News for hackers. Stuff that matters.
Re:U.S. and key allies accuse China of Microsoft Exchange cy... by Leparamour on Monday July 19, 2021 @10:18AM (#27882879)
China is just the bogeyman of the hour. If it were more politically convenient to blame Russia or Iran you'd suddenly find the same evidence pointing a different way.
Re:U.S. and key allies accuse China of Microsoft Exchange cy... by enkid on Monday July 19, 2021 @10:25AM (#27882957)
Russia and Iran do cyberattacks all the time. We have good evidence of these attacks from many sources. Same with China. The idea that these attacks are just being made up or we don't have evidence who executed them is either willfully ignorant (a google search will provide plenty of evidence) or actively malicious.
Re:U.S. and key allies accuse China of Microsoft Exchange cy... by Leparamour on Monday July 19, 2021 @10:41AM (#27883155)
> The idea that these attacks are just being made up or we don't have evidence who executed them is either willfully ignorant (a google search will provide plenty of evidence) or actively malicious.

Tools to fake such attribution and evidence were literally part of the leaked NSA/Equation Group toolkit.

Re:U.S. and key allies accuse China of Microsoft Exchange cy... by boston_clone on Monday July 19, 2021 @11:12AM (#27883513)
and yet, we were able to accurately attribute the code released in that leak as being developed by NSA.
Re:U.S. and key allies accuse China of Microsoft Exchange cy... by sudosysgen on Monday July 19, 2021 @11:27AM (#27883688)
We know it was the NSA because of leaked NSA documents that admitted to the affiliation. Not from the tools themselves.
Re:U.S. and key allies accuse China of Microsoft Exchange cy... by boston_clone on Monday July 19, 2021 @12:08PM (#27884192)
Interesting; could you share your source on that?

I had only previously heard [0] that similarities in the tools were discovered by Kaspersky, not that there were any leaked docs that pointed the finger back at NSA themselves. Are you maybe thinking of PRISM/Wikileaks?

[0] - https://arstechnica.com/information-technology/2015/02/how-o...

Re:U.S. and key allies accuse China of Microsoft Exchange cy... by SpicyLemonZest on Monday July 19, 2021 @11:13AM (#27883528)
Sure, and we should be willing to entertain skepticism of specific incidents when justified. The idea that there's no such thing as real attribution, that it's always fabricated based on political convenience, is just unproductive nihilism.
Re:U.S. and key allies accuse China of Microsoft Exchange cy... by sudosysgen on Monday July 19, 2021 @11:28AM (#27883695)
There is such a thing as real attribution. Just not from IPs and tools that are easily faked. You need more than that, and indeed there were many cases were we got more than that.
Re:U.S. and key allies accuse China of Microsoft Exchange cy... by SpicyLemonZest on Monday July 19, 2021 @11:37AM (#27883793)
Agreed, but this seems to be one of the cases where we got more than that. I don't have time to read the indictment in a ton of depth, but it tells a very detailed story about some of the hackers and how they organized the hacking; it's not just "the IP matched so it's gotta be them".
Re:U.S. and key allies accuse China of Microsoft Exchange cy... by tablespoon on Monday July 19, 2021 @12:25PM (#27884408)
> There is such a thing as real attribution. Just not from IPs and tools that are easily faked. You need more than that, and indeed there were many cases were we got more than that.

And there are most likely a lot of cases where:

1) "...we got more than that," and...

2) ...data from "IPs and tools that are easily faked" is the only information that could be released publicly without compromising sources and methods.

It's a hopeless wish to want to be able to independently assess (as an amateur!) intelligence findings in all cases. If trusting the official assessments isn't acceptable (cross-checked with general knowledge of the situation), about the only reasonable alternative position is to remain agnostic.

Re:U.S. and key allies accuse China of Microsoft Exchange cy... by partiallypro on Monday July 19, 2021 @01:31PM (#27885177)
The CCP runs concentration camps and is actively perpetuating ethnic cleansing. That doesn't seem "of the hour." That ignores CCP doings for the past 30+ years that have cost millions of lives.
[dead]
[dead]
Re:U.S. and key allies accuse China of Microsoft Exchange cy... by ycombigator on Monday July 19, 2021 @11:04AM (#27883424)
It's also instituted a very oppressive social credit system and runs an enormous censorship apparatus that it will be increasingly able to turn outwards in the future.

Its really about their ability to destroy Western democracy - which is already happening.

Re:U.S. and key allies accuse China of Microsoft Exchange cy... by kube-system on Monday July 19, 2021 @10:58AM (#27883371)
It's more complicated than that. Few decisions, particularly ones regarding foreign policy, are made on single factors.
Re:U.S. and key allies accuse China of Microsoft Exchange cy... by hirako2000 on Monday July 19, 2021 @10:52AM (#27883282)
They would also stop big bunch of other things.
Re:U.S. and key allies accuse China of Microsoft Exchange cy... by pokot0 on Monday July 19, 2021 @10:52AM (#27883284)
The US has too many internal problem to be the world savior. Every time the US looks outside its border, it's for its sole selfish interests. Human rights enforcement around the world is (unfortunately) not something we can reasonaly expect from US. Also the U in US is extremely optimistic. Different states would act completely differently if allowed to.

The world need to look for a different hero: any proposal?

(For a good laugh, I reccomend watching the excellent "When the Yogurt took over" on Netflix)

Re:U.S. and key allies accuse China of Microsoft Exchange cy... by Robotbeat on Monday July 19, 2021 @11:44AM (#27883880)
Democracy, human rights, and self-determination as a concept should be the hero.