White House announces Russian sanctions.

I think Romney pointed this out to Obama in 2012 and was told something along the lines of ‘the 1980’s called and want their foreign policy back’.

Why do you keep thinking that saying Obama isn’t all that great means that Trump isn’t an ignorant douchebag? Is it Hurr’s Law of Equivalence?

We got to get ready, order some crow, because tomorrow or day after, Trump will reveal his total mastery of the issue, and we will all be scurrying for cover from the light of his blinding brilliance! Can I get a “Lockerup!”?

I’m curious, what kind of proof would you be happy with?

The X-tunnel malware recovered from the DNC hack has previously been identified by Microsoft and others as belonging to Fancy Bear. In included a hard coded IP address to a known Fancy Bear command and control computer. The same address was used during Fancy Bear’s hack of the German Parliament. Right before the DNC hack, it had been linked to misdepatrment.com, a mispelling of MIS Department, the company hired by the DNC to run it’s network. The misdepatrment.com domain shared an SSL certificate with a different IP/domain used in the hack of the German Parliament.

So, how could this malware possibly be operated by anyone else if it used a command and control tunnel belonging to Fancy Bear?

Leaving aside the fact that 2016 isn’t 2012, that’s hardly an accurate remembrance of events.

I am curious, where has this been published and by whom? I have not seen any government agency report that included this information.

And I kinda find it funny that when I suggested in this thread that a proof would be “their IPs were in the block reserved by FSB” what I got back was the snark of "Yes, because when Russians hack stuff over the Internet they always do it from the Moscow apartments leaving a trail of Russian IP addresses everywhere, just like when they hack stuff in person they leave their KGB business cards and Secret Spy Decoder Rings behind. "

Relax, young Trumpewan. Tomorrow, next day latest, Himself will reveal his secret knowledge of the true for reals facts, and we’ll all be too embarrassed by his brilliance and probity to even show our faces.

I’m putting down five bucks that Trump’s secret knowledge also involves a shocking revelation about someone’s birth certificate.

Oh just admit it: you’re not going to believe it even if all the heads of the intel agencies come out and confirm it publicly.

I’ll get a link later, but it was in the Crowdstrike report, confirmed by the other firms that investigated it as well as pretty much every expert that’s been following the story.

Ah I see. So Crowdstrike knows better than the “17 government agencies”? Or is it that Crowdstrike is allowed to publish things that the agencies can’t?

Maybe as an aside or in a PM, you could share with me how you remember events (so as not to derail the thread)

No, the point is that the two parties with what one would reasonably expect to have the best access to information and expertise to analyze it are unanimous in their opinions, and they both seem very confident in their conclusions. (The two parties in this case are the intelligence community and the private company that was called in to respond to the attacks.)

Careful, pals and gals! Today or tomorrow, Himself is set to crush us all with his revelations of his sooper-secret info. I am totally in cringe mode.

The ‘someone’ obviously being the 400-pound guy sitting on a bed.

Joe Arpaio doesn’t seem to have anything to do right now. Maybe we can get him to crack this case wide open.

Looks like Himself is awful busy today, probably won’t get around to crushing us all with his secret hacking knowledge. Whew! What a relief, huh?

Oh, lordy.

(The mystery is, why hasn’t Trump appointed Arpaio to a Cabinet post, yet?)

Something tells me you’ve made up your mind already. The Crowdstrike report was published in June. Surely with your expertise on this subject, you’ve heard about the IP by now? There are plenty of skeptical articles relating to that IP address you can throw at us but I’ll warn you ahead of time that they fall short.

The problem with this story is that the evidence is really complicated and hard to follow and all the data isn’t available to the public. Crowdstrike was retained by the DNC so their report belongs to the DNC. They have circulated the data among other researchers but unless you’re a researcher, it’s not really available. I haven’t seen it, but I have watched researchers talk about it and show the evidence trail.

Here is a brief rundown, a simple TIME article, and here’s one that’s slightly more technical. Here, here, and here are some technical looks at it, and here are security researchers finding this stuff out in real time back in June.

Here is a good indication that Guccifer 2.0 was using a Russian VPN and here are researchers that were watching a Fancy Bear bit.ly account as it created the phishing emails. They can tell who the targets were and, interestingly enough, none were Republican.

There is very little doubt the DNC hack was done by Fancy Bear. One thing that remains unproven is whether Fancy Bear works for the Russian government. They are widely assumed to since they’ve been around for years and hit governments, militaries, political entities and their high level associates like NGOs, think tanks and universities. Thei hit the Pentagon and White House, German Parliament, etc etc. Their malware is also sophisticated enough to imply a long term government program. The “APT” is “APT 28” stands for Advanced Persistent Threat.

So, maybe people in the field know for certain, but from what I can tell, it still seems like it’s a bit of an assumption to associate them with the Russian government.

But they’ve also recently been found to be using malware to target Ukranian artillery units. There’s only one entity on earth this would benefit, the Russian military.

So, we have two possibilities. Either Fancy Bear is working for the Russian government or they just happen to be an old, large, well funded hacking group in Russia that hacks western governments in a manner that just happens to benefit the Russian government, and they also hack Ukranian artillery units in a manner that just happens to benefit the Russian military, but they totally have nothing to do with the Russian government. Somebody is spending millions of Rubles to do this for fun, I guess?

I don’t know about the “spending millions of Rubles” part, but it’s not uncommon for “hacktivists” on either side of an issue or conflict to jump in on “their side” and mess with the opposing side, and to do so without official sponsorship or support from the organization or “side” they’re helping. For example, DU was hacked on election day, but the assumption is that it was just a supporter of Trump and not an official campaign activity. There are lots of stories about this sort of activity in Syria and a few from Ukraine as well.