:: This all seems to be noobie stuff. There's nothing technically cool
:: to see here
You mean the report or the activity?
The activity.
You seem "upset" that they are using M$ only(target and
source).
I'm not upset. I'm pointing out what Steven Bellovin said
in just a few words: "This strongly suggests that it's not
their A-team..."
This is a technical mailing list where cutting edge stuff
is discussed. The compromise was not using cutting edge
stuff and, so, is a big <yawn> for this list.
The report was mainly for reporters. That's why they had
the omg sound byte bullet points at the top. It's also
why they had to explain several low level things in detail.
You seem "upset" that they are using M$ only(target and
source).
I'm not upset. I'm pointing out what Steven Bellovin said
in just a few words: "This strongly suggests that it's not
their A-team..."
This is a technical mailing list where cutting edge stuff
is discussed. The compromise was not using cutting edge
stuff and, so, is a big <yawn> for this list.
Not to be pedantic, but I thought the list was about network operations - and
as much (or more) about practice, than about "cutting edge stuff." (Well
maybe a little pedantic.)
From an operational point of view, unless I'm an exceptionally high-value
target, I'm more likely to be threatened by the B-team (or C-team), than the
A-team (recognizing, of course, that what the A-team is doing today, is what the
script kiddies will be doing tomorrow).
The A-team doesn't get caught and detailed. The purpose of the other teams is to detect easy targets, handle easy jobs, and create lots of noise for the A-team to hide in. Hacking has always had a lot in common with magic. Misdirection is a useful tool.
And so their bush league by itself was responsible for all the penetrations
that mandiant says they did? Which shows that they don't have to be
particularly smart, just a bit smarter than their average spear phish or
other attack's victim.
The A-team doesn't get caught and detailed. The purpose of the other teams
is to detect easy targets, handle easy jobs, and create lots of noise for
the A-team to hide in. Hacking has always had a lot in common with magic.
Misdirection is a useful tool.
Jack
Or theres only a B-team, and the china government is as corrupted and
infective as the USA one.
