I find hacking fascinating. Because I know a great deal about computers at the very lowest level, people often think that I know a lot about hacking. I really don’t. Over my life, I’ve found this or that bit of information. Of course, it was always because someone had made a change to a major piece of software because it had previously had some security hole. But the ways people find to circumvent security are often amazingly clever. If I had many lives to lead, I would dedicate one of them to understanding all this stuff. Unfortunately, I don’t and there are too many other things to do with my time.
Recently, I’ve been very interested in this Sony hack. The hack itself doesn’t seem all that interesting. Over three years ago, Sony was the victim of a major hack — the so called PlayStation Network outage. At that time, Sony decided that it really had to get serious security. But it would seem that they never did. I think it is rather typical of film companies (games are just an extension of film) where nothing really matters but what they do. “We don’t need no stinkin’ security experts!”
What bothers me is why everyone is so convinced this is an attack from North Korea. When I first saw the note the perpetrators sent, I was skeptical, “We will clearly show it to you at the very time and places ‘The Interview’ be shown, including the premiere, how bitter fate those who seek fun in terror should be doomed to.” Really?! I suppose it is possible. But it reads more like a really racist SNL skit than what hackers would write.
I’m not alone in wondering about this. Michael Hiltzik has written a couple of articles highlighting some of the dissent. It isn’t that anyone is saying that North Korea didn’t do it. It is just that the information we have thus far doesn’t indicate that they did. Instead, it looks like the US government just wants it to be North Korea and the perpetrators want it to appear as though it is North Korea, and so everyone assumes it is North Korea. But other than that, there really is nothing.
Hacker Grugq makes an excellent point that laying this on North Korea is incredibly convenient, Lets Blame Our Perennial Adversary! He points out that we know how North Korea does this kind of stuff, and this is very different. “This is a media blitz campaign by a group that is steeped in Internet culture and knows how to play to it. They can manipulate it to maximum effect. This is definitely far more sophisticated than the usual rhetoric from North Korea.” And Jericho lays out a detailed case that nothing anyone has said comes anywhere near to convincing us that this was North Korea, Anatomy of a NYT Piece on the Sony Hack and Attribution. (Leave it to a hacker to do a better job capitalizing headlines than The Washington Post.)
In Hiltzik’s newest article yesterday, he talked to security expert Marc Rogers, who noted that the key element of the indictment is that the same tools used in this attack were used in two previous attacks. But no one has ever shown that those attacks were by North Korea. He wrote, “Lastly, it’s pretty weak in my books to claim that the newest piece of malware is the act of a nation state because other possible related pieces of malware were rumored to be the work of a nation state.”
Further, the FBI claimed that IP addresses of the hackers used were known to be used by North Korea. But that’s just silly. To start, hackers almost never attack from their own machines. Or rather, there is a Darwinian aspect here: hackers who attack from their own machines get arrested. Dr Krypt3ia took on the whole issue in some depth, FAUXTRIBUTION?
There are a couple of things to keep in mind. One is that the hacker community hates the government and so they will be skeptical of anything the FBI says. The other is that no one is saying that the attack was not from North Korea. It is just that the information that the FBI has made available does not make the case. And given that we know the FBI and the CIA are more than willing to tell the government whatever it wants to hear, we need to question this. Of course we won’t. The United States has never found the truth necessary when a falsehood was so nice to believe.
It’s not just that Americans want a system that metes out punishment, it’s that — despite our Eighth Amendment — we are accepting of the cruelest punishment. And while it’s not legal, it exists and it’s pervasive. In theory, our prisons are holding cells for the worst offenders and centers for rehabilitation for the others. Inmates can work, learn, and prepare themselves for a more productive life in society. In reality, they are hellscapes of rape, abuse, and violence from gangs and guards.
Today, the great journalist and sort of historian of science
As you probably know, there are more than five senses. And I’m not at all certain why anyone ever claimed that there were only five senses. When I discuss this with people, I always start with the sense of acceleration. You don’t need to have one of the “five senses” to experience a roller coaster ride. Certainly there are elements of the Big Five from the feeling of the wind through your hair to the taste of acid reflux. But it is the acceleration that most defines the experience.
This last week, there was big news. The Democrats got to confirm a whole bunch of executive and judicial nominees that they weren’t expecting to. It turned out that they managed to confirm 23 nominees. This is surprising because of the slow way that the Senate works. Normally, votes on the nominees must be brought to the floor where they stay for a couple of days before they can get a vote. The way it was looking, there might have been a hand-full of nominees confirmed before the end of the session. As it was, the
Not surprisingly, the Senate Republicans were furious. But it is hard to feel bad for them. Lee and Cruz are what the Republicans have assiduously sowed over the last several decades. Any political party is going to have a spread of opinions. There is no way for the Republicans to have moved so far to the right without having people who are even more extreme. And remember: starting in January, there will be even more extreme Republicans in the Senate. This is what the Republican Party is. It’s ridiculous for them to think that they could get all the advantages of their pro-corporate extremism without it causing them to lose some tactical advantages because many of their members are simply crazy.
I’m not sure how to take Josh Barro’s article over at The Upshot this last week,
I have a close friend on permanent disability. He votes reliably for the most extreme conservative in every election. Although he’s a Nevadan, he lives just across the border in California, because that progressive state provides better social safety nets for its disabled. He always votes for the person most likely to slash the program he depends on daily for his own survival. It’s like clinging to the end of a thin rope and voting for the rope-cutting razor party.
I remember reading an article by a fairly serious music writer — most likely in New Musical Express — discussing
I have this tendency to be most critical of the groups that I’m part of. You see this a lot in terms of my thinking about the Democratic Party. But I dare say you see it most of all with my thinking about atheists. And there is a lot to dislike about the modern atheist movement. I am an atheist in the Arthur Schopenhauer tradition. Much of modern atheism is intellectually vacuous. But as popular movements go, it is still pretty good. There isn’t likely to be a mass movement that I have any less criticism of.
Over at The Monkey Cage, Elizabeth Suhay wrote some much needed perspective, 
There once was a time in history when the limitation of governmental power meant increasing liberty for the people. In the present day the limitation of governmental power, of governmental action, means the enslavement of the people by the great corporations who can only be held in check through the extension of governmental power.