News for hackers. Stuff that matters.

A comment on Why the Sony hack is unlikely to be the work of North Korea.

Re:Why the Sony hack is unlikely to be the work of North Korea by kbart on Thursday December 18, 2014 @07:15AM (#8766914)
At last some sane analysis that doesn't involve "terorists" or similar bullshit. Though I find 5 ("The attackers only latched onto “The Interview” after the media did – the film was never mentioned by GOP right at the start of their campaign. It was only after a few people started speculating in the media that this and the communication from DPRK “might be linked” that suddenly it became linked. ") contradicting to 2 ("<...> the code was written on a PC with Korean locale & language"). Anyway, I would bet my money on the insider too -- the low sophistication level of malware combined with excessive knowledge of internal infrastructure speaks for itself.
[ Parent | on HN ]
Re:Why the Sony hack is unlikely to be the work of North Korea by KaiserPro on Thursday December 18, 2014 @07:52AM (#8767011)
https://www.riskbasedsecurity.com/2014/12/a-breakdown-and-an... < for me is the canonical source of news.
[ Parent | on HN ]
Re:Why the Sony hack is unlikely to be the work of North Korea by Jgrubb on Thursday December 18, 2014 @07:22AM (#8766928)
> 2. The fact that the code was written on a PC with Korean locale & language actually makes it less likely to be North Korea.

> Lets not forget also that it is trivial to change the language/locale of a computer before compiling code on it.

[ Parent | on HN ]
Re:Why the Sony hack is unlikely to be the work of North Korea by ErrantX on Thursday December 18, 2014 @07:27AM (#8766942)
What kbart means is; if the DRPK/Korea link came later this flies against the fact that before anything else it was compiled on a PC with Korean locale.
[ Parent | on HN ]
Re:Why the Sony hack is unlikely to be the work of North Korea by pionar on Thursday December 18, 2014 @08:50AM (#8767167)
That still doesn't present a contradiction. The post says that they didn't latch on to "The Interview" until after the media linked it. That doesn't mean they weren't doing things to make people think it was coming from Korea.
[ Parent | on HN ]
Re:Why the Sony hack is unlikely to be the work of North Korea by thekingofspain on Thursday December 18, 2014 @10:30AM (#8767667)
Yeah, especially because the Korean link was probably what started the "The Interview" saga. Not really a contradiction.
[ Parent | on HN ]
Re:Why the Sony hack is unlikely to be the work of North Korea by alexanderh on Thursday December 18, 2014 @07:50AM (#8767007)
Could have been an inside job, but I wouldn't dismiss the possibility of some kind of extreme social engineering, where an outsider gained trust and was able to glean a lot of the information you mention through non-technical means.
[ Parent | on HN ]