p4x_real

there’s no “allegedly” about it. These countries do it and they do it openly. Or do you really think that there’s a bunch of really good North Korean hackers with the time and money to be stealing crypto in sophisticated attacks with no association to the government?

And I see the cyber realm as an alternative to missiles and bombs. Yes it’s like another sanction - why do you think sanctions are bad? It puts the onus on the country leader to figure it out without the help we give them.

Also what crime did i commit? The US and much of the world don’t even recognize NK as a country, they’re a terrorist state. If hitting a terrorist state with a simple cyber attack is “too much war community” for you what do you suggest? That we ask real nice? I think we’ve tried that. It didn’t go well.

Also let me clarify - I hit NK’s internet. The people of north korea DO NOT have access to the internet. It is the elites and the government only. So literally no civilian was harmed. It really doesn’t get any more targeted than that. I’m not advocating for hitting innocent civilians with attacks all day. Hit the ones causing the pain and suffering for their own people and others.

This shit needs to stop from NK because they literally give 0 fucks what they do to us. They hit our civilians, hell they kidnap people, torture them, and murder them (see the Warmbier case).

Either way, always up for suggestions! What route would you go down? What would you do about this?

- P4x

this ^^^^. You nailed it spot on. They knew and have known for a couple of years. Coming out actually makes me a bit safer from them because now everyone knows i’m ACTUALLY affiliated heavily with the IC and DoD. Try murdering someone like that… well that person might have contingencies in place so that things just start to randomly burn down in your country……………

Not to mention any official action of murdering YET ANOTHER US citizen (see the Warmbier case) but this time with very real military connections. May make them think twice.

I’m far more afraid of our own government than theirs to be frank. Though i didn’t break any laws that i know of. I attacked a “country” that we don’t even recognize as a country but a terrorist state! So are they gonna prosecute me for attacking terrorists with a pretty minor attack in the grand scheme of things? I hope not and i don’t think so…. but FBI is gonna FBI.

oh and it was just fun. Who doesn’t kick that motherfucker in the dick?

thank you and yeah, I’ve exhausted every other vector i can think of and i’m pretty well connected in the intelligence community and DoD! So fuck it, I’m not someone that likes to sit around and hope someone does something. Obviously there’s possibly stuff i just didn’t think of but this seemed like a natural and effective way to get people to listen. It worked, they listened but no real funding or action. Now this piece, i’m kicking asses forward to do something! But i’m not afraid to admit that i’m not the pinnacle of intelligence i’m just persistent af and know how to get peoples attention. And i’ve practiced hacking in very very many disciplines my whole life, so i’m not too bad at it.

- P4x

oh i knew haha. It was just made very real by angus and he told me the attack vectors to watch out for. I’m not a gun guy, which is why he told me to get some. Which I did.

-P4x

they already knew and have known for a while is why. Putting my name out there actually makes me safer because i have very real associations with the DoD that can be confirmed.

- P4x

they’re fucking delicious

- P4x

they’ve been popular for a while in latin america

who said it had to be fair? Yes we do that stuff and yes we have been on the intelligence side covertly on the offensive.

I’m advocating for loud and proud here though. We have more than enough bandwidth in every sense of the word to do both. IMO we treat it like any other sanction.

Your point is well received though, we have been very much on the offensive. Which is how you know that if we had the capability to do loud and effective shit and have the world stage see it, we would do it. But we don’t because everyone is for some reason afraid to do it.

I worked for DARPA for about a decade and a half, we weren’t ever allowed to use the word hacking. Think about how fucked that is. They were making advanced tanks, drones, missiles, all kinds of weapons to kill people. But hacking??? Way too far man! That’s too much!!

And yes this is actually Alejandro / P4x.

it’s true and we do. It’s a really astute observation. But it’s not because it’s a strategic move by NSA or CYBERCOM or DoD in general. We have more than enough bandwidth (both metaphorical and in the technology sense) to conduct loud attacks concurrent with other operations. Why we don’t is a pretty amazing reason: bureaucracy. Literally everyone i’ve talked to about it has told me it’s because of “authorization this and authorization that” and by the time they MIGHT get approval (rare) the point is already moot.

It also just makes us look incompetent in the field on the world stage IMHO. These brazen attacks by other countries have been extremely effective. Why not treat it like another sanction? We’re the big dick US, if they retaliate we can rereretaliate even harder. And yes i know that’s not a word and yes this is actually p4x from the story (can prove however you want)

oh and yes this is actually p4x / Alejandro / _hyp3ri0n

we absolutely do compensate. Our power grid is horribly insecure and people have been ranting about it for a decade and a half. Critical infra like that is on ANCIENT systems that go down if you look at them the wrong way.

However i don’t think that’s what leads to inaction because other country’s same critical infra is EVEN WORSE. I think that’s really why we just in general don’t see those kinds of attacks

alternatively ask Andy Greenberg the author of the piece

nah, I used commonly known memory exhaustion denial of service vulns ONLY. There were other vulns but I did not reveal those publicly ;-). In other words, no operations were affected or compromised here.

check out my twitter @_hyp3ri0n and tell me to post something (discreet please) to prove it’s me.