North Korea, Denying Sony Attack, Proposes Joint Investigation With U.S.

http://www.nytimes.com/2014/12/21/world/asia/north-korea-denying-sony-attack-proposes-joint-investigation-with-us.html

by fivedogit • 12 years ago

91 149 12 years ago

I've said this elsewhere, but if this whole thing was perpetrated by the North Korean state because of the potential offence to North Korea from showing their leader being killed, why has the scene of their leader being killed been leaked by the hackers supposedly controlled by North Korea and is now posted all over reddit?

cordite• 12 years ago

Was that scene actually leaked by them, or someone upset that their movie didn't get released?

joelrunyon5• 12 years ago

I'm sure if the latter was the case, the whole movie would have been out by now...

lotsofmangos4• 12 years ago

Fair point. From what I have read, it was one of the attachments in the leaked email dump.

kristofferR• 12 years ago

It was just a link in one of the thousands of emails they leaked, so I doubt it was intentionally leaked.

blueflow• 12 years ago

I have some trust issues on that topics, it wouldn't be the first time they made something up.

And its just in time to distract from the CIA report.

joelrunyon5• 12 years ago

It's a little sad that we're having a bigger discussion about a movie than we are about torture. Priorities eh?

onewaystreet4• 12 years ago

We've had that discussion for the last 8 years. What's more to say?

Natsu2• 12 years ago

I don't trust NK at all, but the whole operation doesn't seem like them, it seemed more like some trolls were operating it. I'm not sure NK even has the computer skills to pull it off, for that matter.

But... ultimately that's just how I feel about it. I don't think there's been any truly conclusive evidence one way or another, just people trying to make sense of what is known.

cellis• 12 years ago

  >> I'm not sure NK even has the computer skills to pull it off, for that matter

Ugh, it pains me to see people get this so wrong. Let me state this as plainly as possible: when you're attacked by a state, whatever encryption or security you have in place doesn't matter. They'll go after your weakest link, and exploit that until they have access to whoever controls your security infrastructure. It could be as simple as bribing an Ops guy, or it could be as complex as planting a spy, or secretly threatening someone with access. Once you're up against a state, all bets are off.

onewaystreet4• 12 years ago

There is no need to distract from the CIA report because nothing was ever going to come from it. The DOJ has already said there would be no prosecutions. And there is no outcry from the public for any (besides from the progressive left).

joelrunyon5• 12 years ago

A few questions:

1. Does NK even have the capability to pull something like this off? They seemingly fail at every other intimidation stunt they pull off & now they have a massive success out of nowhere? Hm...

2. Why would they deny it if they did it? It's very out of character for them to not pounce on the chance of something being very embarrassing to the US.

3. With all the talk of it being so complicated to pinpoint exactly where the attacks came from, what info is the US gov using to pin this on NK (besides the very easy narrative around the context of the movie). They have to have a bit more intel than they're letting on...or something is fishy here.

joelrunyon5• 12 years ago

Adding to this, I really hope this isn't the digital version of WMDs-in-Iran-type-event where we make up convenient excuses to intervene in countries that are somewhat problematic.

hokkos• 12 years ago

The USA won't intervene in a country with nuclear weapons and a few kilometers from Seoul for crime without physical damages. NK won't hacknowledge it because they want to appear as a victim in every way possible.

indrax• 12 years ago

This isn't a good enough excuse to intervene.

North Korea routinely provides much better reasons to intervene.

acaloiar2• 12 years ago

RE (1.): To imply that North Korea does not have the capability of pulling this off is to imply that the country is bereft of single human being with access to an Internet-connected computer.

With that said--whether or not they were involved is entirely up for debate.

joelrunyon5• 12 years ago

is to imply that the country is bereft of single human being with access to an Internet-connected computer.

Having access to the internet doesn't mean you can automatically hack a multi-billion dollar company.

freditup• 12 years ago

A few quick answers:

1) Yes, probably. They have some sort of a cyber military organization, and it wouldn't even have to be _that_ sophisticated to pull this off. In brief see http://www.telegraph.co.uk/news/worldnews/asia/northkorea/11...

2) They're afraid of the repercussions given the massive public reaction to the hack. This isn't a fully persuasive line of reasoning, but it seems like a possibility.

3) You can see some of the evidence explained here: http://www.fbi.gov/news/pressrel/press-releases/update-on-so...

crdoconnor15• 12 years ago

They're afraid of the repercussions

There would be no repercussions for NK admitting that they did it.

endou2• 12 years ago

About 1. it was the subject of the following Phrack's publication: http://phrack.org/issues/68/19.html#article

dba7dba• 12 years ago

NK does have the ability.

Few things to remember: 1. The instruments of dictatorship is working well. They are not bunch of idiots. They outlasted the Soviets! 2. NK launched a medium range ballistic missile. It was a rather crud one (basically bolted together from parts from multiple missiles). NK may be poor and a backward country but they did build and launch the rocket(although it broke up in mid flight). How many nations have actually launched rockets as NK did? 3. We all know 'hacking' isn't some rocket science. It can be done by any reasonably intelligent person with a lot of time on their hands. And NK obviously has reasonably intelligent people who have the aptitude for programming/coding/hacking with a lot of time on their hands.

NK's only internet connection is via link through China. But I can also see NK posting hacker-soldiers in China too.

tptacek2• 12 years ago

Of course they have the capability. The North Korean government has billions of dollars to throw at any project they come up with. The breakin at Sony, sourced commercially in the US, might have cost mid-six-figures.

gaius2• 12 years ago

The don't have billions to spend on a whim - that's America you're thinking of.

brown9-22• 12 years ago

You are asking if a country that has the capability of producing nuclear weapons (albeit a small, simple stockpile) has the capability to hack an insecure company.

jdawg772• 12 years ago

When was the last time most, if not all, of the community here hung out with a guy or gal from the Foreign Service? Or better yet a member of the State Department of the USA?

Or the equivalent in their home country; that's just as well, given that the people I've met all over the world who work in their country's foreign service department are generally good people.

If you haven't seen, "A Beautiful Mind," it's a great film and the math literally helps explain why North Korea, despite evidence, might be a, "Sock puppet," used by...well, let's see.

What country is having a really, really crappy time with economic sanctions right now?

Maybe, just maybe, a bit of experience at interacting with the folks who (gasp) make these kinds of decisions would make the whole situation easier to explain. Or if most of us simply revisit kindergarten in the US, eg, the game of, "Tag." Remember how to claim a cookie that you're not supposed to eat?

Touch it. "If I touch it, I own it," because nobody wants to eat the cookie you touched after you liked your finger, right? So, Russia perhaps, "Licks their finger," tunnels through, and then when we discover the breach, "Look, it's the North Koreans!"

If not them, I'd say Luxembourg is behind it all. We know most American companies that have operations overseas use them to launder (I mean, mitigate) tax burdens in Europe, right?

jdawg772• 12 years ago

-3, impressed.

Okay, I met the former ambassador to Sri Lanka and had tea with snacks when we hung out. Present was a Vice President of the country I lived in - great guy.

I can't confirm nor deny, because I don't know, the exact status and titles of the various members of the legislature I met while overseas because, frankly, it wasn't my intent to keep a log then post it publicly.

To whit, I've also been listed as a reference for a prosecutor who became a judge in California. However, none of this should be needed to, "Trot out," in a response about foreign politics, which I have ample experience in personally through multiple visits to many countries.

Thanks, though, for deflating my karma count - I need to remember, I'm sharing here because it's fun, not because I'm winning a game. ;)

exabrial• 12 years ago

I think there are more important things to worry about...

UhUhUhUh• 12 years ago

This whole deal really looks like a chess move (and a pretty good one too) more than a pissed-off reaction. This feels Russian to me.

splike• 12 years ago

I find this whole thing really weird, and I suspect sites like reddit are being manipulated by someone.

Lets the timeline right

1. North Korea makes its disapproval of The Interview public and complains to the UN in the summer of this year

2. Sony is hacked and passwords are leaked. The passwords are the focus of the story

3. A couple of days go by, no mention of North Korea or The Interview

3.5 I've gotta be missing something here

4. Theaters (not Sony directly) decide the pull The Interview because of threats from NK

5. FBI blames NK for sony hack

6. Obama gets involved (?????)

The sequence of events just makes no sense. Then there are sites like reddit that are completely consumed by the story. The number of posts about it is insane, and there is little skepticism about the bizarre sequence of events or the blaming of NK.

spacefight• 12 years ago

Of course sites like reddit are being manipulated.

http://www.theguardian.com/uk-news/2014/jul/14/gchq-tools-ma...

whiterabbit• 12 years ago

3.5 The Senate Intelligence Committee releases the CIA torture report.

Bahamut• 12 years ago

It appears to be political chess - it's mostly of relevance to nation states. I don't believe that there is much for us to grok right now except for us to follow the news that comes out.

digi_owl2• 12 years ago

Maybe i should check closer, but i never got the impression that NK was behind the threats that made theaters pull The Interview.

As best i understand they were "just" online threats, but came in the wake of similar threats to Sony employees and their families.

At this point in time i think there is a subset of internet trolls that get their "lulz" from finding some high profile controversial topic and throwing random threats at whoever is involved.

lotsofmangos4• 12 years ago

One thing to consider is that it is entirely possible that whoever did the hack is scratching their heads right now and wondering who threatened the cinemas.

baddox• 12 years ago

Every article I have seen claims that the threatening emails were sent by the same hackers, although I haven't seen any reasoning behind this claim. Two examples:

http://www.theverge.com/2014/12/16/7402649/sony-hackers-thre...

http://abcnews.go.com/Entertainment/theaters-now-pull-team-a...

sebastianavina• 12 years ago

it seems like a excuse for starting the war... maybe that's why NK is cowardly saying "not me, not me, seriously guys!"

efuquen2• 12 years ago

you seriously think the US is looking for a war with NK?

onewaystreet4• 12 years ago

The threats came from the hackers (they included unreleased Sony data). If you think the hackers are/working for NK then you can say "threats from NK."

smtddr• 12 years ago

3 & 3.5.

- The media mentioned that this hack might be NK because of TheInterview.

- A spokesperson from NK replied "Wait and see" http://www.bbc.com/news/world-asia-30283573

- Another email from #GOP came out saying not to show TheInterview

- NK starts denying involvement.

- Yet another email comes out citing 9/11 and everyone gets scared.

4.5, SONY pulls the movie entirely after 4 or 5 major theaters decide to pull it.... after SONY let them out of their contractual agreement and said, in effect, "You do what you feel is right"

pXMzR2A• 12 years ago

3.5 I've gotta be missing something here

The Senate report on CIA torture is what you're missing.

disputin• 12 years ago

Yeah, call me a conspiraloon, but the people who have the most to gain from this are the US gov.

kolev• 12 years ago

You forgot to mention the "warming" of US-Cuba relations and the deepening of Russia sanctions and the fact that Putin invited Kim Jong-un to visit Russia [0]. It is so obvious that Obama is trying to press Russia into a corner and that corner seems to be the Far East. We have a fully-blown Cold War 2.0 scenario going on, I guess, the military complex didn't like the idea of Russia not being an enemy anymore and small threats like ISIS don't justify the huge military budget, so, we're going back to the convenient for some Cold War, unfortunately. The more enemies, the better.

[0] http://www.smh.com.au/world/vladimir-putin-invites-north-kor...

blazespin2• 12 years ago

The Russians or NK could have secretly hired Chinese hackers to make it look like NK. Now they can embarrass the U.S. for jumping the gun like they did in Iraq and weapons of mass destruction (assuming the connection can not be proved).

hooo• 12 years ago

If NK did hack them, a joint investigation would be great as they'd learn what techniques the US used to identify NK.

krick2• 12 years ago

Literally every day now I run across something mentioning "Sony hack", but haven't understood yet why it's so significant topic. It seems to gather way more attention than I imagine something like this should. Every now and then somebody gets "hacked", sometimes it's somebody pretty big, it's not that uncommon that some really important data gets leaked, but it never goes further than mentioning it on HN or something, no jokes about it on 9gag, no North Koreas joining investigation. What's the matter?

Maybe it's because I missed original news. Can somebody provide link or explanation why the heck it's so important that even completely non-technical people buzz about it all the time?

falcolas• 12 years ago

In my opinion, it's mostly about the scope of the hack, and the studio's reaction.

The amount of data compromised is unparalleled in any other previously reported hack, and the response by Sony (canceling the distribution of a movie) is also unprecedented.

blazespin2• 12 years ago

Because free speech is a constitutional right now being impugned by a bunch of hackers or a tiny country. The U.S. looks completely powerless in the face of it.

eli3• 12 years ago

The free speech angle always seemed like a stretch. Isn't Sony free to release or not release movies as they see fit?

thecatsass• 12 years ago

I agree that the U.S looks weak during this whole thing but how is this an issue of freedom of speech? A company chose to pull its product due to a threat, the government didn't force them to pull it or anything, it's their own choice. If you publish a controversial book and get threatened because of it and choose to pull it, it's not a freedom of speech issue because you are pulling your own book (or not pulling it).

onewaystreet4• 12 years ago

US isn't powerless, it's just a matter of the will to act. If everyone agreed that NK should be destroyed (such would be the case if they were stupid enough to launch a nuclear attack against someone, for example), it would be. Hacking Sony doesn't reach that level of retaliation.

yincrash• 12 years ago

Because it exposed the interpersonal dealings of people who work at Sony. Whether it's that Trebek sometimes gets mad when asked to deal with unreasonable people, or that execs sometimes say really terrible things about people when they think the email is only between the two of them, or the future of companies that Sony execs are board members of (such as Snapchat) where there is lots of confidential information being discussed about the future of Snapchat and where it believes the current status of messaging lies.

robertszkutak• 12 years ago

"While some computer experts still express doubts whether the North was actually behind the attack, American officials said it was similar to what was believed to be a North Korean cyberattack last year on South Korean banks and broadcasters. One key similarity was the fact that the hackers erased data from the computers, something many cyberthieves do not do."

I won't pretend to be an expert on information security but surely this isn't anywhere close to being unique enough to point blame at North Korea?

eli3• 12 years ago

My understanding is that the code for the module that securely deletes files is unusual and nearly identical.

But I share some of your skepticism.

Mobiu52• 12 years ago

Am I mistaken, or did the "hacker group" only mention The Interview AFTER the media proposed the connection? It seems like whoever hacked sony (edit: or somebody else!) just took advantage of an opportunity to cause some chaos. And the whole "FBI confirms NK" thing seems shady. None of this quite adds up.

cyorir• 12 years ago

Would North Korea even have an interest in attacking a company like Sony Pictures in this way? Normally, when a nation-state goes for a cyber attack, they go after useful targets. For example, they go after a government to get an upper hand in negotiations, or maybe they go after industry or academia, to secure knowledge about some helpful technology. Sony pictures would not be a canonical target for a nation-state, because they really don't have much to offer a state like North Korea (it's not like this attack will help the struggling North Korea film industry). In contrast, there would be more for North Korea to lose if the US retaliates.

I can't quite understand the allegation that NK is behind this because I don't see a motive.

Mobiu52• 12 years ago

I don't think NK did it, but a nation-state, just like any other entity driven by self-interest, would go after ANYTHING they felt would give them an advantage. Including actions they can use to sway public opinion in their favor (or against the favor of their enemies) or garner sympathy for themselves.

a3n3• 12 years ago

I don't know or suspect whether NK did it or not. But from what I've read about NK, it's risky to use logic to second guess their motives. If NK was a human, I'd say they're batshit nuts. Clinically speaking.

crdoconnor15• 12 years ago

A lot of the crazy stories about North Korea are made up.

brown9-22• 12 years ago

Is it too hard to imagine that a member of the Kim court could have purchased or ordered the services of hackers to curry favor with the leadership? You might be looking for rationality and logic in the actions of a cult of personality.

This is after all a country that in the past has kidnapped Japanese citizens for purposes including producing movies for the NK film industry:

http://en.wikipedia.org/wiki/North_Korean_abductions_of_Japa...

http://en.wikipedia.org/wiki/Shin_Sang-ok

TheOtherHobbes• 12 years ago

It's not impossible. But it is a stretch.

How would a member of Kim Court know where to find hackers?

I'm not sure what percentage of people here know where to find those kinds of hackers, and we're supposed to be IT experts.

So the idea that some underling in the world's one surviving Stalinist state, which happens to have barely any Internet, knows where to hang out on DarkNet, and also has a suitably impressive stash of BitCoins, and knows enough about corporate politics to understand how to cause Sony Pix maximum humiliation - all that sounds just slightly unlikely, no?

China? Maybe. Russia? Possibly. 4Chan and/or LulzSec? Uh huh.

But North Korea? Possibly not.

crdoconnor15• 12 years ago

I can't quite understand the allegation that NK is behind this because I don't see a motive.

The motive is that a company that straddles the two countries that North Korea hates the most created a movie obviously designed to be a gross insult to their leader.

I'm sure there could be ancillary benefits to the hack too - technology they could copy, etc.

The motive is definitely there, but all the evidence still points to a disgruntled ex-employee.

endou2• 12 years ago

technology they could copy

Like DRMs?

Jokes aside, I have no idea what's going on with this whole story.

csandreasen3• 12 years ago

Apparently the movie personally pissed off Kim Jong Un. Back in June they officially condemned the movie and threatened retaliation if it was released.

http://time.com/2921071/kim-jong-un-seth-rogen-the-interview...

joesmo• 12 years ago

I can't wait to see this movie now, not because I think it'll be great but just because of the controversy surrounding it. Especially if Sony doesn't officially release it, I find it extremely ironic that so called hackers are the ones threatening Sony (which is a dubious claim at best) and hackers will likely be the ones to get it "released," considering Sony's lackluster (at best) security.

ponyous• 12 years ago

That's the bigger plan. Illuminati, they want us to see the movie.

</sarcasm>

crdoconnor15• 12 years ago

More like Sony is trying to make the best of a bad situation by generating some free hype for a (probably shitty) movie.

fivedogit2• 12 years ago

OP here. This thing is confusing the hell out of me. I go back and forth on a daily basis as to whether I think it was the NKoreans or not. One major factor in my head that I haven't heard stated elsewhere is this: If the government says today "It was North Korea" and tomorrow a hacker group says "Lulz! It was us. Gotcha!", that makes the FBI/CIA/NSA look really, really bad. Bad enough that it would outweigh any benefits to blaming the NKors. Why would the feds go out on a limb like that if they weren't absolutely sure?

crdoconnor15• 12 years ago

Why would the feds go out on a limb like that if they weren't absolutely sure?

Because the military is likely angling for extra funding for its 'cyberwar' divisions and they would like for that pesky torture stuff to be yesterday's news.

fivedogit2• 12 years ago

Well sure, but my point is that being publicly wrong about the hack being NKor's work would outweigh everything, including changing the subject re: torture. Maybe I'm wrong about that, though.

jessaustin2• 12 years ago

The feds are sure enough of their control of the media that they could completely discredit that sort of story. Sure, smart people could notice that a claim is accompanied by slimy purportedly-Sony emails that look just like all the other slimy Sony emails. Those smart people probably don't care to get teased off all the talking-head shows with their against-the-narrative against-the-government-experts "theories".

ohsnap• 12 years ago

Anyone else frustrated that you can't have a conversation about this without the vast majority of threads taking on a conspiratorial tone? I suppose it's human nature for something with such power players as Sony/FBI/NK to seek out hidden motives and what not - but the comment quality really drops off.

nerfhammer3• 12 years ago

Yes. At least it doesn't seem to mostly be the same regular posters you recognize elsewhere.

I've started to think of conspiracy theorizing as some kind of base human instinct

maxharris• 12 years ago

Nothing that North Korea says should be treated as though it were legitimate. This is a country that keeps something on the order of a quarter of a million people in actual concentration camps, and tens of millions more utterly brainwashed and in unspeakable poverty. This is now, today, in 2014.

http://www.dailymail.co.uk/news/article-2565240/Voices-damne...

http://www.theatlantic.com/international/archive/2014/02/nor...

http://www.theblaze.com/stories/2014/02/19/eight-sketches-of...

crdoconnor15• 12 years ago

It's also a country that when it scores one over on the US, never shuts up about it:

https://en.wikipedia.org/wiki/USS_Pueblo_%28AGER-2%29

They really have zero reason to deny culpability if they actually did do it.

totony• 12 years ago

Too much NK bashing. Just because a state is recluse and has barely any relation with other states doesn't mean we can just speculate and blame them for everything without real proof.

sopooneo2• 12 years ago

If it really was North Korea, why would they deny it? Doesn't an act of retaliation require the perpetrator to take credit in order for it to have any benefit to them? Or could it be that North Korea is publicly denying it with the understanding that everyone really knows it's them?

ncallaway2• 12 years ago

It wouldn't be entirely outside of North Korea's MO to deny the attack even if they launched it. For example, after (very probably) being the actor behind the sinking of the Cheonan they aggressively denied being involved.

sopooneo2• 12 years ago

But taking on the role of arm-chair rogue nation, why?

I can image three reasons. First as I mentioned above, you might make official denials with the understanding that everyone assumes you did it anyway. Second, there might be internal infighting between the people who did it and the people who issued the denial. Or third, you might do it with the plan to take credit, then get cold feet afterwards when you realize how much heat it's bringing down, and then deny.

Or is there any other hypothetical rational for such acts that I am missing?

crdoconnor15• 12 years ago

One of the South Korean Cheonan investigators agreed with this hypothesis, which led the South Korean government to remove him from the team:

http://www.koreatimes.co.kr/www/news/nation/2010/10/116_6582...

crdoconnor15• 12 years ago

Reasons for pretending that North Korea did it rather than a disgruntled ex-employee:

Sony executives:

* Sony gets tons of free publicity for its new movie.

* It diverts attention away from those emails that were starting to make certain Sony execs look really bad.

* They don't look quite so hopeless and incompetent if they're getting hacked by a nation state.

FBI/CIA/NSA/DOD:

* It's something that can be used to deflect heavy criticism of their all-pervasive surveillance.

* It's something they can use to wangle more money - to face the exciting new "cyberwar" threat.

Reasons for North Korea denying involvement if they actually did it:

...

ddod• 12 years ago

There's also the added bonus of timing, as the torture report seemed to only be gaining steam up until this.

Also, the concept of "cyber-terrorism" being a thing seemed kind of ubiquitous to me, but from what I've been hearing, it really wasn't on the minds of the populous until the 24 hour news networks started drumming it up in relation to the Sony hack.

mpyne• 12 years ago

There's also the added bonus of timing, as the torture report seemed to only be gaining steam up until this.

I doubt it was that, if only because North Korea has been complaining about this movie since long before the CIA torture report was released (so it's not like "The Interview" just popped up into the media after that).

Moreover the report itself is more a catalyst for discussing something everyone knows about than an announcement of something novel. The world has known the U.S. was torturing people during Bush for more than a decade by now. That's the whole reason terms like "waterboarding" are in our lexicon. Likewise Obama publicly eliminated the use of torture on his second full day in office, after running on a public campaign of banning torture during his Presidential run.

Choosing to exchange a report that is only a 'source of heat and light' for a serious cyberhacking incident that demonstrates the weakness of U.S. options vs. North Korea isn't really an upside for the U.S. government as far as I can tell.

Extortion and blackmail from state actors is precisely the thing the U.S. government is supposed to protect U.S. persons and corporations from, so a U.S. admission that North Korea has managed to "reach out and touch Sony Pictures" is bad news for the U.S. government, not good news.

waterlesscloud3• 12 years ago

the torture report seemed to only be gaining steam up until this.

This isn't remotely true. There was no 'gaining steam'. It was a topic for a week, and then it was always going to fall off the table. There was no need to distract from something that was already fading from the spotlight.

efuquen2• 12 years ago

While that all seems possible, it's all speculation. We talk about how this doesn't quite all add up, but at least there is some evidence/basis for thinking it was NK. Where exactly is all the evidence for any of the things you listed above? Otherwise, at this point it's all just a conspiracy theory, one if it was even remotely true would be a high risk deception to pull off for both the government and Sony.

crdoconnor15• 12 years ago

Otherwise, at this point it's all just a conspiracy theory

You do realize that the "North Korea did it" story is also a conspiracy theory?

one if it was even remotely true would be a high risk deception to pull off for both the government and Sony.

There's a veritable laundry list of times both have lied about more important issues than this and gotten away with it.

sroerick10• 12 years ago

Does anyone here know of a single infosec professional who thinks DPRK committed the attacks?

walshemj5• 12 years ago

Certainly the evidence as described and the way NK has presented indicates its a strong possibility.

If you act like a mad man (in terms of diplomacy) don't be surprised if people assume the worst.

comex3• 12 years ago

Does anyone know of a single infosec professional (who's talking) who has access to the details of the evidence the FBI summarized in claiming North Korean involvement?

Given this news, maybe the FBI was wrong. But the "professionals" in the doubt squad were mostly just guessing along with the rest of us.

dmix• 12 years ago

Yes Dave Aitel from Immunity Inc said it was DPRK from the very beginning when most infosec people thought otherwise. He was on a podcast talking about it yesterday:

https://threatpost.com/dave-aitel-on-the-sony-hack/109988

But he sells offensive security tools to goverments and corporations, so he is not without bias. Actually this might be more in support of the OPs comment regarding gov support rather than refuting infosec peoples stance.

lentil_soup2• 12 years ago

what I still really don't understand is that Sony is a Japanese company, why is the US government suddenly involved in this?

Surely if NK wanted to "cyber-attack" the US it wouldn't do it through a Japanese company. Or am I missing something?

berberous2• 12 years ago

Sony Pictures, is an American subsidiary of Sony. The headquarters and employees are all based in Los Angeles. These are American employees whose emails and social security numbers were leaked, American employees who received death threats, American movie theaters that were threatened with a "9/11 style" attack, and an American produced movie that has been suppressed. While perhaps the Japanese government should be involved as well, I think it's quite obvious why the US government would be involved.

pdabbadabba4• 12 years ago

Well, except its not as though anyone is believing NK is behind it because Sony says to. So what does it matter what Sony gains from people believing NK did it? Their credibility was never in question: when it comes to assigning blame for a cyberattack, Sony has none.

The FBI, of course, is another story. But the two reasons you give for them to claim NK involvement would work just as well if any other nation or non-state actor were behind it.

And you're just not thinking hard enough if you think NK has no reason to deny responsibility. Off the top of my head: maybe they would rather wriggle out of whatever "response" it is that the U.S. is cooking up, maybe they want to retain what credibility they can so NK can plausibly deny involvement in future attacks, maybe the fallout is also hurting their relations with China, etc.

sroerick10• 12 years ago

I saw a "MPAA Cyberterrorism Expert" on CNN the other day. I think Sony and the MPAA have been doing quite a bit to get people to believe that DPRK was culpable. I saw Seth Green tweet a direct quote from a Sony Press Release yesterday.

This news has also sparked these revelations:

http://www.theverge.com/2014/12/12/7382287/project-goliath

So there are a lot of issues at play here, which is why I'm cautious to endorse any viewpoint without really good documentation.

I definitely think you're right in saying North Korea has enough reason to deny responsibility. Let's not forget that Al Qaeda didn't take responsibility for 9/11 until 3 or 4 years after the fact.

crdoconnor15• 12 years ago

Their credibility was never in question: when it comes to assigning blame for a cyberattack, Sony has none.

As far as the public is concerned they do have some credibility. If for no other reason than they were the ones who were actually hacked.

The FBI, of course, is another story. But the two reasons you give for them to claim NK involvement would work just as well if any other nation or non-state actor were behind it.

They would, but by spinning the NK involvement story they can count on Sony's cooperation. If they started contradicting Sony and arguing that it was China the whole thing would seem a lot less convincing. This is a joint effort.

And you're just not thinking hard enough if you think NK has no reason to deny responsibility. Off the top of my head: maybe they would rather wriggle out of whatever "response" it is that the U.S. is cooking up

Ok so name a plausible response that would scare them. Invade? Uh, not happening. Economic sanctions? Already doing that. Talk shit about them at the UN? North Korea doesn't care.

maybe they want to retain what credibility they can so NK can plausibly deny involvement in future attacks

Which:

A) Again they would gain nothing from. B) Also completely goes against their modus operandi - when they gain military advantage they always crow about it. Every time. Did they cover up Taepodong? Hell no. They issued a press release.

maybe the fallout is also hurting their relations with China

Or the opposite, because China would almost certainly be happy to mine the hacks for any useful intel. It's not like they are besties with the US.

saranagati• 12 years ago

im really not one for conspiracy theories but this one just seems so obvious.

* sony gets hacked.

* a few news articles about it.

* cia torture facilities get leaked and admitted.

* news coverage all over about it.

* US federal government does something its never done before and calls out a specific nation state as the attacker for the sony breach.

* news coverage of sony skyrockets and cia stuff disappears from media.

* us government goes on to say that they need to increase their "cyber defense" by having more control over the internet to protect individuals and companies from other nation states.

edit: oh also wasnt it just earlier this week that there was an article on hn about sock puppets?

dschiptsov2• 12 years ago

Oh, come on. There is a simple theory that "all oversimplified/naive theories are wrong" (this is, by the way, a consequence of "all mental theories are wrong, but some of them are useful).

The theory that North Korea was upset about a crappy movie and hacked Sony is such a naive nonsense, it cannot be considered seriously. In is HN, after all.)

Less naive could an idea that some guys hacked Sony (for money, what else?) and used this as a "cover story". How does this happen? By a chance, like most events in Universe.

The hack itself, probably, was due to neglected security, like WEP hot-spots, unpatched Windows crap, everyone has Administrator privileges, updates disabled - everyone knows how it is.

And in order to "save the face" everyone jumped on that naive story - it is highly sophisticated hack by foreign intelligence, not an "admin" (or "fuck") password on some hotspot or Windows domain. It was a media division, btw, not a "techie" department.

I am exaggerating a bit about passwords, but the idea, I hope, is clear.

csandreasen3• 12 years ago

The theory that North Korea was upset about a crappy movie and hacked Sony is such a naive nonsense, it cannot be considered seriously.

I'd be inclined to agree with you if the North Korean government didn't officially condemn the film last June and threaten retaliation if it was released.

http://time.com/2921071/kim-jong-un-seth-rogen-the-interview...

dschiptsov2• 12 years ago

This is, most probably, correlation, not causation.)

nkoren• 12 years ago

Translation: "We have no idea how this attack was perpetrated, but would sure like to find out."

(Nudge nudge, wink wink, you know what I mean, know what I mean?)

frevd• 12 years ago

An indirect proof of who hacked Sony is easy: depending on whether the 'Hackers' publish the movie or not (given they got access to it and given Sony does not publish it as they say) will show who's behind it.

thatusertwo• 12 years ago

Does it really matter who did this?

The future of the internet is changed as a result of this event, thats the true meat of this situation.

North Korea, Denying Sony Attack, Proposes Joint Investigation With U.S.

Related Stories