The US has suffered a cyberbreach. It's hard to overstate how bad it is

The US has suffered a cyberbreach. It's hard to overstate how bad it is(theguardian.com)

81 points by monty5811 5 years ago | 7 comments

I haven’t been following this story extensively, but when did we conclude that SVR was behind the hack? Schneier writes as if it’s a certainty.

Why is it always FireEye blaming the Russians, and why do they never share their evidence of attribution?

carlsborg 5 years ago |

“ The only reason we know about this breach is because, earlier this month, the security company FireEye discovered that it had been hacked. During its own audit of its network, it uncovered the Orion vulnerability and alerted the US government.”

itisit 5 years ago |

Now that’s what I call a pentest! Expect more of these. And expect vendors new and old to sell hindsight-based protection.

geoduck14 5 years ago |

Hold on... this is legal? I knew the countries spy on each other all the time, but I assumed it was illegally done.

sudosysgen 5 years ago | |

Legal where? It's legal in the US for the CIA to hack Russia, and the reverse is also true. International law doesn't really forbid anything (and even when it does it is mostly a joke).

treeman79 5 years ago | | |

Laws only matter if there are police equivalents to enforce it.

Have a tiny military budget? Congratulations you behave by the laws of bigger budget military countries.

Don’t like it? You can ask the UN. They will promptly condemn Israel, then demand more bribes.

foolmeonce 5 years ago | | |

The US was also posturing about actual cyberwarfare during the Gulf war. Not the brightest move since it probably helped focus foreign interest in a field where one can never buy total superiority.

https://www.theregister.com/2003/03/10/one_printer_one_virus...