Live data from Hacker News

How the “Kim” dump exposed North Korea's credential theft playbook

dti.domaintools.com

71–80 of 196 posts

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#71
post #53
post #37

Earlier quoted context omitted.

Regardless of how unhappy Beijing may be with things Pyongyang does, North Korea is of such obvious strategic importance to China that they are unlikely to ever waver in their support of the regime or even try to hide it.

Anything happens to North Korea and all those starving people flood into China. I think that’s why China supports North Korea.

How did they manage to brain control millions of people like that? I mean it’s so ludicrous to an outsider.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#72
post #53

Earlier quoted context omitted.

Anything happens to North Korea and all those starving people flood into China. I think that’s why China supports North Korea.

How did they manage to brain control millions of people like that? I mean it’s so ludicrous to an outsider.

Less of brain control, and more like slaughter of anyone who disagrees or rolls their eyes. Read accounts of those who escaped

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#73
post #53

Earlier quoted context omitted.

Anything happens to North Korea and all those starving people flood into China. I think that’s why China supports North Korea.

How did they manage to brain control millions of people like that? I mean it’s so ludicrous to an outsider.

Empiricism in the face of a totalitarian regime is difficult.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#74
post #53
post #37

Earlier quoted context omitted.

Regardless of how unhappy Beijing may be with things Pyongyang does, North Korea is of such obvious strategic importance to China that they are unlikely to ever waver in their support of the regime or even try to hide it.

Anything happens to North Korea and all those starving people flood into China. I think that’s why China supports North Korea.

China did not, and still doesn't, want US troops at its border. That's why it originally intervened and why it supports North Korea. At the time there was also a further risk that the US might invade China.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#75
post #8
post #6

This is interesting due to the tying of DPRK and PRC. It seems hard to say how much coordination there is between the two, but whatever it is, it appears to be greater than zero. While not necessarily surprising, I wonder if this public attribution will make it harder for the PRC to deny involvement with both the DPRK's efforts and their own.

I don't think Chinese support for NK has ever been a secret anymore than the the US support for South Korea has. And it's in China's backyardd so they've got way more of an excuse. And if you think that doesn't matter, look at the Monroe Doctrine [1]. Taken further, the so-called Cuban Missile Crisis should really be called the Turkey Missile Crisis. The US (through NATO) placed Jupiter nuclear MRBMs in Turkey, only…

> The USSR responded by doing the exact same thing

This paints it as tit for tat, but to advert invasion the Cubans asked for the missiles over a year later than the missiles were placed in Turkey. The resolution combined these separate issues.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#76
post #53

Earlier quoted context omitted.

Anything happens to North Korea and all those starving people flood into China. I think that’s why China supports North Korea.

How did they manage to brain control millions of people like that? I mean it’s so ludicrous to an outsider.

In the initial era of the split between North and South Korea, South Korea both was run by a bunch of people who had a history of outright killing leftists, and the United States was involved in similar actions.

The lack of serious offramps to reunification, along with not as huge a delta in quality of life between north and south for a long time (aid from other countries sure helps!), allowed the DPRK to establish itself as its own nation.

Now there is the surveillance state apparatus allowing the DPRK to exist in its current form in perpetuity. And even if tomorrow they showed up and said "let's unify Korea", South Korea (even ignoring all the ideological reasons it might not want to) would likely be unwilling to absorb an extremely poor country and pay for it (see the painful experience of Germany's unification).

There is probably no off ramp that exists unless people are willing to let the elite walk away clean from the situation in one way or another, and it seems hard to imagine such a future.

And if you are a north korean elite and you are allowed to travel to northern china, you will see a place where things are running more smoothly, but you're still going to see places with massive amounts of internal controls and restrictions. So who's offering the upside to some regime change here?

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#77
post #37
post #6

This is interesting due to the tying of DPRK and PRC. It seems hard to say how much coordination there is between the two, but whatever it is, it appears to be greater than zero. While not necessarily surprising, I wonder if this public attribution will make it harder for the PRC to deny involvement with both the DPRK's efforts and their own.

Regardless of how unhappy Beijing may be with things Pyongyang does, North Korea is of such obvious strategic importance to China that they are unlikely to ever waver in their support of the regime or even try to hide it.

China kept backing Khmer Rouge despite the millions dead and even invaded Vietnam to protect them. Amoral, self interested actor at best. There's nothing North Korea could do to their own people to change the support.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#78
post #42

Earlier quoted context omitted.

one time i ran nmap against my dev box at facebook. i was definitely worried someone was going to give me a stern talking to.

I use nmap routinely at work to see what’s on a subnet, has anything new appeared, or where it should not be.

+1. If I can't run nap or netcat, or have to justify it each time, I can't do my job. Better off elsewhere.

I've departed early at least twice over this. Draconian IT serves nobody. Been doing this long enough I deliberately poke any new employer; see what's in store.

Nobody cares, though. EDR appliances sell without careful administration. The industry will outlive us all.

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#79
post #20

Earlier quoted context omitted.

Not really, so long as you don't use it for anything 'bad'. i.e. if you're just running against your local network, who's gonna report it?

Surely then it's the 'use', not the 'possession' that's a criminal offence? Or is it still a criminal offence to possess it, but you're fine as long as no one finds out? Because that doesn't stop it being a criminal offence.

It's "whoever prepares for the commission of a [hacking] offence by acquiring computer programs for the commission of the offence" and it's been interpreted that downloading nmap can be preparing for an offence, therefore punishable. Giving copies to others (e.g. running a Debian mirror) is also likely illegal, but I doubt anyone's been charged for that yet.

https://www.gesetze-im-internet.de/englisch_stgb/englisch_st...

Re: How the “Kim” dump exposed North Korea's credential theft playbook

#80
post #54

Earlier quoted context omitted.

My basic understanding is that a 'dual use' tool is moreso based on intent; using the same analogy as when this came up on HN over a decade ago [0], a good kitchen knife can be at least as dangerous as a lot of explicitly 'banned' knives but because it has a non-illegal use it doesn't fall into the same category as, say, a DDOS tool. And AFAIK there hasn't (yet) been a case where NMAP has gotten someone in Germany in…

This might be akin to lockpicks in the United States. Not illegal in and of themselves, but if you are possessing them with intent, it's a different matter.

And the police can always fabricate intent.
Post reply on HN