Hacker News new | past | comments | ask | show | jobs | submit login

The problem with these articles is the cloak and dagger nature of these stories and the lack of healthy skepticism.

While not necessarily the case here, every big tech company puts blame on an APT aka a nation state actor.

In fact, the very same FireEye attributed the Sony Pictures hack to North Korea on extremely flimsy grounds. By those same measures one could have implicated East Palo Alto High School.

You never regain your credibility for attribution and provenance once you have committed such a public blunder.

https://en.wikipedia.org/wiki/Sony_Pictures_hack#Doubts_abou...

It is the same as Crowdstrike going back on their wild claims while their CEO testified under oath.

https://www.realclearinvestigations.com/articles/2020/05/13/...

Is sworn testimony the only way we will get them to tell the truth?




Maybe you should try to gain a basic understanding of what you're talking about before posting this /pol/ conspiracy theory stuff?

There exists very little doubt that NK was behind the Sony hack, there's even a federal indictment.

>It is the same as Crowdstrike going back on their wild claims while their CEO testified under oath.

This is a complete fabrication by you, utterly unsupported by the link you shared which only contains meaningless bickering regarding forensic traces of data exfiltration.


Here is the congressional sworn testimony of Shawn Henry, the CEO of Crowdstrike, specifically saying that there is no concrete evidence of Russian hacking of the DNC.

https://intelligence.house.gov/uploadedfiles/sh21.pdf

You can peruse the whole pdf or jump straight to the money quote on page 32.

As for federal indictment on North Korea, that means nothing on the merits or dubiousness of the North Koreans hacking Sony. In fact, there was a smoking gun to a disgruntled ex employee. On a side note Sony and Sony entities were publicly hacked over 18 times prior to this as “revenge” for the PS lawsuit against the hacker who exposed encryption keys of the Playstation.

https://www.wired.com/2014/12/evidence-of-north-korea-hack-i...

https://en.wikipedia.org/wiki/Sony_Pictures_hack#Doubts_abou...

https://www.wired.com/2014/12/evidence-of-north-korea-hack-i...


>Here is the congressional sworn testimony of Shawn Henry, the CEO of Crowdstrike, specifically saying that there is no concrete evidence of Russian hacking of the DNC.

It feels like you're being deliberately dishonest. Your "money quote" is about whether there were was concrete evidence of the hackers exfiltrating data from the DNC, not about "Russian hacking of the DNC" .

What Shawn Henry is saying there is that they have evidence of the hackers preparing data for exfiltration, but no concrete evidence of the data being transferred out. Unless the malware used by the hackers stores detailed logs, this is to be expected. It would be unreasonable to doubt that the exfiltration happened on this basis.

>In fact, there was a smoking gun to a disgruntled ex employee

There wasn't. None of your links substantiate this claim.

The wikipedia section consists of uninformed clowns like Sabu and hilarious quotes like "State-sponsored attackers don't create cool names for themselves like 'Guardians of Peace' and promote their activity to the public.". There's no genuine attempt at convincing criticism of the NK attribution to be found here.

>As for federal indictment on North Korea, that means nothing on the merits or dubiousness of the North Koreans hacking Sony

The federal government has a pretty good track record of getting these things right. The DOJ certainly believes that NK did the Sony hack.


I have respect for Kim Zetter, but in a hard-core discussion about who hacked Sony, I'm going to tend more to believe FireEye.

> ... FireEye attributed the Sony Pictures hack to North Korea on extremely flimsy grounds.

What grounds are flimsy that they used? Do you have details about what FireEye actually saw?


> The U.S. Department of Justice issued formal charges related to the Sony hack on North Korean citizen Park Jin-hyok on September 6, 2018. ... The Department of Justice had previously identified Park and had been monitoring him for some time, but could not indict him immediately as much of the information around him was classified.




Consider applying for YC's W25 batch! Applications are open till Nov 12.

Guidelines | FAQ | Lists | API | Security | Legal | Apply to YC | Contact

Search: