other words, similar to a ton of hacker sites. A smokin' JPG is not a smoking gun. jwz called from 1999, he wants his color scheme back.