Jeffrey Carr
medium.com/@jeffreycarr · Personal blog · on HN since 2016
Jeffrey Carr is a cybersecurity consultant who writes on Medium about attribution of cyberattacks, including the DNC breach, and cyber policy.
What HN saysCommenters cite his posts to argue that attributing the DNC breach to Russia rests on weak evidence, though others dispute his view.
15HN people shared it
7linked it in comments
10stories submitted
35story points
9 years agolast shared
2016people per year2026
Most-shared posts
- 1Can Facts Slow the DNC Breach Runaway Train?4 people · 18 points · first shared 2016 · 5 comments on HN
- 2The DNC Breach and the Hijacking of Common Sense3 people · 3 points · first shared 2016 · discussion on HN
- 3The Arizona Election Hack Story Is an Embarrassment to Everyone Involved1 people · 4 points · first shared 2016 · discussion on HN
- 4How to Kill a Hacker (or Could You Be the Next Junaid Hussain?)1 people · 3 points · first shared 2016 · discussion on HN
- 5FBI/DHS Joint Analysis Report: A Fatally Flawed Effort1 people · 3 points · first shared 2016 · discussion on HN
- 6Putin’s Response Options to U.S. Cyber Attack1 people · 2 points · first shared 2016 · discussion on HN
- 7Crushing Force as a Change Agent1 people · 1 points · first shared 2016 · discussion on HN
- 8Kaspersky Lab Has Been Repeatedly Targeted by Intelligence Services1 people · 1 points · first shared 2017 · discussion on HN
- 9The gru ukraine artillery hack that may never have happened 820960bbb02d1 people · first shared 2017
- 10Homepage1 people · first shared 2017
What HN people wrote when they linked it
616c · 2016-06-30
Some of do not agree with the generally accepted view.
https://medium.com/@jeffreycarr/the-dnc-breach-and-the-hijacking-of-co…
I have this conversation with people often. They think I am an obnoxious IT guy, but I think we love reaching for convenient answers.
Both sides, lone wolf or Russian state sponsorship, I don't seem off. Both extremes are easy win for easily placated minds, so I worry when I feel myself just gravitating to them.
That being siad, it saddens me when reputable infosec people (by their own measure) use Medium. Haha.
KekDemaga · 2017-09-15
My case as already been said better by others:
"In the physical world of crime investigation, common sense dictates that the perpetrator of a crime may use any weapon and not just one made in the country of his birth, and that the developer or manufacturer of the weapon most likely isn’t the criminal.
And yet, those seemingly crazy assumptions are made every day by cybersecurity companies involved in incident response and threat intelligence.
The malware was written in Russian? It was a Russian who attacked you.
Chinese characters in the code? You’ve been hacked by the Peoples Liberation Army."
https://medium.com/@jeffreycarr/the-dnc-breach-and-the-hijacking-of-co…
willvarfar · 2017-05-12
What I don't get is why soldiers are allowed to have their mobile phones on. Presumably they are being located and counted by their phones too.
There were claims last year that Russian malware targeted a Ukrainian artillery app and that this lead to 80% artillery losses. However, some doubts have been cast: https://medium.com/@jeffreycarr/the-gru-ukraine-artillery-hack-that-ma…
swalsh · 2017-03-07
Have you read anything from experts in the area?
https://medium.com/@jeffreycarr/can-facts-slow-the-dnc-breach-runaway-…
cairo_x · 2016-10-20
”They don’t want to understand the evidence.”
No evidence has been provided showing these command and control servers are under the control of the FSB. So how the hell can anyone hope to understand the evidence when we don't have access to it?
Show us the links between FancyBear and the command and control servers or GTFOOH
edit regarding related dnc hack: turns out the command and control thing was debunked:https://medium.com/@jeffreycarr/can-facts-slow-the-dnc-breach-runaway-…
Under 'Fact Check the Evidence'
Now the only other evidence for Russian involvement is the metadata found in the Guccifer files, which, if you are to take as 'evidence' means that that link between Premise and toddandclare.com of pedo-gate fame is irrefutable. Which it is not, because it relies on the same borderline intelligent inductions.
chvid · 2016-07-30
I think this a good article explaining why there is not enough evidence in the public linking the DNC hack to Russian secret service:
https://medium.com/@jeffreycarr/can-facts-slow-the-dnc-breach-runaway-…
The IP-address (176.31.112.10) that links the DNC hack to the Bundestag hack is a machine in France (appearantly) controlled by a Pakistani hosting company. This article says the machine was closed because of abuse over a year ago. The material in the DNC hack is just one month old:
https://netzpolitik.org/2015/digital-attack-on-german-parliament-inves…
stefantalpalaru · 2017-02-20
> I don't think there is any serious doubt that ATP28 was the group that did the hack
If you have "showdead" set to "yes", this is your lucky day:
https://medium.com/@jeffreycarr
https://theintercept.com/2016/11/01/heres-the-problem-with-the-story-c…
https://theintercept.com/2017/01/06/underwhelming-intel-report-shows-n…
https://theintercept.com/2016/12/10/anonymous-leaks-to-the-washpost-ab…
http://www.commondreams.org/author/veteran-intelligence-professionals-…