n_huffhines
What's it gonna cost?
- Joined
- Mar 11, 2009
- Messages
- 91,051
- Likes
- 55,221
What if the U.S. determined that this attack (or one like it) came from a Chinese office complex? What should the response be? Is it a criminal matter?
What if the U.S. determined that this attack (or one like it) came from a Chinese office complex? What should the response be? Is it a criminal matter?
The hackers behind a devastating cyberattack at Sony Pictures have sent a new message to executives at the company, crediting them for a "very wise" decision to cancel the Christmas day release of "The Interview," a source close to the company told CNN.
The email message was received by Sony's top executives on Thursday night and was obtained by CNN.
There was a fellow on Fox this morning making a pretty convincing case that the evidence is extremely thin that it was North Korea. Apparently, the only basis for that is a "call back" script within the malware that told it to send data to an IP address in North Korea. But this guy explained that it could just be part of the malware, which had been used before. It doesn't mean it came from there and in fact there are many instances where there are multiple call back scripts in the same malware, to different places.
He said given the volume and type of information taken, he is very skeptical that it was done by someone solely outside Sony, that it has all the earmarks of an inside job, perhaps a disgruntled employee. Someone familiar with their system and its contents, and who has basically committed the crime and left a note from someone else taking the blame/credit.
Now, let me also play devil's advocate here on the notion that whoever did this might well have done us an enormous favor. Consider:
1) This incident has brought the issue to the fore. There is now discussion about making available to business some of the more advanced government techniques to defend against cyber attacks. Though the issue has been talked about before, we have a concrete example and that might make everyone more careful.
2) We're out one movie. Not a nuclear power plant or air traffic control, or the nation's banking system. And apparently, according to the critics who did see it, we are out one pretty bad movie.
Just saying, if the issue is going to go to the top of the list of things for us to deal with, maybe this wasn't such a bad way to get it there. There could be worse.
There was a fellow on Fox this morning making a pretty convincing case that the evidence is extremely thin that it was North Korea. Apparently, the only basis for that is a "call back" script within the malware that told it to send data to an IP address in North Korea. But this guy explained that it could just be part of the malware, which had been used before. It doesn't mean it came from there and in fact there are many instances where there are multiple call back scripts in the same malware, to different places.
He said given the volume and type of information taken, he is very skeptical that it was done by someone solely outside Sony, that it has all the earmarks of an inside job, perhaps a disgruntled employee. Someone familiar with their system and its contents, and who has basically committed the crime and left a note from someone else taking the blame/credit.
Now, let me also play devil's advocate here on the notion that whoever did this might well have done us an enormous favor. Consider:
1) This incident has brought the issue to the fore. There is now discussion about making available to business some of the more advanced government techniques to defend against cyber attacks. Though the issue has been talked about before, we have a concrete example and that might make everyone more careful.
2) We're out one movie. Not a nuclear power plant or air traffic control, or the nation's banking system. And apparently, according to the critics who did see it, we are out one pretty bad movie.
Just saying, if the issue is going to go to the top of the list of things for us to deal with, maybe this wasn't such a bad way to get it there. There could be worse.
And apparently, according to the critics who did see it, we are out one pretty bad movie
Why haven't they ID'ed the hackers?