On Feb 20, 2013, at 9:07 PM, Steven Bellovin <s...@cs.columbia.edu> wrote:
> > On Feb 20, 2013, at 1:33 PM, valdis.kletni...@vt.edu wrote: > >> On Wed, 20 Feb 2013 15:39:42 +0900, Randy Bush said: >>> boys and girls, all the cyber-capable countries are cyber-culpable. you >>> can bet that they are all snooping and attacking eachother, the united >>> states no less than the rest. news at eleven. >> >> The scary part is that so many things got hacked by a bunch of people >> who made the totally noob mistake of launching all their attacks from >> the same place.... > > > This strongly suggests that it's not their A-team, for whatever value of > "their" you prefer. (My favorite mistake was some of them updating their > Facebook pages when their work took them outside the Great Firewall.) They > just don't show much in the way of good operational security. Mandiant apparently feels the same way: http://www.forbes.com/sites/andygreenberg/2013/02/21/the-shanghai-army-unit-that-hacked-115-u-s-targets-likely-wasnt-even-chinas-a-team/ --Steve Bellovin, https://www.cs.columbia.edu/~smb