NYT covers China cyberthreat

Thu Feb 21 20:05:33 UTC 2013

On Feb 20, 2013, at 9:07 PM, Steven Bellovin <smb at cs.columbia.edu> wrote:

> 
> On Feb 20, 2013, at 1:33 PM, valdis.kletnieks at vt.edu wrote:
> 
>> On Wed, 20 Feb 2013 15:39:42 +0900, Randy Bush said:
>>> boys and girls, all the cyber-capable countries are cyber-culpable.  you
>>> can bet that they are all snooping and attacking eachother, the united
>>> states no less than the rest.  news at eleven.
>> 
>> The scary part is that so many things got hacked by a bunch of people
>> who made the totally noob mistake of launching all their attacks from
>> the same place....
> 
> 
> This strongly suggests that it's not their A-team, for whatever value of
> "their" you prefer.  (My favorite mistake was some of them updating their
> Facebook pages when their work took them outside the Great Firewall.) They
> just don't show much in the way of good operational security.

Mandiant apparently feels the same way: http://www.forbes.com/sites/andygreenberg/2013/02/21/the-shanghai-army-unit-that-hacked-115-u-s-targets-likely-wasnt-even-chinas-a-team/

		--Steve Bellovin, https://www.cs.columbia.edu/~smb