If you only work on your malware on weekdays, you might be a CIA hacker

Re:If you only work on your malware on weekdays, you might b... by Nadya on Tuesday April 11, 2017 @01:31PM (#14090378)

If every government entity can fake/scrub/modify time zones, how are time zones are a "tell" at all?

Let's say the US uses French time zones and France uses US eastern time zones. You've discovered malware that for whatever reason has time stamps for US Eastern.

Is it really from the US or is it from France? How would you deduce such a fact? I posit it would be better to see who the malware is targeting: entities may be averse to targeting their own countries.

[ Parent | on HN ]

Re:If you only work on your malware on weekdays, you might b... by r3bl on Tuesday April 11, 2017 @02:40PM (#14091081)

> Let's say the US uses French time zones

I know you're only using France as an example, but it's even more ridiculous when you consider that (mainland) France has one time zone (CE(S)T), which it shares with more than a dozen of other countries (central Europe + most of the western Europe + majority of Scandinavia + former Yugoslavia).

[ Parent | on HN ]