7 comments

[ 25.5 ms ] story [ 44.1 ms ] thread
Hold on... this is legal? I knew the countries spy on each other all the time, but I assumed it was illegally done.
Legal where? It's legal in the US for the CIA to hack Russia, and the reverse is also true. International law doesn't really forbid anything (and even when it does it is mostly a joke).
Laws only matter if there are police equivalents to enforce it.

Have a tiny military budget? Congratulations you behave by the laws of bigger budget military countries.

Don’t like it? You can ask the UN. They will promptly condemn Israel, then demand more bribes.

Now that’s what I call a pentest! Expect more of these. And expect vendors new and old to sell hindsight-based protection.
I haven’t been following this story extensively, but when did we conclude that SVR was behind the hack? Schneier writes as if it’s a certainty.

Why is it always FireEye blaming the Russians, and why do they never share their evidence of attribution?

“ The only reason we know about this breach is because, earlier this month, the security company FireEye discovered that it had been hacked. During its own audit of its network, it uncovered the Orion vulnerability and alerted the US government.”

:/