3 ms·

"Taking a look at these addresses we find that all but one of them are public proxies." I think this is a very key point for another reason. If this was perpe

"Taking a look at these addresses we find that all but one of them are public proxies." I think this is a very key point for another reason. If this was perpetrated by North Korea, why would they use an anonymizing proxy in the first place? What would be the point? Have we ever known North Korea to not crave media attention? If they were behind the attack wouldn't they want the world to know? If it was North Korea then why are they suddenly trying to stay out of a spotlight they've never avoided before? Retribution? Doubtful.

fleitz 12y ago
Umm... North Korea tries to avoid media attention all the time, phone up the consulate and ask for a VISA to roam around the country taking pictures, this is why they call it the hermit kingdom. What NK tries to do is control the media. Also, when they are successful at avoiding media attention you don't hear about it, so you have selection bias based on their regular outlandish threats that DO get media attention.
marak830 12y ago
While i doubt it was NK, if they didnt mask their ip, then everyone would just block that range(i heard they only have a few, although im not 100% certain).
tsotha 12y ago
>I think this is a very key point for another reason. If this was perpetrated by North Korea, why would they use an anonymizing proxy in the first place? What would be the point? Have we ever known North Korea to not crave media attention? Yes. When they do something provocative they try to maintain plausible deniability, because otherwise the target of the provocation would have to do something. The best example is the sinking of the Cheonan. Everyone knew it was the Norks, but they played coy because otherwise South Korea would have been forced to respond. Probably by sinking the North Korean navy. Also, if the cyber attack was DPRK, it was likely carried out by the unit that does espionage, and for a unit like that proxies are just standard procedure. All that said, I'm skeptical that it actually was North Korea. They do have this kind of capability, but they tend to use it for more concrete gains, like uncovering spies and stealing technology. A big in-your-face attack on a company like this is out of character for a regime that wants to retain its cyberwar capability for clandestine uses.

fleitz 12y ago

Umm... North Korea tries to avoid media attention all the time, phone up the consulate and ask for a VISA to roam around the country taking pictures, this is why they call it the hermit kingdom. What NK tries to do is control the media. Also, when they are successful at avoiding media attention you don't hear about it, so you have selection bias based on their regular outlandish threats that DO get media attention.

marak830 12y ago

While i doubt it was NK, if they didnt mask their ip, then everyone would just block that range(i heard they only have a few, although im not 100% certain).

tsotha 12y ago

>I think this is a very key point for another reason. If this was perpetrated by North Korea, why would they use an anonymizing proxy in the first place? What would be the point? Have we ever known North Korea to not crave media attention? Yes. When they do something provocative they try to maintain plausible deniability, because otherwise the target of the provocation would have to do something. The best example is the sinking of the Cheonan. Everyone knew it was the Norks, but they played coy because otherwise South Korea would have been forced to respond. Probably by sinking the North Korean navy. Also, if the cyber attack was DPRK, it was likely carried out by the unit that does espionage, and for a unit like that proxies are just standard procedure. All that said, I'm skeptical that it actually was North Korea. They do have this kind of capability, but they tend to use it for more concrete gains, like uncovering spies and stealing technology. A big in-your-face attack on a company like this is out of character for a regime that wants to retain its cyberwar capability for clandestine uses.