Re:Cyberattack forces US health care network to divert ambul...
by holonsphere on Sunday May 12, 2024 @10:47PM
(#40339367)
The problem isnt attribution. NSA cybersecurity professionals are groomed before theyre even in the agency. First at their respective governor's school, then through college, and then throughout their career once theyve been picked up.
Genius is a tightly controlled commodity.
The problem in my eyes is recognition.
I believe the US government has the ability to stop these attacks but instead chooses not to up until a certain point. You learn a lot running honeypots and attacking every machine in existence when you run with a community.
The US has been stockpiling "weaponized" software payloads for over two decades. Defensive actions would only serve as an opportunity for foreign actors to improve their own skills as well as highlight where our actual strengths/weaknesses might be.
It seems to me like the culture at most 3 letter agencies is one where theyre content to watch the world/country burn for as long as certain "red lines" arent crossed.
https://www.reuters.com/article/idUSTRE7AF02Y/
The problem is attribution. If a cyber attack is traced to an IP address in Russia it's almost impossible to know for certain that it was really sponsored by the Russian government. It could have been some random kid in Australia who pwned a vulnerable computer in Russia and used it to launch an attack for the lulz.
Since deterrence is ineffective for cyber defense we need to put our focus into hardening critical systems.