lucasRW
Joined 3 years ago
Karma
5
Submissions
193
Member since
Jun 22
Joined 3 years ago
Threat-hunting at that level can easily use VPNs to make attributions, especially if those same VPN exit points happen to be correlated to other stuff that was attributed. And when you are Microsoft or Google (Jia Tan had gmail accounts), the telemetry they have goes way beyond "oh we can't see the real IP lolz".
The group responsible for the xz attempted compromise is circulating in certain Chatham House rules conference. It's just that, as someone there said "no one has had the balls to say it publicly", which in itself gives a strong hint.
Can you also please give us your address, so that any person in need can go to your living room to settle down for a bit ?