I agree entirely, Allen. The market incentives are huge for a company to discover and report an attack attributed to a nation state, the bar for evidence is negligible, and there's really no way to disprove a claim. Even when someone involved in the attack pops up and says I did it, here's proof, and you're an idiot, that becomes a "disinformation operation" and again, there's no way to disprove that.
Jeff > ---------------------------------------------------------------------- > > Message: 1 > Date: Thu, 16 Jun 2016 21:28:42 -0400 > From: Allen <[email protected]> > To: Adam Shostack <[email protected]> > Cc: "[email protected]" > <[email protected]> > Subject: Re: [Dailydave] "When you shoot at the king, you best not > miss." > Message-ID: > < > cadwykiy5ryj5s61qxlf+hc7zrgd1lcnbccxt5qusn8hv6c8...@mail.gmail.com> > Content-Type: text/plain; charset="utf-8" > > | It's entirely possible that this is a disinformation campaign, or that > attribution is hard, and Crowdstrike made a mistake > | > > I'm inclined to believe that while attribution may be hard there are > entirely too many market incentives to brand any given attack with one of > the nation state animal totems. > > The fact that attribution is frequently derived from prior intelligence > blended with the fact that all of the source data is confidential only > lends itself to confirmation bias. A small attribution mistake by one > vendor can really snowball. > -------------- next part -------------- > An HTML attachment was scrubbed... > URL: < > https://lists.immunityinc.com/pipermail/dailydave/attachments/20160616/55ad132a/attachment-0001.html > > > > ------------------------------ > > _______________________________________________ > Dailydave mailing list > [email protected] > https://lists.immunityinc.com/mailman/listinfo/dailydave > > > End of Dailydave Digest, Vol 55, Issue 12 > ***************************************** > -- Jeffrey Carr (jeffreycarr.com) CEO, Taia Global, Inc. (taiaglobal.com) Founder, Suits and Spooks (suitsandspooks.com) Author, "Inside Cyber Warfare: Mapping the Cyber Underworld" (O'Reilly Media, 2009, 2011) THE CONTENTS OF THIS EMAIL ARE FOR THE RECIPIENT'S EYES ONLY AND MAY NOT BE DUPLICATED OR DISTRIBUTED WITHOUT PRIOR PERMISSION.
_______________________________________________ Dailydave mailing list [email protected] https://lists.immunityinc.com/mailman/listinfo/dailydave
