We Can Conclusively Confirm North Korea Was Not Behind #Sony Hack (gotnews.com)

This hardly seems like conclusive evidence.

Not discounting the content of this specific blog post, but just a heads up to consider the source, Gotnews. It's run by a 'journalist' who's been profiled by the NYT [1] and Gawker [2] for his unorthodox techniques.

[1] http://www.nytimes.com/2014/12/15/business/media/sowing-mayh...

[2] http://gawker.com/what-is-chuck-johnson-and-why-the-web-s-wo...

e: his Twitter feed might provide some insight as to the veracity and thoroughness of his research: https://twitter.com/chuckcjohnson

Even if the data had to have been transferred via USB, that doesn't mean the malware bomb was from that same source.

The headline is ridiculous. You can't use timestamps to "conclusively confirm" anything.

They could have just copied the data from one drive to another after they already had it.