emptywheel

Great worked example of the prove it trap in action. 1) what info does this report give away? 2) what ops might be burned by this? Should we care? 3) who is persuaded by this who wasn't persuaded last week? 4) what do we learn?https://twitter.com/ReutersWorld/status/956654692452438016?ref_src=twcamp%5Ecopy%7Ctwsrc%5Eandroid%7Ctwgr%5Ecopy%7Ctwcon%5E7090%7Ctwterm%5E0 …

Actually hearing a lot of people saying this is persuasive.

It made me fully convinced. I had always worried about the ability to spoof actions. But if Dutch were in Cozy Bear network and saw attack go out in real time, that's actual evidence that is convincing.

It was widely publicized the DNC hack used APT28 infrastructure for control. This report adds nothing other than burning sources and capabilities which are now presumably gone forever.

Yes. To you it adds nothing. But others who don't have your institutional, um, faith don't find all that conclusive (& I bet a few details will still surprise you), but this is actually still better evidence (tho against 29, not 28).