<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"
	xmlns:content="http://purl.org/rss/1.0/modules/content/"
	xmlns:dc="http://purl.org/dc/elements/1.1/"
	xmlns:atom="http://www.w3.org/2005/Atom"
	xmlns:sy="http://purl.org/rss/1.0/modules/syndication/"
		>
<channel>
	<title>Comments on: North Korean Cyberattacks</title>
	<atom:link href="http://patterico.com/2009/07/13/north-korean-cyberattacks/feed/" rel="self" type="application/rss+xml" />
	<link>http://patterico.com/2009/07/13/north-korean-cyberattacks/</link>
	<description>Harangues that just make sense</description>
	<lastBuildDate>Mon, 22 Mar 2010 14:32:46 -0700</lastBuildDate>
	<generator>http://wordpress.org/?v=2.8.4</generator>
	<sy:updatePeriod>hourly</sy:updatePeriod>
	<sy:updateFrequency>1</sy:updateFrequency>
		<item>
		<title>By: Harvey M Anderson</title>
		<link>http://patterico.com/2009/07/13/north-korean-cyberattacks/comment-page-1/#comment-519421</link>
		<dc:creator>Harvey M Anderson</dc:creator>
		<pubDate>Thu, 16 Jul 2009 17:55:01 +0000</pubDate>
		<guid isPermaLink="false">http://patterico.com/?p=27340#comment-519421</guid>
		<description>So here&#039;s something I have some real understanding of.

Unless the norks are masters of this game (and I have reason to suspect they are not), what they&#039;ve done amounts to an amateur-hour stunt.  

Pretty much every site is terrifyingly insecure and trivially easy to hack to a teenager with the right scripts and lack of morals.  Professionals (even North Korean professionals) take it to a whole other level and they cannot be stopped.  

Here are two major reasons:

1) New security constantly appear in all applications and security patches need to be installed.  Note the gap in security that exists between when the hole is discovered and when it is patched.  It is not possible to protect yourself against that gap; you can only keep a low profile or always be prepared to restore from backup.  Note also that the only securty holes patched are those that have been abused or advertised.  Hacks exist that have not been sufficiently advertised for the software publisher to hear about them and put out a patch, and the people with those hacks bide their time until they find enough sites to hack and then blitz them all at once.  Non-professionals cannot win.

2) You cannot backtrace hackers.  IP spoofing is trivial, but that&#039;s not the reason.  The reason is that these people hide within international networks of secure proxies and you will never penetrate that network.

For a full explanation detailing this process and a sobering vision of just how easy it is to hide, visit:

iran dot whyweprotest dot net

WARNING: The site itself is totally safe but DO NOT install anything that comes from this site.  These people are dangerous, but informative.  You will not be successful at hiding like they do on your first try, but you might give hackers the use of your bandwidth, which they might use to hack government sites ... and guess whose door the spooks are gonna knock on.  Hint: it won&#039;t be theirs.</description>
		<content:encoded><![CDATA[<p>So here&#8217;s something I have some real understanding of.</p>
<p>Unless the norks are masters of this game (and I have reason to suspect they are not), what they&#8217;ve done amounts to an amateur-hour stunt.  </p>
<p>Pretty much every site is terrifyingly insecure and trivially easy to hack to a teenager with the right scripts and lack of morals.  Professionals (even North Korean professionals) take it to a whole other level and they cannot be stopped.  </p>
<p>Here are two major reasons:</p>
<p>1) New security constantly appear in all applications and security patches need to be installed.  Note the gap in security that exists between when the hole is discovered and when it is patched.  It is not possible to protect yourself against that gap; you can only keep a low profile or always be prepared to restore from backup.  Note also that the only securty holes patched are those that have been abused or advertised.  Hacks exist that have not been sufficiently advertised for the software publisher to hear about them and put out a patch, and the people with those hacks bide their time until they find enough sites to hack and then blitz them all at once.  Non-professionals cannot win.</p>
<p>2) You cannot backtrace hackers.  IP spoofing is trivial, but that&#8217;s not the reason.  The reason is that these people hide within international networks of secure proxies and you will never penetrate that network.</p>
<p>For a full explanation detailing this process and a sobering vision of just how easy it is to hide, visit:</p>
<p>iran dot whyweprotest dot net</p>
<p>WARNING: The site itself is totally safe but DO NOT install anything that comes from this site.  These people are dangerous, but informative.  You will not be successful at hiding like they do on your first try, but you might give hackers the use of your bandwidth, which they might use to hack government sites &#8230; and guess whose door the spooks are gonna knock on.  Hint: it won&#8217;t be theirs.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: DRJ</title>
		<link>http://patterico.com/2009/07/13/north-korean-cyberattacks/comment-page-1/#comment-518797</link>
		<dc:creator>DRJ</dc:creator>
		<pubDate>Wed, 15 Jul 2009 03:29:35 +0000</pubDate>
		<guid isPermaLink="false">http://patterico.com/?p=27340#comment-518797</guid>
		<description>Thanks for the update, Joshua.  I&#039;m glad everything is okay but I wouldn&#039;t be surprised to learn you are on some North Korean hacker&#039;s radar.</description>
		<content:encoded><![CDATA[<p>Thanks for the update, Joshua.  I&#8217;m glad everything is okay but I wouldn&#8217;t be surprised to learn you are on some North Korean hacker&#8217;s radar.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joshua Stanton</title>
		<link>http://patterico.com/2009/07/13/north-korean-cyberattacks/comment-page-1/#comment-518776</link>
		<dc:creator>Joshua Stanton</dc:creator>
		<pubDate>Wed, 15 Jul 2009 02:20:21 +0000</pubDate>
		<guid isPermaLink="false">http://patterico.com/?p=27340#comment-518776</guid>
		<description>I now see it&#039;s a guest post; thanks to DRJ.</description>
		<content:encoded><![CDATA[<p>I now see it&#8217;s a guest post; thanks to DRJ.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Joshua Stanton</title>
		<link>http://patterico.com/2009/07/13/north-korean-cyberattacks/comment-page-1/#comment-518744</link>
		<dc:creator>Joshua Stanton</dc:creator>
		<pubDate>Wed, 15 Jul 2009 00:57:47 +0000</pubDate>
		<guid isPermaLink="false">http://patterico.com/?p=27340#comment-518744</guid>
		<description>This is Joshua from One Free Korea.  My thanks to Patterico and everyone else for your concern.  The site was down about 12 hours, apparently the result of Bluehost migrating servers, not the work of &lt;a href=&quot;http://www.freekorea.us/2009/07/08/north-korea-suspected-in-cyber-attacks/&quot; rel=&quot;nofollow&quot;&gt;Unit 121&lt;/a&gt;.  

Frankly, I&#039;m a little disappointed that the North Koreans &lt;i&gt;haven&#039;t&lt;/i&gt; hacked my site, at least as far as I know.  I mean, isn&#039;t advocating the violent overthrow of their government enough?</description>
		<content:encoded><![CDATA[<p>This is Joshua from One Free Korea.  My thanks to Patterico and everyone else for your concern.  The site was down about 12 hours, apparently the result of Bluehost migrating servers, not the work of <a href="http://www.freekorea.us/2009/07/08/north-korea-suspected-in-cyber-attacks/" rel="nofollow">Unit 121</a>.  </p>
<p>Frankly, I&#8217;m a little disappointed that the North Koreans <i>haven&#8217;t</i> hacked my site, at least as far as I know.  I mean, isn&#8217;t advocating the violent overthrow of their government enough?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: imdw</title>
		<link>http://patterico.com/2009/07/13/north-korean-cyberattacks/comment-page-1/#comment-518743</link>
		<dc:creator>imdw</dc:creator>
		<pubDate>Wed, 15 Jul 2009 00:53:44 +0000</pubDate>
		<guid isPermaLink="false">http://patterico.com/?p=27340#comment-518743</guid>
		<description>&quot;Just who in NorKor, except Govt agents, would have computers?&quot;

When DDOS attacks come from computers, they&#039;re usually at the command of someone other than the owners of those computers.</description>
		<content:encoded><![CDATA[<p>&#8220;Just who in NorKor, except Govt agents, would have computers?&#8221;</p>
<p>When DDOS attacks come from computers, they&#8217;re usually at the command of someone other than the owners of those computers.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: AD - RtR/OS!</title>
		<link>http://patterico.com/2009/07/13/north-korean-cyberattacks/comment-page-1/#comment-518545</link>
		<dc:creator>AD - RtR/OS!</dc:creator>
		<pubDate>Tue, 14 Jul 2009 17:55:20 +0000</pubDate>
		<guid isPermaLink="false">http://patterico.com/?p=27340#comment-518545</guid>
		<description>vor2, I think Dmac confused you with imdw re Honduras.</description>
		<content:encoded><![CDATA[<p>vor2, I think Dmac confused you with imdw re Honduras.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: voiceofreason2</title>
		<link>http://patterico.com/2009/07/13/north-korean-cyberattacks/comment-page-1/#comment-518530</link>
		<dc:creator>voiceofreason2</dc:creator>
		<pubDate>Tue, 14 Jul 2009 17:03:59 +0000</pubDate>
		<guid isPermaLink="false">http://patterico.com/?p=27340#comment-518530</guid>
		<description>&lt;blockquote&gt;No one can state definitively that the KGB was not at the very least indirectly responsible for the attacks. Please cite your sources for your definitive statement - or perhaps you’d care to expound on your &lt;b&gt;prior explanations for Obama’s brilliant policies regarding Honduras again.&lt;/b&gt;
&lt;/blockquote&gt;

And you cannot definitively state that they did.
As for &quot;source&quot; if you had read the article I linked you would have seen &quot;&lt;b&gt;It was hyped as the first cyberwar, but after two years there is still no evidence that the Russian government was involved. Though Russian hackers were indisputably the major instigators of the attack, the only individuals positively identified have been young ethnic Russians living inside Estonia, who were angry over the statue incident.&quot;

&lt;/b&gt;
As for Honduras... what does that have to do with the price of tea in Brazil? I made no comments about Honduras on &lt;b&gt;any&lt;/b&gt; site.</description>
		<content:encoded><![CDATA[<blockquote><p>No one can state definitively that the KGB was not at the very least indirectly responsible for the attacks. Please cite your sources for your definitive statement &#8211; or perhaps you’d care to expound on your <b>prior explanations for Obama’s brilliant policies regarding Honduras again.</b>
</p></blockquote>
<p>And you cannot definitively state that they did.<br />
As for &#8220;source&#8221; if you had read the article I linked you would have seen &#8220;<b>It was hyped as the first cyberwar, but after two years there is still no evidence that the Russian government was involved. Though Russian hackers were indisputably the major instigators of the attack, the only individuals positively identified have been young ethnic Russians living inside Estonia, who were angry over the statue incident.&#8221;</p>
<p></b><br />
As for Honduras&#8230; what does that have to do with the price of tea in Brazil? I made no comments about Honduras on <b>any</b> site.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Dmac</title>
		<link>http://patterico.com/2009/07/13/north-korean-cyberattacks/comment-page-1/#comment-518481</link>
		<dc:creator>Dmac</dc:creator>
		<pubDate>Tue, 14 Jul 2009 15:30:02 +0000</pubDate>
		<guid isPermaLink="false">http://patterico.com/?p=27340#comment-518481</guid>
		<description>&lt;i&gt;But just as the Estonia attacks revealed; what was first thought to be Russian military turned out to be “hacktivists” doing so without state sponsorship&lt;/i&gt;

This is demonstrably false - cyber gangs have been operating with impunity within Russia for years, with both the direct and indirect support of the KGB: 

http://www.irantracker.org/analysis/russia-and-cyber-threat

http://larussophobe.wordpress.com/2009/03/30/confirmed-kgb-launched-cyber-attack-on-georgia/

No one can state definitively that the KGB was not at the very least indirectly responsible for the attacks. Please cite your sources for your definitive statement - or perhaps you&#039;d care to expound on your prior explanations for Obama&#039;s brilliant policies regarding Honduras again.</description>
		<content:encoded><![CDATA[<p><i>But just as the Estonia attacks revealed; what was first thought to be Russian military turned out to be “hacktivists” doing so without state sponsorship</i></p>
<p>This is demonstrably false &#8211; cyber gangs have been operating with impunity within Russia for years, with both the direct and indirect support of the KGB: </p>
<p><a href="http://www.irantracker.org/analysis/russia-and-cyber-threat" rel="nofollow">http://www.irantracker.org/analysis/russia-and-cyber-threat</a></p>
<p><a href="http://larussophobe.wordpress.com/2009/03/30/confirmed-kgb-launched-cyber-attack-on-georgia/" rel="nofollow">http://larussophobe.wordpress.com/2009/03/30/confirmed-kgb-launched-cyber-attack-on-georgia/</a></p>
<p>No one can state definitively that the KGB was not at the very least indirectly responsible for the attacks. Please cite your sources for your definitive statement &#8211; or perhaps you&#8217;d care to expound on your prior explanations for Obama&#8217;s brilliant policies regarding Honduras again.</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: AD - RtR/OS!</title>
		<link>http://patterico.com/2009/07/13/north-korean-cyberattacks/comment-page-1/#comment-518472</link>
		<dc:creator>AD - RtR/OS!</dc:creator>
		<pubDate>Tue, 14 Jul 2009 15:18:14 +0000</pubDate>
		<guid isPermaLink="false">http://patterico.com/?p=27340#comment-518472</guid>
		<description>Just who in NorKor, except Govt agents, would have computers?</description>
		<content:encoded><![CDATA[<p>Just who in NorKor, except Govt agents, would have computers?</p>
]]></content:encoded>
	</item>
	<item>
		<title>By: Ken Hahn</title>
		<link>http://patterico.com/2009/07/13/north-korean-cyberattacks/comment-page-1/#comment-518410</link>
		<dc:creator>Ken Hahn</dc:creator>
		<pubDate>Tue, 14 Jul 2009 12:41:32 +0000</pubDate>
		<guid isPermaLink="false">http://patterico.com/?p=27340#comment-518410</guid>
		<description>The site is up now and they&#039;re saying that it doesn&#039;t appear to be an external attack on them.</description>
		<content:encoded><![CDATA[<p>The site is up now and they&#8217;re saying that it doesn&#8217;t appear to be an external attack on them.</p>
]]></content:encoded>
	</item>
</channel>
</rss>
