jas-

Thanks. Let's look at few pieces of public information on North Korea's APT groups.

CISA: https://www.cisa.gov/news-events/cybersecurity-advisories/aa... USHHS: https://www.hhs.gov/sites/default/files/dprk-cyber-espionage... USDOT: https://home.treasury.gov/news/press-releases/sm774

These seem dated, >5 years, but don't seem to indicate a level of sophistication needed for the heist.

The reports do touch on laundering the coins, but that still wouldn't excuse the "there will be signs" related to a large influx of monetary resources right?

I see a lot of focus on the "how" this happened, big deal.

Computer security is a farce.

Let's address the elephant. I find the accused to be very unlikely.

20 minutes?! $6.3B?!

Their APT groups have been classified as advanced but not elite, this suggests a huge jump for their groups.

"There will be signs".

There should be an influx of purchases right? Or at least a large number of imports perhaps through shell companies to further obscure the sources as this nation.

Based on what I am told and read about this nation they are poor, can't afford to feed their people, etc., etc. Additionally, the quality of education is reported to be low due to the isolation.

Where are the shipments into the country and where does that money lead? Until these signs occur I am skeptical.

That kind of money is what the FBI, Interpol and other investigators specialize in right?

I don't participate in any digital currency, but if I did I would think a worldwide investigation with collaboration amongst these agencies would be in order.

DARPA and the USPTO have technical details on both taxpayer-funded research and patented technologies associated with these concepts. Some of the originating work came from fears of US enemies abroad experimenting with mind control.

I would rather see a Star Wars fight of the chess pieces. But this is fun none-the-less!

Reading the comments and all I can think is "first world problems"

Until you see the IP of your project disappear and get rolled into their solution

If the activities were truly cool and impactful, and not illegal or unlawful as you suggest, wouldn’t it be possible that the suicide could be due to a culture of not speaking out and then left to deal with the after effect of guilt? A slanderous retort vs a different lens to review the events isn’t helpful

If you speak to the correct people about illegal activities and unlawful orders you will not.

Or the infamous promotion of legislation without representation

Control?

Maybe trying to predict entropy would be easier

Thanks for sharing this

Can you provide correlated events to these? It would certainly help the argument

It's a similar problem the human DNA solved by telling our teenage selves that our parents are dumb and we needed to move to a new tribe. Genetic diversity, but a digital equivalent.

It reads like a Turing test bot doesn’t it? Sus

All one has to do to validate this is to look at their own code to understand why it may look like slop.

Anytime a port, a prototype or any other beta/alpha version of a piece of software is coded, isn’t that what we as humans do already?

To say that a human is any better isn’t sound judgement or logical.

Pretty sure that isn’t the point of using LLM’s

I digress; this article actually has helped identify useful knowledge gaps around topics I have researched. https://drensin.medium.com/elephants-goldfish-and-the-new-go...

While you have to think about things objectively no matter what, when I start researching topics like physics, using AI as suggested in that article has proven very useful.

You need to be able to advertise the networks to each other using a routing protocol such as ospf

The sheer volume of bug reports negates the perceived importance

Yes. It is the equivalent of reading a technical review of a product by the product owner

Thanks for putting this online

Red hat and other RPM based distributions recommended kickstart scripts use tty3 using a similar method

“ The response might've been different if the author had already given a patch”

For a security related issue? Not sure that is a wise decision.

Thanks for providing this!

If we are just going to stigmatize one word, perhaps, as a group, you should also consider the following list and fire people for these as well?

The only real consistent thing is as each generation becomes "woke" or "enlightened" (as previous generations called it), one or more phrases will be termed offensive by the younger generation and changed to something else.

https://en.wikipedia.org/wiki/List_of_disability-related_ter...

Great post! Thanks for taking the time to put this up.

What do you think the ratios are regarding improper use of nonce with this mode?

Most implementations that I am familiar with intentionally generate a random nonce to help lower the percentage of app devs doing this very thing

Be worried when laws get passed against barter systems that would circumvent these systems

Doesn't metasploit, OpenVAS and others already do a lot of this? Why not contribute modules there vs. write a new framework?

ARP? Don’t you need arptables for this? OSI model 101