News for hackers. Stuff that matters.

A comment on FBI Director: Sony’s ‘Sloppy’ North Korean Hackers Revealed Their IP Addresses. Parent comment

Re:FBI Director: Sony’s ‘Sloppy’ North Korean Hackers Reveal... by philip1209 on Wednesday January 07, 2015 @03:50PM (#8853221)
If somebody were to want to frame the North Koreans, what would stop a motivated attacker (perhaps a nationstate) from just abusing BGP to spoof source IPs? How hard would that be to detect, particularly if you controlled direct peers?
[ Parent | on HN ]
Re:FBI Director: Sony’s ‘Sloppy’ North Korean Hackers Reveal... by SwellJoe on Wednesday January 07, 2015 @03:58PM (#8853260)
As I understand it, China would be able to do so easily and convincingly, since most (all?) of NK's traffic passes through China. That may even be a good theory. China might not want to directly attack US industry in this way, but might "assist" North Korea in doing so.
[ Parent | on HN ]
Re:FBI Director: Sony’s ‘Sloppy’ North Korean Hackers Reveal... by dpeck on Wednesday January 07, 2015 @04:26PM (#8853414)
all, or at least all that anyone knows about. NK has a single path/peer.
[ Parent | on HN ]
Re:FBI Director: Sony’s ‘Sloppy’ North Korean Hackers Reveal... by mox1 on Wednesday January 07, 2015 @04:49PM (#8853526)
IF someone "route flapped" the entire North Korean IP space for any amount of time, one of the 10+ organizations who monitor BGP would have noticed and commented on that already.......

If Russia et al had the ability to covertly do that...why attack Sony....why not big financial institutions or other such high profile targets....

[ Parent | on HN ]
Re:FBI Director: Sony’s ‘Sloppy’ North Korean Hackers Reveal... by emn13 on Monday January 12, 2015 @07:40AM (#8873554)
No need to route flap if the route's already going through you.
[ Parent | on HN ]