emptywheel

not sure we should be taking North Korea's request for proof as a sign that the attribution is wrong

No. But we might ask for something that's not a shitshow from Bossert. I definitely have heard real doubts from independent people.

I'd love it if the government showed me all the classified intelligence intercepts and forensic analysis that led them to this conclusion, but the last time I held my breath like that, I suffocated

I'd appreciate if the govt could give a press conference that isn't a shit show, for starters. https://www.emptywheel.net/2017/12/19/the-moneyless-attribution-of-wannacry/ … Bossert's was. And there IS public info that raises real questions abt the attribution even before you hear from InfoSec people who have their own classinfo.

But if the government didn't hold press conferences like this, what would you have to tweet about?

I wrote two whole posts about how crappy the govt's case here is, having written an earlier piece about how Bossert didn't know how WannaCry was spread. Those seem reasonable -- necessary, even -- things to do.

And I am by no means the only person who thinks that timing a sketchy attribution to the moment when an idiot president wants to drum up a way v NK should require higher scrutiny.